last executing test programs: 2m55.304127826s ago: executing program 4 (id=394): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006a00)={0x2020}, 0xbd) 2m55.044722751s ago: executing program 4 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="e30800c400000000000000006b00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m54.492217738s ago: executing program 4 (id=399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m54.289067939s ago: executing program 4 (id=404): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x0) 2m53.174905325s ago: executing program 4 (id=415): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m51.692194464s ago: executing program 4 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 2m51.26672766s ago: executing program 32 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 2m49.661420688s ago: executing program 0 (id=435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m48.892343639s ago: executing program 0 (id=437): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) readv(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) 2m48.538905747s ago: executing program 0 (id=442): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x15, 0x0, 0x0) 2m47.474640962s ago: executing program 0 (id=447): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m46.597145309s ago: executing program 0 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m45.805368037s ago: executing program 0 (id=456): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10010, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086e8b, &(0x7f0000000040)={0x6, 0x0, 0x3, 0x1, 0x3, 0xfff7, 0x2401}) 2m45.430974619s ago: executing program 33 (id=456): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10010, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086e8b, &(0x7f0000000040)={0x6, 0x0, 0x3, 0x1, 0x3, 0xfff7, 0x2401}) 2m16.640325893s ago: executing program 5 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) 2m16.398724423s ago: executing program 5 (id=629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000380)='./file6\x00', 0x2a08800, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x31, 0x6bd, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 2m15.834672303s ago: executing program 5 (id=635): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c7379735f696d6d757461626c652c73686f727492616d6f6e74696e75652c73686f72746e616d653d77696e6e742c666c7573682c636f6465706167653d3733372c756e0d8b329f0c286dc9312c6e6f6e756df461696c3d302c696f636861727365743d6d61637475726b6973682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c757466383d302c6e66732c00"/230], 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x802, 0x4, 0x1, 0x830}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x0) 2m15.275825171s ago: executing program 5 (id=641): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000280)=[{0x23, 0x0, 0x8, 0xfd, @time={0x4, 0x3}, {0x0, 0xdc}, {}, @result}], 0x1c) 2m14.946168213s ago: executing program 5 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000040)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) stat(&(0x7f00000003c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000400)) 2m14.729321927s ago: executing program 5 (id=651): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101804, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x3c) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 1m59.651148973s ago: executing program 34 (id=651): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101804, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x3c) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 1m22.831603491s ago: executing program 6 (id=1036): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) 1m22.621600613s ago: executing program 6 (id=1041): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000640)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") pipe(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m22.27145612s ago: executing program 6 (id=1043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x239f, &(0x7f0000000380)=0x0) eventfd2(0x5, 0x1) io_submit(r0, 0x0, 0x0) 1m21.866024231s ago: executing program 6 (id=1045): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@resgid}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) llistxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) 1m20.962880845s ago: executing program 6 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 1m18.020385656s ago: executing program 6 (id=1066): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shutdown(r0, 0x1) 1m17.452127357s ago: executing program 35 (id=1066): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shutdown(r0, 0x1) 1m8.152200808s ago: executing program 1 (id=1131): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 1m7.98428448s ago: executing program 1 (id=1132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 1m7.023720688s ago: executing program 1 (id=1137): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 1m6.523708583s ago: executing program 1 (id=1144): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 1m5.103087636s ago: executing program 1 (id=1153): r0 = fsopen(&(0x7f0000000140)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m4.338743495s ago: executing program 1 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r2, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1, 0x6, 0x10, 0x1007, 0x8, 0xffff]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000400}, 0x48000) 1m3.737497985s ago: executing program 36 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r2, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1, 0x6, 0x10, 0x1007, 0x8, 0xffff]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000400}, 0x48000) 4.447987925s ago: executing program 2 (id=1648): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a2000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x1) mbind(&(0x7f0000265000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000003c0)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x2) 4.447802515s ago: executing program 3 (id=1649): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/udc/dummy_udc.0/state\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 4.391727319s ago: executing program 7 (id=1650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x61) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 4.224631411s ago: executing program 3 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.164858385s ago: executing program 7 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices/virtio0/features\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/256, 0x100) 3.955994957s ago: executing program 3 (id=1655): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0xfffe, 0xc, 0x9, 0x9, 0xe, 0x1, 0x1c1, 0x167, 0x460, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0}) 3.954093498s ago: executing program 7 (id=1656): io_uring_setup(0x65cb, &(0x7f00000000c0)={0x0, 0xb1cf, 0x10, 0x0, 0x226}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 3.696035822s ago: executing program 7 (id=1658): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f06000000000000000000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.372812471s ago: executing program 8 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x4a99972ad10d7a14, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.828351966s ago: executing program 8 (id=1669): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x440, 0x9f) read(r0, &(0x7f0000001b00)=""/256, 0x100) 1.828279996s ago: executing program 9 (id=1670): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x2, 0x12) 1.687192761s ago: executing program 9 (id=1671): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0xb, {0x5, [{0x1, 0xd}, {0x3, 0xfd}, {0x3, 0xe}, {0x1, 0x6}, {0x3, 0x1}]}}, 0xe) 1.647658651s ago: executing program 8 (id=1672): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/vlan_stats_per_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 1.556420944s ago: executing program 2 (id=1673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x24}, @exp_smc={0xfe, 0x5}]}}}}}}}, 0x0) 1.543608897s ago: executing program 3 (id=1674): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x10012, r1, 0x0) 1.483013942s ago: executing program 7 (id=1675): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f0000000080)={&(0x7f0000000e40)=[&(0x7f00000000c0)=@blocksize={{0x4f32494e, 0x2, 0xff1d, 0x80000001}}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) 1.482059632s ago: executing program 9 (id=1676): r0 = eventfd2(0x0, 0x0) r1 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40002005}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) 1.3714531s ago: executing program 8 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.269754555s ago: executing program 9 (id=1678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="de49f24109", @ANYRESDEC], 0xd) 1.268581935s ago: executing program 3 (id=1679): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 1.192032094s ago: executing program 2 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.162439602s ago: executing program 8 (id=1681): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000c00)) 934.015758ms ago: executing program 2 (id=1682): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x440, 0x9f) read(r0, &(0x7f0000001b00)=""/256, 0x100) 932.929168ms ago: executing program 9 (id=1692): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x7f) shutdown(r0, 0x2) recvmsg(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x2) 739.005927ms ago: executing program 9 (id=1683): syz_usb_connect(0x3, 0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502", @ANYRES16, @ANYRESDEC=0x0, @ANYRES64], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) 470.226354ms ago: executing program 8 (id=1684): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a2000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x1) mbind(&(0x7f0000265000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000003c0)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x2) 470.085124ms ago: executing program 2 (id=1685): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006e03c1db9eb2f803c24250356764038e6e4311178499acce92aa13882dd0415be087af056205a210ff89975716435124d656bf1b97ceaf7dc0530ff5c17e73de697b9efb551cc4fc3f21fbbf77a27b00b0941c606cd94945f8fbe1b582600abc10"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x1f00, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 227.187964ms ago: executing program 3 (id=1686): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 223.701955ms ago: executing program 2 (id=1687): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000001640)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xd) 0s ago: executing program 7 (id=1688): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x7, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) kernel console output (not intermixed with test programs): valid length. [ 157.377355][ T6374] bridge0: port 3(vlan2) entered blocking state [ 157.424910][ T6374] bridge0: port 3(vlan2) entered disabled state [ 157.466843][ T6374] device vlan2 entered promiscuous mode [ 157.499141][ T6377] loop3: detected capacity change from 0 to 128 [ 157.516640][ T6374] device gretap0 entered promiscuous mode [ 157.951258][ T6385] loop3: detected capacity change from 0 to 736 [ 158.052340][ T6389] loop2: detected capacity change from 0 to 16 [ 158.172850][ T6389] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.549713][ T6395] program syz.1.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.701446][ T6396] serio: Serial port ptm0 [ 158.817877][ T6402] Zero length message leads to an empty skb [ 159.838427][ T6410] loop6: detected capacity change from 0 to 40427 [ 159.882293][ T6410] F2FS-fs (loop6): invalid crc value [ 159.920467][ T6410] F2FS-fs (loop6): Found nat_bits in checkpoint [ 160.073243][ T6410] F2FS-fs (loop6): Start checkpoint disabled! [ 160.155085][ T6410] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 160.447794][ T6424] use of bytesused == 0 is deprecated and will be removed in the future, [ 160.526491][ T6424] use the actual size instead. [ 160.582582][ T11] kworker/u4:1: attempt to access beyond end of device [ 160.582582][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 160.766956][ T6434] loop1: detected capacity change from 0 to 512 [ 160.860669][ T6434] EXT4-fs (loop1): 1 truncate cleaned up [ 160.935396][ T6434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.008450][ T6434] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.741: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 161.147492][ T4280] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.197023][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 161.305821][ T6444] sch_tbf: burst 2464 is lower than device lo mtu (65550) ! [ 161.359010][ T6445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.743'. [ 161.368476][ T4280] usb 3-1: Using ep0 maxpacket: 32 [ 161.398921][ T4280] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.428608][ T4280] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.469324][ T4280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.519175][ T4280] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 161.569146][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.622598][ T4280] usb 3-1: Product: syz [ 161.656333][ T4280] usb 3-1: Manufacturer: syz [ 161.683715][ T4280] usb 3-1: SerialNumber: syz [ 161.721798][ T4280] usb 3-1: config 0 descriptor?? [ 161.740415][ T6454] loop1: detected capacity change from 0 to 512 [ 162.200340][ T4280] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 162.276872][ T6461] loop6: detected capacity change from 0 to 512 [ 162.720773][ T4280] usb 3-1: USB disconnect, device number 9 [ 163.419126][ T6483] loop6: detected capacity change from 0 to 64 [ 164.077615][ T27] audit: type=1326 audit(1790862090.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.6.766" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x0 [ 165.079416][ T6507] loop3: detected capacity change from 0 to 32768 [ 165.215622][ T6507] ea_get: invalid extended attribute [ 165.566553][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.576929][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.586071][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.593747][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.601691][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.609354][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.209914][ T4333] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.316238][ T6551] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 166.412558][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.783'. [ 166.495948][ T4333] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.712188][ T4333] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.841255][ T6572] loop2: detected capacity change from 0 to 1024 [ 166.889557][ T4333] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.941149][ T6575] netlink: 104 bytes leftover after parsing attributes in process `syz.1.790'. [ 166.991333][ T6572] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 167.353617][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 167.684720][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 167.904097][ T4280] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.952944][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.998515][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.056917][ T6539] device bridge_slave_0 entered promiscuous mode [ 168.082445][ T6614] loop3: detected capacity change from 0 to 256 [ 168.114243][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 168.147421][ T4280] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 168.213494][ T6616] loop6: detected capacity change from 0 to 512 [ 168.235225][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.291397][ T4280] usb 2-1: Product: syz [ 168.306172][ T4280] usb 2-1: Manufacturer: syz [ 168.331495][ T6616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.349844][ T6622] loop2: detected capacity change from 0 to 128 [ 168.362677][ T4280] usb 2-1: SerialNumber: syz [ 168.410991][ T6616] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.437302][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.494116][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.569029][ T6539] device bridge_slave_1 entered promiscuous mode [ 168.614726][ T4280] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 168.671996][ T6626] db_root: cannot open: ./m [ 168.677864][ T4280] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.700184][ T6616] EXT4-fs error (device loop6): ext4_get_first_dir_block:3596: inode #12: comm syz.6.803: directory missing '.' [ 168.749711][ T4280] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 168.797575][ T4280] usb 2-1: media controller created [ 168.851212][ T4280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.907188][ T4280] zl10353_read_register: readreg error (reg=127, ret==-71) [ 168.961784][ T4280] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 168.989628][ T4280] usb 2-1: USB disconnect, device number 5 [ 169.027123][ T5498] EXT4-fs (loop6): unmounting filesystem. [ 169.176810][ T6632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.807'. [ 169.250221][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.272947][ T6636] loop2: detected capacity change from 0 to 64 [ 169.327604][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.764074][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 169.973654][ T6648] loop3: detected capacity change from 0 to 2048 [ 170.028956][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.063466][ T6648] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.193709][ T6539] team0: Port device team_slave_0 added [ 170.209522][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 170.353014][ T6539] team0: Port device team_slave_1 added [ 170.534325][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.571931][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.749850][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.890324][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.929182][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.105823][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.844190][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 172.266710][ T6702] ip_tables: iptables: counters copy to user failed while replacing table [ 172.480197][ T6539] device hsr_slave_0 entered promiscuous mode [ 172.515281][ T4280] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.555978][ T6539] device hsr_slave_1 entered promiscuous mode [ 172.574775][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.621406][ T6539] Cannot create hsr debugfs directory [ 172.655966][ T6710] loop1: detected capacity change from 0 to 164 [ 172.735313][ T4280] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 172.811718][ T4280] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 172.914456][ T4280] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.986989][ T4280] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.050860][ T4280] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 173.081082][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 173.090526][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.834'. [ 173.111339][ T4280] usb 4-1: Product: syz [ 173.124403][ T4280] usb 4-1: Manufacturer: syz [ 173.317285][ T6725] loop1: detected capacity change from 0 to 512 [ 173.359893][ T6700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.447579][ T6700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.490246][ T6725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.512143][ T4280] dvb_ttusb_budget: ttusb_init_controller: error [ 173.551639][ T6725] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.582544][ T4280] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 173.730469][ T6700] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 173.862656][ T4333] device hsr_slave_0 left promiscuous mode [ 173.883542][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 173.924153][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 173.933586][ T4333] device hsr_slave_1 left promiscuous mode [ 173.983540][ T4280] DVB: Unable to find symbol cx22700_attach() [ 174.015217][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.052386][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.111488][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.171636][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.219944][ T4333] device bridge_slave_1 left promiscuous mode [ 174.230446][ T4280] DVB: Unable to find symbol tda10046_attach() [ 174.253728][ T4280] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 174.269884][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.318077][ T4280] usb 4-1: USB disconnect, device number 6 [ 174.347848][ T955] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 174.424446][ T4333] device bridge_slave_0 left promiscuous mode [ 174.475283][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.526814][ T6752] loop6: detected capacity change from 0 to 512 [ 174.586778][ T955] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.603578][ T6752] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 174.671852][ T4333] device team0 left promiscuous mode [ 174.680937][ T955] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.720250][ T6755] loop3: detected capacity change from 0 to 1024 [ 174.737035][ T4333] device team_slave_0 left promiscuous mode [ 174.743560][ T4333] device team_slave_1 left promiscuous mode [ 174.776401][ T955] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.817266][ T6755] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 174.858567][ T955] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 174.899852][ T6755] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 174.923189][ T955] usb 2-1: Product: syz [ 174.948890][ T955] usb 2-1: Manufacturer: syz [ 174.953649][ T6755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.002065][ T955] hub 2-1:4.0: USB hub found [ 175.052541][ T27] audit: type=1800 audit(1790862101.027:17): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.842" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 175.107069][ T4333] device veth1_macvtap left promiscuous mode [ 175.113193][ T4333] device veth0_macvtap left promiscuous mode [ 175.189283][ T4333] device veth1_vlan left promiscuous mode [ 175.202962][ T955] hub 2-1:4.0: 11 ports detected [ 175.221096][ T955] hub 2-1:4.0: insufficient power available to use all downstream ports [ 175.232828][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 175.244935][ T4333] device veth0_vlan left promiscuous mode [ 175.899421][ T6763] loop3: detected capacity change from 0 to 131072 [ 175.946994][ T6763] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 175.955233][ T6763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 175.967024][ T6763] F2FS-fs (loop3): Test dummy encryption mode enabled [ 175.977785][ T6763] F2FS-fs (loop3): invalid crc value [ 175.995699][ T6763] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.021766][ T6763] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 176.042129][ T6763] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 176.052646][ T6763] F2FS-fs (loop3): Start checkpoint disabled! [ 176.083592][ T6763] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 176.090985][ T6763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 176.130727][ T955] hub 2-1:4.0: set hub depth failed [ 176.164901][ T955] usb 2-1: USB disconnect, device number 6 [ 177.041738][ T6774] loop1: detected capacity change from 0 to 8192 [ 177.052298][ T6760] loop6: detected capacity change from 0 to 40427 [ 177.121035][ T6760] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 177.152615][ T6774] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.192259][ T6760] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 177.265397][ T6774] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 177.281738][ T6760] F2FS-fs (loop6): invalid crc value [ 177.332503][ T6760] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 177.350845][ T6774] REISERFS (device loop1): using ordered data mode [ 177.387866][ T6774] reiserfs: using flush barriers [ 177.451285][ T6774] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.569663][ T6774] REISERFS (device loop1): checking transaction log (loop1) [ 177.610077][ T6760] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 177.647072][ T6760] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 177.663623][ T6774] REISERFS (device loop1): Using r5 hash to sort names [ 177.716644][ T6774] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 177.764572][ T6760] syz.6.843: attempt to access beyond end of device [ 177.764572][ T6760] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 177.839983][ T6786] syz.6.843: attempt to access beyond end of device [ 177.839983][ T6786] loop6: rw=2049, sector=53256, nr_sectors = 48 limit=40427 [ 178.032201][ T5498] syz-executor: attempt to access beyond end of device [ 178.032201][ T5498] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.752938][ T6799] loop1: detected capacity change from 0 to 128 [ 179.226104][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 179.356724][ T955] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 179.376727][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 179.570996][ T955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.609962][ T955] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.653690][ T955] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.693791][ T955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.722156][ T955] usb 7-1: SerialNumber: syz [ 179.760116][ T6823] loop1: detected capacity change from 0 to 1024 [ 179.962755][ T955] usb 7-1: 0:2 : does not exist [ 180.066832][ T955] usb 7-1: USB disconnect, device number 3 [ 181.270758][ T6829] loop1: detected capacity change from 0 to 32768 [ 181.305453][ T6827] loop3: detected capacity change from 0 to 40427 [ 181.347605][ T6827] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 181.406193][ T6827] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 181.470904][ T6827] F2FS-fs (loop3): invalid crc value [ 181.523745][ T6827] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.660917][ T6827] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 181.771829][ T6827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.873336][ T6827] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 181.960924][ T6839] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x810 [ 182.068392][ T4275] syz-executor: attempt to access beyond end of device [ 182.068392][ T4275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.415340][ T6846] netlink: 64 bytes leftover after parsing attributes in process `syz.1.875'. [ 182.619229][ T6539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.701419][ T6539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.749558][ T6539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.823135][ T6539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.223543][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.321978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.351831][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.408357][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.485447][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.516922][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.580391][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.587593][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.651988][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.717914][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.789316][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.829190][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.836395][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.915748][ T6886] mmap: syz.1.882 (6886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.931930][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.995064][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.054319][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.145899][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.198996][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.254939][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.299126][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.348064][ T6894] loop3: detected capacity change from 0 to 512 [ 184.367835][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.436316][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.446614][ T6894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 184.502156][ T6894] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.518906][ T6539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.577829][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.628883][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.661303][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.686710][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 185.097197][ T6879] loop2: detected capacity change from 0 to 40427 [ 185.209070][ T6879] F2FS-fs (loop2): invalid crc value [ 185.275765][ T6879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.530306][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.567896][ T6879] F2FS-fs (loop2): Start checkpoint disabled! [ 185.577899][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.628925][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.717382][ T6879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 185.768119][ T6831] block2mtd: error: cannot open device /dev/l [ 185.779997][ T6927] input: syz0 as /devices/virtual/input/input14 [ 186.052742][ T6936] loop6: detected capacity change from 0 to 2048 [ 186.209034][ T6936] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 186.429613][ T5498] EXT4-fs (loop6): unmounting filesystem. [ 186.473064][ T48] kworker/u4:3: attempt to access beyond end of device [ 186.473064][ T48] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 186.658094][ T6955] loop3: detected capacity change from 0 to 512 [ 186.688687][ T6957] loop6: detected capacity change from 0 to 256 [ 186.773065][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.905: iget: bad i_size value: 38620345925642 [ 186.841080][ T6957] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 186.914451][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.905: couldn't read orphan inode 15 (err -117) [ 186.983552][ T6955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.076104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.128091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.143283][ T6955] fscrypt (loop3, inode 18): Mutually exclusive encryption flags (0x0c) [ 187.248253][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.286013][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.371034][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 187.380206][ T6539] device veth0_vlan entered promiscuous mode [ 187.410105][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.449232][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.517393][ T6539] device veth1_vlan entered promiscuous mode [ 187.655625][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.690990][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.757594][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.822349][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.883396][ T6539] device veth0_macvtap entered promiscuous mode [ 187.946873][ T6539] device veth1_macvtap entered promiscuous mode [ 188.050853][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.128414][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.185715][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.206544][ T6997] loop6: detected capacity change from 0 to 16 [ 188.246725][ T6997] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 188.285995][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.336133][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.405679][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.457645][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.507917][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.546136][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.588282][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.601678][ T7008] netlink: 165 bytes leftover after parsing attributes in process `syz.2.924'. [ 188.668657][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.732708][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.771418][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.828533][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.889183][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.947501][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.003562][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.066556][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.143271][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.203806][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.287460][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.340863][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.366604][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.422389][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.459839][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.476546][ T7035] loop3: detected capacity change from 0 to 512 [ 189.489576][ T7035] EXT4-fs: Ignoring removed oldalloc option [ 189.534569][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.542652][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.582580][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.612062][ T7035] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.933: bg 0: block 7: invalid block bitmap [ 189.661923][ T6539] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.711530][ T7035] EXT4-fs (loop3): Remounting filesystem read-only [ 189.722244][ T6539] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.743898][ T7035] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 189.779035][ T6539] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.803229][ T7035] EXT4-fs (loop3): Remounting filesystem read-only [ 189.824419][ T6539] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.864037][ T7035] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2921: inode #11: comm syz.3.933: corrupted xattr block 95 [ 189.942122][ T7045] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14) [ 190.010270][ T7035] EXT4-fs (loop3): Remounting filesystem read-only [ 190.074560][ T7035] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 190.116166][ T7050] loop6: detected capacity change from 0 to 256 [ 190.139575][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.151336][ T7035] EXT4-fs (loop3): 1 orphan inode deleted [ 190.199302][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.221128][ T7035] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.311225][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.345953][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.410160][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.418547][ T7035] EXT4-fs error (device loop3): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.3.933: path /197/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=3, size=60 fake=0 [ 190.510333][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.636511][ T7035] EXT4-fs (loop3): Remounting filesystem read-only [ 190.760047][ T7060] loop1: detected capacity change from 0 to 4096 [ 190.808233][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 190.886396][ T7067] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.204572][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 191.210630][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 192.059445][ T7056] loop2: detected capacity change from 0 to 32768 [ 192.119060][ T7114] loop1: detected capacity change from 0 to 128 [ 192.221919][ T7114] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 192.292747][ T7056] XFS (loop2): Mounting V5 Filesystem [ 192.338488][ T7114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.368107][ T7119] loop6: detected capacity change from 0 to 2048 [ 192.513829][ T7119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.659455][ T7056] XFS (loop2): Ending clean mount [ 192.706994][ T7134] loop3: detected capacity change from 0 to 512 [ 192.808246][ T7056] XFS (loop2): Quotacheck needed: Please wait. [ 192.823015][ T7134] EXT4-fs: Ignoring removed nobh option [ 192.881237][ T7134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.932682][ T7139] loop7: detected capacity change from 0 to 1024 [ 193.016118][ T7139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.034588][ T7134] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.966: iget: bad i_size value: 38620345925642 [ 193.128173][ T7056] XFS (loop2): Quotacheck: Done. [ 193.149802][ T7139] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 193.170820][ T7134] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.966: couldn't read orphan inode 15 (err -117) [ 193.253397][ T7134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.394161][ T7142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 193.434163][ T27] audit: type=1400 audit(1790862120.415:18): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=7148 comm="syz.6.970" offset=16 [ 193.522340][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 193.548417][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 193.802788][ T7159] loop3: detected capacity change from 0 to 2048 [ 193.820446][ T4274] XFS (loop2): Unmounting Filesystem [ 194.029689][ T7159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.136319][ T7159] EXT4-fs (loop3): shut down requested (2) [ 194.256031][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262356][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.381699][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 194.742026][ T7172] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 194.742026][ T7172] program syz.7.978 not setting count and/or reply_len properly [ 195.219215][ T7192] loop7: detected capacity change from 0 to 164 [ 195.705024][ T27] audit: type=1400 audit(1790862123.685:19): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=7201 comm="syz.1.988" name="foo" offset=60 [ 195.924132][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 196.071311][ T7215] loop3: detected capacity change from 0 to 2048 [ 196.134100][ T14] usb 8-1: Using ep0 maxpacket: 32 [ 196.157329][ T14] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.248498][ T14] usb 8-1: config 0 has no interface number 0 [ 196.303334][ T14] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.378918][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.438983][ T14] usb 8-1: Product: syz [ 196.463618][ T14] usb 8-1: Manufacturer: syz [ 196.497114][ T14] usb 8-1: SerialNumber: syz [ 196.527636][ T14] usb 8-1: config 0 descriptor?? [ 196.581292][ T14] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 196.777947][ T14] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 196.867681][ T14] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.988044][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 240 [ 197.102541][ T7241] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 197.179970][ T7241] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 197.236035][ T7241] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 197.258158][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.266039][ T14] usb 8-1: USB disconnect, device number 2 [ 197.301852][ T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.384225][ T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.439689][ T14] quatech2 8-1:0.51: device disconnected [ 197.662439][ T7233] loop1: detected capacity change from 0 to 40427 [ 197.713240][ T7233] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 197.747867][ T7233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 197.790354][ T7233] F2FS-fs (loop1): invalid crc value [ 197.841308][ T7233] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 198.111714][ T7233] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 198.157419][ T7233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.290433][ T7233] syz.1.1001: attempt to access beyond end of device [ 198.290433][ T7233] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 198.391745][ T7233] syz.1.1001: attempt to access beyond end of device [ 198.391745][ T7233] loop1: rw=2049, sector=53256, nr_sectors = 48 limit=40427 [ 198.561873][ T4272] syz-executor: attempt to access beyond end of device [ 198.561873][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.733432][ T7286] loop7: detected capacity change from 0 to 512 [ 198.814170][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 198.831928][ T7286] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 198.945574][ T4280] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 199.035594][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 199.062002][ T14] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 199.075745][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 199.112201][ T14] usb 7-1: config 0 has no interface number 0 [ 199.152741][ T14] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 199.175533][ T4280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.214273][ T4280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.230615][ T14] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 199.282544][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.298042][ T4280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.328288][ T14] usb 7-1: Product: syz [ 199.332562][ T14] usb 7-1: Manufacturer: syz [ 199.347369][ T4280] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 199.384850][ T14] usb 7-1: SerialNumber: syz [ 199.405351][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.430711][ T14] usb 7-1: config 0 descriptor?? [ 199.446632][ T7277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 199.484183][ T7282] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.693153][ T7310] overlayfs: upper fs does not support tmpfile. [ 199.739569][ T7277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 199.970482][ T7312] loop7: detected capacity change from 0 to 8192 [ 200.032716][ T7312] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.094685][ T4285] Bluetooth: hci5: Reading Intel version command failed (-71) [ 200.112112][ T4321] usb 3-1: USB disconnect, device number 10 [ 200.162770][ T7312] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 200.255007][ T7312] REISERFS (device loop7): using ordered data mode [ 200.307773][ T7312] reiserfs: using flush barriers [ 200.357482][ T7312] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.423634][ T14] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 200.469288][ T7312] REISERFS (device loop7): checking transaction log (loop7) [ 200.482203][ T14] asix: probe of 7-1:0.188 failed with error -71 [ 200.549942][ T14] usb 7-1: USB disconnect, device number 4 [ 200.758230][ T7312] REISERFS (device loop7): Using tea hash to sort names [ 200.803581][ T7312] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 200.852060][ T7309] loop3: detected capacity change from 0 to 40427 [ 200.905853][ T7309] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 200.949392][ T7330] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 201.026741][ T7309] F2FS-fs (loop3): invalid crc value [ 201.045800][ T7334] block nbd1: NBD_DISCONNECT [ 201.050611][ T7334] block nbd1: Send disconnect failed -32 [ 201.097698][ T7309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.271631][ T7309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.490972][ T4275] syz-executor: attempt to access beyond end of device [ 201.490972][ T4275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.612035][ T7352] loop6: detected capacity change from 0 to 512 [ 202.013158][ T27] audit: type=1326 audit(1790862129.985:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 202.180546][ T27] audit: type=1326 audit(1790862130.025:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 202.339065][ T27] audit: type=1326 audit(1790862130.025:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 202.378219][ T7367] loop6: detected capacity change from 0 to 512 [ 202.473701][ T7367] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 202.534114][ T7367] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1045: corrupted in-inode xattr [ 202.568259][ T27] audit: type=1326 audit(1790862130.035:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 202.666111][ T7367] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1045: couldn't read orphan inode 15 (err -117) [ 202.726990][ T7367] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.748889][ T7376] loop7: detected capacity change from 0 to 2048 [ 202.765787][ T27] audit: type=1326 audit(1790862130.055:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 202.893448][ T7367] overlayfs: upper fs needs to support d_type. [ 202.929363][ T7380] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.992693][ T27] audit: type=1326 audit(1790862130.075:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 203.058796][ T7358] loop1: detected capacity change from 0 to 40427 [ 203.079347][ T7380] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 203.130778][ T7358] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 203.151284][ T7380] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 203.216433][ T7358] F2FS-fs (loop1): invalid crc value [ 203.225478][ T27] audit: type=1326 audit(1790862130.075:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 203.286139][ T7358] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.296089][ T5498] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 203.322651][ T7380] Remounting filesystem read-only [ 203.453776][ T27] audit: type=1326 audit(1790862130.105:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 203.484224][ T6539] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 203.499359][ T5498] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 203.539370][ T7358] F2FS-fs (loop1): Start checkpoint disabled! [ 203.630858][ T7358] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 203.643403][ T5498] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 203.671817][ T27] audit: type=1326 audit(1790862130.105:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 203.800673][ T5498] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 203.853564][ T27] audit: type=1326 audit(1790862130.105:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec39e159 code=0x7ffc0000 [ 203.938396][ T5498] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 203.993590][ T11] kworker/u4:1: attempt to access beyond end of device [ 203.993590][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 204.036645][ T5498] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 204.104525][ T2188] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 204.166853][ T5498] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 204.328054][ T2188] usb 4-1: not running at top speed; connect to a high speed hub [ 204.356585][ T5498] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 204.397641][ T2188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.466820][ T2188] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 204.523694][ T5498] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 204.571878][ T2188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.628110][ T2188] usb 4-1: Found UVC 1.00 device (046d:0825) [ 204.667561][ T5498] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 205.030352][ T2188] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 205.158782][ T2188] videodev: could not get a free minor [ 205.198914][ T2188] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 205.362297][ T2188] usb 4-1: USB disconnect, device number 7 [ 205.875265][ T7421] loop1: detected capacity change from 0 to 256 [ 205.882221][ T7407] loop7: detected capacity change from 0 to 40427 [ 205.944511][ T7407] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 205.988073][ T5498] EXT4-fs (loop6): unmounting filesystem. [ 206.018426][ T7407] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 206.121691][ T7407] F2FS-fs (loop7): invalid crc value [ 206.206474][ T7407] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 206.511422][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.533691][ T7407] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 206.551474][ T7407] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 206.707301][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.755335][ T7407] syz.7.1058: attempt to access beyond end of device [ 206.755335][ T7407] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 206.873880][ T7407] syz.7.1058: attempt to access beyond end of device [ 206.873880][ T7407] loop7: rw=2049, sector=53256, nr_sectors = 48 limit=40427 [ 206.953783][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.118215][ T6539] syz-executor: attempt to access beyond end of device [ 207.118215][ T6539] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.222888][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.634682][ T7459] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 207.744521][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.755718][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.765062][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.776976][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.785461][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.797633][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.729773][ T7484] WARNING! power/level is deprecated; use power/control instead [ 208.998967][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 209.437484][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 209.437495][ T27] audit: type=1400 audit(1790862137.415:37): apparmor="STATUS" operation="profile_load" profile="unconfined" name=222F6F pid=7505 comm="syz.7.1091" [ 209.471510][ T7502] netlink: 'syz.2.1090': attribute type 11 has an invalid length. [ 209.544074][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 209.672628][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'. [ 209.844195][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 209.878718][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.933693][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.995699][ T7491] loop3: detected capacity change from 0 to 32768 [ 210.018688][ T7521] loop7: detected capacity change from 0 to 4096 [ 210.034803][ T7463] device bridge_slave_0 entered promiscuous mode [ 210.113091][ T7521] EXT4-fs: Ignoring removed nobh option [ 210.152843][ T7491] XFS (loop3): Mounting V5 Filesystem [ 210.366980][ T7491] XFS (loop3): Ending clean mount [ 210.457552][ T7491] XFS (loop3): Quotacheck needed: Please wait. [ 210.656433][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.714220][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.732165][ T7491] XFS (loop3): Quotacheck: Done. [ 210.793496][ T7463] device bridge_slave_1 entered promiscuous mode [ 210.880772][ T7521] EXT4-fs: Ignoring removed bh option [ 210.925002][ T7521] EXT4-fs (loop7): Test dummy encryption mode enabled [ 211.031237][ T7521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 211.071703][ T4275] XFS (loop3): Unmounting Filesystem [ 211.320334][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.480361][ T48] device hsr_slave_0 left promiscuous mode [ 211.520763][ T48] device hsr_slave_1 left promiscuous mode [ 211.571651][ T27] audit: type=1326 audit(1790862139.545:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98679e159 code=0x7ffc0000 [ 211.616798][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.672291][ T7521] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 211.708264][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.728022][ T7556] loop1: detected capacity change from 0 to 2048 [ 211.792995][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.810254][ T7556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.821752][ T27] audit: type=1326 audit(1790862139.585:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98679e159 code=0x7ffc0000 [ 211.882095][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.924118][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 211.964509][ T48] device bridge_slave_1 left promiscuous mode [ 211.970779][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.040350][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 212.071221][ T27] audit: type=1326 audit(1790862139.585:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98679e159 code=0x7ffc0000 [ 212.105055][ T48] device bridge_slave_0 left promiscuous mode [ 212.111323][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.306061][ T27] audit: type=1326 audit(1790862139.585:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe98679e159 code=0x7ffc0000 [ 212.369675][ T48] device veth1_macvtap left promiscuous mode [ 212.412634][ T48] device veth0_macvtap left promiscuous mode [ 212.463047][ T48] device veth1_vlan left promiscuous mode [ 212.495584][ T27] audit: type=1326 audit(1790862139.585:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe98679dec2 code=0x7ffc0000 [ 212.530019][ T48] device veth0_vlan left promiscuous mode [ 212.678693][ T27] audit: type=1326 audit(1790862139.585:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe98675e98e code=0x7ffc0000 [ 212.813601][ T7577] sctp: [Deprecated]: syz.1.1107 (pid 7577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.813601][ T7577] Use struct sctp_sack_info instead [ 212.871760][ T27] audit: type=1326 audit(1790862139.665:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe98679df87 code=0x7ffc0000 [ 212.967716][ T7550] loop2: detected capacity change from 0 to 32768 [ 213.046867][ T27] audit: type=1326 audit(1790862139.665:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe98675e98e code=0x7ffc0000 [ 213.220586][ T7582] kAFS: bad VL server IP address [ 213.287766][ T27] audit: type=1326 audit(1790862139.705:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98679ddeb code=0x7ffc0000 [ 213.618371][ T7591] loop1: detected capacity change from 0 to 256 [ 213.637685][ T7591] exfat: Deprecated parameter 'utf8' [ 213.671338][ T7591] exfat: Deprecated parameter 'utf8' [ 213.692638][ T7591] exfat: Deprecated parameter 'namecase' [ 213.727764][ T7591] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 214.004156][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 214.830885][ T7609] loop1: detected capacity change from 0 to 64 [ 214.925858][ T7609] hfs: request for non-existent node 131072 in B*Tree [ 214.951313][ T7609] hfs: request for non-existent node 131072 in B*Tree [ 215.228148][ T7615] loop2: detected capacity change from 0 to 512 [ 215.312731][ T7615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.373185][ T7615] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.401129][ T48] team0 (unregistering): Port device team_slave_1 removed [ 215.563428][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 215.588653][ T48] team0 (unregistering): Port device team_slave_0 removed [ 215.789720][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.886861][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 215.965231][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.084158][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 216.866438][ T48] bond0 (unregistering): Released all slaves [ 216.984335][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.004783][ T7565] netem: change failed [ 217.082036][ T7463] team0: Port device team_slave_0 added [ 217.175415][ T7463] team0: Port device team_slave_1 added [ 217.283649][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.298929][ T7654] loop1: detected capacity change from 0 to 1024 [ 217.369876][ T7654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.402229][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.454228][ T7654] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.573178][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.614608][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 217.648629][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.723095][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.867386][ T7674] loop1: detected capacity change from 0 to 512 [ 217.933253][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.954441][ T7674] EXT4-fs (loop1): orphan cleanup on readonly fs [ 217.998549][ T7674] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 218.069457][ T7674] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 218.221544][ T7674] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1144: attempt to clear invalid blocks 2 len 1 [ 218.240684][ T7463] device hsr_slave_0 entered promiscuous mode [ 218.289908][ T7463] device hsr_slave_1 entered promiscuous mode [ 218.342546][ T7674] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1144: invalid indirect mapped block 1819239214 (level 0) [ 218.387724][ T7463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.427637][ T7463] Cannot create hsr debugfs directory [ 218.465720][ T7674] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1144: invalid indirect mapped block 1819239214 (level 1) [ 218.581130][ T7691] loop3: detected capacity change from 0 to 256 [ 218.590472][ T7674] EXT4-fs (loop1): 1 truncate cleaned up [ 218.646278][ T7674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.690977][ T7691] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 218.815182][ T7674] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 218.882273][ T7694] loop7: detected capacity change from 0 to 4096 [ 218.976298][ T7698] loop2: detected capacity change from 0 to 128 [ 219.031373][ T4272] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 219.202738][ T7698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.330389][ T7463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 219.387937][ T7698] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.415345][ T7463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 219.567763][ T7698] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x16) [ 219.702149][ T7712] loop7: detected capacity change from 0 to 1024 [ 219.710914][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 219.725279][ T7463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.879894][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 220.192363][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.266990][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 220.336657][ T7463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 220.488671][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.578274][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 220.859865][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.937047][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.110677][ T7744] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 221.132244][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.226893][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.328424][ T7750] loop2: detected capacity change from 0 to 1024 [ 221.366394][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.390349][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.399282][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.407190][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.416522][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.431479][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.514857][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.546074][ T7755] loop3: detected capacity change from 0 to 1024 [ 221.579894][ T7750] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.651926][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.721654][ T7756] delete_channel: no stack [ 221.772680][ T7750] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.800004][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.837641][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.901654][ T7750] jbd2_journal_init_inode: Cannot locate journal superblock [ 221.943401][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.970541][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.003292][ T7750] EXT4-fs (loop2): Could not load journal inode [ 222.027502][ T6772] hfsplus: b-tree write err: -5, ino 3 [ 222.040105][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.047286][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.180068][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.226751][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.269888][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.277194][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.357580][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.445898][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.485284][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.537272][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.608441][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.672836][ T7463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.751913][ T7463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.843885][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.897029][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.945349][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.966032][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 222.966043][ T27] audit: type=1326 audit(1790862150.945:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.3.1178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f104f79e159 code=0x0 [ 223.019565][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.070919][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.112608][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.160929][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.242320][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.524177][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 223.801597][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 224.402835][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.437893][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.481471][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.538133][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.594241][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.647321][ T7751] device bridge_slave_0 entered promiscuous mode [ 224.746544][ T7830] loop7: detected capacity change from 0 to 128 [ 224.839038][ T7830] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 224.853190][ T7828] loop3: detected capacity change from 0 to 4096 [ 224.869577][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.895040][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.952827][ T7828] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 224.987122][ T7751] device bridge_slave_1 entered promiscuous mode [ 225.122082][ T4332] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 225.604427][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 225.720114][ T48] device vlan2 left promiscuous mode [ 225.757558][ T48] device gretap0 left promiscuous mode [ 225.763162][ T48] bridge0: port 3(vlan2) entered disabled state [ 225.822140][ T7847] loop3: detected capacity change from 0 to 1024 [ 225.865129][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.933359][ T7847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.997606][ T7847] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.109140][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.134408][ T27] audit: type=1800 audit(1790862154.115:69): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1192" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 226.169229][ T7847] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.1192: lblock 0 mapped to illegal pblock 0 (length 6) [ 226.351795][ T7847] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.1192: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 226.599919][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 226.632905][ T7751] team0: Port device team_slave_0 added [ 226.792706][ T7751] team0: Port device team_slave_1 added [ 226.827682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.878312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.170355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.213408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.267705][ T7463] device veth0_vlan entered promiscuous mode [ 227.312099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.370380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.415910][ T48] device hsr_slave_0 left promiscuous mode [ 227.440335][ T48] device hsr_slave_1 left promiscuous mode [ 227.489250][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.521835][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.567406][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.610604][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.657905][ T48] device bridge_slave_1 left promiscuous mode [ 227.682181][ T7893] netlink: 'syz.7.1205': attribute type 2 has an invalid length. [ 227.690618][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 227.710070][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.742259][ T7893] netlink: 'syz.7.1205': attribute type 1 has an invalid length. [ 227.759072][ T48] device bridge_slave_0 left promiscuous mode [ 227.783476][ T7893] netlink: 170140 bytes leftover after parsing attributes in process `syz.7.1205'. [ 227.796789][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.912311][ T48] device veth1_macvtap left promiscuous mode [ 227.948605][ T48] device veth0_macvtap left promiscuous mode [ 227.971716][ T48] device veth1_vlan left promiscuous mode [ 227.996328][ T48] device veth0_vlan left promiscuous mode [ 228.711478][ T7914] FAULT_INJECTION: forcing a failure. [ 228.711478][ T7914] name fail_futex, interval 1, probability 0, space 0, times 1 [ 228.754561][ T7914] CPU: 0 PID: 7914 Comm: syz.3.1214 Not tainted syzkaller #0 [ 228.761978][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.772080][ T7914] Call Trace: [ 228.775389][ T7914] [ 228.778314][ T7914] dump_stack_lvl+0x188/0x24e [ 228.783114][ T7914] ? show_regs_print_info+0x12/0x12 [ 228.788428][ T7914] ? load_image+0x410/0x410 [ 228.792940][ T7914] ? cgroup_rstat_updated+0xce/0x350 [ 228.798223][ T7914] ? rcu_read_lock_sched_held+0x86/0x110 [ 228.803870][ T7914] ? sched_slice+0x430/0x430 [ 228.808543][ T7914] should_fail_ex+0x390/0x4c0 [ 228.813307][ T7914] get_futex_key+0x1b1/0x1000 [ 228.817976][ T7914] ? futex_setup_timer+0xc0/0xc0 [ 228.822916][ T7914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.828907][ T7914] ? __lock_acquire+0x7c40/0x7c40 [ 228.833936][ T7914] ? lock_chain_count+0x20/0x20 [ 228.838812][ T7914] futex_wait_setup+0xb8/0x270 [ 228.843607][ T7914] ? futex_wait_multiple+0x920/0x920 [ 228.848960][ T7914] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.854890][ T7914] ? _raw_spin_unlock+0x40/0x40 [ 228.859912][ T7914] futex_wait+0x1b8/0x5c0 [ 228.864252][ T7914] ? futex_wait_setup+0x270/0x270 [ 228.869376][ T7914] do_futex+0x310/0x320 [ 228.873525][ T7914] ? __ia32_sys_get_robust_list+0x100/0x100 [ 228.879414][ T7914] __se_sys_futex+0x381/0x410 [ 228.884078][ T7914] ? __x64_sys_futex+0xf0/0xf0 [ 228.889310][ T7914] ? __x64_sys_futex+0x1d/0xf0 [ 228.894086][ T7914] do_syscall_64+0x4c/0xa0 [ 228.898493][ T7914] ? clear_bhb_loop+0x60/0xb0 [ 228.903184][ T7914] ? clear_bhb_loop+0x60/0xb0 [ 228.907959][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.913873][ T7914] RIP: 0033:0x7f104f79e159 [ 228.918285][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.937988][ T7914] RSP: 002b:00007f10507320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.946508][ T7914] RAX: ffffffffffffffda RBX: 00007f104fa25fa8 RCX: 00007f104f79e159 [ 228.954499][ T7914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f104fa25fa8 [ 228.962680][ T7914] RBP: 00007f104fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.970653][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.978633][ T7914] R13: 00007f104fa26038 R14: 00007fffd1cdae10 R15: 00007fffd1cdaef8 [ 228.986639][ T7914] [ 229.766229][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 229.838518][ T48] team0 (unregistering): Port device team_slave_1 removed [ 229.897427][ T48] team0 (unregistering): Port device team_slave_0 removed [ 229.963450][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.032297][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.573460][ T48] bond0 (unregistering): Released all slaves [ 230.685548][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.692541][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.723766][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.845619][ T7463] device veth1_vlan entered promiscuous mode [ 230.888431][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.924102][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.060514][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.202711][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.228485][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.277156][ T7936] loop2: detected capacity change from 0 to 512 [ 231.303339][ T7463] device veth0_macvtap entered promiscuous mode [ 231.340608][ T7934] loop3: detected capacity change from 0 to 4096 [ 231.378906][ T7463] device veth1_macvtap entered promiscuous mode [ 231.416631][ T7936] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 231.514796][ T7751] device hsr_slave_0 entered promiscuous mode [ 231.548470][ T7936] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1223: inode #15: comm syz.2.1223: iget: illegal inode # [ 231.582678][ T7751] device hsr_slave_1 entered promiscuous mode [ 231.642439][ T7751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.683328][ T7751] Cannot create hsr debugfs directory [ 231.696644][ T7936] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1223: couldn't read orphan inode 15 (err -117) [ 231.778338][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.817678][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.831008][ T7936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.890038][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.941415][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.991977][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.043546][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.060877][ T7936] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 232.081606][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.112656][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.169080][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.201017][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.260848][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 232.270173][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.306579][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.360887][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.370717][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1227'. [ 232.448702][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.510808][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.569936][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.609041][ T7960] Bluetooth: MGMT ver 1.22 [ 232.625636][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.676310][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.718889][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.759840][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.803695][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.830999][ T7965] loop3: detected capacity change from 0 to 256 [ 232.864895][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.878134][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.941219][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.038070][ T7463] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.093579][ T7463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.121303][ T7463] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.155058][ T7463] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.531929][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.565022][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.607503][ T7980] loop7: detected capacity change from 0 to 512 [ 233.691084][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.724628][ T7980] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 233.748311][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.803013][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.816228][ T7980] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.868370][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.907834][ T7751] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 233.985249][ T7751] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.059954][ T7751] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.068852][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 234.150787][ T7994] loop3: detected capacity change from 0 to 512 [ 234.208836][ T7751] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 234.272522][ T7994] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1238: corrupted inode contents [ 234.423322][ T7994] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 234.472948][ T7994] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1238: corrupted inode contents [ 234.551025][ T8006] loop7: detected capacity change from 0 to 128 [ 234.588549][ T7994] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.1238: mark_inode_dirty error [ 234.616408][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.711302][ T7994] EXT4-fs (loop3): 1 orphan inode deleted [ 234.718385][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.754685][ T7994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.774533][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.855685][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.918685][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.968997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.012879][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 235.037552][ T8012] ipt_CLUSTERIP: Please specify destination IP [ 235.047244][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.054546][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.216370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.262627][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.329059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.395066][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.402194][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.507892][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.577622][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.675120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.741074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.774642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.814585][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.859889][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.899085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.942765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.981690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.030654][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.096895][ T8035] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 236.132306][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.174123][ T8039] netlink: 'syz.8.1253': attribute type 32 has an invalid length. [ 236.983214][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 237.058110][ T8067] device veth1_to_team entered promiscuous mode [ 237.123616][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.197104][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.267729][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.396252][ T8077] loop3: detected capacity change from 0 to 164 [ 237.489321][ T8077] rock: directory entry would overflow storage [ 237.547798][ T8077] rock: sig=0x5252, size=5, remaining=3 [ 238.549237][ T8103] fuse: Bad value for 'fd' [ 238.680538][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.718865][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.759048][ T8111] loop7: detected capacity change from 0 to 128 [ 238.797588][ T7751] device veth0_vlan entered promiscuous mode [ 238.858917][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.906884][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.961186][ T7751] device veth1_vlan entered promiscuous mode [ 239.075796][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.094919][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.151299][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.278326][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.312011][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.379900][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.437995][ T7751] device veth0_macvtap entered promiscuous mode [ 239.492500][ T7751] device veth1_macvtap entered promiscuous mode [ 239.608178][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.672782][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.729765][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.781168][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.829479][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.881487][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.929615][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.981706][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.031736][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.077641][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.127955][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.177789][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1282'. [ 240.217567][ T8134] netem: change failed [ 240.235567][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.275670][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.327510][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.378094][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.429538][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.505932][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.577035][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.643136][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.696911][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.757024][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.782547][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.820346][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.853224][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.883211][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.929167][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.966024][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.001803][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.047159][ T8155] device netdevsim0 entered promiscuous mode [ 241.089299][ T8155] device netdevsim0 left promiscuous mode [ 241.148169][ T7751] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.200779][ T7751] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.256341][ T7751] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.296839][ T7751] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.386625][ T8168] device erspan0 entered promiscuous mode [ 241.722728][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.784329][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.855953][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.884325][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.916533][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.979440][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.250612][ T8196] ima: policy update failed [ 242.302909][ T27] audit: type=1802 audit(1790862170.275:70): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1158" res=0 errno=0 [ 242.639300][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1308'. [ 242.697246][ T8216] loop2: detected capacity change from 0 to 512 [ 243.048263][ T8190] loop7: detected capacity change from 0 to 32768 [ 243.214862][ T8190] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 243.472156][ T6539] ocfs2: Unmounting device (7,7) on (node local) [ 243.729782][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 243.820530][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 243.908447][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 243.996436][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.071627][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.152716][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.219268][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.279675][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.322901][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.364529][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.411196][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.459129][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.503809][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.553265][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.608731][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.663453][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.710564][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.760653][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.800845][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.852151][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.888834][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.919981][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.951516][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 244.983502][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.020042][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.051840][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.083253][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.115534][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.155928][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.163500][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.222383][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.252761][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.282657][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.313762][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.346415][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.385557][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.407887][ T2188] hid-generic 0005:0010:10000.0005: unknown main item tag 0x0 [ 245.461449][ T2188] hid-generic 0005:0010:10000.0005: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 245.824075][ T4353] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 245.900065][ T8290] loop2: detected capacity change from 0 to 512 [ 246.033679][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1334: missing EA_INODE flag [ 246.053632][ T4353] usb 8-1: unable to get BOS descriptor or descriptor too short [ 246.121806][ T4353] usb 8-1: no configurations [ 246.147502][ T4353] usb 8-1: can't read configurations, error -22 [ 246.217478][ T8290] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1334: error while reading EA inode 2 err=-117 [ 246.265711][ T8305] loop3: detected capacity change from 0 to 16 [ 246.312686][ T8305] erofs: (device loop3): mounted with root inode @ nid 36. [ 246.339214][ T8290] EXT4-fs (loop2): 1 orphan inode deleted [ 246.378037][ T8305] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 246.402741][ T8290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 246.791402][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 246.818103][ T8323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.825196][ T8323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.115514][ T8331] tipc: Started in network mode [ 247.162975][ T8337] block2mtd: illegal erase size [ 247.171352][ T8331] tipc: Node identity 7f000001, cluster identity 4711 [ 247.257661][ T8331] tipc: Enabled bearer , priority 10 [ 247.307977][ T8338] tipc: Disabling bearer [ 249.176258][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.257649][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.724752][ T8428] overlayfs: upper fs is r/o, try multi-lower layers mount [ 249.749613][ T8427] tap0: tun_chr_ioctl cmd 1074025677 [ 249.786354][ T8427] tap0: linktype set to 776 [ 250.014207][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 250.236850][ T7] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 250.297595][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.357825][ T7] usb 8-1: Product: syz [ 250.362023][ T7] usb 8-1: Manufacturer: syz [ 250.429984][ T7] usb 8-1: SerialNumber: syz [ 250.468531][ T7] usb 8-1: config 0 descriptor?? [ 250.517904][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 250.917617][ T7] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 250.964079][ T7] usb 8-1: Firmware version (0.0) predates our first public release. [ 251.016808][ T7] usb 8-1: Please update to version 0.2 or newer [ 251.116089][ T8454] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.229851][ T8464] tun0: tun_chr_ioctl cmd 1074812118 [ 251.317770][ T7] usb 8-1: USB disconnect, device number 5 [ 251.442695][ T8454] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.511866][ T8479] loop2: detected capacity change from 0 to 164 [ 251.774927][ T8479] Unsupported NM flag settings (240) [ 251.814205][ T8483] loop3: detected capacity change from 0 to 128 [ 251.919146][ T8486] Unsupported NM flag settings (240) [ 251.929973][ T8483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 251.994982][ T8454] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.031236][ T8483] hpfs: filesystem error: improperly stopped [ 252.039019][ T8486] Unsupported NM flag settings (240) [ 252.074468][ T8483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 252.082223][ T8483] hpfs: You really don't want any checks? You are crazy... [ 252.202384][ T8483] hpfs: hpfs_map_sector(): read error [ 252.209658][ T8454] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.253542][ T8483] hpfs: code page support is disabled [ 252.306811][ T8483] hpfs: hpfs_map_4sectors(): unaligned read [ 252.372461][ T8483] hpfs: hpfs_map_4sectors(): unaligned read [ 252.440460][ T8483] hpfs: filesystem error: unable to find root dir [ 252.469167][ T8493] loop2: detected capacity change from 0 to 512 [ 252.601510][ T8454] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.658669][ T8493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.793024][ T8454] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.807911][ T8493] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.912043][ T955] wacom 0003:056A:003F.0006: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 252.927040][ T8454] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.011738][ T8454] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.143812][ T8506] fido_id[8506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.270759][ T8511] loop3: detected capacity change from 0 to 2048 [ 253.299955][ T8493] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 18: comm syz.2.1405: lblock 23 mapped to illegal pblock 18 (length 1) [ 253.328561][ T8509] loop7: detected capacity change from 0 to 4096 [ 253.371851][ T8516] loop9: detected capacity change from 0 to 1024 [ 253.407793][ T8511] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 253.443360][ T8509] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 253.523214][ T8509] UDF-fs: Scanning with blocksize 512 failed [ 253.544850][ T8511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.637989][ T8518] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1405: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 253.667581][ T8509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.781885][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1413'. [ 253.846869][ T8509] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 253.990059][ T8509] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 254.116485][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 254.146760][ T8529] binder: 8528:8529 ioctl c018620b 200000000580 returned -14 [ 254.447949][ T6539] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 254.594242][ T6539] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 254.662439][ T6539] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 254.679416][ T8544] usbip-vudc usbip-vudc.0: gadget not bound [ 254.784572][ T6539] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 255.231755][ T8553] program syz.9.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.579556][ T8545] loop3: detected capacity change from 0 to 32768 [ 255.686948][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693393][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708510][ T8545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1421 (8545) [ 255.878930][ T8540] loop2: detected capacity change from 0 to 32768 [ 255.938579][ T7] hid-generic 0005:07C0:0002.0007: unknown main item tag 0x0 [ 256.015136][ T7] hid-generic 0005:07C0:0002.0007: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 256.048239][ T8545] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.076688][ T8540] JBD2: Ignoring recovery information on journal [ 256.188971][ T8545] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 256.275012][ T8575] tipc: Started in network mode [ 256.279926][ T8575] tipc: Node identity 7f000001, cluster identity 4711 [ 256.298275][ T8545] BTRFS info (device loop3): using free space tree [ 256.360678][ T8540] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 256.430940][ T8575] tipc: Enabled bearer , priority 10 [ 256.507837][ T8586] tipc: Disabling bearer [ 256.656404][ T8545] BTRFS info (device loop3): enabling ssd optimizations [ 256.885575][ T8606] hub 1-0:1.0: USB hub found [ 257.390013][ T8610] loop7: detected capacity change from 0 to 131072 [ 257.421640][ T8610] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 257.430392][ T8610] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 257.454148][ T8610] F2FS-fs (loop7): invalid crc value [ 257.469740][ T8606] hub 1-0:1.0: 1 port detected [ 257.507216][ T8610] F2FS-fs (loop7): Found nat_bits in checkpoint [ 257.594669][ T8610] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 257.601914][ T8610] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 257.645307][ T8540] overlayfs: upper fs does not support tmpfile. [ 257.679420][ T8610] F2FS-fs (loop7): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 257.742483][ T4275] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.769313][ T8540] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 257.913287][ T8540] overlayfs: failed to set xattr on upper [ 258.017243][ T8540] overlayfs: ...falling back to index=off,metacopy=off. [ 258.129135][ T8540] overlayfs: upper fs missing required features. [ 259.057645][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 259.407440][ T8657] loop3: detected capacity change from 0 to 512 [ 259.480039][ T8657] EXT4-fs: Ignoring removed nobh option [ 259.560535][ T8657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.587689][ T8662] loop9: detected capacity change from 0 to 512 [ 259.687829][ T8657] EXT4-fs (loop3): 1 truncate cleaned up [ 259.693535][ T8657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.055584][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 260.101624][ T8682] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 260.410379][ T4280] kernel write not supported for file bpf-prog (pid: 4280 comm: kworker/0:4) [ 260.502255][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 261.815368][ T8738] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.825069][ T8738] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.833808][ T8738] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.842624][ T8738] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.909288][ T8734] loop3: detected capacity change from 0 to 4096 [ 261.985166][ T8734] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 262.101020][ T8734] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.347492][ T8748] loop9: detected capacity change from 0 to 512 [ 262.374781][ T4275] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 262.441830][ T4275] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 262.608445][ T8748] EXT4-fs (loop9): 1 orphan inode deleted [ 262.637279][ T70] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 262.681816][ T8748] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 262.714455][ T70] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 262.778852][ T8748] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.086512][ T7751] EXT4-fs (loop9): unmounting filesystem. [ 263.987718][ T8809] loop3: detected capacity change from 0 to 1024 [ 264.072891][ T8809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.269596][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 264.435284][ T8820] loop7: detected capacity change from 0 to 128 [ 264.503446][ T8820] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 264.570885][ T8820] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.726819][ T8829] ip_tables: iptables: counters copy to user failed while replacing table [ 264.803626][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 265.364165][ T4285] Bluetooth: hci0: command 0x0411 tx timeout [ 265.763197][ T8872] loop7: detected capacity change from 0 to 512 [ 265.829886][ T8872] EXT4-fs error (device loop7): ext4_get_journal_inode:5762: comm syz.7.1520: inode #196608: comm syz.7.1520: iget: illegal inode # [ 265.938105][ T8872] EXT4-fs (loop7): Remounting filesystem read-only [ 265.984178][ T8872] EXT4-fs (loop7): no journal found [ 266.027539][ T8872] EXT4-fs (loop7): can't get journal size [ 266.079139][ T8872] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 266.157552][ T8872] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 266.201474][ T8872] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 266.232199][ T8888] loop2: detected capacity change from 0 to 64 [ 266.289285][ T8872] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 4: comm syz.7.1520: path /135/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 266.519858][ T8872] EXT4-fs (loop7): Remounting filesystem read-only [ 266.843436][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 267.594101][ T8912] sd 0:0:1:0: PR command failed: 1026 [ 267.673580][ T8912] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 267.711350][ T8912] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 267.759955][ T8894] loop9: detected capacity change from 0 to 32768 [ 267.915595][ T8894] XFS (loop9): Mounting V5 Filesystem [ 268.025489][ T8894] XFS (loop9): Ending clean mount [ 268.384347][ T8940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1539'. [ 268.411505][ T8894] XFS (loop9): User initiated shutdown received. [ 268.425115][ T8909] loop7: detected capacity change from 0 to 32768 [ 268.444109][ T4351] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.457868][ T8940] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1539'. [ 268.485028][ T8894] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 268.517271][ T8909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1530 (8909) [ 268.604782][ T8894] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 268.653292][ T8909] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.694475][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 268.721932][ T4351] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 268.764099][ T8909] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 268.793418][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.843717][ T8909] BTRFS info (device loop7): using free space tree [ 268.870357][ T4351] usb 3-1: config 0 descriptor?? [ 268.905989][ T7751] XFS (loop9): Unmounting Filesystem [ 269.081885][ T8909] BTRFS info (device loop7): enabling ssd optimizations [ 269.114243][ T4351] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 269.168821][ T4351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.260454][ T4351] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 269.330736][ T4351] usb 3-1: media controller created [ 269.381154][ T4351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.537126][ T4351] az6027: usb out operation failed. (-71) [ 269.588607][ T4351] az6027: usb out operation failed. (-71) [ 269.632053][ T4351] stb0899_attach: Driver disabled by Kconfig [ 269.668554][ T4351] az6027: no front-end attached [ 269.668554][ T4351] [ 269.734142][ T4351] az6027: usb out operation failed. (-71) [ 269.760375][ T4351] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 269.807215][ T4351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 269.903216][ T4351] dvb-usb: schedule remote query interval to 400 msecs. [ 269.948615][ T4351] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 270.007905][ T4351] usb 3-1: USB disconnect, device number 11 [ 270.044925][ T6539] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.189272][ T4351] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 271.040916][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1555'. [ 272.064911][ T8642] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 272.275379][ T8642] usb 10-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 272.315373][ T8642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.369093][ T8642] usb 10-1: config 0 descriptor?? [ 272.415569][ T9006] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 272.632508][ T9006] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 272.693752][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 272.753055][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 272.814030][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 272.854029][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 272.882093][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 272.910754][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 272.946499][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 273.008484][ T8642] usb 10-1: string descriptor 0 read error: -71 [ 273.018205][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 273.048657][ T8642] uclogic 0003:256C:006E.0008: failed retrieving string descriptor #200: -71 [ 273.088406][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 273.114299][ T8642] uclogic 0003:256C:006E.0008: failed retrieving pen parameters: -71 [ 273.153041][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 273.170785][ T8642] uclogic 0003:256C:006E.0008: failed probing pen v2 parameters: -71 [ 273.224279][ T8642] uclogic 0003:256C:006E.0008: failed probing parameters: -71 [ 273.234247][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 273.279136][ T8642] uclogic: probe of 0003:256C:006E.0008 failed with error -71 [ 273.297455][ T9006] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 1024 [ 273.355034][ T8642] usb 10-1: USB disconnect, device number 2 [ 273.382720][ T9006] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 273.451494][ T9006] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 273.539766][ T9006] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 273.579489][ T9006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.650800][ T9006] usb 8-1: Product: syz [ 273.687806][ T9006] usb 8-1: Manufacturer: syz [ 273.719470][ T9006] usb 8-1: SerialNumber: syz [ 273.770245][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 273.801099][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 273.856077][ T9082] loop2: detected capacity change from 0 to 512 [ 273.865525][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 273.906438][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 273.941816][ T9082] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.980135][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 273.988607][ T9085] kAFS: bad VL server IP address [ 274.074123][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.097029][ T9082] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 274.152635][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.194669][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.217876][ T9082] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.254336][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.292274][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.300706][ T9082] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.344239][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.351488][ T9048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 274.401620][ T9082] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1578: Invalid block bitmap block 0 in block_group 0 [ 274.459850][ T9006] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 274.493410][ T9006] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 274.523499][ T9006] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 274.568972][ T9082] Quota error (device loop2): write_blk: dquota write failed [ 274.584967][ T9006] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 274.606052][ T9006] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 274.619562][ T9082] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 274.729870][ T9082] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1578: Failed to acquire dquot type 1 [ 274.819028][ T9082] EXT4-fs (loop2): 1 orphan inode deleted [ 274.855734][ T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 274.902549][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 275.004516][ T9082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.321817][ T9125] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1591'. [ 275.345433][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 275.423814][ T9006] usb 8-1: USB disconnect, device number 6 [ 275.456924][ T9006] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 275.501114][ T9006] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 275.535151][ T9117] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 275.560198][ T9127] loop9: detected capacity change from 0 to 2048 [ 275.576332][ T9006] keyspan 8-1:1.0: device disconnected [ 275.639348][ T9127] loop9: p3 < > p4 < > [ 275.659946][ T9127] loop9: partition table partially beyond EOD, truncated [ 275.703314][ T9127] loop9: p3 start 4284289 is beyond EOD, truncated [ 275.801550][ T3639] loop9: p3 < > p4 < > [ 275.840860][ T3639] loop9: partition table partially beyond EOD, truncated [ 275.885804][ T3639] loop9: p3 start 4284289 is beyond EOD, truncated [ 275.971202][ T7925] udevd[7925]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 276.092260][ T7925] udevd[7925]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 276.176700][ T9144] loop3: detected capacity change from 0 to 2048 [ 276.348991][ T9144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.498496][ T9159] dyndbg: expected <4096 bytes into control [ 276.517402][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 276.662459][ T9163] Bluetooth: MGMT ver 1.22 [ 276.873840][ T9175] loop3: detected capacity change from 0 to 512 [ 277.138544][ T9181] batman_adv: batadv0: Adding interface: ipvlan2 [ 277.173269][ T9181] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.273257][ T9181] batman_adv: batadv0: Interface activated: ipvlan2 [ 277.429263][ T9191] loop3: detected capacity change from 0 to 64 [ 277.853110][ T9204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1619'. [ 277.922064][ T9210] loop7: detected capacity change from 0 to 1024 [ 278.033853][ T9210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 278.093451][ T9210] System zones: 0-1, 3-12 [ 278.123093][ T9210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 278.263116][ T9225] loop9: detected capacity change from 0 to 512 [ 278.319917][ T9225] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.332445][ T6539] EXT4-fs (loop7): unmounting filesystem. [ 278.422031][ T9225] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 278.497688][ T9225] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 278.540710][ T9225] EXT4-fs (loop9): orphan cleanup on readonly fs [ 278.611117][ T9225] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.1627: Invalid block bitmap block 0 in block_group 0 [ 278.672288][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 278.715200][ T9225] Quota error (device loop9): write_blk: dquota write failed [ 278.724789][ T4285] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 278.733535][ T4285] Bluetooth: hci2: command 0x0401 tx timeout [ 278.784193][ T9225] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 278.851017][ T9225] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.1627: Failed to acquire dquot type 1 [ 278.953159][ T9225] EXT4-fs (loop9): 1 orphan inode deleted [ 279.007667][ T33] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 279.054702][ T33] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 279.153094][ T9225] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.401121][ T7751] EXT4-fs (loop9): unmounting filesystem. [ 279.880192][ T9280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.040400][ T9285] netlink: 'syz.3.1652': attribute type 11 has an invalid length. [ 280.534043][ T8631] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 280.671600][ T9303] loop9: detected capacity change from 0 to 4096 [ 280.744071][ T9006] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 280.765274][ T8631] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.817433][ T9308] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.853326][ T8631] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.924163][ T8631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.982969][ T8631] usb 4-1: Product: syz [ 280.988728][ T9006] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.018259][ T8631] usb 4-1: Manufacturer: syz [ 281.063331][ T8631] usb 4-1: SerialNumber: syz [ 281.077457][ T9006] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.133768][ T9006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.174982][ T9006] usb 8-1: SerialNumber: syz [ 281.211366][ T9006] hub 8-1:1.0: bad descriptor, ignoring hub [ 281.242031][ T9006] hub: probe of 8-1:1.0 failed with error -5 [ 281.821530][ T9006] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 281.911875][ T8631] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 281.954699][ T8631] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 282.024303][ T8631] cdc_ncm 4-1:1.0: bind() failure [ 282.048564][ T8631] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 282.071927][ T8631] cdc_ncm 4-1:1.1: bind() failure [ 282.103958][ T8631] usb 4-1: USB disconnect, device number 8 [ 282.164197][ T9006] usb 8-1: USB disconnect, device number 7 [ 282.170586][ T9006] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 283.661942][ T9354] loop7: detected capacity change from 0 to 32768 [ 283.747626][ T9354] JBD2: Ignoring recovery information on journal [ 283.785710][ T9006] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 283.882409][ T9354] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 284.026991][ T9006] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 284.080190][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 284.141366][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.182148][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 284.237093][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 284.272372][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 284.308885][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 284.336241][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 284.360178][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 284.388392][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 284.413291][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 284.440058][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 284.468513][ T9006] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 1024 [ 284.501973][ T9006] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.530255][ T9006] usb 10-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 284.578162][ T9006] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 284.599629][ T6539] ocfs2: Unmounting device (7,7) on (node local) [ 284.621519][ T9006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.681328][ T9006] usb 10-1: Product: syz [ 284.698907][ T9006] usb 10-1: Manufacturer: syz [ 284.718416][ T9006] usb 10-1: SerialNumber: syz [ 284.726546][ T8641] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 284.757648][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.796511][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.830062][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.866946][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.916034][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.953811][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.967483][ T8641] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 284.997534][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.006665][ T8641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.040576][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.050108][ T8641] usb 4-1: Product: syz [ 285.066265][ T8641] usb 4-1: Manufacturer: syz [ 285.071211][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.087515][ T8641] usb 4-1: SerialNumber: syz [ 285.110807][ T8641] usb 4-1: config 0 descriptor?? [ 285.118377][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.150223][ T8641] gspca_main: spca508-2.14.0 probing 041e:4018 [ 285.159696][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.185267][ T9380] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 285.204118][ T9006] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 285.212468][ T9006] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 285.257286][ T9006] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 285.289619][ T9006] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 285.311672][ T9006] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 285.688906][ T8641] gspca_spca508: reg_read err -110 [ 285.699447][ T8641] gspca_spca508: reg_read err -32 [ 285.720537][ T8641] gspca_spca508: reg_read err -32 [ 285.735089][ T8641] gspca_spca508: reg_read err -32 [ 285.750704][ T8641] gspca_spca508: reg_read err -32 [ 285.761047][ T8641] gspca_spca508: reg write: error -32 [ 285.781085][ T8641] spca508: probe of 4-1:0.0 failed with error -32 [ 288.484281][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 317.129264][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135618][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.564147][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 378.567429][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573835][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.004118][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 432.964127][ T28] INFO: task syz-executor:4260 blocked for more than 143 seconds. [ 432.972223][ T28] Not tainted syzkaller #0 [ 432.985217][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.997654][ T28] task:syz-executor state:D stack:21904 pid:4260 ppid:4259 flags:0x00004002 [ 433.008413][ T28] Call Trace: [ 433.011769][ T28] [ 433.018730][ T28] __schedule+0x107f/0x4030 [ 433.023407][ T28] ? mark_lock+0x94/0x320 [ 433.028526][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 433.033590][ T28] ? release_firmware_map_entry+0x187/0x187 [ 433.043989][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 433.049997][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 433.058808][ T28] schedule+0xb9/0x180 [ 433.062920][ T28] io_schedule+0x7c/0xd0 [ 433.067628][ T28] bit_wait_io+0xd/0xc0 [ 433.071802][ T28] __wait_on_bit+0x9b/0x2c0 [ 433.079956][ T28] ? bit_wait+0xc0/0xc0 [ 433.085136][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 433.090604][ T28] ? bit_wait+0xc0/0xc0 [ 433.099581][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 433.105200][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 433.110226][ T28] ? bit_waitqueue+0x30/0x30 [ 433.118695][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 433.124289][ T28] do_get_write_access+0x605/0xf20 [ 433.129915][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 433.139257][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 433.146968][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 433.153171][ T28] ? rcu_is_watching+0x11/0xa0 [ 433.162127][ T28] ext4_reserve_inode_write+0x201/0x290 [ 433.169151][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 433.178237][ T28] ext4_dirty_inode+0xbf/0x100 [ 433.183037][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 433.189216][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 433.197645][ T28] __file_update_time+0x21d/0x240 [ 433.202931][ T28] file_update_time+0x2f3/0x370 [ 433.209601][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 433.218509][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 433.223559][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 433.232131][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 433.241231][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 433.246516][ T28] do_page_mkwrite+0x16b/0x5c0 [ 433.251314][ T28] wp_page_shared+0x167/0x370 [ 433.260478][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 433.266184][ T28] ? mt_find+0x157/0x830 [ 433.270473][ T28] ? numa_migrate_prep+0x250/0x250 [ 433.280641][ T28] ? lock_chain_count+0x20/0x20 [ 433.290374][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 433.298954][ T28] do_user_addr_fault+0x58e/0xb20 [ 433.304576][ T28] exc_page_fault+0x60/0x100 [ 433.309171][ T28] ? clear_bhb_loop+0x60/0xb0 [ 433.318819][ T28] asm_exc_page_fault+0x22/0x30 [ 433.323704][ T28] RIP: 0033:0x7f60b9a7c6e2 [ 433.329299][ T28] RSP: 002b:00007ffeff584a10 EFLAGS: 00010202 [ 433.340062][ T28] RAX: 00007f60b7814000 RBX: 000055556d31faa0 RCX: 0000000000000006 [ 433.348725][ T28] RDX: 0000000000001736 RSI: 000055556d31e868 RDI: 0000000000000040 [ 433.360078][ T28] RBP: 00007ffeff584f10 R08: 000055556d31e880 R09: 000000000000008c [ 433.371387][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeff584d50 [ 433.382940][ T28] R13: 00007ffeff584b40 R14: 585858582e7a7973 R15: 00007ffeff584a90 [ 433.391974][ T28] [ 433.398730][ T28] INFO: task syz.9.1683:9379 blocked for more than 143 seconds. [ 433.406711][ T28] Not tainted syzkaller #0 [ 433.411633][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.425572][ T28] task:syz.9.1683 state:D stack:26288 pid:9379 ppid:7751 flags:0x00004004 [ 433.439191][ T28] Call Trace: [ 433.442529][ T28] [ 433.447105][ T28] __schedule+0x107f/0x4030 [ 433.451653][ T28] ? mark_lock+0x94/0x320 [ 433.459867][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 433.465344][ T28] ? release_firmware_map_entry+0x187/0x187 [ 433.471266][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 433.481700][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 433.487969][ T28] schedule+0xb9/0x180 [ 433.492143][ T28] io_schedule+0x7c/0xd0 [ 433.499679][ T28] bit_wait_io+0xd/0xc0 [ 433.504276][ T28] __wait_on_bit+0x9b/0x2c0 [ 433.508889][ T28] ? bit_wait+0xc0/0xc0 [ 433.513064][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 433.522416][ T28] ? bit_wait+0xc0/0xc0 [ 433.528906][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 433.533673][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 433.544321][ T28] ? bit_waitqueue+0x30/0x30 [ 433.548943][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 433.558426][ T28] do_get_write_access+0x605/0xf20 [ 433.563564][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 433.569958][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 433.579905][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 433.587816][ T28] ? rcu_is_watching+0x11/0xa0 [ 433.592603][ T28] ext4_reserve_inode_write+0x201/0x290 [ 433.602042][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 433.609267][ T28] ext4_dirty_inode+0xbf/0x100 [ 433.618110][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 433.624143][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 433.629174][ T28] __file_update_time+0x21d/0x240 [ 433.638055][ T28] file_update_time+0x2f3/0x370 [ 433.643392][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 433.650600][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 433.659459][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 433.665354][ T28] ? pte_alloc_one+0x287/0x310 [ 433.670145][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 433.680010][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 433.685508][ T28] ? put_page+0x270/0x270 [ 433.690302][ T28] do_page_mkwrite+0x16b/0x5c0 [ 433.699906][ T28] handle_mm_fault+0x199c/0x3d40 [ 433.705745][ T28] ? mt_find+0x157/0x830 [ 433.710127][ T28] ? numa_migrate_prep+0x250/0x250 [ 433.718872][ T28] ? lock_chain_count+0x20/0x20 [ 433.723783][ T28] ? ktime_get+0x247/0x270 [ 433.728682][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 433.737362][ T28] do_user_addr_fault+0x58e/0xb20 [ 433.742887][ T28] exc_page_fault+0x60/0x100 [ 433.748554][ T28] asm_exc_page_fault+0x22/0x30 [ 433.753450][ T28] RIP: 0033:0x7f9c450727a9 [ 433.762699][ T28] RSP: 002b:00007fff6be16a20 EFLAGS: 00010202 [ 433.769560][ T28] RAX: 0000001b2fc24000 RBX: ffffffff81395da6 RCX: 0000001b2fc23ff8 [ 433.782025][ T28] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f9c45f55700 [ 433.790628][ T28] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f9c45412000 [ 433.801857][ T28] R10: 00007f9c45f55700 R11: 0000000000000000 R12: 00007f9c45426038 [ 433.812163][ T28] R13: 0000000000000000 R14: ffffffff813954cc R15: 00007f9c45f55720 [ 433.823415][ T28] ? fault_in_kernel_space+0xc/0x60 [ 433.828835][ T28] ? do_user_addr_fault+0x706/0xb20 [ 433.837203][ T28] [ 433.840240][ T28] INFO: task syz.8.1684:9384 blocked for more than 144 seconds. [ 433.849270][ T28] Not tainted syzkaller #0 [ 433.857415][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.867624][ T28] task:syz.8.1684 state:D stack:26288 pid:9384 ppid:7463 flags:0x00004004 [ 433.881880][ T28] Call Trace: [ 433.886148][ T28] [ 433.889083][ T28] __schedule+0x107f/0x4030 [ 433.897174][ T28] ? mark_lock+0x94/0x320 [ 433.901528][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 433.906809][ T28] ? release_firmware_map_entry+0x187/0x187 [ 433.912791][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 433.923239][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 433.929672][ T28] schedule+0xb9/0x180 [ 433.933753][ T28] io_schedule+0x7c/0xd0 [ 433.941747][ T28] bit_wait_io+0xd/0xc0 [ 433.946725][ T28] __wait_on_bit+0x9b/0x2c0 [ 433.951686][ T28] ? bit_wait+0xc0/0xc0 [ 433.959398][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 433.965404][ T28] ? bit_wait+0xc0/0xc0 [ 433.969744][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 433.979089][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 433.984774][ T28] ? bit_waitqueue+0x30/0x30 [ 433.989378][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 433.999345][ T28] do_get_write_access+0x605/0xf20 [ 434.005308][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 434.011299][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 434.020809][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 434.028330][ T28] ? rcu_is_watching+0x11/0xa0 [ 434.033107][ T28] ext4_reserve_inode_write+0x201/0x290 [ 434.042312][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 434.048107][ T28] ext4_dirty_inode+0xbf/0x100 [ 434.053341][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 434.062996][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 434.068286][ T28] __file_update_time+0x21d/0x240 [ 434.073312][ T28] file_update_time+0x2f3/0x370 [ 434.082227][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 434.089074][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 434.098249][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 434.103311][ T28] ? pte_alloc_one+0x287/0x310 [ 434.109149][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 434.119367][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 434.124994][ T28] ? put_page+0x270/0x270 [ 434.129345][ T28] do_page_mkwrite+0x16b/0x5c0 [ 434.138417][ T28] handle_mm_fault+0x199c/0x3d40 [ 434.143366][ T28] ? mt_find+0x157/0x830 [ 434.148613][ T28] ? numa_migrate_prep+0x250/0x250 [ 434.157305][ T28] ? lock_chain_count+0x20/0x20 [ 434.162164][ T28] ? ktime_get+0x247/0x270 [ 434.166911][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 434.172467][ T28] do_user_addr_fault+0x58e/0xb20 [ 434.180721][ T28] exc_page_fault+0x60/0x100 [ 434.186144][ T28] asm_exc_page_fault+0x22/0x30 [ 434.190993][ T28] RIP: 0033:0x7f64dca727a9 [ 434.200267][ T28] RSP: 002b:00007fffeba24f00 EFLAGS: 00010202 [ 434.208003][ T28] RAX: 0000001b2db24000 RBX: ffffffff81c32fd6 RCX: 0000001b2db23ff8 [ 434.219883][ T28] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f64dd955700 [ 434.228343][ T28] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f64dce12000 [ 434.239536][ T28] R10: 00007f64dd955700 R11: 0000000000000001 R12: 00007f64dce26128 [ 434.250331][ T28] R13: 0000000000000000 R14: ffffffff81c326bc R15: 00007f64dd955720 [ 434.262570][ T28] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 434.269238][ T28] ? vm_brk_flags+0x6/0x5a0 [ 434.273765][ T28] [ 434.280061][ T28] INFO: task syz.3.1686:9390 blocked for more than 144 seconds. [ 434.287893][ T28] Not tainted syzkaller #0 [ 434.292835][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.307094][ T28] task:syz.3.1686 state:D stack:26288 pid:9390 ppid:4275 flags:0x00004004 [ 434.318750][ T28] Call Trace: [ 434.322053][ T28] [ 434.331647][ T28] __schedule+0x107f/0x4030 [ 434.338453][ T28] ? mark_lock+0x94/0x320 [ 434.342802][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 434.350044][ T28] ? release_firmware_map_entry+0x187/0x187 [ 434.359287][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 434.367347][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 434.372671][ T28] schedule+0xb9/0x180 [ 434.379299][ T28] io_schedule+0x7c/0xd0 [ 434.383567][ T28] bit_wait_io+0xd/0xc0 [ 434.389926][ T28] __wait_on_bit+0x9b/0x2c0 [ 434.396393][ T28] ? bit_wait+0xc0/0xc0 [ 434.401193][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 434.411111][ T28] ? bit_wait+0xc0/0xc0 [ 434.418581][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 434.423379][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 434.430919][ T28] ? bit_waitqueue+0x30/0x30 [ 434.438727][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 434.446021][ T28] do_get_write_access+0x605/0xf20 [ 434.451153][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 434.459845][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 434.468699][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 434.476655][ T28] ? rcu_is_watching+0x11/0xa0 [ 434.481483][ T28] ext4_reserve_inode_write+0x201/0x290 [ 434.489751][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 434.497968][ T28] ext4_dirty_inode+0xbf/0x100 [ 434.502767][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 434.510980][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 434.517782][ T28] __file_update_time+0x21d/0x240 [ 434.522816][ T28] file_update_time+0x2f3/0x370 [ 434.531038][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 434.539005][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 434.547848][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 434.552938][ T28] ? pte_alloc_one+0x287/0x310 [ 434.559552][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 434.569953][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 434.578080][ T28] ? put_page+0x270/0x270 [ 434.582429][ T28] do_page_mkwrite+0x16b/0x5c0 [ 434.589058][ T28] handle_mm_fault+0x199c/0x3d40 [ 434.596700][ T28] ? mt_find+0x157/0x830 [ 434.600973][ T28] ? numa_migrate_prep+0x250/0x250 [ 434.607875][ T28] ? lock_chain_count+0x20/0x20 [ 434.613124][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 434.620230][ T28] do_user_addr_fault+0x58e/0xb20 [ 434.626977][ T28] exc_page_fault+0x60/0x100 [ 434.631599][ T28] asm_exc_page_fault+0x22/0x30 [ 434.640257][ T28] RIP: 0033:0x7f104f6727a9 [ 434.649273][ T28] RSP: 002b:00007fffd1cdaf40 EFLAGS: 00010202 [ 434.657964][ T28] RAX: 0000001b2fe24000 RBX: ffffffff820719ea RCX: 0000001b2fe23ff8 [ 434.668772][ T28] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007f1050555700 [ 434.678745][ T28] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f104fa12000 [ 434.690242][ T28] R10: 00007f1050555700 R11: 0000000000000000 R12: 00007f104fa26038 [ 434.700861][ T28] R13: 00000000000016a4 R14: ffffffff820716ea R15: 00007f1050555720 [ 434.710756][ T28] ? kernfs_get+0xa/0x90 [ 434.717337][ T28] ? kernfs_put_active+0x10a/0x130 [ 434.722513][ T28] [ 434.728331][ T28] INFO: task syz.7.1688:9409 blocked for more than 145 seconds. [ 434.737801][ T28] Not tainted syzkaller #0 [ 434.742748][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.757475][ T28] task:syz.7.1688 state:D stack:27632 pid:9409 ppid:6539 flags:0x00004004 [ 434.769112][ T28] Call Trace: [ 434.772433][ T28] [ 434.778163][ T28] __schedule+0x107f/0x4030 [ 434.782773][ T28] ? mark_lock+0x94/0x320 [ 434.788189][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 434.793240][ T28] ? release_firmware_map_entry+0x187/0x187 [ 434.803249][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 434.810882][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 434.819886][ T28] schedule+0xb9/0x180 [ 434.824767][ T28] io_schedule+0x7c/0xd0 [ 434.829017][ T28] bit_wait_io+0xd/0xc0 [ 434.833161][ T28] __wait_on_bit+0x9b/0x2c0 [ 434.840539][ T28] ? bit_wait+0xc0/0xc0 [ 434.845441][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 434.850933][ T28] ? bit_wait+0xc0/0xc0 [ 434.858952][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 434.863728][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 434.871013][ T28] ? bit_waitqueue+0x30/0x30 [ 434.879440][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 434.888770][ T28] do_get_write_access+0x605/0xf20 [ 434.896669][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 434.902715][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 434.911109][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 434.920501][ T28] ? rcu_is_watching+0x11/0xa0 [ 434.926020][ T28] ext4_reserve_inode_write+0x201/0x290 [ 434.931569][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 434.940355][ T28] ext4_dirty_inode+0xbf/0x100 [ 434.945922][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 434.951732][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 434.959535][ T28] __file_update_time+0x21d/0x240 [ 434.966569][ T28] file_update_time+0x2f3/0x370 [ 434.971844][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 434.981240][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 434.987970][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 434.993006][ T28] ? pte_alloc_one+0x287/0x310 [ 435.000517][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 435.008064][ T28] do_page_mkwrite+0x16b/0x5c0 [ 435.012838][ T28] handle_mm_fault+0x199c/0x3d40 [ 435.021944][ T28] ? mt_find+0x157/0x830 [ 435.027427][ T28] ? numa_migrate_prep+0x250/0x250 [ 435.032543][ T28] ? lock_chain_count+0x20/0x20 [ 435.040323][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 435.047086][ T28] do_user_addr_fault+0x58e/0xb20 [ 435.052136][ T28] exc_page_fault+0x60/0x100 [ 435.059555][ T28] ? clear_bhb_loop+0x60/0xb0 [ 435.064967][ T28] asm_exc_page_fault+0x22/0x30 [ 435.069820][ T28] RIP: 0033:0x7f3a05e6baa3 [ 435.079013][ T28] RSP: 002b:00007ffe944c1a50 EFLAGS: 00010246 [ 435.086680][ T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34164000 [ 435.098539][ T28] RDX: 0000001b34124000 RSI: 0000000000400000 RDI: 00007f3a061e0708 [ 435.107273][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.118300][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.128542][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe944c1ce0 [ 435.139661][ T28] [ 435.142921][ T28] [ 435.142921][ T28] Showing all locks held in the system: [ 435.152380][ T28] 1 lock held by rcu_tasks_kthre/12: [ 435.160399][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 435.172295][ T28] 1 lock held by rcu_tasks_trace/13: [ 435.180613][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 435.196968][ T28] 1 lock held by khungtaskd/28: [ 435.201848][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 435.213264][ T28] 2 locks held by getty/4030: [ 435.221399][ T28] #0: ffff88814dd08098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 435.232386][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 435.247261][ T28] 3 locks held by syz-executor/4260: [ 435.252708][ T28] #0: ffff88807c1526d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 435.263383][ T28] #1: ffff88814dd7c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 435.277043][ T28] #2: ffff88814dd80990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 435.287526][ T28] 4 locks held by kworker/u4:6/4332: [ 435.292843][ T28] #0: ffff888141e5f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 435.308952][ T28] #1: ffffc900045e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 435.322628][ T28] #2: ffff88814dd7c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 435.336227][ T28] #3: ffff88814dd7ec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 435.348153][ T28] 3 locks held by syz.9.1683/9379: [ 435.353398][ T28] #0: ffff888023062e58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 435.372189][ T28] #1: ffff88814dd7c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 435.383147][ T28] #2: ffff88814dd80990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 435.396131][ T28] 3 locks held by syz.8.1684/9384: [ 435.401240][ T28] #0: ffff88807e3597d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 435.411999][ T28] #1: ffff88814dd7c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 435.428546][ T28] #2: ffff88814dd80990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 435.439510][ T28] 3 locks held by syz.3.1686/9390: [ 435.449446][ T28] #0: ffff88807e359f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 435.460581][ T28] #1: ffff88814dd7c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 435.473101][ T28] #2: ffff88814dd80990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 435.488327][ T28] 3 locks held by syz.7.1688/9409: [ 435.493462][ T28] #0: ffff88807c1544d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 435.507241][ T28] #1: ffff88814dd7c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 435.517522][ T28] #2: ffff88814dd80990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 435.532282][ T28] [ 435.536713][ T28] ============================================= [ 435.536713][ T28] [ 435.548418][ T28] NMI backtrace for cpu 0 [ 435.552791][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 435.559989][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.570137][ T28] Call Trace: [ 435.573404][ T28] [ 435.576320][ T28] dump_stack_lvl+0x188/0x24e [ 435.581004][ T28] ? irq_work_queue+0xb8/0x140 [ 435.585870][ T28] ? show_regs_print_info+0x12/0x12 [ 435.591051][ T28] ? load_image+0x410/0x410 [ 435.595541][ T28] ? vprintk_emit+0x59f/0x6a0 [ 435.600230][ T28] ? printk_sprint+0x460/0x460 [ 435.604997][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 435.609921][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 435.616132][ T28] ? _printk+0xda/0x130 [ 435.620301][ T28] ? load_image+0x410/0x410 [ 435.624807][ T28] ? load_image+0x410/0x410 [ 435.629435][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 435.635525][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 435.641666][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 435.647645][ T28] watchdog+0xf0e/0xf50 [ 435.651845][ T28] ? watchdog+0x1ed/0xf50 [ 435.656160][ T28] kthread+0x29d/0x330 [ 435.660259][ T28] ? hungtask_pm_notify+0x40/0x40 [ 435.665289][ T28] ? kthread_blkcg+0xd0/0xd0 [ 435.669878][ T28] ret_from_fork+0x1f/0x30 [ 435.674458][ T28] [ 435.688181][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 435.695147][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 435.702328][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.712370][ T28] Call Trace: [ 435.715655][ T28] [ 435.718589][ T28] dump_stack_lvl+0x188/0x24e [ 435.723256][ T28] ? memcpy+0x3c/0x60 [ 435.727439][ T28] ? show_regs_print_info+0x12/0x12 [ 435.732644][ T28] ? load_image+0x410/0x410 [ 435.737134][ T28] panic+0x2d3/0x710 [ 435.741036][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 435.746667][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 435.751163][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 435.756693][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 435.762846][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 435.769003][ T28] watchdog+0xf4d/0xf50 [ 435.773172][ T28] ? watchdog+0x1ed/0xf50 [ 435.777507][ T28] kthread+0x29d/0x330 [ 435.781565][ T28] ? hungtask_pm_notify+0x40/0x40 [ 435.786747][ T28] ? kthread_blkcg+0xd0/0xd0 [ 435.791452][ T28] ret_from_fork+0x1f/0x30 [ 435.795909][ T28] [ 435.798992][ T28] Kernel Offset: disabled [ 435.803322][ T28] Rebooting in 86400 seconds..