last executing test programs: 2m16.842748238s ago: executing program 2 (id=3): pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0xffff, 0x6, 0x5, 0x5938, 0x5, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2m15.842203952s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 2m15.458838701s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r0, &(0x7f0000007400)={0x2020}, 0x2020) 2m13.103971066s ago: executing program 2 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2m12.869643011s ago: executing program 32 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.210107602s ago: executing program 1 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 3.950509537s ago: executing program 1 (id=1155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230002000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.662902824s ago: executing program 1 (id=1161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() 2.974298s ago: executing program 4 (id=1172): r0 = fanotify_init(0x200, 0x0) r1 = dup(r0) r2 = dup(r1) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0) 2.779900335s ago: executing program 4 (id=1175): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="fa150200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.55959227s ago: executing program 1 (id=1176): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x7ff00000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) 2.313358926s ago: executing program 1 (id=1178): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x40, 0x14, 0x10, "73f8f71ad0d786bf62ef77655a21d455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.013302473s ago: executing program 3 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.891975426s ago: executing program 3 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000844) close(r0) 1.846530937s ago: executing program 3 (id=1182): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081f, &(0x7f0000001080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@norecovery}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.509932645s ago: executing program 3 (id=1183): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) 1.344010958s ago: executing program 0 (id=1184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'virt_wifi0\x00'}) 1.203467702s ago: executing program 0 (id=1185): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/238, 0xee}], 0x6}, 0x40010173) 1.136296733s ago: executing program 0 (id=1186): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x200000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 1.082857534s ago: executing program 0 (id=1187): setresuid(0x0, 0xee01, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000100)={0x3, 0x704}, 0x0) r0 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r0, 0xb) 1.029101946s ago: executing program 0 (id=1188): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000000080)={&(0x7f0000000340)=[&(0x7f00000000c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x10000002}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) 828.498051ms ago: executing program 4 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000300)='./file1\x00', 0x10000200) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0xa000038a) 444.04213ms ago: executing program 3 (id=1190): syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@eas_rw}, {@eas_no}, {@umask={'umask', 0x3d, 0xa}}, {@check_none}]}, 0x5, 0x9e2f, &(0x7f0000013e80)="$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") capset(&(0x7f0000000000)={0x20080522}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 442.7582ms ago: executing program 4 (id=1198): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0307fafff8fffddbdf253d"], 0x14}}, 0x40040) 366.397001ms ago: executing program 0 (id=1191): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 298.324993ms ago: executing program 4 (id=1192): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) 148.525077ms ago: executing program 1 (id=1193): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0\x00', {0x3}, 0x3}) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000380)}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x10022, 0x0) 54.343968ms ago: executing program 4 (id=1194): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") kernel console output (not intermixed with test programs): [ 103.993453][ T28] audit: type=1326 audit(1788787182.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 104.025972][ T28] audit: type=1326 audit(1788787182.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 104.149513][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.308175][ T6436] warning: `syz.4.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.985350][ T6457] loop4: detected capacity change from 0 to 512 [ 105.798623][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.009939][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.026322][ T23] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 106.045924][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.071674][ T23] usb 1-1: Product: syz [ 106.111561][ T23] usb 1-1: Manufacturer: syz [ 106.116457][ T23] usb 1-1: SerialNumber: syz [ 106.255845][ T6493] loop3: detected capacity change from 0 to 2048 [ 106.343041][ T6493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.773429][ T23] speedtch 1-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 106.974550][ T23] speedtch: probe of 1-1:1.0 failed with error -22 [ 106.985825][ T23] usbtest: probe of 1-1:1.1 failed with error -71 [ 106.994600][ T23] speedtch: probe of 1-1:1.1 failed with error -71 [ 107.005273][ T23] usb 1-1: USB disconnect, device number 5 [ 107.207021][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.243997][ T6517] loop1: detected capacity change from 0 to 256 [ 107.391130][ T28] audit: type=1326 audit(1788787185.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73f4f9e159 code=0x0 [ 107.398849][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.425756][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.445236][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 107.454987][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.466492][ T5817] usb 4-1: config 0 descriptor?? [ 107.697323][ T1214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.807060][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 107.889447][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.896428][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.908200][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.909939][ T1214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.915179][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.930431][ T6534] loop0: detected capacity change from 0 to 512 [ 107.933530][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.946770][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.953683][ T1214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.954827][ T5817] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 107.970933][ T6534] EXT4-fs: Ignoring removed orlov option [ 107.970958][ T6534] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.973768][ T1214] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 108.006552][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.017361][ T6534] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.233: corrupted in-inode xattr: e_value size too large [ 108.018623][ T5817] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 108.074834][ T6534] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.233: couldn't read orphan inode 15 (err -117) [ 108.139092][ T6534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.293749][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.429368][ T5839] usb 4-1: USB disconnect, device number 3 [ 108.489890][ T1214] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x6 [ 108.508167][ T1214] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 108.515636][ T1214] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 108.617516][ T1214] hid-picolcd 0003:04D8:C002.0003: unsupported KEY_STATE report [ 108.629337][ T1214] hid-picolcd: probe of 0003:04D8:C002.0003 failed with error -22 [ 108.787062][ T1214] usb 5-1: USB disconnect, device number 2 [ 108.885089][ T6553] loop1: detected capacity change from 0 to 4096 [ 108.938963][ T6554] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.027477][ T789] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 109.155702][ T6558] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 109.245311][ T789] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.263861][ T789] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.292797][ T789] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 109.304758][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.356606][ T789] hub 1-1:4.0: USB hub found [ 109.452013][ T6567] gre0: entered promiscuous mode [ 109.458897][ T6566] gre0: left promiscuous mode [ 109.562654][ T789] hub 1-1:4.0: 2 ports detected [ 109.574495][ T789] usb 1-1: selecting invalid altsetting 1 [ 109.586965][ T789] hub 1-1:4.0: Using single TT (err -22) [ 109.763735][ T789] hub 1-1:4.0: hub_hub_status failed (err = 0) [ 109.779912][ T789] hub 1-1:4.0: config failed, can't get hub status (err -5) [ 110.177370][ T5817] usb 1-1: USB disconnect, device number 6 [ 110.536843][ C0] sched: RT throttling activated [ 110.627458][ T6571] loop3: detected capacity change from 0 to 131072 [ 110.644155][ T6571] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 110.652226][ T6571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 110.661189][ T6571] F2FS-fs (loop3): Test dummy encryption mode enabled [ 110.676522][ T6571] F2FS-fs (loop3): invalid crc value [ 110.706586][ T6571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.758843][ T6571] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 110.778381][ T6571] F2FS-fs (loop3): Start checkpoint disabled! [ 110.824517][ T6571] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 110.833425][ T6571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 110.901000][ T6573] loop4: detected capacity change from 0 to 40427 [ 110.934006][ T6573] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 110.961336][ T6573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 111.003661][ T6573] F2FS-fs (loop4): invalid crc value [ 111.007289][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.223982][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 111.238544][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 111.279718][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.319488][ T23] usb 2-1: Product: syz [ 111.330959][ T23] usb 2-1: Manufacturer: syz [ 111.345974][ T23] usb 2-1: SerialNumber: syz [ 111.365235][ T23] usb 2-1: config 0 descriptor?? [ 111.367043][ T6573] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 111.400688][ T6573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.598274][ T23] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 111.669681][ T789] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.887566][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 111.895216][ T789] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 111.906527][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.978083][ T789] pvrusb2: Hardware description: Terratec Grabster AV400 [ 112.002462][ T789] pvrusb2: ********** [ 112.036466][ T789] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 112.084817][ T789] pvrusb2: Important functionality might not be entirely working. [ 112.098735][ T789] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 112.120382][ T789] pvrusb2: ********** [ 112.195418][ T2322] pvrusb2: Invalid write control endpoint [ 112.219894][ T23] usb write operation failed. (-71) [ 112.283697][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.307630][ T23] dvbdev: DVB: registering new adapter (Terratec H7) [ 112.331936][ T23] usb 2-1: media controller created [ 112.357768][ T23] usb read operation failed. (-71) [ 112.377617][ T23] usb write operation failed. (-71) [ 112.404290][ T2322] pvrusb2: Invalid write control endpoint [ 112.421317][ T23] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 112.436976][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 112.462942][ T23] usb 2-1: USB disconnect, device number 2 [ 112.478713][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 112.509126][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 112.548551][ T2322] pvrusb2: Device being rendered inoperable [ 112.570883][ T6604] pvrusb2: Attempted to execute control transfer when device not ok [ 112.588338][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 112.590815][ T1214] usb 1-1: USB disconnect, device number 7 [ 112.595800][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 112.637452][ T2322] pvrusb2: Attached sub-driver cx25840 [ 112.659069][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 112.690117][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 112.869015][ T6633] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 112.882797][ T6633] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 112.896191][ T6633] page_type: 0xffffffff() [ 112.901370][ T6633] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 112.927129][ T6633] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 112.941502][ T6633] page dumped because: unmovable page [ 112.951967][ T6633] page_owner info is not present (never set?) [ 113.295125][ T6650] kAFS: Invalid Command on /proc/fs/afs/cells file [ 114.268853][ T6683] rnbd_client L602: Mapping device / on session s., (access_mode: rw, nr_poll_queues: 0) [ 114.315681][ T6683] rnbd_client L1255: Session s. not found, and path parameter not given [ 115.456131][ T6722] loop4: detected capacity change from 0 to 256 [ 115.517430][ T6722] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 115.662786][ T3543] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 116.357042][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.557329][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 116.577938][ T5817] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 116.611984][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.627005][ T5817] usb 1-1: Product: syz [ 116.637258][ T5817] usb 1-1: Manufacturer: syz [ 116.648136][ T5817] usb 1-1: SerialNumber: syz [ 116.674397][ T5817] usb 1-1: config 0 descriptor?? [ 116.706357][ T5817] gspca_main: se401-2.14.0 probing 047d:5003 [ 117.141709][ T5817] gspca_se401: ExtraFeatures: 255 [ 117.360839][ T5817] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 117.632944][ T5839] usb 1-1: USB disconnect, device number 8 [ 118.033625][ T6801] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 118.564673][ T6826] loop7: detected capacity change from 0 to 7 [ 118.636527][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.646049][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.676878][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.686118][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.695361][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.704613][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.722496][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.731758][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.740644][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.749875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.758345][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.767602][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.801134][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.810495][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.818580][ T6826] ldm_validate_partition_table(): Disk read failed. [ 118.830045][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.839314][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.860737][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.870001][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.878996][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.888222][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 118.904212][ T6826] Dev loop7: unable to read RDB block 0 [ 118.922587][ T6826] loop7: unable to read partition table [ 118.940833][ T6826] loop7: partition table beyond EOD, truncated [ 118.956993][ T6826] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…cåæ©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 119.452438][ T6851] loop0: detected capacity change from 0 to 4096 [ 119.469342][ T6851] EXT4-fs: inline encryption not supported [ 119.477121][ T5839] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 119.698929][ T5839] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 119.730728][ T5839] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 119.749014][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.761820][ T6851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.776936][ T6851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.784008][ T5839] usb 5-1: config 0 has no interface number 0 [ 119.796261][ T5839] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.819389][ T6851] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 119.831231][ T5839] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 119.857620][ T6851] System zones: 0-5 [ 119.902521][ T6851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.915455][ T5839] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 119.946695][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.004346][ T5839] usb 5-1: config 0 descriptor?? [ 120.050960][ T5839] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 120.140363][ T6847] loop3: detected capacity change from 0 to 32768 [ 120.175624][ T6847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.322 (6847) [ 120.329875][ T5839] usb 5-1: USB disconnect, device number 3 [ 120.335946][ T2979] usb 5-1: Failed to submit usb control message: -71 [ 120.362689][ T2979] usb 5-1: unable to send the bmi data to the device: -71 [ 120.378191][ T2979] usb 5-1: unable to get target info from device [ 120.389659][ T2979] usb 5-1: could not get target info (-71) [ 120.395747][ T2979] usb 5-1: could not probe fw (-71) [ 120.398550][ T6847] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.407054][ T6851] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.457059][ T6847] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.476269][ T6847] BTRFS info (device loop3): setting nodatasum [ 120.483926][ T6847] BTRFS info (device loop3): disabling tree log [ 120.496263][ T6847] BTRFS info (device loop3): max_inline at 0 [ 120.512715][ T6847] BTRFS info (device loop3): using free space tree [ 120.635089][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.917872][ T6847] BTRFS info (device loop3): enabling ssd optimizations [ 120.949082][ T6847] BTRFS info (device loop3): auto enabling async discard [ 120.993413][ T6901] loop1: detected capacity change from 0 to 8192 [ 121.047293][ T6901] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.126178][ T6901] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 121.159201][ T6901] REISERFS (device loop1): using ordered data mode [ 121.165891][ T6901] reiserfs: using flush barriers [ 121.209787][ T6901] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.297567][ T6901] REISERFS (device loop1): checking transaction log (loop1) [ 121.382830][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.527729][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 121.648655][ T6901] REISERFS (device loop1): Using tea hash to sort names [ 121.653089][ T6919] loop4: detected capacity change from 0 to 512 [ 121.687573][ T6901] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 121.801710][ T6919] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.336: iget: bad i_size value: 38620345925642 [ 121.866926][ T28] audit: type=1326 audit(1788787200.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 121.897009][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 121.911831][ T6919] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.336: couldn't read orphan inode 15 (err -117) [ 121.943424][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 121.960693][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.997269][ T28] audit: type=1326 audit(1788787200.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.109464][ T6919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.336: bg 0: block 5: invalid block bitmap [ 122.121241][ T28] audit: type=1326 audit(1788787200.232:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.197698][ T6919] EXT4-fs error (device loop4) in ext4_setattr:5683: error 28 [ 122.266917][ T28] audit: type=1326 audit(1788787200.232:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.447023][ T28] audit: type=1326 audit(1788787200.232:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.482734][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.508223][ T28] audit: type=1326 audit(1788787200.232:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.565956][ T28] audit: type=1326 audit(1788787200.232:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.593726][ T28] audit: type=1326 audit(1788787200.232:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.656053][ T28] audit: type=1326 audit(1788787200.232:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 122.746963][ T28] audit: type=1326 audit(1788787200.232:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 123.045037][ T6930] loop1: detected capacity change from 0 to 32768 [ 123.052769][ T5791] Bluetooth: hci0: Zero size dump init pkt [ 123.143041][ T6930] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 123.185692][ T6953] loop4: detected capacity change from 0 to 1024 [ 123.359664][ T6930] XFS (loop1): Ending clean mount [ 123.609683][ T5779] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 123.632838][ T3526] hfsplus: bad catalog file entry [ 123.643183][ T3526] hfsplus: b-tree write err: -5, ino 3 [ 124.207185][ T5817] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.410490][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 124.455719][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.466223][ T5817] usb 4-1: config 7 has an invalid interface number: 4 but max is 0 [ 124.484912][ T5817] usb 4-1: config 7 has no interface number 0 [ 124.502243][ T5817] usb 4-1: config 7 interface 4 has no altsetting 0 [ 124.519621][ T5817] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=49.e2 [ 124.534476][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.537734][ T6996] loop1: detected capacity change from 0 to 2048 [ 124.543604][ T5817] usb 4-1: Product: syz [ 124.563749][ T5817] usb 4-1: Manufacturer: syz [ 124.576909][ T5817] usb 4-1: SerialNumber: syz [ 124.623521][ T6996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.704614][ T6996] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.722807][ T6996] EXT4-fs (loop1): Remounting filesystem read-only [ 124.800726][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.830508][ T7003] loop0: detected capacity change from 0 to 512 [ 124.892337][ T7003] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.369: corrupted in-inode xattr: invalid ea_ino [ 124.924997][ T7003] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.369: couldn't read orphan inode 15 (err -117) [ 124.947958][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.000387][ T7003] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.369: corrupted inode contents [ 125.043965][ T7003] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.369: mark_inode_dirty error [ 125.113509][ T7003] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.369: invalid indirect mapped block 234881024 (level 0) [ 125.141375][ T7003] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.369: corrupted inode contents [ 125.166449][ T7003] EXT4-fs error (device loop0): ext4_truncate:4302: inode #13: comm syz.0.369: mark_inode_dirty error [ 125.175365][ T7009] loop1: detected capacity change from 0 to 128 [ 125.185249][ T7003] EXT4-fs error (device loop0) in ext4_setattr:5683: Corrupt filesystem [ 125.221515][ T7009] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 125.264168][ T5817] RobotFuzz Open Source InterFace, OSIF 4-1:7.4: version 49.e2 found at bus 004 address 004 [ 125.309842][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.479972][ T8] usb 4-1: USB disconnect, device number 4 [ 126.104051][ T7035] loop0: detected capacity change from 0 to 512 [ 126.453422][ T1214] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.659758][ T1214] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.678694][ T1214] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 126.699988][ T7051] block nbd0: Device being setup by another task [ 126.725352][ T7049] block nbd0: shutting down sockets [ 126.741766][ T1214] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 126.751143][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.759395][ T1214] usb 5-1: Product: syz [ 126.763678][ T1214] usb 5-1: Manufacturer: syz [ 126.773789][ T1214] usb 5-1: SerialNumber: syz [ 126.936050][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 126.971343][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.030164][ T1214] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.082936][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 127.093510][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 127.214764][ T7066] loop3: detected capacity change from 0 to 8 [ 127.231188][ T1214] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 127.251198][ T1214] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 127.300641][ T7070] loop0: detected capacity change from 0 to 1024 [ 127.352193][ T7066] SQUASHFS error: Failed to read block 0x26067d: -5 [ 127.387093][ T7066] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 127.405362][ T7066] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 127.632572][ T1214] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 127.740762][ T1214] usb 5-1: USB disconnect, device number 4 [ 127.867700][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.110856][ T1214] hid-generic 0005:07C0:0008.0004: item fetching failed at offset 0/1 [ 128.143699][ T1214] hid-generic: probe of 0005:07C0:0008.0004 failed with error -22 [ 128.823344][ T7113] hub 1-0:1.0: USB hub found [ 128.836024][ T7120] loop4: detected capacity change from 0 to 16 [ 128.858582][ T7120] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 128.862020][ T7113] hub 1-0:1.0: 1 port detected [ 128.879141][ T7118] loop0: detected capacity change from 0 to 2048 [ 128.952690][ T7118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.099858][ T7123] kAFS: bad VL server IP address [ 129.403636][ T7128] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.780946][ T7145] program syz.4.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.887363][ T1214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.923909][ T7147] loop0: detected capacity change from 0 to 2048 [ 130.026780][ T7151] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.440'. [ 130.111901][ T1214] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 130.137483][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.154016][ T7155] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 130.165934][ T1214] usb 2-1: config 0 descriptor?? [ 130.173062][ T7155] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 130.201228][ T1214] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 130.331179][ T7157] loop4: detected capacity change from 0 to 1024 [ 130.404031][ T7160] loop3: detected capacity change from 0 to 256 [ 130.435487][ T7157] hfsplus: bad catalog entry type [ 130.524161][ T3543] hfsplus: b-tree write err: -5, ino 25 [ 130.555031][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 130.591245][ T3543] hfsplus: b-tree write err: -5, ino 2 [ 130.874796][ T7169] loop0: detected capacity change from 0 to 256 [ 130.925970][ T7169] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 130.946655][ T7171] netem: change failed [ 131.035857][ T1214] usb 2-1: USB disconnect, device number 3 [ 131.322498][ T7183] scsi_strcpy_devinfo: vendor string '�ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„¾q6�•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 131.412005][ T7185] loop0: detected capacity change from 0 to 512 [ 131.451082][ T7185] FAT-fs (loop0): Directory bread(block 199916) failed [ 131.460562][ T7185] FAT-fs (loop0): Directory bread(block 199917) failed [ 131.469416][ T7185] FAT-fs (loop0): Directory bread(block 199918) failed [ 131.479790][ T7185] FAT-fs (loop0): Directory bread(block 199919) failed [ 131.487397][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.506967][ T7185] FAT-fs (loop0): Directory bread(block 199920) failed [ 131.524260][ T7187] loop4: detected capacity change from 0 to 512 [ 131.526934][ T7185] FAT-fs (loop0): Directory bread(block 199921) failed [ 131.532977][ T7187] EXT4-fs: inline encryption not supported [ 131.555786][ T7185] FAT-fs (loop0): Directory bread(block 199922) failed [ 131.563586][ T7185] FAT-fs (loop0): Directory bread(block 199923) failed [ 131.646001][ T7187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.664825][ T7187] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.696600][ T7187] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks [ 131.707670][ T7187] EXT4-fs warning (device loop4): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 131.715254][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.735476][ T5851] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 131.744802][ T5851] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.763085][ T5851] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 131.772732][ T7185] FAT-fs (loop0): FAT read failed (blocknr 128) [ 131.780185][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.804845][ T5851] usb 4-1: Product: syz [ 131.809469][ T5851] usb 4-1: Manufacturer: syz [ 131.814109][ T5851] usb 4-1: SerialNumber: syz [ 131.842720][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.864874][ T7194] loop1: detected capacity change from 0 to 256 [ 132.108086][ T7179] loop3: detected capacity change from 0 to 2048 [ 132.167991][ T7179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.283961][ T5851] usb 4-1: unit 6 not found! [ 132.290108][ T5851] usb 4-1: unit 254 not found! [ 132.355764][ T5851] usb 4-1: USB disconnect, device number 5 [ 132.488875][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.872530][ T7219] loop1: detected capacity change from 0 to 16 [ 132.902594][ T7219] erofs: (device loop1): mounted with root inode @ nid 36. [ 132.950330][ T7219] process 'syz.1.470' launched '/dev/fd/4' with NULL argv: empty string added [ 132.973540][ T7219] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 133.023348][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.097249][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114549][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.392229][ T7229] loop4: detected capacity change from 0 to 128 [ 133.425822][ T7229] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.472107][ T7229] hpfs: filesystem error: improperly stopped [ 133.498120][ T7229] hpfs: You really don't want any checks? You are crazy... [ 133.507953][ T7229] hpfs: hpfs_map_sector(): read error [ 133.513537][ T7229] hpfs: code page support is disabled [ 133.521961][ T7229] hpfs: hpfs_map_4sectors(): unaligned read [ 133.528893][ T7229] hpfs: hpfs_map_4sectors(): unaligned read [ 133.535150][ T7229] hpfs: filesystem error: unable to find root dir [ 133.537098][ T5851] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 133.749071][ T5851] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 133.767005][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.782642][ T5851] usb 4-1: config 0 descriptor?? [ 133.805357][ T5851] pwc: Samsung MPC-C10 USB webcam detected. [ 134.025322][ T5851] pwc: send_video_command error -71 [ 134.038569][ T5851] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 134.057272][ T5851] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 134.072180][ T5851] usb 4-1: USB disconnect, device number 6 [ 134.571117][ T7248] vxcan0: tx address claim with dest, not broadcast [ 134.637376][ T5851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.832030][ T5851] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 134.858905][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.885604][ T5851] usb 4-1: config 0 descriptor?? [ 134.900489][ T5851] pwc: Samsung MPC-C10 USB webcam detected. [ 134.943232][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 134.943247][ T28] audit: type=1400 audit(1788787213.252:30): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7257 comm="syz.0.488" name="unknown" offset=82 [ 135.323436][ T5851] pwc: recv_control_msg error -71 req 02 val 2b00 [ 135.348139][ T5851] pwc: recv_control_msg error -71 req 02 val 2700 [ 135.367022][ T5851] pwc: recv_control_msg error -71 req 04 val 1700 [ 135.391698][ T5851] pwc: recv_control_msg error -71 req 02 val 2c00 [ 135.399463][ T5851] pwc: recv_control_msg error -71 req 04 val 1000 [ 135.406725][ T5851] pwc: recv_control_msg error -71 req 04 val 1300 [ 135.422772][ T5851] pwc: recv_control_msg error -71 req 04 val 1400 [ 135.458190][ T5851] pwc: recv_control_msg error -71 req 02 val 2000 [ 135.472508][ T5851] pwc: recv_control_msg error -71 req 02 val 2100 [ 135.495224][ T5851] pwc: recv_control_msg error -71 req 02 val 2200 [ 135.525582][ T5851] pwc: recv_control_msg error -71 req 06 val 0600 [ 135.533231][ T5851] pwc: recv_control_msg error -71 req 04 val 1500 [ 135.548091][ T5851] pwc: recv_control_msg error -71 req 02 val 2500 [ 135.558937][ T5851] pwc: recv_control_msg error -71 req 02 val 2400 [ 135.577037][ T5851] pwc: recv_control_msg error -71 req 02 val 2600 [ 135.586436][ T5851] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.603977][ T5851] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.637296][ T5851] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.660034][ T5851] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.697488][ T7276] loop0: detected capacity change from 0 to 512 [ 135.697644][ T5851] pwc: Registered as video103. [ 135.724017][ T7276] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.735074][ T5851] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 135.777148][ T5851] usb 4-1: USB disconnect, device number 7 [ 135.802297][ T7276] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 135.840019][ T7276] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #11: comm syz.0.497: corrupted inode contents [ 135.939447][ T7283] loop4: detected capacity change from 0 to 512 [ 135.977558][ T7276] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #11: comm syz.0.497: mark_inode_dirty error [ 136.043711][ T7283] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.055415][ T7276] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.497: invalid indirect mapped block 1 (level 1) [ 136.080093][ T7283] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.083297][ T7288] loop1: detected capacity change from 0 to 512 [ 136.093945][ T7276] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #11: comm syz.0.497: corrupted inode contents [ 136.109097][ T7288] EXT4-fs: Ignoring removed nobh option [ 136.129073][ T7283] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 136.155334][ T7288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.174671][ T7276] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 136.241307][ T7276] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #11: comm syz.0.497: corrupted inode contents [ 136.260500][ T7283] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.295748][ T7288] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.297871][ T7276] EXT4-fs error (device loop0): ext4_truncate:4302: inode #11: comm syz.0.497: mark_inode_dirty error [ 136.337387][ T7276] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 136.384545][ T7276] EXT4-fs (loop0): 1 truncate cleaned up [ 136.398764][ T7288] EXT4-fs (loop1): 1 truncate cleaned up [ 136.405895][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.419569][ T7283] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 136.437098][ T7283] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #16: comm syz.4.500: inode has both inline data and extents flags [ 136.473925][ T7283] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.500: couldn't read orphan inode 16 (err -117) [ 136.498182][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.540813][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.663501][ T7276] CacheFiles: mkdir cache failed with error -105 [ 136.701440][ T7276] CacheFiles: Failed to register: -105 [ 136.711931][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.790776][ T7283] CacheFiles: Failed to register: -30 [ 136.850643][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.925663][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.242275][ T7307] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 137.309606][ T7311] (null): rxe_set_mtu: Set mtu to 256 [ 137.379947][ T7311] lo speed is unknown, defaulting to 1000 [ 137.423320][ T7311] lo speed is unknown, defaulting to 1000 [ 137.476619][ T7311] lo speed is unknown, defaulting to 1000 [ 138.197068][ T7307] syz.4.507 (7307) used greatest stack depth: 20904 bytes left [ 138.349672][ T7311] infiniband syz2: set down [ 138.356223][ T5851] lo speed is unknown, defaulting to 1000 [ 138.376533][ T7331] loop0: detected capacity change from 0 to 512 [ 138.383757][ T7311] infiniband syz2: added lo [ 138.411202][ T7311] syz2: rxe_create_cq: returned err = -12 [ 138.464547][ T7311] infiniband syz2: Couldn't create ib_mad CQ [ 138.490719][ T7311] infiniband syz2: Couldn't open port 1 [ 138.509010][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.537121][ T7331] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.743994][ T7311] RDS/IB: syz2: added [ 138.784174][ T7311] smc: adding ib device syz2 with port count 1 [ 138.802795][ T7311] smc: ib device syz2 port 1 has pnetid [ 138.830083][ T5817] lo speed is unknown, defaulting to 1000 [ 138.856773][ T7311] lo speed is unknown, defaulting to 1000 [ 138.858453][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.451516][ T7350] loop0: detected capacity change from 0 to 1024 [ 139.509966][ T7311] lo speed is unknown, defaulting to 1000 [ 139.519345][ T7350] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 139.636670][ T7350] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 139.742870][ T7350] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.525: couldn't read orphan inode 11 (err -117) [ 139.811229][ T7350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.834007][ T7357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.528'. [ 139.913933][ T7350] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.525: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.969514][ T7350] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 139.997048][ T7350] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.525: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.034069][ T7350] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 140.055029][ T7350] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.525: Failed to acquire dquot type 0 [ 140.197069][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.227158][ T5778] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.250413][ T5778] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 140.273798][ T5778] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 140.422499][ T7311] lo speed is unknown, defaulting to 1000 [ 141.037299][ T7382] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.313144][ T7311] lo speed is unknown, defaulting to 1000 [ 142.020157][ T7415] loop1: detected capacity change from 0 to 512 [ 142.048763][ T7415] EXT4-fs: Ignoring removed bh option [ 142.105575][ T7415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.169299][ T7415] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.324341][ T7415] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.550: Directory hole found for htree leaf block 0 [ 142.486663][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.497539][ T7427] loop4: detected capacity change from 0 to 512 [ 142.557045][ T7427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.678688][ T7427] EXT4-fs (loop4): 1 truncate cleaned up [ 142.768502][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.019727][ T7418] loop3: detected capacity change from 0 to 40427 [ 143.064967][ T7418] F2FS-fs (loop3): invalid crc value [ 143.093244][ T7418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.155062][ T8] kernel write not supported for file /vcs (pid: 8 comm: kworker/0:0) [ 143.288776][ T7418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.443388][ T7418] F2FS-fs (loop3): access invalid blkaddr:3 [ 143.496567][ T7418] CPU: 0 PID: 7418 Comm: syz.3.553 Not tainted syzkaller #0 [ 143.503927][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.514027][ T7418] Call Trace: [ 143.517348][ T7418] [ 143.520307][ T7418] dump_stack_lvl+0x18c/0x250 [ 143.525044][ T7418] ? show_regs_print_info+0x20/0x20 [ 143.530291][ T7418] ? __lock_acquire+0x1336/0x7d80 [ 143.535374][ T7418] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 143.540798][ T7418] f2fs_map_blocks+0xc20/0x4080 [ 143.545699][ T7418] ? verify_lock_unused+0x140/0x140 [ 143.550976][ T7418] ? f2fs_get_block_locked+0xe0/0xe0 [ 143.556306][ T7418] ? __might_sleep+0xe0/0xe0 [ 143.560946][ T7418] ? read_lock_is_recursive+0x20/0x20 [ 143.566365][ T7418] ? f2fs_precache_extents+0x19f/0x260 [ 143.571880][ T7418] ? down_write+0x16e/0x200 [ 143.576431][ T7418] ? down_read_killable+0x340/0x340 [ 143.581680][ T7418] ? up_write+0x1be/0x410 [ 143.586050][ T7418] ? max_file_blocks+0xb0/0x1b0 [ 143.590963][ T7418] f2fs_precache_extents+0x194/0x260 [ 143.596298][ T7418] ? f2fs_pin_file_control+0x1a0/0x1a0 [ 143.601811][ T7418] ? stack_trace_save+0xaa/0x100 [ 143.606793][ T7418] ? stack_trace_snprint+0xf0/0xf0 [ 143.611938][ T7418] ? __stack_depot_save+0x1f/0x660 [ 143.617059][ T7418] f2fs_fiemap+0x13b/0x15b0 [ 143.621610][ T7418] ? f2fs_overwrite_io+0x200/0x200 [ 143.626763][ T7418] ? __might_fault+0xaa/0x120 [ 143.631471][ T7418] ? __lock_acquire+0x7d80/0x7d80 [ 143.636539][ T7418] ? __might_fault+0xaa/0x120 [ 143.641268][ T7418] ? __might_fault+0xc6/0x120 [ 143.645975][ T7418] ? __might_fault+0xaa/0x120 [ 143.650687][ T7418] do_vfs_ioctl+0x14fe/0x1cc0 [ 143.655407][ T7418] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 143.661089][ T7418] ? tomoyo_path_number_perm+0x217/0x5e0 [ 143.666765][ T7418] ? __lock_acquire+0x7d80/0x7d80 [ 143.671821][ T7418] ? slab_free_freelist_hook+0x130/0x1a0 [ 143.677494][ T7418] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 143.683167][ T7418] ? __kmem_cache_free+0xba/0x1f0 [ 143.688230][ T7418] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 143.693897][ T7418] ? tomoyo_path_number_perm+0x217/0x5e0 [ 143.699572][ T7418] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 143.705105][ T7418] ? __fget_files+0x28/0x460 [ 143.709753][ T7418] ? bpf_lsm_file_ioctl+0x9/0x10 [ 143.714723][ T7418] ? security_file_ioctl+0x80/0xa0 [ 143.719885][ T7418] __se_sys_ioctl+0x83/0x170 [ 143.724516][ T7418] do_syscall_64+0x55/0xb0 [ 143.728969][ T7418] ? clear_bhb_loop+0x40/0x90 [ 143.733711][ T7418] ? clear_bhb_loop+0x40/0x90 [ 143.738421][ T7418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.744360][ T7418] RIP: 0033:0x7f53f299e159 [ 143.748823][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.768495][ T7418] RSP: 002b:00007f53f3952028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.776939][ T7418] RAX: ffffffffffffffda RBX: 00007f53f2c25fa0 RCX: 00007f53f299e159 [ 143.784946][ T7418] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004 [ 143.792949][ T7418] RBP: 00007f53f2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 143.800950][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.808955][ T7418] R13: 00007f53f2c26038 R14: 00007f53f2c25fa0 R15: 00007ffc6c04b3c8 [ 143.816971][ T7418] [ 143.842972][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.028484][ T5777] syz-executor: attempt to access beyond end of device [ 144.028484][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.056738][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.165187][ T7438] loop0: detected capacity change from 0 to 40427 [ 144.221070][ T7438] F2FS-fs (loop0): invalid crc value [ 144.254415][ T7438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.404965][ T7438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 144.532871][ T28] audit: type=1800 audit(1788787222.842:31): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 144.642758][ T5778] syz-executor: attempt to access beyond end of device [ 144.642758][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.705187][ T7472] jffs2: notice: (7472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.735548][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.566507][ T7490] lo speed is unknown, defaulting to 1000 [ 145.777462][ T789] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 145.799829][ T7500] loop1: detected capacity change from 0 to 512 [ 145.841512][ T7500] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.578: Invalid inode bitmap blk 4 in block_group 0 [ 145.968595][ T7500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.027596][ T789] usb 4-1: config 0 has no interfaces? [ 146.033157][ T789] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 146.077052][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.117730][ T789] usb 4-1: config 0 descriptor?? [ 146.133524][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.503277][ T5851] usb 4-1: USB disconnect, device number 8 [ 146.758462][ T7525] loop1: detected capacity change from 0 to 2048 [ 146.817181][ T7525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.850732][ T7529] loop0: detected capacity change from 0 to 256 [ 147.382936][ T7537] loop4: detected capacity change from 0 to 2048 [ 147.411181][ T7537] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 147.468104][ T7537] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 147.502958][ T7537] UDF-fs: Scanning with blocksize 512 failed [ 147.654261][ T7537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.852498][ T7551] program syz.0.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.473562][ T7567] loop3: detected capacity change from 0 to 512 [ 148.516452][ T7567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.537258][ T7567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.601517][ T7567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 148.677719][ T7567] System zones: 1-12 [ 148.713860][ T7567] EXT4-fs (loop3): 1 truncate cleaned up [ 148.771877][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.877226][ T7574] loop0: detected capacity change from 0 to 512 [ 149.164373][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.571324][ T7586] loop3: detected capacity change from 0 to 256 [ 149.643848][ T5768] blk_print_req_error: 10 callbacks suppressed [ 149.643866][ T5768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.796704][ T7590] loop1: detected capacity change from 0 to 128 [ 149.824962][ T7591] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 149.856536][ T7590] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.890248][ T7590] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.916744][ T7590] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 149.989729][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.132308][ T7571] loop4: detected capacity change from 0 to 32768 [ 150.156624][ T7596] "syz.1.627" (7596) uses obsolete ecb(arc4) skcipher [ 150.826571][ T7607] netlink: 1 bytes leftover after parsing attributes in process `syz.1.623'. [ 151.227047][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.407132][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 151.414605][ T789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 151.434417][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.488862][ T789] pvrusb2: Hardware description: Terratec Grabster AV400 [ 151.506171][ T789] pvrusb2: ********** [ 151.520713][ T789] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 151.536961][ T789] pvrusb2: Important functionality might not be entirely working. [ 151.555069][ T789] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 151.582052][ T789] pvrusb2: ********** [ 151.700847][ T2322] pvrusb2: Invalid write control endpoint [ 151.780547][ T2322] pvrusb2: Invalid write control endpoint [ 151.815238][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 151.843193][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 151.856928][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 151.886676][ T2322] pvrusb2: Device being rendered inoperable [ 151.922059][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 151.927123][ T7627] loop0: detected capacity change from 0 to 2048 [ 151.934742][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 151.981588][ T2322] pvrusb2: Attached sub-driver cx25840 [ 151.992170][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 152.005436][ T7611] pvrusb2: Attempted to execute control transfer when device not ok [ 152.025728][ T23] usb 2-1: USB disconnect, device number 4 [ 152.025962][ T7627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.068654][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.162448][ T7627] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 152.206699][ T7619] loop3: detected capacity change from 0 to 40427 [ 152.223554][ T7627] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 152.251855][ T7619] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 152.265971][ T7627] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.265971][ T7627] [ 152.282037][ T7619] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 152.295524][ T7627] EXT4-fs (loop0): Total free blocks count 0 [ 152.310172][ T7619] F2FS-fs (loop3): invalid crc value [ 152.343333][ T5781] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.379504][ T7627] EXT4-fs (loop0): Free/Dirty block details [ 152.390646][ T7627] EXT4-fs (loop0): free_blocks=4096 [ 152.406275][ T7627] EXT4-fs (loop0): dirty_blocks=64 [ 152.426518][ T7627] EXT4-fs (loop0): Block reservation details [ 152.447382][ T7627] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 152.481606][ T7626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.522386][ T7619] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 152.536921][ T7619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.556628][ T5781] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.606115][ T5781] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 152.657110][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.696906][ T5781] usb 5-1: Product: syz [ 152.711414][ T5781] usb 5-1: Manufacturer: syz [ 152.716076][ T5781] usb 5-1: SerialNumber: syz [ 153.397119][ T5781] speedtch 5-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 153.597170][ T7652] loop3: detected capacity change from 0 to 8192 [ 153.606274][ T5781] speedtch: probe of 5-1:1.0 failed with error -22 [ 153.634514][ T5781] usbtest: probe of 5-1:1.1 failed with error -71 [ 153.647345][ T7652] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.668032][ T5781] speedtch: probe of 5-1:1.1 failed with error -71 [ 153.707591][ T5781] usb 5-1: USB disconnect, device number 5 [ 153.951022][ T7663] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 153.961825][ T7663] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 153.970038][ T5817] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 153.982201][ T7663] page_type: 0xffffffff() [ 153.986582][ T7663] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 153.995814][ T7663] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 154.004930][ T7663] page dumped because: unmovable page [ 154.010604][ T7663] page_owner info is not present (never set?) [ 154.109154][ T7665] loop3: detected capacity change from 0 to 8192 [ 154.118890][ T7665] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.132330][ T7665] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 154.141977][ T7665] REISERFS (device loop3): using ordered data mode [ 154.148896][ T7665] reiserfs: using flush barriers [ 154.157065][ T7665] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.173837][ T7665] REISERFS (device loop3): checking transaction log (loop3) [ 154.183381][ T5817] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.204125][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.215925][ T5817] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 154.232647][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.253030][ T5817] usb 1-1: config 0 descriptor?? [ 154.395455][ T7665] REISERFS (device loop3): Using rupasov hash to sort names [ 154.408568][ T7665] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 154.589242][ T28] audit: type=1804 audit(1788787232.902:32): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.648" name="/newroot/142/file0/file0" dev="loop3" ino=4 res=1 errno=0 [ 154.654703][ T7670] loop1: detected capacity change from 0 to 4096 [ 154.681900][ T7670] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 154.705972][ T5817] nintendo 0003:057E:2009.0005: item fetching failed at offset 5/6 [ 154.754859][ T5817] nintendo 0003:057E:2009.0005: HID parse failed [ 154.780485][ T7675] syzkaller0: tun_chr_ioctl cmd 21731 [ 154.802195][ T5817] nintendo 0003:057E:2009.0005: probe - fail = -22 [ 154.825472][ T5817] nintendo: probe of 0003:057E:2009.0005 failed with error -22 [ 154.918741][ T5817] usb 1-1: USB disconnect, device number 9 [ 155.399120][ T7689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.659'. [ 155.593184][ T7699] loop3: detected capacity change from 0 to 512 [ 155.613738][ T7699] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.857672][ T5781] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.939354][ T7707] netlink: 7 bytes leftover after parsing attributes in process `syz.1.669'. [ 156.068836][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.084869][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.113849][ T7715] loop4: detected capacity change from 0 to 1024 [ 156.121785][ T5781] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 156.144662][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.171730][ T5781] usb 1-1: config 0 descriptor?? [ 156.631580][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.655264][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.664836][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.673121][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.685355][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.706282][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.723801][ T5781] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 156.742813][ T5781] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 157.091576][ T7747] loop4: detected capacity change from 0 to 1764 [ 157.107622][ T5781] usb 1-1: USB disconnect, device number 10 [ 157.137050][ T5817] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.317312][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 157.335096][ T5817] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.345516][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.348240][ T7753] erspan0: entered promiscuous mode [ 157.390888][ T5817] pvrusb2: Hardware description: Terratec Grabster AV400 [ 157.409241][ T5817] pvrusb2: ********** [ 157.429568][ T5817] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 157.450223][ T5817] pvrusb2: Important functionality might not be entirely working. [ 157.462428][ T5817] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 157.474675][ T5817] pvrusb2: ********** [ 157.496949][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.612519][ T2322] pvrusb2: Invalid write control endpoint [ 157.631951][ T2322] pvrusb2: Invalid write control endpoint [ 157.642012][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 157.677097][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 157.685887][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 157.691148][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.699938][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 157.735521][ T2322] pvrusb2: Device being rendered inoperable [ 157.746971][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.758898][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 157.766015][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 157.775356][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.791460][ T2322] pvrusb2: Attached sub-driver cx25840 [ 157.795595][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.800745][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 157.821033][ T23] usb 5-1: config 0 descriptor?? [ 157.843018][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 157.853854][ T23] hub 5-1:0.0: USB hub found [ 157.878775][ T7740] pvrusb2: Attempted to execute control transfer when device not ok [ 157.902521][ T5817] usb 4-1: USB disconnect, device number 9 [ 157.954903][ T7764] loop1: detected capacity change from 0 to 4096 [ 158.012921][ T7767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.072585][ T7764] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 158.084848][ T23] hub 5-1:0.0: 27 ports detected [ 158.090959][ T7764] Remounting filesystem read-only [ 158.116639][ T23] hub 5-1:0.0: insufficient power available to use all downstream ports [ 158.224529][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 158.285137][ T23] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 158.296429][ T23] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 158.330218][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 158.336675][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.397195][ T23] usb 5-1: USB disconnect, device number 6 [ 158.800973][ T7789] Zero length message leads to an empty skb [ 159.078442][ T7797] loop4: detected capacity change from 0 to 4096 [ 159.115126][ T7797] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.155704][ T7797] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 159.226210][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.270284][ T7803] netlink: 96 bytes leftover after parsing attributes in process `syz.3.712'. [ 159.279343][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 159.288596][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 159.352111][ T7797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 159.392046][ T7805] af_packet: tpacket_rcv: packet too big, clamped from 3967 to 3966. macoff=82 [ 159.448512][ T7797] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 159.466604][ T7797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.523436][ T7797] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 159.544077][ T7797] System zones: 0-5 [ 159.551656][ T7797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 159.612940][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.905233][ T7820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 159.927698][ T7820] bridge_slave_0: left allmulticast mode [ 159.937512][ T7820] bridge_slave_0: left promiscuous mode [ 159.943333][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.006466][ T7820] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.045007][ T7826] loop4: detected capacity change from 0 to 8 [ 160.202267][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.723'. [ 160.221219][ T7830] loop0: detected capacity change from 0 to 1024 [ 160.241399][ T7828] veth1: entered promiscuous mode [ 160.250421][ T7830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.286612][ T7830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.298955][ T7828] veth1: left promiscuous mode [ 160.311139][ T7830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.354253][ T7830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 160.418121][ T7830] System zones: 0-1, 3-36 [ 160.454080][ T7830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.718043][ T5817] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 160.732004][ T5817] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 160.756431][ T5817] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.846294][ T7850] fido_id[7850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.875811][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.622236][ T7859] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 162.035874][ T28] audit: type=1326 audit(1788787240.342:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.069351][ T28] audit: type=1326 audit(1788787240.372:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.112350][ T28] audit: type=1326 audit(1788787240.372:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.137532][ T28] audit: type=1326 audit(1788787240.372:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.137577][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.222642][ T28] audit: type=1326 audit(1788787240.372:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.286095][ T28] audit: type=1326 audit(1788787240.372:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.340672][ T7888] loop0: detected capacity change from 0 to 8192 [ 162.341026][ T28] audit: type=1326 audit(1788787240.372:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.384366][ T7888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.398400][ T7888] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 162.408195][ T7888] REISERFS (device loop0): using ordered data mode [ 162.414832][ T7888] reiserfs: using flush barriers [ 162.422125][ T28] audit: type=1326 audit(1788787240.382:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.427210][ T7888] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.447161][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 162.463697][ T28] audit: type=1326 audit(1788787240.382:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.471831][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 162.528473][ T7888] REISERFS (device loop0): checking transaction log (loop0) [ 162.536612][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.554025][ T28] audit: type=1326 audit(1788787240.382:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.3.746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x7ffc0000 [ 162.566888][ T8] usb 2-1: Product: syz [ 162.600056][ T8] usb 2-1: Manufacturer: syz [ 162.604745][ T8] usb 2-1: SerialNumber: syz [ 162.625284][ T8] usb 2-1: config 0 descriptor?? [ 162.638240][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 162.810443][ T7888] REISERFS (device loop0): Using tea hash to sort names [ 162.833897][ T7888] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 163.024994][ T7898] xt_hashlimit: size too large, truncated to 1048576 [ 163.067621][ T8] gspca_se401: ExtraFeatures: 255 [ 163.084387][ T7899] xt_hashlimit: size too large, truncated to 1048576 [ 163.297276][ T8] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 163.321078][ T7902] loop0: detected capacity change from 0 to 512 [ 163.393910][ T7874] loop4: detected capacity change from 0 to 65536 [ 163.417273][ T7902] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.753: iget: bad i_size value: 38620345925642 [ 163.448714][ T7902] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.753: couldn't read orphan inode 15 (err -117) [ 163.469654][ T7902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.545079][ T7874] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 163.562277][ T7902] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.753: bg 0: block 5: invalid block bitmap [ 163.587238][ T7902] EXT4-fs error (device loop0) in ext4_setattr:5683: error 28 [ 163.607240][ T5817] usb 2-1: USB disconnect, device number 5 [ 163.683675][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.709602][ T7874] XFS (loop4): Ending clean mount [ 163.768743][ T7874] XFS (loop4): Quotacheck needed: Please wait. [ 163.864285][ T1214] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 163.889110][ T1214] XFS (loop4): Unmount and run xfs_repair [ 163.894905][ T1214] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 163.922024][ T1214] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 163.943220][ T1214] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 163.953866][ T1214] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 163.963896][ T1214] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 163.985815][ T1214] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 164.007145][ T1214] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.016144][ T1214] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.027155][ T1214] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.036435][ T42] XFS (loop4): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 164.063408][ T7874] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 164.209782][ T7919] Context (ID=0x10) not attached to queue pair (handle=0x2:0xf2) [ 164.323136][ T5817] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 164.356988][ T5817] XFS (loop4): Unmount and run xfs_repair [ 164.387381][ T5817] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 164.400299][ T5817] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 164.420594][ T5817] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 164.446193][ T5817] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 164.482734][ T5817] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 164.507260][ T5817] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 164.530193][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.556022][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.570527][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.613747][ T7874] XFS (loop4): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 164.636967][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.652131][ T7874] XFS (loop4): page discard on page ffffea00012b0000, inode 0x2b, pos 0. [ 164.678591][ T5817] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 164.698872][ T5817] XFS (loop4): Unmount and run xfs_repair [ 164.704657][ T5817] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 164.731377][ T5817] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 164.759496][ T5817] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 164.775922][ T5817] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 164.794700][ T5817] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 164.803816][ T5817] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 164.818626][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.832975][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.854393][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.867893][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 164.875253][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 164.885502][ T7874] XFS (loop4): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 164.899640][ T7874] XFS (loop4): page discard on page ffffea0001584a80, inode 0x2b, pos 1048576. [ 164.921636][ T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 164.936945][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.955207][ T8] usb 1-1: Product: syz [ 164.959711][ T8] usb 1-1: Manufacturer: syz [ 164.964329][ T8] usb 1-1: SerialNumber: syz [ 164.980817][ T8] usb 1-1: config 0 descriptor?? [ 164.998456][ T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 165.019531][ T8] usb 1-1: Detected FT232R [ 165.090120][ T5913] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 165.238708][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 165.508331][ T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 165.673128][ T8] usb 1-1: USB disconnect, device number 11 [ 165.750586][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.777594][ T8] ftdi_sio 1-1:0.0: device disconnected [ 166.240454][ T7938] loop1: detected capacity change from 0 to 1024 [ 166.400198][ T11] hfsplus: bad catalog file entry [ 166.405350][ T11] hfsplus: b-tree write err: -5, ino 3 [ 166.644086][ T7946] loop4: detected capacity change from 0 to 2048 [ 166.698314][ T7951] binder: 7950:7951 ioctl c0306201 200000000040 returned -14 [ 166.739515][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.788734][ T7946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 166.888941][ T7946] EXT4-fs (loop4): Remounting filesystem read-only [ 166.963075][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.453774][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 167.461716][ T7968] netlink: 'syz.4.775': attribute type 3 has an invalid length. [ 167.487226][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 167.498642][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 167.667042][ T7970] loop4: detected capacity change from 0 to 512 [ 167.690347][ T7970] EXT4-fs: Ignoring removed oldalloc option [ 167.700187][ T7970] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.710357][ T7972] tipc: Started in network mode [ 167.715554][ T7972] tipc: Node identity 7f000001, cluster identity 4711 [ 167.733251][ T7970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.755248][ T7970] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.776: invalid indirect mapped block 4294967295 (level 1) [ 167.765819][ T7972] tipc: New replicast peer: 127.0.0.1 [ 167.815681][ T7972] tipc: Enabled bearer , priority 10 [ 167.833173][ T7970] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.776: invalid indirect mapped block 4294967295 (level 1) [ 167.886692][ T7975] tipc: Disabling bearer [ 167.931181][ T7970] EXT4-fs (loop4): 2 truncates cleaned up [ 167.948619][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.125996][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.513430][ T7994] loop1: detected capacity change from 0 to 128 [ 168.539567][ T7994] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 168.581806][ T7994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.680207][ T7994] overlayfs: upper fs needs to support d_type. [ 168.704630][ T7994] overlayfs: upper fs does not support tmpfile. [ 168.848671][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 168.878623][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.253474][ T8016] loop4: detected capacity change from 0 to 512 [ 169.270470][ T8016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.289913][ T8016] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.352295][ T8016] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.798: bad orphan inode 3855 [ 169.382373][ T8016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.556009][ T8016] EXT4-fs (loop4): shut down requested (1) [ 169.625209][ T8026] loop1: detected capacity change from 0 to 1024 [ 169.625327][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.090966][ T1214] hid-generic 0005:07C0:0008.0008: item fetching failed at offset 0/1 [ 170.118648][ T8039] loop1: detected capacity change from 0 to 8 [ 170.149455][ T1214] hid-generic: probe of 0005:07C0:0008.0008 failed with error -22 [ 170.163914][ T8024] loop3: detected capacity change from 0 to 32768 [ 170.231434][ T8039] SQUASHFS error: Failed to read block 0x26067d: -5 [ 170.248706][ T8024] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.276982][ T8039] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 170.284656][ T8039] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 170.397325][ T8024] XFS (loop3): Ending clean mount [ 170.646486][ T5777] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.905670][ T8070] loop1: detected capacity change from 0 to 1024 [ 170.919452][ T8070] EXT4-fs: Ignoring removed oldalloc option [ 170.947814][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.094527][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.126988][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.327123][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 171.334132][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 171.346009][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.358897][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.365552][ T8] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 171.374641][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.385303][ T8] usb 5-1: config 0 descriptor?? [ 171.828066][ T8] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 171.835236][ T8] uclogic 0003:5543:0781.0009: item fetching failed at offset 3/24 [ 171.863358][ T8] uclogic 0003:5543:0781.0009: parse failed [ 171.875750][ T8] uclogic: probe of 0003:5543:0781.0009 failed with error -22 [ 172.074210][ T23] usb 5-1: USB disconnect, device number 7 [ 172.091496][ T8084] loop3: detected capacity change from 0 to 2048 [ 172.136113][ T8084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.174941][ T8082] loop1: detected capacity change from 0 to 4096 [ 172.311186][ T8082] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.379445][ T8082] ntfs3: loop1: Failed to load $Extend (-22). [ 172.413467][ T8082] ntfs3: loop1: Failed to initialize $Extend. [ 172.675749][ T8095] program syz.3.829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.812581][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.833'. [ 172.847184][ T789] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 173.049936][ T789] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.068144][ T789] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.096814][ T789] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.106414][ T789] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 173.117408][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.172521][ T789] usb 1-1: config 0 descriptor?? [ 173.349882][ T8114] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 173.364049][ T8114] syzkaller0: linktype set to 825 [ 173.598805][ T789] hid-multitouch 0003:0EEF:72C4.000A: unbalanced collection at end of report description [ 173.620857][ T789] hid-multitouch: probe of 0003:0EEF:72C4.000A failed with error -22 [ 173.714156][ T8120] loop4: detected capacity change from 0 to 256 [ 173.763295][ T8120] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 174.307751][ T1214] usb 1-1: USB disconnect, device number 12 [ 174.635452][ T8146] loop3: detected capacity change from 0 to 128 [ 174.658216][ T8146] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.741435][ T8146] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.933300][ T8156] loop0: detected capacity change from 0 to 128 [ 174.983808][ T2979] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.014521][ T8156] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.030948][ T8156] hpfs: filesystem error: improperly stopped [ 175.037623][ T8156] hpfs: You really don't want any checks? You are crazy... [ 175.046211][ T8156] hpfs: hpfs_map_sector(): read error [ 175.051790][ T8156] hpfs: code page support is disabled [ 175.060546][ T8156] hpfs: hpfs_map_4sectors(): unaligned read [ 175.066633][ T8156] hpfs: hpfs_map_4sectors(): unaligned read [ 175.073133][ T8156] hpfs: filesystem error: unable to find root dir [ 175.317698][ T8135] loop4: detected capacity change from 0 to 40427 [ 175.342043][ T8135] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 175.394025][ T8135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.436231][ T8135] F2FS-fs (loop4): Image doesn't support compression [ 175.446949][ T8135] F2FS-fs (loop4): Image doesn't support compression [ 175.477242][ T8135] F2FS-fs (loop4): invalid crc value [ 175.706211][ T8135] F2FS-fs (loop4): Start checkpoint disabled! [ 175.753388][ T8135] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.760984][ T8135] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 175.911123][ T3526] kworker/u4:12: attempt to access beyond end of device [ 175.911123][ T3526] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.930627][ T8181] loop3: detected capacity change from 0 to 256 [ 175.980549][ T3526] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 176.003272][ T8181] overlayfs: failed to resolve './file1': -2 [ 176.247315][ T8185] netlink: 'syz.1.874': attribute type 3 has an invalid length. [ 176.423004][ T8191] loop1: detected capacity change from 0 to 4096 [ 176.482523][ T8193] loop0: detected capacity change from 0 to 128 [ 176.516595][ T8191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.588779][ T8200] loop4: detected capacity change from 0 to 1024 [ 176.809548][ T8193] syz.0.878 (8193) used greatest stack depth: 19376 bytes left [ 176.811647][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.859360][ T8202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 177.185342][ T8212] loop3: detected capacity change from 0 to 1024 [ 177.298758][ T8212] hfsplus: bad catalog entry type [ 177.372365][ T42] hfsplus: b-tree write err: -5, ino 25 [ 177.380945][ T42] hfsplus: b-tree write err: -5, ino 4 [ 177.388242][ T42] hfsplus: b-tree write err: -5, ino 2 [ 177.560260][ T8226] loop4: detected capacity change from 0 to 128 [ 177.583389][ T8229] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 177.583389][ T8229] The task syz.0.888 (8229) triggered the difference, watch for misbehavior. [ 178.920556][ T8265] vxcan0: tx address claim with dest, not broadcast [ 178.928461][ T8263] loop4: detected capacity change from 0 to 2048 [ 178.993051][ T8263] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 179.033864][ T8263] UDF-fs: Scanning with blocksize 512 failed [ 179.071709][ T8263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.082546][ T8259] loop1: detected capacity change from 0 to 32768 [ 179.166237][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 179.166252][ T28] audit: type=1800 audit(1788787257.472:48): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.912" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 179.170520][ T8259] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 179.170520][ T8259] [ 179.221022][ T8259] ERROR: (device loop1): remounting filesystem as read-only [ 179.247648][ T8259] ialloc: diAlloc returned -5! [ 179.294932][ T8259] ERROR: (device loop1): diWrite: ixpxd invalid [ 179.294932][ T8259] [ 179.366279][ T8259] ERROR: (device loop1): txCommit: [ 179.366279][ T8259] [ 180.275296][ T8275] loop1: detected capacity change from 0 to 32768 [ 180.651709][ T28] audit: type=1400 audit(1788787258.962:49): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8285 comm="syz.1.916" name="unknown" offset=82 [ 180.827015][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.959792][ T8274] loop3: detected capacity change from 0 to 32768 [ 181.015333][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.027332][ T8274] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.036234][ T23] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.046676][ T23] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.062865][ T23] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 181.072538][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.080762][ T23] usb 1-1: Product: syz [ 181.085084][ T23] usb 1-1: Manufacturer: syz [ 181.090138][ T23] usb 1-1: SerialNumber: syz [ 181.212295][ T8274] XFS (loop3): Ending clean mount [ 181.394080][ T8283] loop0: detected capacity change from 0 to 2048 [ 181.443650][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.459230][ T8283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.538882][ T23] usb 1-1: unit 6 not found! [ 181.543561][ T23] usb 1-1: unit 254 not found! [ 181.659911][ T23] usb 1-1: USB disconnect, device number 13 [ 181.793558][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.183711][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.008113][ T8335] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.088844][ T8335] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 183.151335][ T8328] loop1: detected capacity change from 0 to 32768 [ 183.192671][ T28] audit: type=1800 audit(1788787261.502:50): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.929" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 183.212852][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.487737][ T8340] vhci_hcd: not connected 4 [ 183.590569][ T8344] loop3: detected capacity change from 0 to 512 [ 183.616410][ T8344] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 183.822986][ T8] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 183.894074][ T8350] ubi31: attaching mtd0 [ 183.911925][ T8350] ubi31 error: ubi_attach_mtd_dev: bad VID header (12293) or data offsets (12357) [ 183.968797][ T8352] program syz.3.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.038963][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 184.065676][ T8] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 184.095386][ T8354] loop0: detected capacity change from 0 to 1024 [ 184.107920][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.114716][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 184.126088][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.135921][ T8354] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 184.153663][ T8] usb 5-1: config 0 descriptor?? [ 184.158945][ T8354] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.176193][ T8354] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 184.350333][ T8360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 184.604773][ T8] wacom 0003:056A:0013.000B: ignoring exceeding usage max [ 184.644609][ T8] wacom 0003:056A:0013.000B: unknown main item tag 0x6 [ 184.662154][ T8] wacom 0003:056A:0013.000B: ignoring exceeding usage max [ 184.669733][ T8367] loop0: detected capacity change from 0 to 512 [ 184.679662][ T8] wacom 0003:056A:0013.000B: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 184.708505][ T8367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.713185][ T8] wacom 0003:056A:0013.000B: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.4-1/input0 [ 184.789272][ T8] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0013.000B/input/input10 [ 184.802925][ T8367] EXT4-fs (loop0): 1 truncate cleaned up [ 184.848259][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.927466][ T8] usb 5-1: USB disconnect, device number 8 [ 184.944891][ T8369] fido_id[8369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 185.223362][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.393068][ T8386] bond0: no command found in slaves file - use +ifname or -ifname [ 186.667785][ T8405] loop4: detected capacity change from 0 to 16 [ 186.727347][ T8405] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.000100][ T8414] bond0: no command found in slaves file - use +ifname or -ifname [ 187.174775][ T8392] loop3: detected capacity change from 0 to 40427 [ 187.212100][ T8392] F2FS-fs (loop3): invalid crc value [ 187.265781][ T8392] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.431334][ T8424] loop1: detected capacity change from 0 to 64 [ 187.623095][ T8392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 187.663724][ T5779] hfs: node 4:3 still has 1 user(s)! [ 187.856400][ T28] audit: type=1800 audit(1788787266.162:51): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.954" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 187.921957][ T5781] infiniband s`z1: ib_query_port failed (-19) [ 187.945216][ T8417] loop4: detected capacity change from 0 to 32768 [ 188.025428][ T8417] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.049167][ T5777] syz-executor: attempt to access beyond end of device [ 188.049167][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.123048][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 188.148586][ T8417] XFS (loop4): Ending clean mount [ 188.194635][ T8417] XFS (loop4): Quotacheck needed: Please wait. [ 188.316482][ T2979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.429178][ T8417] XFS (loop4): Quotacheck: Done. [ 188.528940][ T8417] XFS (loop4): User initiated shutdown received. [ 188.548310][ T8417] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 188.551953][ T2979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.598253][ T8417] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 188.684633][ T5913] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.869116][ T2979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.154210][ T2979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.657948][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.697267][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.706158][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.719550][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.729243][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.737872][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.115822][ T8450] lo speed is unknown, defaulting to 1000 [ 190.889964][ T8447] loop3: detected capacity change from 0 to 32768 [ 191.129430][ T8447] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 191.348213][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 191.573447][ T8447] XFS (loop3): Ending clean mount [ 191.746561][ T8496] loop1: detected capacity change from 0 to 2048 [ 191.817574][ T5788] Bluetooth: hci3: command tx timeout [ 191.817840][ T8496] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.981: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 191.922432][ T5777] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 191.928184][ T8496] EXT4-fs (loop1): get root inode failed [ 191.947169][ T8496] EXT4-fs (loop1): mount failed [ 191.966483][ T8506] loop4: detected capacity change from 0 to 1024 [ 192.128467][ T8506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.216150][ T8506] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.272318][ T8506] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.984: lblock 0 mapped to illegal pblock 0 (length 6) [ 192.274175][ T28] audit: type=1800 audit(1788787270.582:52): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.984" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 192.344813][ T8506] EXT4-fs (loop4): Remounting filesystem read-only [ 192.484931][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.656252][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.684927][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.714976][ T8450] bridge_slave_0: entered allmulticast mode [ 192.730387][ T8450] bridge_slave_0: entered promiscuous mode [ 192.803732][ T2979] hsr_slave_0: left promiscuous mode [ 192.867711][ T2979] hsr_slave_1: left promiscuous mode [ 192.876330][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.900996][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.916181][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.925040][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.940839][ T2979] bridge_slave_1: left allmulticast mode [ 192.946721][ T2979] bridge_slave_1: left promiscuous mode [ 192.960709][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.068603][ T2979] veth1_macvtap: left promiscuous mode [ 193.085175][ T2979] veth0_macvtap: left promiscuous mode [ 193.094430][ T2979] veth1_vlan: left promiscuous mode [ 193.110328][ T2979] veth0_vlan: left promiscuous mode [ 193.889982][ T5788] Bluetooth: hci3: command tx timeout [ 194.473802][ T8554] "syz.4.996" (8554) uses obsolete ecb(arc4) skcipher [ 194.533715][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540127][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.704640][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 195.081456][ T8566] loop4: detected capacity change from 0 to 1024 [ 195.101659][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 195.265656][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 195.418615][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.574964][ T8573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.637895][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.977193][ T5791] Bluetooth: hci3: command tx timeout [ 196.692627][ T2979] bond0 (unregistering): Released all slaves [ 196.884485][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.892018][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.899447][ T8450] bridge_slave_1: entered allmulticast mode [ 196.907012][ T8450] bridge_slave_1: entered promiscuous mode [ 197.034707][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.092740][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.263779][ T8450] team0: Port device team_slave_0 added [ 197.332117][ T8450] team0: Port device team_slave_1 added [ 197.442836][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.465122][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.564219][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.614123][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.652195][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.702711][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.996113][ T8450] hsr_slave_0: entered promiscuous mode [ 198.047327][ T5791] Bluetooth: hci3: command tx timeout [ 198.066804][ T8450] hsr_slave_1: entered promiscuous mode [ 198.074906][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.086207][ T8450] Cannot create hsr debugfs directory [ 198.141397][ T8622] loop1: detected capacity change from 0 to 256 [ 198.288535][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 198.390383][ T8626] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1025'. [ 199.875251][ T8450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.916464][ T8450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.986697][ T8450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.031665][ T8450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.282936][ T8688] loop4: detected capacity change from 0 to 512 [ 200.310673][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.382592][ T8688] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 200.420347][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.448307][ T8688] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1048: corrupted in-inode xattr: e_value size too large [ 200.475393][ T8688] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1048: couldn't read orphan inode 15 (err -117) [ 200.507611][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.514862][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.540796][ T8688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.543573][ T8698] loop3: detected capacity change from 0 to 1024 [ 200.621189][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.628441][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.632580][ T8698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.712563][ T8698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.754292][ T5913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.946798][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.964729][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.104829][ T8450] veth0_vlan: entered promiscuous mode [ 201.164234][ T8450] veth1_vlan: entered promiscuous mode [ 201.254679][ T8716] __sock_release: fasync list not empty! [ 201.258758][ T8450] veth0_macvtap: entered promiscuous mode [ 201.281263][ T8450] veth1_macvtap: entered promiscuous mode [ 201.317486][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.347906][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.387148][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.416996][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.452377][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.491688][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.541478][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.595920][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.626249][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.656388][ T8726] loop3: detected capacity change from 0 to 4096 [ 201.669021][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.682033][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.693222][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.706882][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.713029][ T8726] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 201.738768][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 201.741001][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.744856][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 201.831441][ T8450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.912919][ T8450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.913332][ T8726] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 201.937559][ T8450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.960157][ T8726] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 201.962531][ T8450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.234341][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.278226][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.374025][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.425325][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.598918][ T8754] loop3: detected capacity change from 0 to 128 [ 203.743979][ T8757] loop0: detected capacity change from 0 to 131072 [ 203.787369][ T8757] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 203.796440][ T8757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.822363][ T8757] F2FS-fs (loop0): invalid crc value [ 203.870029][ T8757] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.036053][ T8757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.043275][ T8757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 204.227760][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1073'. [ 204.941531][ T8813] loop1: detected capacity change from 0 to 512 [ 204.984218][ T8813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.046758][ T8813] EXT4-fs (loop1): 1 truncate cleaned up [ 205.088916][ T8813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.190924][ T28] audit: type=1800 audit(1788787283.492:53): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1081" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 205.245863][ T28] audit: type=1400 audit(1788787283.542:54): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8823 comm="syz.4.1084" name="p" offset=64 [ 205.392740][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.485829][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1085'. [ 205.555245][ T8829] bridge_slave_0: left allmulticast mode [ 205.564970][ T8829] bridge_slave_0: left promiscuous mode [ 205.597228][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.611970][ T8829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 206.120557][ T8847] loop3: detected capacity change from 0 to 256 [ 206.216202][ T8852] program syz.4.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.413052][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 206.672379][ T8857] loop0: detected capacity change from 0 to 8192 [ 206.753437][ T8857] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.770605][ T8857] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 206.780478][ T8857] REISERFS (device loop0): using ordered data mode [ 206.787504][ T8857] reiserfs: using flush barriers [ 206.794647][ T8857] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.811762][ T8857] REISERFS (device loop0): checking transaction log (loop0) [ 206.825109][ T8874] loop1: detected capacity change from 0 to 256 [ 206.833952][ T8857] REISERFS (device loop0): Using r5 hash to sort names [ 206.843043][ T8857] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 207.269569][ T8887] loop4: detected capacity change from 0 to 2048 [ 207.336106][ T8887] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 207.431218][ T8887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.818845][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'. [ 208.099146][ T8888] loop0: detected capacity change from 0 to 32768 [ 208.142643][ T8888] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1101 (8888) [ 208.186073][ T8888] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.239915][ T8888] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 208.261246][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 208.277685][ T8888] BTRFS info (device loop0): setting nodatasum [ 208.287085][ T8888] BTRFS info (device loop0): disabling tree log [ 208.293529][ T8888] BTRFS info (device loop0): max_inline at 0 [ 208.321731][ T8888] BTRFS info (device loop0): using free space tree [ 208.407084][ T8892] loop1: detected capacity change from 0 to 32768 [ 208.463115][ T8892] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1104 (8892) [ 208.552411][ T8892] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 208.574712][ T8888] BTRFS info (device loop0): enabling ssd optimizations [ 208.592438][ T8888] BTRFS info (device loop0): auto enabling async discard [ 208.627167][ T8892] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.658542][ T8892] BTRFS info (device loop1): using free space tree [ 208.998239][ T8450] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.025891][ T8892] BTRFS info (device loop1): enabling ssd optimizations [ 209.047060][ T8892] BTRFS info (device loop1): auto enabling async discard [ 209.767931][ T5779] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 211.116116][ T9006] loop0: detected capacity change from 0 to 512 [ 211.125199][ T9006] EXT4-fs: Ignoring removed oldalloc option [ 211.133348][ T9006] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.146186][ T9006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.187517][ T9006] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1128: invalid indirect mapped block 4294967295 (level 1) [ 211.217213][ T9006] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1128: invalid indirect mapped block 4294967295 (level 1) [ 211.307635][ T9006] EXT4-fs (loop0): 2 truncates cleaned up [ 211.331334][ T9006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.381331][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 211.413513][ T9013] loop1: detected capacity change from 0 to 1024 [ 211.438219][ T9013] EXT4-fs: Ignoring removed orlov option [ 211.465220][ T8450] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.532641][ T9013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.612285][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 211.621584][ T23] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 211.633032][ T23] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 211.642951][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 211.649744][ T23] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 211.659744][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.672745][ T23] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 211.751535][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.917347][ T23] scsi host1: usb-storage 4-1:1.0 [ 211.923685][ T9025] loop0: detected capacity change from 0 to 512 [ 211.960191][ T9028] loop1: detected capacity change from 0 to 512 [ 211.973412][ T9028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.977202][ T9025] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.012045][ T9025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.033826][ T9025] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.1133: bad orphan inode 3855 [ 212.061312][ T9025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.074474][ T9028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.121567][ T9025] EXT4-fs (loop0): shut down requested (1) [ 212.122766][ T9028] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.187327][ T5839] usb 4-1: USB disconnect, device number 10 [ 212.222129][ T8450] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.323457][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.375873][ T9035] loop0: detected capacity change from 0 to 16 [ 212.384509][ T9035] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 212.668793][ T9041] loop0: detected capacity change from 0 to 512 [ 212.709276][ T9041] EXT4-fs (loop0): 1 truncate cleaned up [ 212.814927][ T9041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.937855][ T28] audit: type=1800 audit(1788787291.252:55): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1140" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 212.948395][ T9041] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1140: invalid indirect mapped block 234881024 (level 0) [ 213.066210][ T9041] EXT4-fs (loop0): Remounting filesystem read-only [ 213.237636][ T8450] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.268047][ T9066] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 213.268178][ T9066] syzkaller0: linktype set to 825 [ 213.392607][ T9070] loop0: detected capacity change from 0 to 256 [ 213.622658][ T9076] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1155'. [ 213.989629][ T9090] loop4: detected capacity change from 0 to 256 [ 214.007231][ T9090] exfat: Deprecated parameter 'namecase' [ 214.013025][ T9090] exfat: Deprecated parameter 'namecase' [ 214.062041][ T9090] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 214.636596][ T9109] loop0: detected capacity change from 0 to 512 [ 214.717517][ T9109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.732057][ T9109] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #4: comm syz.0.1173: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 214.762770][ T9109] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.1173: Bad quota inode: 4, type: 1 [ 214.817371][ T9109] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 214.847833][ T9109] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 214.868222][ T9109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.881263][ T9112] loop3: detected capacity change from 0 to 4096 [ 214.938424][ T8450] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.957796][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 214.986781][ T9112] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 215.145303][ T9112] ntfs3: loop3: Failed to load $Extend (-22). [ 215.160195][ T9112] ntfs3: loop3: Failed to initialize $Extend. [ 215.197020][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 215.226659][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 215.248198][ T23] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 215.260816][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.278267][ T23] usb 5-1: Product: syz [ 215.285760][ T23] usb 5-1: Manufacturer: syz [ 215.291328][ T23] usb 5-1: SerialNumber: syz [ 215.310616][ T23] usb 5-1: config 0 descriptor?? [ 215.330496][ T23] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 215.352120][ T23] usb 5-1: Detected FT232R [ 215.457058][ T5781] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 215.538979][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 215.635073][ T9129] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.660019][ T9129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.677819][ T5781] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 215.687683][ T5781] usb 2-1: config 0 has no interface number 0 [ 215.693848][ T5781] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 215.705851][ T5781] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 215.721009][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 215.730325][ T5781] usb 2-1: Manufacturer: syz [ 215.734976][ T5781] usb 2-1: SerialNumber: syz [ 215.746207][ T5781] usb 2-1: config 0 descriptor?? [ 215.780598][ T23] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 215.800603][ T9129] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 215.826243][ T9129] EXT4-fs: Cannot change quota options when quota turned on [ 215.903147][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.010439][ T23] usb 5-1: USB disconnect, device number 9 [ 216.026624][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 216.054610][ T23] ftdi_sio 5-1:0.0: device disconnected [ 216.066315][ T28] audit: type=1326 audit(1788787294.372:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53f299e159 code=0x0 [ 216.089743][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.145889][ T9135] pimreg0: tun_chr_ioctl cmd 2147767506 [ 216.388373][ T5781] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input13 [ 216.616669][ T23] usb 2-1: USB disconnect, device number 6 [ 216.825819][ T9144] set_capacity_and_notify: 1 callbacks suppressed [ 216.825830][ T9144] loop0: detected capacity change from 0 to 32768 [ 216.862463][ T9144] JBD2: Ignoring recovery information on journal [ 216.911793][ T9144] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 217.029928][ T9150] loop3: detected capacity change from 0 to 128 [ 217.050954][ T9150] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 217.073741][ T9150] hpfs: filesystem error: improperly stopped [ 217.101637][ T9150] hpfs: You really don't want any checks? You are crazy... [ 217.120708][ T8450] ocfs2: Unmounting device (7,0) on (node local) [ 217.128079][ T9150] hpfs: hpfs_map_sector(): read error [ 217.133645][ T9150] hpfs: code page support is disabled [ 217.167619][ T9150] hpfs: hpfs_map_4sectors(): unaligned read [ 217.175538][ T9150] hpfs: hpfs_map_4sectors(): unaligned read [ 217.191923][ T9150] hpfs: filesystem error: unable to find root dir [ 255.971408][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978876][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.127018][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 317.410960][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.417514][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.967209][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 378.851536][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858384][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.127149][ T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds. [ 380.134846][ T29] Not tainted syzkaller #0 [ 380.140313][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.149111][ T29] task:kworker/u4:0 state:D stack:21224 pid:11 ppid:2 flags:0x00004000 [ 380.158439][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 380.164511][ T29] Call Trace: [ 380.167863][ T29] [ 380.170819][ T29] __schedule+0x15ae/0x4660 [ 380.175341][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 380.181663][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 380.187963][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 380.193946][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.199037][ T29] ? asan.module_dtor+0x20/0x20 [ 380.203942][ T29] ? blk_check_plugged+0x250/0x250 [ 380.209114][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 380.214230][ T29] ? wq_worker_sleeping+0x63/0x240 [ 380.219412][ T29] schedule+0xbd/0x170 [ 380.223520][ T29] io_schedule+0x80/0xd0 [ 380.227834][ T29] rq_qos_wait+0x22b/0x360 [ 380.232272][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 380.237278][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 380.242722][ T29] ? rq_qos_wait+0x360/0x360 [ 380.247510][ T29] ? wbt_exit+0xb0/0xb0 [ 380.251697][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 380.256721][ T29] wbt_wait+0x34a/0x580 [ 380.260955][ T29] ? rwb_trace_step+0x320/0x320 [ 380.265846][ T29] ? dd_depth_updated+0x110/0x110 [ 380.270977][ T29] ? rwb_trace_step+0x320/0x320 [ 380.275848][ T29] __rq_qos_throttle+0x65/0xb0 [ 380.280702][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 380.285752][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.290851][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 380.296607][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 380.302931][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 380.308221][ T29] ? ktime_get+0x7f/0x280 [ 380.312573][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 380.319145][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 380.324471][ T29] __submit_bio+0x12b/0x260 [ 380.329085][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 380.334126][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 380.339833][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 380.345455][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 380.351096][ T29] ? should_fail_request+0x70/0x70 [ 380.356234][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 380.361608][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 380.367160][ T29] mpage_submit_folio+0x231/0x3c0 [ 380.372218][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 380.377771][ T29] mpage_prepare_extent_to_map+0xdd3/0x1d50 [ 380.383700][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 380.389213][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 380.394255][ T29] ext4_do_writepages+0xb46/0x3990 [ 380.399496][ T29] ? mark_lock+0x94/0x320 [ 380.403943][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 380.410907][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 380.416393][ T29] ? __lock_acquire+0x1336/0x7d80 [ 380.421482][ T29] ext4_writepages+0x1dd/0x350 [ 380.426259][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 380.431323][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 380.436758][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 380.442212][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 380.447625][ T29] do_writepages+0x351/0x590 [ 380.452261][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 380.458070][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 380.463477][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.468703][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 380.473781][ T29] __writeback_single_inode+0x14e/0xee0 [ 380.479404][ T29] writeback_sb_inodes+0x813/0x1020 [ 380.484652][ T29] ? queue_io+0x530/0x530 [ 380.489066][ T29] __writeback_inodes_wb+0x114/0x240 [ 380.494376][ T29] wb_writeback+0x472/0xbe0 [ 380.498984][ T29] ? queue_io+0x391/0x530 [ 380.503336][ T29] ? percpu_ref_tryget+0x250/0x250 [ 380.508552][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.513605][ T29] wb_workfn+0xb8e/0xe60 [ 380.517950][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 380.523698][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 380.529954][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.535288][ T29] ? read_lock_is_recursive+0x20/0x20 [ 380.540744][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.545972][ T29] ? process_scheduled_works+0x975/0x1600 [ 380.551997][ T29] ? process_scheduled_works+0x975/0x1600 [ 380.557994][ T29] process_scheduled_works+0xa60/0x1600 [ 380.563621][ T29] ? worker_attach_to_pool+0x370/0x370 [ 380.569169][ T29] ? assign_work+0x3cc/0x5d0 [ 380.573785][ T29] worker_thread+0xa5e/0xfe0 [ 380.578588][ T29] kthread+0x2fa/0x390 [ 380.582694][ T29] ? pr_cont_work+0x550/0x550 [ 380.587469][ T29] ? kthread_blkcg+0xd0/0xd0 [ 380.592082][ T29] ret_from_fork+0x48/0x80 [ 380.596516][ T29] ? kthread_blkcg+0xd0/0xd0 [ 380.601181][ T29] ret_from_fork_asm+0x11/0x20 [ 380.605991][ T29] [ 380.609247][ T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds. [ 380.617135][ T29] Not tainted syzkaller #0 [ 380.622182][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.630978][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5105 ppid:2 flags:0x00004000 [ 380.640267][ T29] Call Trace: [ 380.643545][ T29] [ 380.646466][ T29] __schedule+0x15ae/0x4660 [ 380.651317][ T29] ? asan.module_dtor+0x20/0x20 [ 380.656213][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.661295][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 380.667253][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 380.672482][ T29] schedule+0xbd/0x170 [ 380.676549][ T29] io_schedule+0x80/0xd0 [ 380.680872][ T29] bit_wait_io+0x11/0xd0 [ 380.685157][ T29] __wait_on_bit+0x9f/0x2c0 [ 380.689858][ T29] ? bit_wait+0xd0/0xd0 [ 380.694052][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 380.699753][ T29] ? bit_wait+0xd0/0xd0 [ 380.703957][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 380.708861][ T29] ? do_raw_write_lock+0x11e/0x260 [ 380.714007][ T29] ? bit_waitqueue+0x30/0x30 [ 380.718667][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 380.723714][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 380.730143][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 380.736986][ T29] ? lock_chain_count+0x20/0x20 [ 380.741881][ T29] ? _raw_spin_unlock+0x40/0x40 [ 380.746750][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 380.752649][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 380.757995][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.763017][ T29] ? timer_delete_sync+0x20/0x20 [ 380.768171][ T29] ? do_raw_read_unlock+0x80/0x80 [ 380.773232][ T29] ? prepare_to_wait+0x1aa/0x200 [ 380.778250][ T29] kjournald2+0x40f/0x810 [ 380.782582][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 380.787903][ T29] ? wake_bit_function+0x200/0x200 [ 380.793039][ T29] ? _raw_spin_unlock+0x40/0x40 [ 380.798014][ T29] ? __kthread_parkme+0x71/0x1c0 [ 380.802973][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 380.808172][ T29] kthread+0x2fa/0x390 [ 380.812263][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 380.817575][ T29] ? kthread_blkcg+0xd0/0xd0 [ 380.822181][ T29] ret_from_fork+0x48/0x80 [ 380.826585][ T29] ? kthread_blkcg+0xd0/0xd0 [ 380.831258][ T29] ret_from_fork_asm+0x11/0x20 [ 380.836048][ T29] [ 380.839222][ T29] INFO: task syz-executor:5765 blocked for more than 144 seconds. [ 380.847098][ T29] Not tainted syzkaller #0 [ 380.852047][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.860981][ T29] task:syz-executor state:D stack:22000 pid:5765 ppid:5764 flags:0x00004002 [ 380.870266][ T29] Call Trace: [ 380.873574][ T29] [ 380.876492][ T29] __schedule+0x15ae/0x4660 [ 380.881127][ T29] ? mark_lock+0x94/0x320 [ 380.885473][ T29] ? asan.module_dtor+0x20/0x20 [ 380.890384][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 380.895429][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 380.901401][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 380.906620][ T29] schedule+0xbd/0x170 [ 380.910774][ T29] io_schedule+0x80/0xd0 [ 380.915031][ T29] bit_wait_io+0x11/0xd0 [ 380.919454][ T29] __wait_on_bit+0x9f/0x2c0 [ 380.923998][ T29] ? bit_wait+0xd0/0xd0 [ 380.928290][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 380.933772][ T29] ? bit_wait+0xd0/0xd0 [ 380.938034][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 380.942831][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 380.947945][ T29] ? bit_waitqueue+0x30/0x30 [ 380.952588][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 380.958127][ T29] do_get_write_access+0x5c9/0xe00 [ 380.963278][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 380.969332][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 380.975535][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 380.981816][ T29] ? __might_sleep+0xe0/0xe0 [ 380.986429][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 380.992057][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 380.997615][ T29] ext4_dirty_inode+0xcb/0x110 [ 381.002402][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 381.008406][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 381.013459][ T29] file_update_time+0x187/0x1a0 [ 381.018423][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 381.023507][ T29] ? do_wp_page+0x4ce/0x34d0 [ 381.028299][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 381.034569][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.039707][ T29] do_page_mkwrite+0x153/0x3f0 [ 381.044489][ T29] do_wp_page+0xd4d/0x34d0 [ 381.048977][ T29] ? folio_put+0xd0/0xd0 [ 381.053231][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 381.058347][ T29] ? __rwlock_init+0x150/0x150 [ 381.063351][ T29] handle_mm_fault+0x1306/0x4a50 [ 381.068369][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 381.073323][ T29] ? numa_migrate_prep+0x350/0x350 [ 381.078526][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 381.083827][ T29] do_user_addr_fault+0x736/0x12d0 [ 381.089309][ T29] exc_page_fault+0x64/0x100 [ 381.093931][ T29] ? clear_bhb_loop+0x40/0x90 [ 381.098674][ T29] asm_exc_page_fault+0x26/0x30 [ 381.103564][ T29] RIP: 0033:0x7f9e9cc7c6e2 [ 381.108027][ T29] RSP: 002b:00007ffc9c323680 EFLAGS: 00010202 [ 381.114109][ T29] RAX: 00007f9e9aa10000 RBX: 000055555b84b240 RCX: 0000000000000003 [ 381.122147][ T29] RDX: 000000000000048d RSI: 000055555b84ba78 RDI: 0000000000000008 [ 381.130193][ T29] RBP: 00007ffc9c323b80 R08: 000055555b84ba90 R09: 0000000000000090 [ 381.138347][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc9c3239c0 [ 381.146337][ T29] R13: 00007ffc9c3237b0 R14: 585858582e7a7973 R15: 00007ffc9c323700 [ 381.154420][ T29] [ 381.157522][ T29] INFO: task syz.1.1193:9155 blocked for more than 144 seconds. [ 381.165308][ T29] Not tainted syzkaller #0 [ 381.170409][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.179189][ T29] task:syz.1.1193 state:D stack:27560 pid:9155 ppid:5779 flags:0x00004004 [ 381.188515][ T29] Call Trace: [ 381.191810][ T29] [ 381.194752][ T29] __schedule+0x15ae/0x4660 [ 381.199334][ T29] ? mark_lock+0x94/0x320 [ 381.203685][ T29] ? asan.module_dtor+0x20/0x20 [ 381.208604][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.213640][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 381.219596][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 381.224818][ T29] schedule+0xbd/0x170 [ 381.228964][ T29] io_schedule+0x80/0xd0 [ 381.233225][ T29] bit_wait_io+0x11/0xd0 [ 381.237562][ T29] __wait_on_bit+0x9f/0x2c0 [ 381.242087][ T29] ? bit_wait+0xd0/0xd0 [ 381.246411][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 381.252051][ T29] ? bit_wait+0xd0/0xd0 [ 381.256230][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 381.261034][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 381.266224][ T29] ? bit_waitqueue+0x30/0x30 [ 381.270920][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 381.276148][ T29] do_get_write_access+0x5c9/0xe00 [ 381.281359][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 381.287415][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 381.293595][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 381.299814][ T29] ? __might_sleep+0xe0/0xe0 [ 381.304420][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 381.310075][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 381.315570][ T29] ext4_dirty_inode+0xcb/0x110 [ 381.320406][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 381.326238][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 381.331348][ T29] file_update_time+0x187/0x1a0 [ 381.336195][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 381.341284][ T29] ? filemap_fault+0x103c/0x1540 [ 381.346241][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 381.352008][ T29] ? pte_alloc_one+0x3b6/0x540 [ 381.356793][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 381.363246][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.368660][ T29] do_page_mkwrite+0x153/0x3f0 [ 381.373450][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 381.378434][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 381.383388][ T29] ? numa_migrate_prep+0x350/0x350 [ 381.388590][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 381.393893][ T29] do_user_addr_fault+0x736/0x12d0 [ 381.399084][ T29] exc_page_fault+0x64/0x100 [ 381.403692][ T29] ? clear_bhb_loop+0x40/0x90 [ 381.408510][ T29] asm_exc_page_fault+0x26/0x30 [ 381.413379][ T29] RIP: 0033:0x7f73f4e6baa3 [ 381.417856][ T29] RSP: 002b:00007ffc65f74a10 EFLAGS: 00010246 [ 381.423951][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000 [ 381.431994][ T29] RDX: 0000001b2da24000 RSI: 0000000000400000 RDI: 00007f73f51e0708 [ 381.440070][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.448116][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.456108][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc65f74ca0 [ 381.464152][ T29] [ 381.467475][ T29] INFO: task syz.4.1194:9156 blocked for more than 144 seconds. [ 381.475280][ T29] Not tainted syzkaller #0 [ 381.480315][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.489023][ T29] task:syz.4.1194 state:D stack:27560 pid:9156 ppid:5913 flags:0x00004004 [ 381.498316][ T29] Call Trace: [ 381.501607][ T29] [ 381.504554][ T29] __schedule+0x15ae/0x4660 [ 381.509149][ T29] ? mark_lock+0x94/0x320 [ 381.513497][ T29] ? asan.module_dtor+0x20/0x20 [ 381.518419][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.523468][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 381.529435][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 381.534674][ T29] schedule+0xbd/0x170 [ 381.538818][ T29] io_schedule+0x80/0xd0 [ 381.543106][ T29] bit_wait_io+0x11/0xd0 [ 381.547485][ T29] __wait_on_bit+0x9f/0x2c0 [ 381.552004][ T29] ? bit_wait+0xd0/0xd0 [ 381.556190][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 381.561725][ T29] ? bit_wait+0xd0/0xd0 [ 381.565993][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 381.571400][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 381.576473][ T29] ? bit_waitqueue+0x30/0x30 [ 381.581264][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 381.586495][ T29] do_get_write_access+0x5c9/0xe00 [ 381.591695][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 381.597794][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 381.603973][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 381.610196][ T29] ? __might_sleep+0xe0/0xe0 [ 381.614836][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 381.620460][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 381.625944][ T29] ext4_dirty_inode+0xcb/0x110 [ 381.630775][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 381.636633][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 381.641735][ T29] file_update_time+0x187/0x1a0 [ 381.646625][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 381.651955][ T29] ? filemap_fault+0x103c/0x1540 [ 381.656964][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 381.662711][ T29] ? pte_alloc_one+0x3b6/0x540 [ 381.667546][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 381.673998][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.679124][ T29] do_page_mkwrite+0x153/0x3f0 [ 381.683912][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 381.689040][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 381.694034][ T29] ? numa_migrate_prep+0x350/0x350 [ 381.699211][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 381.704510][ T29] do_user_addr_fault+0x736/0x12d0 [ 381.709695][ T29] exc_page_fault+0x64/0x100 [ 381.714306][ T29] ? clear_bhb_loop+0x40/0x90 [ 381.719068][ T29] asm_exc_page_fault+0x26/0x30 [ 381.723951][ T29] RIP: 0033:0x7f037946baa3 [ 381.728688][ T29] RSP: 002b:00007fff1e298f60 EFLAGS: 00010246 [ 381.734767][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d964000 [ 381.742935][ T29] RDX: 0000001b2d924000 RSI: 0000000000400000 RDI: 00007f03797e0708 [ 381.750976][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.759004][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.767082][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff1e2991f0 [ 381.775086][ T29] [ 381.778429][ T29] INFO: task syz.3.1203:9157 blocked for more than 145 seconds. [ 381.786101][ T29] Not tainted syzkaller #0 [ 381.791078][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.799954][ T29] task:syz.3.1203 state:D stack:27560 pid:9157 ppid:5777 flags:0x00004004 [ 381.809351][ T29] Call Trace: [ 381.812643][ T29] [ 381.815567][ T29] __schedule+0x15ae/0x4660 [ 381.820150][ T29] ? mark_lock+0x94/0x320 [ 381.824497][ T29] ? asan.module_dtor+0x20/0x20 [ 381.829418][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.834463][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 381.840403][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 381.845621][ T29] schedule+0xbd/0x170 [ 381.849758][ T29] io_schedule+0x80/0xd0 [ 381.854036][ T29] bit_wait_io+0x11/0xd0 [ 381.858379][ T29] __wait_on_bit+0x9f/0x2c0 [ 381.862909][ T29] ? bit_wait+0xd0/0xd0 [ 381.867164][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 381.872642][ T29] ? bit_wait+0xd0/0xd0 [ 381.876791][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 381.881840][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 381.886977][ T29] ? bit_waitqueue+0x30/0x30 [ 381.891599][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 381.896879][ T29] do_get_write_access+0x5c9/0xe00 [ 381.902025][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 381.908193][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 381.914376][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 381.920603][ T29] ? __might_sleep+0xe0/0xe0 [ 381.925222][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 381.930871][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 381.936350][ T29] ext4_dirty_inode+0xcb/0x110 [ 381.941195][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 381.947076][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 381.952122][ T29] file_update_time+0x187/0x1a0 [ 381.957028][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 381.962075][ T29] ? filemap_fault+0x103c/0x1540 [ 381.967182][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 381.972945][ T29] ? pte_alloc_one+0x3b6/0x540 [ 381.977869][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 381.984359][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 381.989541][ T29] do_page_mkwrite+0x153/0x3f0 [ 381.994378][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 381.999375][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 382.004341][ T29] ? numa_migrate_prep+0x350/0x350 [ 382.009553][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 382.014867][ T29] do_user_addr_fault+0x736/0x12d0 [ 382.020189][ T29] exc_page_fault+0x64/0x100 [ 382.024834][ T29] ? clear_bhb_loop+0x40/0x90 [ 382.029574][ T29] asm_exc_page_fault+0x26/0x30 [ 382.034452][ T29] RIP: 0033:0x7f53f286baa3 [ 382.038953][ T29] RSP: 002b:00007ffc6c04b530 EFLAGS: 00010246 [ 382.045037][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dc64000 [ 382.053207][ T29] RDX: 0000001b2dc24000 RSI: 0000000000600000 RDI: 00007f53f2be0708 [ 382.061292][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.069351][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 382.077409][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc6c04b7c0 [ 382.085588][ T29] [ 382.088736][ T29] INFO: task syz.0.1191:9158 blocked for more than 145 seconds. [ 382.096380][ T29] Not tainted syzkaller #0 [ 382.101405][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.110143][ T29] task:syz.0.1191 state:D stack:27560 pid:9158 ppid:8450 flags:0x00004004 [ 382.119442][ T29] Call Trace: [ 382.122750][ T29] [ 382.125696][ T29] __schedule+0x15ae/0x4660 [ 382.130904][ T29] ? mark_lock+0x94/0x320 [ 382.135278][ T29] ? asan.module_dtor+0x20/0x20 [ 382.140203][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 382.145249][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 382.151195][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 382.156422][ T29] schedule+0xbd/0x170 [ 382.160580][ T29] io_schedule+0x80/0xd0 [ 382.164847][ T29] bit_wait_io+0x11/0xd0 [ 382.169202][ T29] __wait_on_bit+0x9f/0x2c0 [ 382.173727][ T29] ? bit_wait+0xd0/0xd0 [ 382.177945][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 382.183429][ T29] ? bit_wait+0xd0/0xd0 [ 382.187848][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 382.192672][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 382.197762][ T29] ? bit_waitqueue+0x30/0x30 [ 382.202379][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 382.207668][ T29] do_get_write_access+0x5c9/0xe00 [ 382.212811][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 382.218899][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 382.225081][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 382.231321][ T29] ? __might_sleep+0xe0/0xe0 [ 382.235932][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 382.241689][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 382.247257][ T29] ext4_dirty_inode+0xcb/0x110 [ 382.252148][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 382.258057][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 382.263103][ T29] file_update_time+0x187/0x1a0 [ 382.268060][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 382.273113][ T29] ? filemap_fault+0x103c/0x1540 [ 382.278137][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 382.283870][ T29] ? pte_alloc_one+0x3b6/0x540 [ 382.288921][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 382.295199][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 382.300282][ T29] do_page_mkwrite+0x153/0x3f0 [ 382.305068][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 382.310062][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 382.315020][ T29] ? numa_migrate_prep+0x350/0x350 [ 382.320190][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 382.325498][ T29] do_user_addr_fault+0x736/0x12d0 [ 382.330720][ T29] exc_page_fault+0x64/0x100 [ 382.335346][ T29] ? clear_bhb_loop+0x40/0x90 [ 382.340099][ T29] asm_exc_page_fault+0x26/0x30 [ 382.344971][ T29] RIP: 0033:0x7f7a01e6baa3 [ 382.349575][ T29] RSP: 002b:00007ffef5078f60 EFLAGS: 00010246 [ 382.355665][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34564000 [ 382.363738][ T29] RDX: 0000001b34524000 RSI: 0000000000400000 RDI: 00007f7a021e0708 [ 382.371859][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.379897][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 382.387926][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffef50791f0 [ 382.396109][ T29] [ 382.399222][ T29] [ 382.399222][ T29] Showing all locks held in the system: [ 382.407009][ T29] 4 locks held by kworker/u4:0/11: [ 382.412109][ T29] #0: ffff88801b649938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 382.423421][ T29] #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 382.435933][ T29] #2: ffff888020d980e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 382.446559][ T29] #3: ffff888020d9ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 382.457204][ T29] 1 lock held by khungtaskd/29: [ 382.462078][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 382.472048][ T29] 2 locks held by getty/5535: [ 382.476751][ T29] #0: ffff88814cf6f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 382.486598][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 382.497059][ T29] 3 locks held by syz-executor/5765: [ 382.502371][ T29] #0: ffff88802e90d720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 382.512405][ T29] #1: ffff888020d98510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 382.522287][ T29] #2: ffff888020d9c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 382.532081][ T29] 3 locks held by syz.1.1193/9155: [ 382.537243][ T29] #0: ffff88807a7560a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 382.547275][ T29] #1: ffff888020d98510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 382.557160][ T29] #2: ffff888020d9c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 382.567050][ T29] 3 locks held by syz.4.1194/9156: [ 382.572188][ T29] #0: ffff88807a750b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 382.582200][ T29] #1: ffff888020d98510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 382.592035][ T29] #2: ffff888020d9c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 382.601976][ T29] 3 locks held by syz.3.1203/9157: [ 382.607717][ T29] #0: ffff88807e7bd720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 382.617756][ T29] #1: ffff888020d98510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 382.627666][ T29] #2: ffff888020d9c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 382.637411][ T29] 3 locks held by syz.0.1191/9158: [ 382.642550][ T29] #0: ffff88807a7501a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 382.652561][ T29] #1: ffff888020d98510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 382.662394][ T29] #2: ffff888020d9c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 382.672157][ T29] 2 locks held by kworker/u4:3/9185: [ 382.677560][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 382.687722][ T29] #1: ffffc90005487d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 382.701246][ T29] [ 382.703590][ T29] ============================================= [ 382.703590][ T29] [ 382.712096][ T29] NMI backtrace for cpu 1 [ 382.716426][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 382.723637][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.733715][ T29] Call Trace: [ 382.736985][ T29] [ 382.739905][ T29] dump_stack_lvl+0x18c/0x250 [ 382.744577][ T29] ? __wake_up_klogd+0xd9/0x100 [ 382.749428][ T29] ? show_regs_print_info+0x20/0x20 [ 382.754626][ T29] ? load_image+0x420/0x420 [ 382.759129][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 382.764071][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 382.770224][ T29] ? load_image+0x420/0x420 [ 382.774718][ T29] ? wq_watchdog_touch+0xef/0x170 [ 382.779744][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 382.785823][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 382.791799][ T29] watchdog+0xf59/0xfa0 [ 382.795959][ T29] ? watchdog+0x1e1/0xfa0 [ 382.800294][ T29] kthread+0x2fa/0x390 [ 382.804445][ T29] ? hungtask_pm_notify+0x50/0x50 [ 382.809469][ T29] ? kthread_blkcg+0xd0/0xd0 [ 382.814061][ T29] ret_from_fork+0x48/0x80 [ 382.818474][ T29] ? kthread_blkcg+0xd0/0xd0 [ 382.823060][ T29] ret_from_fork_asm+0x11/0x20 [ 382.827828][ T29] [ 382.831225][ T29] Sending NMI from CPU 1 to CPUs 0: [ 382.836475][ C0] NMI backtrace for cpu 0 [ 382.836486][ C0] CPU: 0 PID: 9185 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 382.836501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.836510][ C0] Workqueue: bat_events batadv_nc_worker [ 382.836533][ C0] RIP: 0010:check_preemption_disabled+0x47/0x110 [ 382.836558][ C0] Code: 73 75 65 8b 0d 52 d8 73 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b <41> 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 [ 382.836571][ C0] RSP: 0018:ffffc900054879c0 EFLAGS: 00000086 [ 382.836582][ C0] RAX: 0000000000000000 RBX: a65eda0355dbdd01 RCX: a7567f2909fbb400 [ 382.836593][ C0] RDX: 0000000000000002 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 382.836603][ C0] RBP: ffffc90005487ae8 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 382.836614][ C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff88802a134738 [ 382.836624][ C0] R13: dffffc0000000000 R14: ffff88802a1346d8 R15: 1ffff92000a90f48 [ 382.836636][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 382.836648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.836658][ C0] CR2: 000055cbf0080168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 382.836671][ C0] Call Trace: [ 382.836677][ C0] [ 382.836683][ C0] lock_release+0x541/0x8c0 [ 382.836702][ C0] ? batadv_nc_process_nc_paths+0xba/0x380 [ 382.836720][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 382.836737][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 382.836754][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 382.836771][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 382.836788][ C0] ? batadv_nc_fwd_flush+0x330/0x330 [ 382.836806][ C0] batadv_nc_process_nc_paths+0x2f1/0x380 [ 382.836828][ C0] ? batadv_nc_process_nc_paths+0xba/0x380 [ 382.836845][ C0] batadv_nc_worker+0x525/0x600 [ 382.836860][ C0] ? process_scheduled_works+0x975/0x1600 [ 382.836879][ C0] process_scheduled_works+0xa60/0x1600 [ 382.836907][ C0] ? worker_attach_to_pool+0x370/0x370 [ 382.836925][ C0] ? assign_work+0x3cc/0x5d0 [ 382.836941][ C0] worker_thread+0xa5e/0xfe0 [ 382.836962][ C0] ? _raw_spin_unlock+0x40/0x40 [ 382.836976][ C0] ? __kthread_parkme+0x71/0x1c0 [ 382.836993][ C0] kthread+0x2fa/0x390 [ 382.837006][ C0] ? pr_cont_work+0x550/0x550 [ 382.837023][ C0] ? kthread_blkcg+0xd0/0xd0 [ 382.837037][ C0] ret_from_fork+0x48/0x80 [ 382.837054][ C0] ? kthread_blkcg+0xd0/0xd0 [ 382.837068][ C0] ret_from_fork_asm+0x11/0x20 [ 382.837092][ C0] [ 382.839112][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 382.839124][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 382.839142][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.839152][ T29] Call Trace: [ 382.839159][ T29] [ 382.839166][ T29] dump_stack_lvl+0x18c/0x250 [ 382.839192][ T29] ? show_regs_print_info+0x20/0x20 [ 382.839212][ T29] ? load_image+0x420/0x420 [ 382.839238][ T29] panic+0x2ca/0x720 [ 382.839265][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 382.839287][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 382.839308][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 382.839331][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 382.839358][ T29] watchdog+0xf98/0xfa0 [ 382.839381][ T29] ? watchdog+0x1e1/0xfa0 [ 382.839407][ T29] kthread+0x2fa/0x390 [ 382.839424][ T29] ? hungtask_pm_notify+0x50/0x50 [ 382.839445][ T29] ? kthread_blkcg+0xd0/0xd0 [ 382.839461][ T29] ret_from_fork+0x48/0x80 [ 382.839480][ T29] ? kthread_blkcg+0xd0/0xd0 [ 382.839498][ T29] ret_from_fork_asm+0x11/0x20 [ 382.839529][ T29] [ 382.841708][ T29] Kernel Offset: disabled [ 383.197012][ T29] Rebooting in 86400 seconds..