last executing test programs: 1m33.917322257s ago: executing program 3 (id=203): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) setresuid(0xee00, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x701000, 0x0) 1m32.902541593s ago: executing program 3 (id=208): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000004) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r1, 0x10001, 0x0) write(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) write(r2, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2, 0x4800002c, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) 1m31.799252022s ago: executing program 3 (id=212): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 1m31.033954751s ago: executing program 3 (id=219): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22860, 0x0, 0x1, 0x0, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x38) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x17, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b0000aa00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x1ae, &(0x7f0000000400)="$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") 1m26.80515446s ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@private=0xe1010203, @empty, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x4, 0x0, 0x0, 0x0) unshare(0x6a040000) close(0xffffffffffffffff) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 1m24.201307828s ago: executing program 3 (id=252): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m23.495376146s ago: executing program 32 (id=252): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 5.906205278s ago: executing program 2 (id=500): r0 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.456283435s ago: executing program 0 (id=508): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) 3.742122494s ago: executing program 1 (id=512): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000100000000000000010010000"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 3.530137439s ago: executing program 1 (id=514): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(r2, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xffffffffffffff61) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 3.449519741s ago: executing program 2 (id=515): syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x100) pipe(&(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.262557416s ago: executing program 0 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) 3.10220081s ago: executing program 4 (id=517): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 3.068308691s ago: executing program 2 (id=518): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x400000000000002a, r3}) 3.042853822s ago: executing program 0 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x1b) 2.961808434s ago: executing program 2 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x8}}}}}, 0x0) 2.872254226s ago: executing program 2 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)='us', 0x2) 2.869930486s ago: executing program 0 (id=522): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2.848270687s ago: executing program 4 (id=523): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ab3000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000100)="8dd8ec07609903d1d580e100584826d46770e2443bc11e3479883d9a38e057f7227cf1af4e16b485fde25d9d", &(0x7f00000001c0)=""/163, &(0x7f0000000280)="58db9dd6ac91c0bbd30e491662470a49749815561104cf5f0c246648555e0a1966131ba11f758e3459f3a7ac5e7476b4f483b02d730468d679b5ee598be641148bd0b37a6c8ea7340b00d47be3f004e31dcf7bff0ac9c6b8b3f6c3c995", &(0x7f0000000380)="2ec4e33af3cc6a7b1b4809535ab8b19faacc7bd2752b3fe9bc7d1d770796ba3662980e0a4e76a006f4e204be7fed83c8d2ab5d47c1e6202cc7c93e33a4c26205bbf7b9e36a", 0xeb98}, 0x38) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x0, 0x6, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001040}, 0x24000840) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b86b6e000000000008001f00020000000a0010000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x4048010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 2.71410235s ago: executing program 0 (id=524): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22860, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) 2.654878412s ago: executing program 5 (id=525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x60) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205838, &(0x7f0000000200)={0x2, 0x0, 0x7, 0x21, 0x4}) 2.560959184s ago: executing program 2 (id=526): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r0, 0x4, 0x0) 2.558152884s ago: executing program 1 (id=527): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x4, 0x6, 0x394, 0x7, 0x0, 0x0, 0x0}) 2.397987009s ago: executing program 4 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 2.397682589s ago: executing program 5 (id=529): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) 2.32633628s ago: executing program 1 (id=530): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 1.515009501s ago: executing program 1 (id=531): madvise(&(0x7f0000400000/0xc000)=nil, 0xc000, 0x2) r0 = fanotify_init(0x8, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) io_uring_setup(0x283d, &(0x7f0000000000)={0x0, 0x64fa, 0x1000, 0x2, 0x2c1}) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="3b8eed3434712255c31bf6b8d8ebff3eade8aae9f655aa428ee79d", 0x1b}, {0x0}], 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x48) 1.431669333s ago: executing program 4 (id=532): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x48) write(r0, &(0x7f0000000100)='1', 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @rand_addr=0xc0a80100}, {0x2, 0x0, @empty}, {0x2, 0x0, @rand_addr=0xffffff00}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='dummy0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000025c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaa70b2bb08060001080006040001aaaaaaaaaabbac1414bb000000000000c0a801"], 0x0) 1.394193995s ago: executing program 5 (id=533): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) clock_gettime(0xfffffffffffffffb, 0x0) 1.15813114s ago: executing program 5 (id=534): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 1.148855201s ago: executing program 4 (id=535): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca8", 0x26}], 0x1}, 0x0) 687.893943ms ago: executing program 5 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)='us', 0x2) 468.970588ms ago: executing program 1 (id=537): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(r2, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xffffffffffffff61) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 394.09684ms ago: executing program 5 (id=538): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ab3000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000100)="8dd8ec07609903d1d580e100584826d46770e2443bc11e3479883d9a38e057f7227cf1af4e16b485fde25d9d", &(0x7f00000001c0)=""/163, &(0x7f0000000280)="58db9dd6ac91c0bbd30e491662470a49749815561104cf5f0c246648555e0a1966131ba11f758e3459f3a7ac5e7476b4f483b02d730468d679b5ee598be641148bd0b37a6c8ea7340b00d47be3f004e31dcf7bff0ac9c6b8b3f6c3c995", &(0x7f0000000380)="2ec4e33af3cc6a7b1b4809535ab8b19faacc7bd2752b3fe9bc7d1d770796ba3662980e0a4e76a006f4e204be7fed83c8d2ab5d47c1e6202cc7c93e33a4c26205bbf7b9e36a", 0xeb98}, 0x38) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x0, 0x6, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001040}, 0x24000840) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b86b6e000000000008001f00020000000a0010000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x4048010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 299.119943ms ago: executing program 0 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x400d0) 0s ago: executing program 4 (id=540): socket$inet6(0xa, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): th1_macvtap entered promiscuous mode [ 77.094381][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.094400][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.119545][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 77.125639][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 77.129479][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 77.131953][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 77.145504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.154580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.163004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.172802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.182365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.194942][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.200390][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 77.208097][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224597][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.255327][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.266571][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.277901][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.289518][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.301959][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.319143][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.337516][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.348827][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.362921][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.376338][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.387665][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.409604][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.424465][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.442628][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.455168][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.466244][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.477994][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.492407][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.505020][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.522529][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.551460][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.569371][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.582455][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.594484][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.603235][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.613107][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.622664][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.632405][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.647577][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.663063][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.738885][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.805554][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.857075][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.909828][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.973462][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007724][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.535567][ T4271] device veth0_vlan entered promiscuous mode [ 78.546627][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.558078][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.569442][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.581092][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.602425][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.613091][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.624597][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.638228][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.661695][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.675966][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.690841][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.708353][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.722524][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.733150][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.744399][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.774779][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787461][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.797916][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.815150][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.842753][ T4271] device veth1_vlan entered promiscuous mode [ 78.974273][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.983128][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.993117][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.994579][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.019428][ T4359] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.028668][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.044430][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.077826][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.088775][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.100554][ T4271] device veth0_macvtap entered promiscuous mode [ 79.115107][ T4271] device veth1_macvtap entered promiscuous mode [ 79.130181][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.138719][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.148729][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.161266][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.170828][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.191340][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.198427][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.199194][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.200193][ T4359] usb 3-1: Using ep0 maxpacket: 8 [ 79.210354][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 79.218828][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.223395][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 79.236533][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 79.236571][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 79.242008][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.250075][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.275206][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.275214][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.286684][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 79.303831][ T4359] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.304069][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.318581][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.323685][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.341744][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.351292][ T4359] usb 3-1: config 0 descriptor?? [ 79.352311][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.371442][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.383529][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.398140][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.411488][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.422080][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.431185][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.442525][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.455864][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.466239][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.477881][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.487795][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.498965][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.509406][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.520095][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.531405][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.544589][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.558205][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.567819][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.579125][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613150][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.624412][ T4359] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 79.634206][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.688724][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.723107][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.757003][ T4369] loop4: detected capacity change from 0 to 256 [ 79.764846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.827860][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.834150][ T4369] exfat: Deprecated parameter 'utf8' [ 79.862353][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.870167][ T4369] exfat: Deprecated parameter 'utf8' [ 79.875936][ T4369] exfat: Deprecated parameter 'utf8' [ 79.927660][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.952937][ T4369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 79.956402][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.976963][ T4359] usb 3-1: USB disconnect, device number 2 [ 80.015382][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.041549][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.897936][ T4379] loop1: detected capacity change from 0 to 2048 [ 80.907614][ T4383] input: syz1 as /devices/virtual/input/input5 [ 81.137772][ T4379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.599269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 83.609282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 83.619267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 83.629261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 83.649261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 83.703057][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 86.039764][ T4440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 86.065587][ T4433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.20'. [ 86.081880][ T4440] ======================================================= [ 86.081880][ T4440] WARNING: The mand mount option has been deprecated and [ 86.081880][ T4440] and is ignored by this kernel. Remove the mand [ 86.081880][ T4440] option from the mount to silence this warning. [ 86.081880][ T4440] ======================================================= [ 86.145890][ T4440] overlayfs: failed to resolve './file1': -2 [ 86.172583][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 86.182562][ T4274] CPU: 0 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 86.190141][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.200219][ T4274] Workqueue: hci2 hci_rx_work [ 86.204966][ T4274] Call Trace: [ 86.208261][ T4274] [ 86.211198][ T4274] dump_stack_lvl+0x188/0x24e [ 86.215896][ T4274] ? show_regs_print_info+0x12/0x12 [ 86.221119][ T4274] ? load_image+0x410/0x410 [ 86.225647][ T4274] sysfs_create_dir_ns+0x26a/0x290 [ 86.230782][ T4274] ? __lock_acquire+0x7c40/0x7c40 [ 86.235834][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 86.240547][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 86.245756][ T4274] kobject_add_internal+0x617/0xca0 [ 86.250971][ T4274] kobject_add+0x160/0x230 [ 86.255401][ T4274] ? kobject_init+0x1c0/0x1c0 [ 86.260086][ T4274] ? __raw_spin_lock_init+0x41/0x100 [ 86.265370][ T4274] ? klist_children_get+0x50/0x50 [ 86.270397][ T4274] ? get_device_parent+0x121/0x3e0 [ 86.275518][ T4274] device_add+0x470/0x1050 [ 86.279959][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 86.284990][ T4274] le_conn_complete_evt+0xfac/0x15c0 [ 86.290300][ T4274] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 86.296561][ T4274] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 86.302229][ T4274] ? mutex_unlock+0x10/0x10 [ 86.306737][ T4274] ? skb_pull_data+0xec/0x1f0 [ 86.311597][ T4274] hci_le_enh_conn_complete_evt+0x185/0x460 [ 86.317502][ T4274] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 86.323925][ T4274] ? hci_remote_host_features_evt+0x230/0x230 [ 86.330082][ T4274] hci_event_packet+0x7b3/0x1290 [ 86.335038][ T4274] ? lock_chain_count+0x20/0x20 [ 86.339902][ T4274] ? hci_conn_valid+0x220/0x220 [ 86.344751][ T4274] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.350659][ T4274] ? kcov_remote_start+0x50f/0x810 [ 86.355774][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 86.360976][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 86.366184][ T4274] hci_rx_work+0x3eb/0xd40 [ 86.370693][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 86.375558][ T4274] ? process_one_work+0x7b4/0x1160 [ 86.380758][ T4274] process_one_work+0x8ab/0x1160 [ 86.385742][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 86.391403][ T4274] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.396433][ T4274] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.401992][ T4274] ? wq_worker_running+0x97/0x190 [ 86.407030][ T4274] worker_thread+0xaf5/0x12a0 [ 86.411731][ T4274] kthread+0x29d/0x330 [ 86.415799][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 86.420872][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 86.425571][ T4274] ret_from_fork+0x1f/0x30 [ 86.430010][ T4274] [ 86.435800][ T4274] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.449478][ T4274] Bluetooth: hci2: failed to register connection device [ 86.803761][ T127] cfg80211: failed to load regulatory.db [ 87.007904][ T4431] loop1: detected capacity change from 0 to 32768 [ 87.060385][ T4431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.22 (4431) [ 87.061260][ T4445] loop0: detected capacity change from 0 to 32768 [ 87.145482][ T4443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.156423][ T4445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (4445) [ 87.175226][ T4443] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.237404][ T4431] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.254317][ T4443] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 87.265287][ T4445] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.279186][ T4431] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 87.285837][ T4443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.302652][ T4445] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 87.309994][ T4431] BTRFS info (device loop1): use no compression [ 87.329620][ T4431] BTRFS info (device loop1): using free space tree [ 87.339712][ T4443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.358705][ T4445] BTRFS info (device loop0): disabling tree log [ 87.374646][ T4443] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 87.384332][ T4445] BTRFS info (device loop0): using free space tree [ 87.389484][ T4443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.399678][ T4443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.413035][ T4443] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 87.429897][ T4443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.437131][ T4443] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.490440][ T4443] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 87.498210][ T4443] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.519429][ T4443] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.539733][ T4431] BTRFS info (device loop1): enabling ssd optimizations [ 87.556220][ T4445] BTRFS info (device loop0): enabling ssd optimizations [ 87.568200][ T4443] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 87.728669][ T4431] BTRFS info (device loop1: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 87.815327][ T4431] BTRFS info (device loop1: state M): use zstd compression, level 15 [ 87.986911][ T4409] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 88.148306][ T4275] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.584131][ T4506] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 88.594076][ T4506] Zero length message leads to an empty skb [ 88.639396][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.797951][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4264) [ 89.370680][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.439805][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.440250][ T4272] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.519450][ T4272] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.719437][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 90.779661][ T4505] BTRFS info (device loop0): balance: start -d -m [ 91.215118][ T4505] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 91.439379][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 91.519400][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 91.519409][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 91.599381][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 91.733180][ T4505] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 91.981657][ T4505] BTRFS info (device loop0): balance: canceled [ 92.137551][ T4525] overlayfs: failed to resolve './file1': -2 [ 92.477643][ T4531] loop1: detected capacity change from 0 to 164 [ 92.498883][ T4271] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.738161][ T4531] rock: directory entry would overflow storage [ 92.749470][ T4531] rock: sig=0x4f50, size=4, remaining=3 [ 92.755083][ T4531] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 92.889194][ T4514] loop4: detected capacity change from 0 to 32768 [ 93.007789][ T4514] JBD2: Ignoring recovery information on journal [ 93.154558][ T4514] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.329472][ T26] audit: type=1800 audit(1788303941.350:2): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 93.379326][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.396558][ T4529] loop2: detected capacity change from 0 to 32768 [ 93.435697][ T4529] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.40 (4529) [ 93.471676][ T4533] loop3: detected capacity change from 0 to 32768 [ 93.504134][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 93.540230][ T4529] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.556314][ T4533] JBD2: Ignoring recovery information on journal [ 93.579629][ T4317] usb 2-1: Using ep0 maxpacket: 8 [ 93.587375][ T4317] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.610468][ T4317] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.620942][ T4317] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.631400][ T4317] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.643474][ T4529] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.645496][ T4317] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.662765][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.666320][ T4533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.678982][ T4529] BTRFS info (device loop2): setting nodatacow, compression disabled [ 93.694152][ T4529] BTRFS info (device loop2): setting datasum, datacow enabled [ 93.703551][ T4529] BTRFS info (device loop2): force clearing of disk cache [ 93.713320][ T4529] BTRFS info (device loop2): enabling ssd optimizations [ 93.720698][ T4529] BTRFS info (device loop2): using spread ssd allocation scheme [ 93.728789][ T4529] BTRFS info (device loop2): turning on sync discard [ 93.735899][ T4529] BTRFS info (device loop2): turning on flush-on-commit [ 93.763577][ T4529] BTRFS info (device loop2): not using ssd optimizations [ 93.789969][ T4529] BTRFS info (device loop2): not using spread ssd allocation scheme [ 93.841118][ T4529] BTRFS info (device loop2): using free space tree [ 93.896109][ T4317] usb 2-1: GET_CAPABILITIES returned 0 [ 93.902519][ T4317] usbtmc 2-1:16.0: can't read capabilities [ 94.022608][ T4533] (syz.3.42,4533,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 94.123064][ T4529] BTRFS info (device loop2): rebuilding free space tree [ 94.252530][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 94.318076][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.337082][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.352474][ T4541] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.475221][ T4574] FAULT_INJECTION: forcing a failure. [ 94.475221][ T4574] name failslab, interval 1, probability 0, space 0, times 1 [ 94.544605][ T4574] CPU: 0 PID: 4574 Comm: syz.3.47 Not tainted syzkaller #0 [ 94.551996][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.562082][ T4574] Call Trace: [ 94.565383][ T4574] [ 94.568679][ T4574] dump_stack_lvl+0x188/0x24e [ 94.573461][ T4574] ? show_regs_print_info+0x12/0x12 [ 94.579334][ T4574] ? load_image+0x410/0x410 [ 94.583883][ T4574] ? __might_sleep+0xd0/0xd0 [ 94.588516][ T4574] ? __lock_acquire+0x7c40/0x7c40 [ 94.593589][ T4574] should_fail_ex+0x390/0x4c0 [ 94.598353][ T4574] should_failslab+0x5/0x20 [ 94.602978][ T4574] slab_pre_alloc_hook+0x59/0x300 [ 94.608040][ T4574] ? __kernfs_new_node+0xa6/0x7f0 [ 94.613110][ T4574] ? rcu_is_watching+0x11/0xa0 [ 94.617940][ T4574] kmem_cache_alloc+0x56/0x2f0 [ 94.622834][ T4574] ? __kernfs_new_node+0xe1/0x7f0 [ 94.627914][ T4574] __kernfs_new_node+0xe1/0x7f0 [ 94.632814][ T4574] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 94.639618][ T4574] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.645548][ T4574] ? kernfs_new_node+0x250/0x250 [ 94.650533][ T4574] ? pcpu_alloc+0x1102/0x16b0 [ 94.655254][ T4574] kernfs_new_node+0x148/0x250 [ 94.660061][ T4574] kernfs_create_dir_ns+0x40/0x120 [ 94.665260][ T4574] cgroup_mkdir+0x4aa/0xe70 [ 94.669820][ T4574] ? __up_read+0x2b4/0x6b0 [ 94.674272][ T4574] ? css_task_iter_end+0x280/0x280 [ 94.679415][ T4574] ? up_read+0x20/0x20 [ 94.683525][ T4574] ? do_raw_spin_unlock+0x11d/0x230 [ 94.688770][ T4574] ? kernfs_iop_permission+0x26d/0x350 [ 94.694293][ T4574] ? css_task_iter_end+0x280/0x280 [ 94.699455][ T4574] kernfs_iop_mkdir+0x23d/0x3d0 [ 94.704374][ T4574] vfs_mkdir+0x386/0x570 [ 94.708917][ T4574] do_mkdirat+0x1d8/0x440 [ 94.713280][ T4574] ? vfs_mkdir+0x570/0x570 [ 94.717831][ T4574] __x64_sys_mkdirat+0x85/0x90 [ 94.722634][ T4574] do_syscall_64+0x4c/0xa0 [ 94.727550][ T4574] ? clear_bhb_loop+0x60/0xb0 [ 94.732275][ T4574] ? clear_bhb_loop+0x60/0xb0 [ 94.736994][ T4574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.742968][ T4574] RIP: 0033:0x7faf9179e159 [ 94.747427][ T4574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.767586][ T4574] RSP: 002b:00007faf9271d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.771460][ T4556] loop4: detected capacity change from 0 to 32768 [ 94.776038][ T4574] RAX: ffffffffffffffda RBX: 00007faf91a25fa0 RCX: 00007faf9179e159 [ 94.776087][ T4574] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 94.776101][ T4574] RBP: 00007faf91835024 R08: 0000000000000000 R09: 0000000000000000 [ 94.806610][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.814607][ T4574] R13: 00007faf91a26038 R14: 00007faf91a25fa0 R15: 00007ffcbbc23138 [ 94.822632][ T4574] [ 94.834303][ T4556] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.46 (4556) [ 94.899415][ T4319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.962325][ T4529] BTRFS info (device loop2): balance: start -d -m [ 95.019691][ T4529] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 95.104130][ T4319] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.119525][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.141386][ T4529] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 95.141748][ T4264] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4264) [ 95.163026][ T4319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.179357][ T4319] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 95.202661][ T4319] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.229715][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.248725][ T4319] usb 1-1: Product: syz [ 95.258861][ T4319] usb 1-1: Manufacturer: syz [ 95.283289][ T4319] cdc_wdm 1-1:1.0: skipping garbage [ 95.288555][ T4319] cdc_wdm 1-1:1.0: skipping garbage [ 95.309440][ T4319] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 95.476621][ T4535] usb 2-1: USB disconnect, device number 2 [ 95.520046][ T4289] Bluetooth: hci0: unexpected event for opcode 0x080d [ 95.540800][ T4319] usb 1-1: USB disconnect, device number 2 [ 95.541742][ T4581] loop3: detected capacity change from 0 to 164 [ 95.633624][ T4529] BTRFS info (device loop2): found 7 extents, stage: move data extents [ 95.787352][ T4581] rock: directory entry would overflow storage [ 95.793702][ T4581] rock: sig=0x4f50, size=4, remaining=3 [ 95.799399][ T4581] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 95.820835][ T4529] BTRFS info (device loop2): balance: canceled [ 95.843675][ T4556] loop4: detected capacity change from 0 to 32768 [ 95.927211][ T4556] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 97.202731][ T4265] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 97.306278][ T4285] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.725469][ T4604] loop1: detected capacity change from 0 to 4096 [ 97.754561][ T4604] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 97.950319][ T4604] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.958593][ T4623] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 98.142358][ T26] audit: type=1804 audit(1788303946.170:3): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.56" name="/newroot/10/file0/file0" dev="loop1" ino=0 res=1 errno=0 [ 98.816647][ T4626] loop2: detected capacity change from 0 to 32768 [ 98.945905][ T4626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.58 (4626) [ 99.471888][ T4626] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.520968][ T4289] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 99.529607][ T4289] Bluetooth: hci0: Injecting HCI hardware error event [ 99.541210][ T4626] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.547300][ T4289] Bluetooth: hci0: hardware error 0x00 [ 99.588221][ T4626] BTRFS info (device loop2): using free space tree [ 99.835960][ T4648] block device autoloading is deprecated and will be removed. [ 99.959280][ T4626] BTRFS info (device loop2): enabling ssd optimizations [ 100.085565][ T4626] fs-verity: sha512 using implementation "sha512-avx2" [ 100.157950][ T4626] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 100.497560][ T4285] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.747714][ T4682] o2cb: This node has not been configured. [ 100.755107][ T4682] o2cb: Cluster check failed. Fix errors before retrying. [ 100.762580][ T4682] (syz.0.73,4682,1):user_dlm_register:674 ERROR: status = -22 [ 100.770383][ T4682] (syz.0.73,4682,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 101.246736][ T4668] loop3: detected capacity change from 0 to 40427 [ 101.295214][ T4668] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.341478][ T4668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.398420][ T4668] F2FS-fs (loop3): invalid crc value [ 101.588085][ T4668] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.679420][ T4289] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.850840][ T4698] device syzkaller0 entered promiscuous mode [ 101.890897][ T4668] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.914568][ T4668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.728894][ T4707] loop1: detected capacity change from 0 to 512 [ 102.776135][ T4280] syz-executor: attempt to access beyond end of device [ 102.776135][ T4280] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.820002][ T4707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.882331][ T4707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.959602][ T4707] EXT4-fs (loop1): 1 truncate cleaned up [ 102.968467][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.217100][ T4718] socket: no more sockets [ 103.273965][ T4717] loop2: detected capacity change from 0 to 4096 [ 103.632515][ T4717] NILFS (loop2): invalid segment: Checksum error in segment payload [ 103.699337][ T4717] NILFS (loop2): trying rollback from an earlier position [ 103.822044][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 103.848231][ T4717] NILFS (loop2): recovery complete [ 103.910339][ T4721] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.957182][ T4723] loop1: detected capacity change from 0 to 128 [ 104.014786][ T4705] loop0: detected capacity change from 0 to 32768 [ 104.094213][ T4723] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 104.124147][ T4723] FAT-fs (loop1): Filesystem has been set read-only [ 104.136625][ T26] audit: type=1800 audit(1788303952.160:4): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.89" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 104.181031][ T4723] syz.1.90: attempt to access beyond end of device [ 104.181031][ T4723] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 104.196187][ T4723] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 104.197082][ T4705] JBD2: Ignoring recovery information on journal [ 104.204229][ T4723] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 104.255020][ T4723] syz.1.90: attempt to access beyond end of device [ 104.255020][ T4723] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.269859][ T26] audit: type=1800 audit(1788303952.300:5): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.90" name="file2" dev="loop1" ino=1048597 res=0 errno=0 [ 104.387402][ T4723] syz.1.90 (4723) used greatest stack depth: 20384 bytes left [ 104.427378][ T4705] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.010621][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 105.213433][ T4743] o2cb: This node has not been configured. [ 105.219370][ T4743] o2cb: Cluster check failed. Fix errors before retrying. [ 105.227639][ T4743] (syz.4.91,4743,0):user_dlm_register:674 ERROR: status = -22 [ 105.235298][ T4743] (syz.4.91,4743,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 106.222667][ T4736] loop1: detected capacity change from 0 to 32768 [ 106.310797][ T4736] JBD2: Ignoring recovery information on journal [ 106.450670][ T4761] loop4: detected capacity change from 0 to 256 [ 106.458149][ T4761] exfat: Deprecated parameter 'namecase' [ 106.462609][ T4736] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.464464][ T4761] exfat: Deprecated parameter 'utf8' [ 106.505978][ T4756] loop3: detected capacity change from 0 to 2048 [ 106.533133][ T4761] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 106.567426][ T4756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.715170][ T26] audit: type=1800 audit(1788303954.740:6): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 107.905333][ T4786] Bluetooth: MGMT ver 1.22 [ 107.938173][ T4289] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 107.947196][ T4289] Bluetooth: hci2: unexpected event for opcode 0x042d [ 107.981946][ T4772] loop0: detected capacity change from 0 to 32768 [ 108.061838][ T4772] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 108.152196][ T4772] JBD2: Ignoring recovery information on journal [ 108.241991][ T4275] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 108.313346][ T4275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.334187][ T4275] OCFS2: File system is now read-only. [ 108.346336][ T4275] (syz-executor,4275,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 108.367038][ T4275] (syz-executor,4275,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 108.385066][ T4275] (syz-executor,4275,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 108.409326][ T4275] (syz-executor,4275,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 108.448910][ T4275] (syz-executor,4275,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 108.478322][ T4772] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.493174][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 108.582051][ T4797] o2cb: This node has not been configured. [ 108.588002][ T4797] o2cb: Cluster check failed. Fix errors before retrying. [ 108.595375][ T4797] (syz.4.111,4797,1):user_dlm_register:674 ERROR: status = -22 [ 108.603111][ T4797] (syz.4.111,4797,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 109.268767][ T4772] (syz.0.104,4772,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 109.355900][ T4772] loop0: detected capacity change from 32768 to 32767 [ 109.403221][ T4799] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 0 has bad signature [ 109.483513][ T4799] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.529974][ T4799] OCFS2: File system is now read-only. [ 109.535507][ T4799] (syz.0.104,4799,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 109.546302][ T4772] syz.0.104 (4772) used greatest stack depth: 17664 bytes left [ 109.691527][ T4799] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 0 has bad signature [ 109.722793][ T4812] loop2: detected capacity change from 0 to 2048 [ 109.788684][ T4812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.872941][ T4799] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.933243][ T4799] (syz.0.104,4799,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 109.963872][ T4799] (syz.0.104,4799,0):ocfs2_mknod:502 ERROR: status = -30 [ 110.006544][ T4799] (syz.0.104,4799,0):ocfs2_create:676 ERROR: status = -30 [ 110.777587][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 111.375925][ T4833] loop4: detected capacity change from 0 to 512 [ 111.442248][ T4833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.538496][ T4833] EXT4-fs (loop4): 1 truncate cleaned up [ 111.623508][ T4833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.081499][ T4289] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 112.091243][ T4289] Bluetooth: hci2: Injecting HCI hardware error event [ 112.103064][ T4272] Bluetooth: hci2: hardware error 0x00 [ 112.272041][ T4851] device syzkaller0 entered promiscuous mode [ 112.431266][ T4857] loop3: detected capacity change from 0 to 64 [ 112.492724][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 112.845822][ T4860] loop4: detected capacity change from 0 to 2048 [ 113.516317][ T4860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.249511][ T4272] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 114.393694][ T4884] loop1: detected capacity change from 0 to 512 [ 114.424330][ T4886] device syzkaller0 entered promiscuous mode [ 114.427509][ T4884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.443464][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.525519][ T4884] EXT4-fs (loop1): 1 truncate cleaned up [ 114.559628][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.652236][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.676156][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.702111][ T4325] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 114.726065][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.792310][ T4325] usb 4-1: config 0 descriptor?? [ 115.310830][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.344619][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.382597][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.422208][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.465041][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.486926][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.516829][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.534389][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.583395][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.604549][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.622169][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.630105][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.637174][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.644713][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.652444][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.666658][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.675491][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.689618][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.703211][ T4906] hub 1-0:1.0: USB hub found [ 115.708572][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.713781][ T4906] hub 1-0:1.0: 1 port detected [ 115.715762][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.729123][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.736716][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.745941][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.753149][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.761404][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.768250][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.775766][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.783036][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.790593][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.797411][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.804684][ T4325] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 115.820125][ T4325] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 115.843626][ T4325] usb 4-1: USB disconnect, device number 2 [ 115.883868][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 116.192962][ T4908] fido_id[4908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 116.397022][ T4917] o2cb: This node has not been configured. [ 116.403151][ T4917] o2cb: Cluster check failed. Fix errors before retrying. [ 116.410510][ T4917] (syz.2.151,4917,0):user_dlm_register:674 ERROR: status = -22 [ 116.418145][ T4917] (syz.2.151,4917,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 116.926713][ T4920] loop4: detected capacity change from 0 to 2048 [ 116.967822][ T4920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.227659][ T4924] device syzkaller0 entered promiscuous mode [ 118.117116][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.127142][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 118.138171][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 118.147558][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 118.157072][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 118.166474][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 118.176199][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 118.210673][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.284503][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.395915][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.430368][ T4952] loop1: detected capacity change from 0 to 164 [ 118.457665][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.630688][ T4952] rock: directory entry would overflow storage [ 118.636907][ T4952] rock: sig=0x4f50, size=4, remaining=3 [ 118.642585][ T4952] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 118.732079][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.805286][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.854658][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.890690][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.007162][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.018591][ T4942] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.180717][ T4970] loop1: detected capacity change from 0 to 2048 [ 119.226755][ T4970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.229237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8e!!! [ 119.279255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38e!!! [ 119.293264][ T4973] loop4: detected capacity change from 0 to 256 [ 119.309242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39e!!! [ 119.319250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39e!!! [ 119.329239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39e!!! [ 119.423202][ T4973] exfat: Deprecated parameter 'namecase' [ 120.212964][ T4973] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 120.294488][ T4973] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 120.449101][ T26] audit: type=1800 audit(1788303968.470:7): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=1048599 res=0 errno=0 [ 120.592363][ T4986] loop1: detected capacity change from 0 to 164 [ 120.843373][ T4986] rock: directory entry would overflow storage [ 120.849943][ T4986] rock: sig=0x4f50, size=4, remaining=3 [ 120.855772][ T4986] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 121.136164][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.146608][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 121.154140][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 121.161442][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 121.168933][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 121.177566][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 121.185184][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 121.281482][ T5006] socket: no more sockets [ 121.436455][ T5010] loop2: detected capacity change from 0 to 2048 [ 121.478502][ T5010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.682734][ T5026] loop4: detected capacity change from 0 to 164 [ 122.905338][ T5017] loop0: detected capacity change from 0 to 32768 [ 122.914673][ T5026] rock: directory entry would overflow storage [ 122.920969][ T5026] rock: sig=0x4f50, size=4, remaining=3 [ 122.926644][ T5026] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 123.034857][ T5017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (5017) [ 123.067547][ T5017] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.084676][ T5017] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 123.140318][ T5017] BTRFS info (device loop0): using free space tree [ 123.370001][ T5017] BTRFS info (device loop0): enabling ssd optimizations [ 123.457227][ T5066] loop3: detected capacity change from 0 to 164 [ 123.575799][ T4271] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.874513][ T5070] rock: directory entry would overflow storage [ 123.881074][ T5070] rock: sig=0x4f50, size=4, remaining=3 [ 123.886753][ T5070] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 124.360087][ T5072] fuse: Unknown parameter 'user_i00000000000000000000' [ 125.435091][ T5089] loop4: detected capacity change from 0 to 164 [ 125.711454][ T5092] loop3: detected capacity change from 0 to 2048 [ 125.737676][ T5089] rock: directory entry would overflow storage [ 125.743975][ T5089] rock: sig=0x4f50, size=4, remaining=3 [ 125.749651][ T5089] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 125.848852][ T5092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.274753][ T5108] loop0: detected capacity change from 0 to 164 [ 127.317458][ T5116] rock: directory entry would overflow storage [ 127.323851][ T5116] rock: sig=0x4f50, size=4, remaining=3 [ 127.329536][ T5116] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 127.744168][ T5107] loop1: detected capacity change from 0 to 32768 [ 127.770680][ T5107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.217 (5107) [ 127.867460][ T5107] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.906147][ T5107] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 127.937498][ T5133] loop0: detected capacity change from 0 to 164 [ 127.939769][ T5107] BTRFS info (device loop1): using free space tree [ 128.267258][ T5133] rock: directory entry would overflow storage [ 128.273892][ T5133] rock: sig=0x4f50, size=4, remaining=3 [ 128.279544][ T5133] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 128.367926][ T5107] BTRFS info (device loop1): enabling ssd optimizations [ 128.436963][ T5122] loop3: detected capacity change from 0 to 32768 [ 128.494030][ T5122] JBD2: Ignoring recovery information on journal [ 128.572428][ T5122] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.573435][ T4275] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.670663][ T5164] loop2: detected capacity change from 0 to 512 [ 128.850163][ T5164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.982927][ T5164] EXT4-fs (loop2): 1 truncate cleaned up [ 128.988639][ T5164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.124574][ T5174] loop3: detected capacity change from 32768 to 64 [ 129.222043][ T5177] loop0: detected capacity change from 0 to 2048 [ 129.247714][ T4272] Bluetooth: hci1: unexpected event for opcode 0x203b [ 129.285811][ T5177] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.408273][ T5182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.430436][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop0 [ 129.443583][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.443583][ T5166] loop3: rw=2049, sector=25248, nr_sectors = 1 limit=64 [ 129.489588][ T5166] Buffer I/O error on dev loop3, logical block 25248, lost async page write [ 129.552367][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.552367][ T5166] loop3: rw=2049, sector=25249, nr_sectors = 1 limit=64 [ 129.602810][ T5166] Buffer I/O error on dev loop3, logical block 25249, lost async page write [ 129.650078][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.650078][ T5166] loop3: rw=2049, sector=25250, nr_sectors = 1 limit=64 [ 129.694614][ T5166] Buffer I/O error on dev loop3, logical block 25250, lost async page write [ 129.738589][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.738589][ T5166] loop3: rw=2049, sector=25251, nr_sectors = 1 limit=64 [ 129.793285][ T5166] Buffer I/O error on dev loop3, logical block 25251, lost async page write [ 129.822681][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.822681][ T5166] loop3: rw=2049, sector=25252, nr_sectors = 1 limit=64 [ 129.871563][ T5166] Buffer I/O error on dev loop3, logical block 25252, lost async page write [ 129.902287][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 129.902287][ T5166] loop3: rw=2049, sector=25253, nr_sectors = 1 limit=64 [ 129.963446][ T5166] Buffer I/O error on dev loop3, logical block 25253, lost async page write [ 130.012844][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 130.012844][ T5166] loop3: rw=2049, sector=25254, nr_sectors = 1 limit=64 [ 130.061445][ T5166] Buffer I/O error on dev loop3, logical block 25254, lost async page write [ 130.088180][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 130.088180][ T5166] loop3: rw=2049, sector=25255, nr_sectors = 1 limit=64 [ 130.144572][ T5166] Buffer I/O error on dev loop3, logical block 25255, lost async page write [ 130.189645][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 130.189645][ T5166] loop3: rw=2049, sector=25256, nr_sectors = 1 limit=64 [ 130.229259][ T5166] Buffer I/O error on dev loop3, logical block 25256, lost async page write [ 130.253458][ T5166] jbd2/loop3-75: attempt to access beyond end of device [ 130.253458][ T5166] loop3: rw=2049, sector=25257, nr_sectors = 1 limit=64 [ 130.291282][ T5166] Buffer I/O error on dev loop3, logical block 25257, lost async page write [ 130.467045][ T5166] JBD2: Detected IO errors while flushing file data on loop3-75 [ 130.471354][ T4280] (syz-executor,4280,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 130.486050][ T5166] Aborting journal on device loop3-75. [ 130.516258][ T5166] JBD2: I/O error when updating journal superblock for loop3-75. [ 130.563004][ T4280] (syz-executor,4280,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 130.814754][ T5166] JBD2: Detected IO errors while flushing file data on loop3-75 [ 130.865629][ T5203] loop1: detected capacity change from 0 to 1024 [ 130.979670][ T5203] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 131.008063][ T5203] hfsplus: failed to load root directory [ 131.046359][ T5197] loop4: detected capacity change from 0 to 32768 [ 131.066935][ T5197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.243 (5197) [ 131.128281][ T5197] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.192305][ T5197] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.223987][ T5197] BTRFS info (device loop4): using free space tree [ 131.413754][ T5210] loop1: detected capacity change from 0 to 4096 [ 131.414539][ T4389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.459506][ T5210] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 131.591648][ T4389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.594370][ T4280] (syz-executor,4280,1):ocfs2_start_trans:381 ERROR: status = -30 [ 131.640226][ T5197] BTRFS info (device loop4): enabling ssd optimizations [ 131.662896][ T4280] OCFS2: abort (device loop3): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 131.677671][ T5210] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.694515][ T4280] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.735029][ T4389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.749626][ T4280] OCFS2: File system is now read-only. [ 131.755149][ T4280] (syz-executor,4280,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 131.790267][ T4280] (syz-executor,4280,0):ocfs2_write_block:78 ERROR: status = -5 [ 131.819349][ T4280] (syz-executor,4280,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 131.847046][ T4280] (syz-executor,4280,0):ocfs2_put_slot:517 ERROR: status = -5 [ 131.855586][ T4282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.876058][ T4280] (syz-executor,4280,0):ocfs2_journal_shutdown:1075 ERROR: status = -5 [ 131.923663][ T4280] journal_release_journal_head: freeing b_committed_data [ 131.941786][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 131.953056][ T4389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.986508][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 132.882560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.247656][ T5182] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 133.269276][ T5182] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 133.307830][ T5182] Remounting filesystem read-only [ 133.933564][ T5225] loop1: detected capacity change from 0 to 32768 [ 134.033583][ T5225] JBD2: Ignoring recovery information on journal [ 134.282840][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 134.316095][ T5225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.467942][ T5225] (syz.1.250,5225,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 134.589600][ T5246] loop2: detected capacity change from 0 to 40427 [ 134.626886][ T5246] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x3ffff [ 134.692074][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 134.866726][ T5261] loop4: detected capacity change from 0 to 512 [ 134.910711][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.933647][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.947171][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.962666][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.962698][ T5261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.988715][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 134.996438][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.029388][ T5243] loop0: detected capacity change from 0 to 32768 [ 135.072016][ T5243] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.256 (5243) [ 135.149357][ T5243] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.150935][ T5261] EXT4-fs (loop4): 1 truncate cleaned up [ 135.177630][ T5261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.232026][ T5243] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 135.285363][ T5243] BTRFS info (device loop0): using free space tree [ 135.425411][ T5276] loop1: detected capacity change from 0 to 4096 [ 135.537790][ T5276] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 135.564218][ T5243] BTRFS info (device loop0): enabling ssd optimizations [ 135.669788][ T5243] BTRFS info (device loop0: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.697696][ T5243] BTRFS info (device loop0: state M): use zstd compression, level 15 [ 135.736529][ T5276] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 136.027025][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.041022][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 137.835768][ T4389] device hsr_slave_0 left promiscuous mode [ 137.865892][ T4389] device hsr_slave_1 left promiscuous mode [ 137.907520][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.939131][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.964206][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.992665][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.022118][ T4389] device bridge_slave_1 left promiscuous mode [ 138.025479][ T5316] loop1: detected capacity change from 0 to 4096 [ 138.030469][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.104690][ T4389] device bridge_slave_0 left promiscuous mode [ 138.120327][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.252122][ T4389] device veth1_macvtap left promiscuous mode [ 138.258725][ T4389] device veth0_macvtap left promiscuous mode [ 138.290064][ T4389] device veth1_vlan left promiscuous mode [ 138.321530][ T4389] device veth0_vlan left promiscuous mode [ 139.116909][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 139.122827][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 139.244620][ T26] audit: type=1800 audit(1788303987.270:8): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 139.886689][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 139.947609][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 140.002724][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.058719][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.199925][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 141.446177][ T4389] bond0 (unregistering): Released all slaves [ 141.578089][ T5262] chnl_net:caif_netlink_parms(): no params data found [ 141.934268][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.937970][ T5352] loop4: detected capacity change from 0 to 256 [ 141.958649][ T5352] exfat: Deprecated parameter 'namecase' [ 141.982333][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.982455][ T5352] exfat: Deprecated parameter 'utf8' [ 142.036279][ T5262] device bridge_slave_0 entered promiscuous mode [ 142.051670][ T5352] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 142.057602][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.123752][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.160936][ T5262] device bridge_slave_1 entered promiscuous mode [ 142.230585][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.282493][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.365341][ T5355] loop1: detected capacity change from 0 to 4096 [ 142.396234][ T5355] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 142.452321][ T5262] team0: Port device team_slave_0 added [ 142.466656][ T5262] team0: Port device team_slave_1 added [ 142.544954][ T5355] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 142.569948][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.576951][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.707753][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.766162][ T5344] loop0: detected capacity change from 0 to 32768 [ 142.799806][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.809262][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.903109][ T5344] JBD2: Ignoring recovery information on journal [ 142.909031][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.035337][ T5344] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.090981][ T5262] device hsr_slave_0 entered promiscuous mode [ 143.161735][ T5262] device hsr_slave_1 entered promiscuous mode [ 143.180022][ T5262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.215368][ T5373] loop2: detected capacity change from 0 to 512 [ 143.225934][ T5262] Cannot create hsr debugfs directory [ 143.234906][ T5344] (syz.0.270,5344,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 143.279443][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 143.300331][ T5373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.350085][ T5344] loop0: detected capacity change from 32768 to 0 [ 143.375096][ T5373] EXT4-fs (loop2): 1 truncate cleaned up [ 143.453701][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.545112][ T5262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.584873][ T5262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.682050][ T5262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.736240][ T5262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.852783][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 144.472623][ T5384] IPVS: dh: FWM 3 0x00000003 - no destination available [ 144.496152][ T5365] loop1: detected capacity change from 0 to 32768 [ 144.632268][ T5390] loop4: detected capacity change from 0 to 164 [ 144.640707][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.660492][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.667582][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.740320][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.855563][ T5390] rock: directory entry would overflow storage [ 144.862035][ T5390] rock: sig=0x4f50, size=4, remaining=3 [ 144.867613][ T5390] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 144.959909][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.985005][ T5365] XFS (loop1): Mounting V5 Filesystem [ 145.004848][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.061978][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.069271][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.078602][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.088757][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.097616][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.104818][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.115486][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.128497][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.137642][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.154069][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.163247][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.171751][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.187901][ T5365] XFS (loop1): Ending clean mount [ 145.193416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.233148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.270383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.298099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.373516][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.409917][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.452030][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.681886][ T4275] XFS (loop1): Unmounting Filesystem [ 145.958252][ T5395] loop0: detected capacity change from 0 to 32768 [ 146.078240][ T5395] JBD2: Ignoring recovery information on journal [ 146.157707][ T5395] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.166385][ T5422] loop4: detected capacity change from 0 to 4096 [ 146.209367][ T5422] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 146.337246][ T5422] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 146.597399][ T4271] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 146.619609][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.655616][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.668599][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.726557][ T4271] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.765022][ T4271] OCFS2: File system is now read-only. [ 146.786534][ T4271] (syz-executor,4271,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 146.900395][ T4271] (syz-executor,4271,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 146.936353][ T4271] (syz-executor,4271,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 147.011014][ T4271] (syz-executor,4271,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 147.100128][ T4271] (syz-executor,4271,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 147.131141][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 147.729732][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 147.916092][ T5454] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 148.087994][ T5438] loop0: detected capacity change from 0 to 32768 [ 148.132982][ T5438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.284 (5438) [ 148.235915][ T5438] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.312233][ T5438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.349590][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.367062][ T5438] BTRFS info (device loop0): setting nodatacow, compression disabled [ 148.379089][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.440337][ T5438] BTRFS info (device loop0): setting datasum, datacow enabled [ 148.456238][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.475324][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.479279][ T5438] BTRFS info (device loop0): force clearing of disk cache [ 148.503397][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.559335][ T5438] BTRFS info (device loop0): enabling ssd optimizations [ 148.569598][ T5438] BTRFS info (device loop0): using spread ssd allocation scheme [ 148.577286][ T5438] BTRFS info (device loop0): turning on sync discard [ 148.587876][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.617759][ T5262] device veth0_vlan entered promiscuous mode [ 148.657927][ T5438] BTRFS info (device loop0): turning on flush-on-commit [ 148.658035][ T5262] device veth1_vlan entered promiscuous mode [ 148.689994][ T5464] loop2: detected capacity change from 0 to 4096 [ 148.690054][ T5438] BTRFS info (device loop0): not using ssd optimizations [ 148.741968][ T5464] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 148.744381][ T5438] BTRFS info (device loop0): not using spread ssd allocation scheme [ 148.822086][ T5438] BTRFS info (device loop0): using free space tree [ 148.841533][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.868271][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.877397][ T5464] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 148.928990][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.997912][ T5449] loop1: detected capacity change from 0 to 32768 [ 149.007484][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.096918][ T5262] device veth0_macvtap entered promiscuous mode [ 149.148387][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.159839][ T5262] device veth1_macvtap entered promiscuous mode [ 149.198194][ T5449] JBD2: Ignoring recovery information on journal [ 149.226595][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.289304][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.299167][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.356981][ T5449] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.375158][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.402920][ T5438] BTRFS info (device loop0): rebuilding free space tree [ 149.410905][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.433040][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.463606][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.556554][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.586323][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.635469][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 149.687069][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.748472][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.794444][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.829010][ T5500] loop2: detected capacity change from 0 to 512 [ 149.856926][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.895636][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.935387][ T5500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.944256][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.999895][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.032209][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.032772][ T5438] BTRFS info (device loop0): balance: start -d -m [ 150.097180][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.103287][ T5500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.119449][ T5500] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.146867][ T5501] loop0: detected capacity change from 32768 to 0 [ 150.187408][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.240177][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.279877][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.339913][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.398645][ T5262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.427779][ T5262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.490452][ T5262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.520601][ T5262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.524045][ T5438] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 150.757899][ T5524] loop1: detected capacity change from 0 to 1024 [ 150.783841][ T5438] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 150.805204][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 150.867524][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.886107][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.889235][ T5438] BTRFS info (device loop0): balance: canceled [ 150.922928][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.937623][ T5524] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 150.989669][ T5524] hfsplus: failed to load root directory [ 151.018672][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.035779][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.092422][ T5529] bridge0: port 3(bond1) entered blocking state [ 151.114645][ T5529] bridge0: port 3(bond1) entered disabled state [ 151.181689][ T5529] device bond1 entered promiscuous mode [ 151.188092][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.366628][ T4271] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.614725][ T5539] loop2: detected capacity change from 0 to 2048 [ 151.680744][ T5536] syz.1.307 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.743122][ T5539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.748742][ T5522] loop4: detected capacity change from 0 to 32768 [ 151.774140][ T5536] CPU: 0 PID: 5536 Comm: syz.1.307 Not tainted syzkaller #0 [ 151.781496][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.791694][ T5536] Call Trace: [ 151.795026][ T5536] [ 151.797982][ T5536] dump_stack_lvl+0x188/0x24e [ 151.802819][ T5536] ? ___ratelimit+0x14e/0x610 [ 151.807540][ T5536] ? show_regs_print_info+0x12/0x12 [ 151.812782][ T5536] ? load_image+0x410/0x410 [ 151.817406][ T5536] ? ___ratelimit+0x474/0x610 [ 151.822219][ T5536] ? radix_tree_cpu_dead+0x160/0x160 [ 151.827527][ T5536] dump_header+0xd8/0x820 [ 151.831896][ T5536] oom_kill_process+0x361/0x550 [ 151.836768][ T5536] out_of_memory+0xe25/0x1220 [ 151.841459][ T5536] ? mutex_lock_nested+0x10/0x10 [ 151.846424][ T5536] ? unregister_oom_notifier+0x20/0x20 [ 151.851949][ T5536] mem_cgroup_out_of_memory+0x2c0/0x390 [ 151.857533][ T5536] ? mem_cgroup_oom_trylock+0x210/0x210 [ 151.863115][ T5536] ? do_raw_spin_unlock+0x11d/0x230 [ 151.868335][ T5536] try_charge_memcg+0xc9d/0x17c0 [ 151.873395][ T5536] ? percpu_ref_put+0x180/0x180 [ 151.878261][ T5536] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 151.884014][ T5536] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.890020][ T5536] ? percpu_ref_tryget+0x15/0x180 [ 151.895057][ T5536] ? percpu_ref_tryget+0x15/0x180 [ 151.900218][ T5536] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 151.905979][ T5536] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 151.911781][ T5536] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 151.917622][ T5536] obj_cgroup_charge+0x36a/0x620 [ 151.922598][ T5536] ? obj_cgroup_charge+0xe9/0x620 [ 151.927703][ T5536] ? mod_objcg_mlstate+0x320/0x320 [ 151.932939][ T5536] ? percpu_ref_put+0x12/0x100 [ 151.937714][ T5536] ? percpu_ref_put+0x12/0x100 [ 151.942588][ T5536] slab_pre_alloc_hook+0x2e2/0x300 [ 151.947823][ T5536] ? slab_pre_alloc_hook+0xb1/0x300 [ 151.953057][ T5536] kmem_cache_alloc_lru+0x49/0x2e0 [ 151.958190][ T5536] ? new_inode_pseudo+0x7e/0x1c0 [ 151.963141][ T5536] new_inode_pseudo+0x7e/0x1c0 [ 151.967916][ T5536] new_inode+0x25/0x1d0 [ 151.972085][ T5536] simple_fill_super+0xca/0x5e0 [ 151.976962][ T5536] ? net_generic+0x1e/0x240 [ 151.981490][ T5536] nfsd_fill_super+0x80/0x110 [ 151.986193][ T5536] ? nfsd_fs_get_tree+0xc0/0xc0 [ 151.991062][ T5536] get_tree_keyed+0xd8/0x190 [ 151.995769][ T5536] vfs_get_tree+0x88/0x270 [ 152.000329][ T5536] do_new_mount+0x247/0xa40 [ 152.004863][ T5536] __se_sys_mount+0x2e3/0x3d0 [ 152.009568][ T5536] ? __x64_sys_mount+0xc0/0xc0 [ 152.014357][ T5536] ? lockdep_hardirqs_on+0x94/0x140 [ 152.019567][ T5536] ? __x64_sys_mount+0x1c/0xc0 [ 152.024345][ T5536] do_syscall_64+0x4c/0xa0 [ 152.028775][ T5536] ? clear_bhb_loop+0x60/0xb0 [ 152.033469][ T5536] ? clear_bhb_loop+0x60/0xb0 [ 152.038265][ T5536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.044180][ T5536] RIP: 0033:0x7f488059e159 [ 152.048602][ T5536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.068214][ T5536] RSP: 002b:00007f48813ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.076633][ T5536] RAX: ffffffffffffffda RBX: 00007f4880825fa0 RCX: 00007f488059e159 [ 152.084611][ T5536] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 152.092585][ T5536] RBP: 00007f4880635024 R08: 0000000000000000 R09: 0000000000000000 [ 152.100583][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.108558][ T5536] R13: 00007f4880826038 R14: 00007f4880825fa0 R15: 00007ffc238221c8 [ 152.116545][ T5536] [ 152.151835][ T5536] memory: usage 4kB, limit 0kB, failcnt 23 [ 152.158262][ T5536] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 152.166221][ T5536] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 152.174028][ T5536] Memory cgroup stats for /syz1/test: [ 152.174659][ T5536] anon 0 [ 152.174659][ T5536] file 0 [ 152.174659][ T5536] kernel 4096 [ 152.174659][ T5536] kernel_stack 0 [ 152.174659][ T5536] pagetables 0 [ 152.174659][ T5536] sec_pagetables 0 [ 152.174659][ T5536] percpu 0 [ 152.174659][ T5536] sock 0 [ 152.174659][ T5536] vmalloc 0 [ 152.174659][ T5536] shmem 0 [ 152.174659][ T5536] zswap 0 [ 152.174659][ T5536] zswapped 0 [ 152.174659][ T5536] file_mapped 0 [ 152.174659][ T5536] file_dirty 0 [ 152.174659][ T5536] file_writeback 0 [ 152.174659][ T5536] swapcached 0 [ 152.174659][ T5536] anon_thp 0 [ 152.174659][ T5536] file_thp 0 [ 152.174659][ T5536] shmem_thp 0 [ 152.174659][ T5536] inactive_anon 0 [ 152.174659][ T5536] active_anon 0 [ 152.174659][ T5536] inactive_file 0 [ 152.174659][ T5536] active_file 0 [ 152.174659][ T5536] unevictable 0 [ 152.174659][ T5536] slab_reclaimable 384 [ 152.174659][ T5536] slab_unreclaimable 2656 [ 152.174659][ T5536] slab 3040 [ 152.174659][ T5536] workingset_refault_anon 0 [ 152.282349][ T5536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.307,pid=5535,uid=0 [ 152.301782][ T5536] Memory cgroup out of memory: Killed process 5535 (syz.1.307) total-vm:102244kB, anon-rss:1404kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 152.521106][ T5522] XFS (loop4): Mounting V5 Filesystem [ 152.704436][ T5522] XFS (loop4): Ending clean mount [ 152.761706][ T4609] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 152.819143][ T4609] XFS (loop4): Unmount and run xfs_repair [ 152.839251][ T4609] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 152.859309][ T4609] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 152.898950][ T4609] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 153.076514][ T4609] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 153.087128][ T4609] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 153.101471][ T4609] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 04 00 ................ [ 153.788030][ T4609] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.840529][ T4609] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.897603][ T4609] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.946747][ T5582] loop1: detected capacity change from 0 to 1024 [ 153.953594][ T5522] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 153.999381][ T5582] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 154.016452][ T5522] XFS (loop4): Failed to initialize disk quotas. [ 154.038960][ T5582] hfsplus: failed to load root directory [ 154.159017][ T4282] XFS (loop4): Unmounting Filesystem [ 154.354362][ T5591] loop1: detected capacity change from 0 to 64 [ 154.468788][ T5591] overlayfs: upper fs needs to support d_type. [ 154.502821][ T5591] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.516329][ T5565] loop5: detected capacity change from 0 to 32768 [ 154.524370][ T5591] overlayfs: failed to set xattr on upper [ 154.586957][ T5565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.311 (5565) [ 154.599438][ T5591] overlayfs: ...falling back to index=off,metacopy=off. [ 154.632531][ T5591] overlayfs: conflicting lowerdir path [ 154.676064][ T5565] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.727744][ T5565] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 154.776460][ T5565] BTRFS info (device loop5): using free space tree [ 155.247352][ T5587] loop0: detected capacity change from 0 to 32768 [ 155.457115][ T5587] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.318 (5587) [ 155.696248][ T5565] BTRFS info (device loop5): enabling ssd optimizations [ 155.991239][ T5587] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.011069][ T5262] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.059974][ T5587] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.873583][ T5587] BTRFS info (device loop0): setting nodatacow, compression disabled [ 156.949505][ T5587] BTRFS info (device loop0): setting datasum, datacow enabled [ 156.980518][ T5587] BTRFS info (device loop0): force clearing of disk cache [ 156.988330][ T5587] BTRFS info (device loop0): enabling ssd optimizations [ 157.065816][ T5587] BTRFS info (device loop0): using spread ssd allocation scheme [ 157.081549][ T5587] BTRFS info (device loop0): turning on sync discard [ 157.095363][ T5587] BTRFS info (device loop0): turning on flush-on-commit [ 157.105208][ T5587] BTRFS info (device loop0): not using ssd optimizations [ 157.114003][ T5587] BTRFS info (device loop0): not using spread ssd allocation scheme [ 157.127135][ T5587] BTRFS info (device loop0): using free space tree [ 157.613506][ T5587] BTRFS error (device loop0): open_ctree failed: -12 [ 157.846371][ T5665] loop5: detected capacity change from 0 to 512 [ 157.902672][ T5669] fuse: Invalid rootmode [ 157.912046][ T5665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.927150][ T5667] hub 1-0:1.0: USB hub found [ 157.975270][ T5667] hub 1-0:1.0: 1 port detected [ 158.028491][ T5665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.055448][ T5665] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.684355][ T5692] loop1: detected capacity change from 0 to 2048 [ 158.831836][ T5692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.260415][ T5262] EXT4-fs (loop5): unmounting filesystem. [ 159.707606][ T5678] loop2: detected capacity change from 0 to 32768 [ 159.729840][ T5678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.337 (5678) [ 160.878036][ T5678] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.899430][ T5678] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 160.908133][ T5678] BTRFS info (device loop2): disabling tree log [ 160.960976][ T5678] BTRFS info (device loop2): using free space tree [ 161.370456][ T5678] BTRFS error (device loop2): open_ctree failed: -12 [ 161.375052][ T4265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4265) [ 161.446458][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'. [ 161.502740][ T5728] overlayfs: failed to resolve './file1': -2 [ 161.788946][ T5702] loop5: detected capacity change from 0 to 32768 [ 161.847327][ T5702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.340 (5702) [ 161.913428][ T5702] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.973411][ T5702] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 162.057700][ T5702] BTRFS info (device loop5): using free space tree [ 162.134197][ T5738] fuse: Invalid rootmode [ 162.399520][ T5702] BTRFS info (device loop5): enabling ssd optimizations [ 162.469081][ T5702] BTRFS info (device loop5: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.487604][ T5702] BTRFS info (device loop5: state M): use zstd compression, level 15 [ 162.676597][ T5262] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.887283][ T5794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 163.951159][ T5794] overlayfs: failed to resolve './file1': -2 [ 166.404106][ T5820] loop2: detected capacity change from 0 to 2048 [ 166.426858][ T5820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.486345][ T5786] loop1: detected capacity change from 0 to 40427 [ 166.623102][ T5786] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 168.010863][ T5786] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.067623][ T5786] F2FS-fs (loop1): invalid crc value [ 168.092294][ T5786] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 168.570702][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 168.611624][ T5843] overlayfs: failed to resolve './file1': -2 [ 168.786505][ T5845] loop5: detected capacity change from 0 to 512 [ 168.800705][ T4366] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.846536][ T5845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.987531][ T5845] EXT4-fs (loop5): 1 truncate cleaned up [ 168.999304][ T4366] usb 3-1: Using ep0 maxpacket: 8 [ 169.006212][ T4366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.018363][ T5845] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.028737][ T4366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.037992][ T4366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 169.059252][ T4366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 169.092531][ T4366] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 169.260641][ T4366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.281807][ T4366] hub 3-1:1.0: bad descriptor, ignoring hub [ 169.288540][ T4366] hub: probe of 3-1:1.0 failed with error -5 [ 169.358831][ T4366] cdc_wdm 3-1:1.0: skipping garbage [ 169.376783][ T5857] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 169.503123][ T4366] cdc_wdm 3-1:1.0: skipping garbage [ 169.833134][ T4366] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 169.862645][ T5857] device bond1 entered promiscuous mode [ 169.871669][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.007742][ T4366] cdc_wdm 3-1:1.0: Unknown control protocol [ 173.306184][ T5868] loop0: detected capacity change from 0 to 2048 [ 173.319545][ T4609] usb 3-1: USB disconnect, device number 3 [ 173.357215][ T5868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.366685][ T4272] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 174.023151][ T5866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 176.025537][ T5262] EXT4-fs (loop5): unmounting filesystem. [ 176.414607][ T5891] loop0: detected capacity change from 0 to 40427 [ 176.438654][ T5891] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 176.456013][ T5891] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.479068][ T5891] F2FS-fs (loop0): invalid crc value [ 176.518224][ T5916] fuse: Bad value for 'rootmode' [ 176.543056][ T5891] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.700530][ T5891] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.713104][ T5891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.767065][ T5922] loop2: detected capacity change from 0 to 2048 [ 176.826827][ T5922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.684083][ T5927] loop1: detected capacity change from 0 to 32768 [ 177.720254][ T5927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.389 (5927) [ 177.836262][ T5927] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.875115][ T5927] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 177.934991][ T5927] BTRFS info (device loop1): using free space tree [ 177.943350][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.952837][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 177.963984][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 177.972611][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 177.982092][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 177.990718][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 177.995145][ T5939] sctp_transport_update_pmtu: 108 callbacks suppressed [ 177.995162][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 178.000274][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 178.005707][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 178.070427][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 178.108950][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.494446][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.551957][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.563020][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.583886][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.615449][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.627212][ T5939] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 179.756215][ T5927] BTRFS info (device loop1): enabling ssd optimizations [ 179.777952][ T5927] BTRFS info (device loop1: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 179.793150][ T5927] BTRFS info (device loop1: state M): use zstd compression, level 15 [ 179.970739][ T4275] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.043603][ T5935] loop5: detected capacity change from 0 to 32768 [ 180.190288][ T5935] JBD2: Ignoring recovery information on journal [ 180.403969][ T5935] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 180.601946][ T5262] ocfs2: Unmounting device (7,5) on (node local) [ 181.013936][ T5984] loop1: detected capacity change from 0 to 32768 [ 181.030631][ T5984] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.399 (5984) [ 181.053305][ T5984] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.099796][ T5984] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 181.123675][ T5984] BTRFS info (device loop1): setting nodatacow, compression disabled [ 181.144959][ T5984] BTRFS info (device loop1): setting datasum, datacow enabled [ 181.179527][ T5984] BTRFS info (device loop1): force clearing of disk cache [ 181.203856][ T5984] BTRFS info (device loop1): enabling ssd optimizations [ 181.234474][ T5984] BTRFS info (device loop1): using spread ssd allocation scheme [ 181.258556][ T5984] BTRFS info (device loop1): turning on sync discard [ 181.292405][ T5984] BTRFS info (device loop1): turning on flush-on-commit [ 181.316849][ T5984] BTRFS info (device loop1): not using ssd optimizations [ 181.339471][ T5984] BTRFS info (device loop1): not using spread ssd allocation scheme [ 181.376658][ T5984] BTRFS info (device loop1): using free space tree [ 181.604719][ T5984] BTRFS info (device loop1): rebuilding free space tree [ 181.649289][ T4366] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.727174][ T5984] BTRFS info (device loop1): balance: start -d -m [ 181.746069][ T5984] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 181.851082][ T4366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.899355][ T4366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.946865][ T4366] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.046185][ T4366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.128985][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.290698][ T4366] usb 1-1: Product: syz [ 182.366074][ T4366] usb 1-1: Manufacturer: syz [ 182.496269][ T4366] usb 1-1: SerialNumber: syz [ 182.818639][ T4366] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 182.850023][ T4366] cdc_ncm 1-1:1.0: bind() failure [ 182.899993][ T4366] usb 1-1: USB disconnect, device number 3 [ 182.976070][ T5984] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 183.043626][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.053923][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 183.063846][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 183.074118][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 183.083090][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 183.091611][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 183.095124][ T6056] sctp_transport_update_pmtu: 48 callbacks suppressed [ 183.095141][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.101261][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 183.192040][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.236805][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.267336][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.332636][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.381263][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.403421][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.436185][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.456908][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.507172][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 183.707015][ T5984] BTRFS info (device loop1): found 13 extents, stage: move data extents [ 183.834287][ T5984] BTRFS info (device loop1): balance: canceled [ 184.151817][ T6058] loop4: detected capacity change from 0 to 32768 [ 184.197714][ T4275] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.212005][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.409 (6058) [ 184.279380][ T6058] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.333591][ T6058] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 184.388037][ T6058] BTRFS info (device loop4): using free space tree [ 184.718665][ T6058] BTRFS info (device loop4): enabling ssd optimizations [ 184.980625][ T4282] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.204668][ T6106] fuse: Unknown parameter 'use00000000000000000000' [ 185.398200][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4264) [ 185.516152][ T6078] loop0: detected capacity change from 0 to 40427 [ 185.756060][ T6078] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 185.933894][ T6078] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.203599][ T6078] F2FS-fs (loop0): invalid crc value [ 186.222070][ T6078] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.448428][ T6078] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 186.470052][ T6078] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 186.518948][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.527316][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 186.534816][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 186.542127][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 186.549655][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 186.557337][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 186.565025][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 186.639628][ T4366] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.835576][ T4366] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.857014][ T4366] usb 2-1: config 1 has no interface number 0 [ 186.888460][ T4366] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 186.911950][ T4366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.930487][ T4366] usb 2-1: Product: syz [ 186.946357][ T4366] usb 2-1: Manufacturer: syz [ 186.974308][ T4366] usb 2-1: SerialNumber: syz [ 187.224142][ T4366] usb 2-1: 3:1 : does not exist [ 187.231894][ T4366] usb 2-1: 3:2 : does not exist [ 187.313851][ T4366] usb 2-1: USB disconnect, device number 3 [ 187.412389][ T6130] loop2: detected capacity change from 0 to 32768 [ 187.452721][ T6130] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.423 (6130) [ 187.553913][ T6130] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.571131][ T6133] loop0: detected capacity change from 0 to 4096 [ 187.608235][ T6130] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.628214][ T6130] BTRFS info (device loop2): setting nodatacow, compression disabled [ 187.646795][ T6130] BTRFS info (device loop2): setting datasum, datacow enabled [ 187.662936][ T6130] BTRFS info (device loop2): force clearing of disk cache [ 187.671994][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.679305][ T6130] BTRFS info (device loop2): enabling ssd optimizations [ 187.725814][ T6130] BTRFS info (device loop2): using spread ssd allocation scheme [ 187.753451][ T6130] BTRFS info (device loop2): turning on sync discard [ 187.767492][ T6139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.776147][ T6130] BTRFS info (device loop2): turning on flush-on-commit [ 187.807619][ T6130] BTRFS info (device loop2): not using ssd optimizations [ 187.840598][ T6130] BTRFS info (device loop2): not using spread ssd allocation scheme [ 187.877557][ T6130] BTRFS info (device loop2): using free space tree [ 189.540140][ T6130] BTRFS info (device loop2): rebuilding free space tree [ 189.556828][ T6135] loop5: detected capacity change from 0 to 32768 [ 189.647644][ T6135] JBD2: Ignoring recovery information on journal [ 189.687054][ T6130] BTRFS info (device loop2): balance: start -d -m [ 189.726801][ T6130] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 189.860493][ T6135] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 190.086603][ T5262] ocfs2: Unmounting device (7,5) on (node local) [ 191.382172][ T6130] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 191.505188][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.514546][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 191.524546][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 191.533816][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 191.543007][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 191.551713][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 191.561517][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 191.597533][ T6198] sctp_transport_update_pmtu: 106 callbacks suppressed [ 191.597545][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.688903][ T6130] BTRFS info (device loop2): balance: canceled [ 191.700432][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.770541][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.875543][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.897055][ T6204] loop5: detected capacity change from 0 to 1024 [ 191.963633][ T6204] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 192.006249][ T6204] hfsplus: failed to load root directory [ 192.096665][ T4285] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.144999][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.198352][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.260986][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.301301][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.385096][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.421236][ T6198] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.489081][ T6212] loop5: detected capacity change from 0 to 4096 [ 192.596985][ T6212] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 192.762170][ T6197] loop0: detected capacity change from 0 to 32768 [ 192.907080][ T6197] XFS (loop0): Mounting V5 Filesystem [ 193.166501][ T6197] XFS (loop0): Ending clean mount [ 193.237132][ T6197] XFS (loop0): Quotacheck needed: Please wait. [ 193.301701][ T6238] binder: 6211:6238 ioctl 401070cd 200000000000 returned -22 [ 193.383315][ T6241] loop4: detected capacity change from 0 to 2048 [ 193.432894][ T6197] XFS (loop0): Quotacheck: Done. [ 193.490462][ T6241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.014027][ T26] audit: type=1804 audit(1788304042.040:9): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.435" name="/newroot/74/file0/file0/file0" dev="loop0" ino=9284 res=1 errno=0 [ 194.075051][ T26] audit: type=1804 audit(1788304042.040:10): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.435" name="/newroot/74/file0/file0/bus" dev="loop0" ino=9292 res=1 errno=0 [ 194.335441][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341910][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.447341][ T4271] XFS (loop0): Unmounting Filesystem [ 194.528920][ T6253] o2cb: This node has not been configured. [ 194.535112][ T6253] o2cb: Cluster check failed. Fix errors before retrying. [ 194.542678][ T6253] (syz.5.443,6253,1):user_dlm_register:674 ERROR: status = -22 [ 194.550596][ T6253] (syz.5.443,6253,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 195.075685][ T6255] loop4: detected capacity change from 0 to 256 [ 195.088646][ T6255] exfat: Deprecated parameter 'namecase' [ 195.095576][ T6255] exfat: Deprecated parameter 'utf8' [ 195.154994][ T6255] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 195.683060][ T6261] loop4: detected capacity change from 0 to 32768 [ 195.820440][ T6261] JBD2: Ignoring recovery information on journal [ 195.899052][ T6261] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.965380][ T6261] (syz.4.448,6261,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 196.096907][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 196.401104][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 196.407172][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 196.414016][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 198.099835][ C1] sctp_transport_update_pmtu: 104 callbacks suppressed [ 198.099849][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 198.117102][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 198.982790][ T6284] loop5: detected capacity change from 0 to 32768 [ 199.052007][ T6284] JBD2: Ignoring recovery information on journal [ 199.100236][ T6284] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.317716][ T5262] ocfs2: Unmounting device (7,5) on (node local) [ 200.643192][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 200.651868][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 200.659422][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 200.666783][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 200.675170][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 200.682812][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 200.690415][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 200.712891][ T6271] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.445'. [ 201.054589][ T4344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.271333][ T4344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.293136][ T4344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.329522][ T4344] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 201.359080][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.393026][ T4344] usb 6-1: config 0 descriptor?? [ 201.711444][ T6302] loop2: detected capacity change from 0 to 32768 [ 201.798526][ T6302] JBD2: Ignoring recovery information on journal [ 201.907822][ T6304] loop1: detected capacity change from 0 to 32768 [ 201.940249][ T6304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.462 (6304) [ 201.991422][ T6304] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.065472][ T6304] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 202.082052][ T6298] loop4: detected capacity change from 0 to 40427 [ 202.100614][ T6302] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 202.709871][ T6304] BTRFS info (device loop1): setting nodatacow, compression disabled [ 202.780249][ T6304] BTRFS info (device loop1): setting datasum, datacow enabled [ 203.063348][ T6304] BTRFS info (device loop1): force clearing of disk cache [ 203.085318][ T6298] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 203.092668][ T6298] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 203.101911][ T6304] BTRFS info (device loop1): enabling ssd optimizations [ 203.110178][ T6304] BTRFS info (device loop1): using spread ssd allocation scheme [ 203.126494][ T6298] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 203.128693][ T6302] (syz.2.461,6302,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 203.135840][ T6304] BTRFS info (device loop1): turning on sync discard [ 203.168190][ T6298] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 203.189333][ T6304] BTRFS info (device loop1): turning on flush-on-commit [ 203.199985][ T6304] BTRFS info (device loop1): not using ssd optimizations [ 203.207789][ T6298] F2FS-fs (loop4): invalid crc value [ 203.221613][ T6304] BTRFS info (device loop1): not using spread ssd allocation scheme [ 203.233637][ T6304] BTRFS info (device loop1): using free space tree [ 203.330044][ T6298] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.930031][ T4344] usbhid 6-1:0.0: can't add hid device: -71 [ 203.939471][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 203.963638][ T6298] F2FS-fs (loop4): Start checkpoint disabled! [ 203.968972][ T4344] usbhid: probe of 6-1:0.0 failed with error -71 [ 203.989654][ T4344] usb 6-1: USB disconnect, device number 2 [ 204.269921][ T6351] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 205.401395][ T6304] BTRFS error (device loop1): open_ctree failed: -22 [ 205.470194][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.479537][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 205.487025][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 205.494559][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 205.502277][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 205.510140][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.517753][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.521114][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.601955][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.665797][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.721299][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.741186][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.768339][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.867347][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 205.925220][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 206.029282][ T4264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4264) [ 206.062044][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 206.082903][ T6364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 206.248167][ T6355] loop2: detected capacity change from 0 to 32768 [ 206.351724][ T6355] JBD2: Ignoring recovery information on journal [ 206.458095][ T6355] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 206.705810][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 208.225002][ T6422] loop1: detected capacity change from 0 to 1024 [ 208.273305][ T6422] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 208.296630][ T6422] hfsplus: failed to load root directory [ 208.463108][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 208.471422][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 208.478874][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 208.486217][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 208.494113][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 208.501834][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 208.509474][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 208.708038][ T6402] loop2: detected capacity change from 0 to 32768 [ 208.774791][ T6402] JBD2: Ignoring recovery information on journal [ 208.787005][ T6401] loop0: detected capacity change from 0 to 32768 [ 208.816080][ T6401] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 208.835614][ T6401] JBD2: Ignoring recovery information on journal [ 209.006826][ T6402] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 209.053917][ T6401] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 209.146223][ T6401] (syz.0.477,6401,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 209.319686][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 209.422470][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 209.668920][ T6430] loop1: detected capacity change from 0 to 32768 [ 209.772555][ T6430] JBD2: Ignoring recovery information on journal [ 209.957838][ T6430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 210.314132][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 211.284393][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.293511][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 211.303630][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 211.312580][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 211.321673][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 211.330433][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 211.339425][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 211.559885][ T6484] sctp_transport_update_pmtu: 106 callbacks suppressed [ 211.559900][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.589951][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.653393][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.724073][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.825835][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.919523][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 211.981372][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 212.025189][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 212.086561][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 212.096725][ T6484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 212.150590][ T4609] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.332435][ T4609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.332474][ T4609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.332510][ T4609] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.332536][ T4609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.334371][ T4609] usb 3-1: config 0 descriptor?? [ 212.585933][ T6482] loop4: detected capacity change from 0 to 40427 [ 212.613527][ T6482] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 212.613589][ T6482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 212.615576][ T6482] F2FS-fs (loop4): invalid crc value [ 212.674844][ T6482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 212.837703][ T6482] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 212.837761][ T6482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.990545][ T6525] loop5: detected capacity change from 0 to 4096 [ 213.117135][ T6532] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.260258][ T4609] usbhid 3-1:0.0: can't add hid device: -71 [ 213.260346][ T4609] usbhid: probe of 3-1:0.0 failed with error -71 [ 213.268619][ T4609] usb 3-1: USB disconnect, device number 4 [ 213.386803][ T6502] tty tty3: ldisc open failed (-12), clearing slot 2 [ 213.916142][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 213.925813][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 213.935894][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 213.944625][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 213.954010][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 213.962678][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 213.972391][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 214.575349][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.523'. [ 214.645670][ T6572] overlayfs: failed to resolve './file1': -2 [ 216.227450][ T6598] o2cb: This node has not been configured. [ 216.233496][ T6598] o2cb: Cluster check failed. Fix errors before retrying. [ 216.240732][ T6598] (syz.1.531,6598,1):user_dlm_register:674 ERROR: status = -22 [ 216.248303][ T6598] (syz.1.531,6598,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 216.527674][ T6575] loop0: detected capacity change from 0 to 32768 [ 216.578388][ T6575] JBD2: Ignoring recovery information on journal [ 216.653483][ T6579] loop2: detected capacity change from 0 to 32768 [ 216.674212][ T6579] (syz.2.526,6579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.698312][ T6579] (syz.2.526,6579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.727056][ T6575] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 216.839378][ T6579] JBD2: Ignoring recovery information on journal [ 216.993548][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 217.001924][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 217.009556][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 217.016923][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 217.024560][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 217.032136][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 217.039829][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 217.066626][ T6612] sctp_transport_update_pmtu: 158 callbacks suppressed [ 217.066640][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.088509][ T6579] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 217.102172][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.117819][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 217.123876][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.135725][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.538'. [ 217.151567][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.213100][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.235541][ T6616] overlayfs: failed to resolve './file1': -2 [ 217.270131][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.322844][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.376965][ T6579] [ 217.379359][ T6579] ====================================================== [ 217.386477][ T6579] WARNING: possible circular locking dependency detected [ 217.393532][ T6579] syzkaller #0 Not tainted [ 217.397980][ T6579] ------------------------------------------------------ [ 217.405012][ T6579] syz.2.526/6579 is trying to acquire lock: [ 217.410923][ T6579] ffff888027918650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x69a/0xb80 [ 217.420368][ T6579] [ 217.420368][ T6579] but task is already holding lock: [ 217.427748][ T6579] ffff888072366a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 217.438676][ T6579] [ 217.438676][ T6579] which lock already depends on the new lock. [ 217.438676][ T6579] [ 217.449080][ T6579] [ 217.449080][ T6579] the existing dependency chain (in reverse order) is: [ 217.458092][ T6579] [ 217.458092][ T6579] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 217.467130][ T6579] down_write+0x36/0x60 [ 217.472445][ T6579] ocfs2_lock_global_qf+0x1fe/0x290 [ 217.478257][ T6579] ocfs2_acquire_dquot+0x2b8/0xb80 [ 217.480068][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.483917][ T6579] dqget+0x713/0xbb0 [ 217.483943][ T6579] __dquot_initialize+0x3a9/0xd00 [ 217.483962][ T6579] ocfs2_get_init_inode+0x144/0x1b0 [ 217.483979][ T6579] ocfs2_mknod+0xb90/0x2580 [ 217.483996][ T6579] ocfs2_create+0x1b6/0x4b0 [ 217.520163][ T6579] path_openat+0x11b9/0x2f10 [ 217.525307][ T6579] do_filp_open+0x1ee/0x420 [ 217.530370][ T6579] do_sys_openat2+0x14b/0x4f0 [ 217.536398][ T6579] __x64_sys_creat+0x8c/0xb0 [ 217.541551][ T6579] do_syscall_64+0x4c/0xa0 [ 217.546534][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.552954][ T6579] [ 217.552954][ T6579] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 217.563568][ T6579] down_write+0x36/0x60 [ 217.568247][ T6579] ocfs2_lock_global_qf+0x1d7/0x290 [ 217.574047][ T6579] ocfs2_acquire_dquot+0x2b8/0xb80 [ 217.580039][ T6579] dqget+0x713/0xbb0 [ 217.584508][ T6579] __dquot_initialize+0x3a9/0xd00 [ 217.590229][ T6579] ocfs2_get_init_inode+0x144/0x1b0 [ 217.596129][ T6579] ocfs2_mknod+0xb90/0x2580 [ 217.601511][ T6579] ocfs2_create+0x1b6/0x4b0 [ 217.606540][ T6579] path_openat+0x11b9/0x2f10 [ 217.611656][ T6579] do_filp_open+0x1ee/0x420 [ 217.616679][ T6579] do_sys_openat2+0x14b/0x4f0 [ 217.621888][ T6579] __x64_sys_creat+0x8c/0xb0 [ 217.627082][ T6579] do_syscall_64+0x4c/0xa0 [ 217.632106][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.638580][ T6579] [ 217.638580][ T6579] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 217.646355][ T6579] __mutex_lock+0x12d/0xae0 [ 217.651385][ T6579] dquot_commit+0x5a/0x410 [ 217.656338][ T6579] ext4_write_dquot+0x1f0/0x360 [ 217.661831][ T6579] mark_all_dquot_dirty+0xf9/0x400 [ 217.667473][ T6579] __dquot_alloc_space+0x5f6/0xe50 [ 217.673197][ T6579] ext4_mb_new_blocks+0xf55/0x44d0 [ 217.678867][ T6579] ext4_ext_map_blocks+0x18d1/0x6640 [ 217.684688][ T6579] ext4_map_blocks+0x9d7/0x1a90 [ 217.690069][ T6579] ext4_getblk+0x1c5/0x720 [ 217.695017][ T6579] ext4_bread+0x26/0x170 [ 217.699777][ T6579] ext4_append+0x2bb/0x560 [ 217.704708][ T6579] ext4_init_new_dir+0x2b8/0x550 [ 217.710187][ T6579] ext4_mkdir+0x4c3/0xc90 [ 217.715028][ T6579] vfs_mkdir+0x386/0x570 [ 217.719800][ T6579] do_mkdirat+0x1d8/0x440 [ 217.725281][ T6579] __x64_sys_mkdirat+0x85/0x90 [ 217.730570][ T6579] do_syscall_64+0x4c/0xa0 [ 217.735528][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.742041][ T6579] [ 217.742041][ T6579] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 217.749678][ T6579] down_read+0x42/0x2d0 [ 217.754435][ T6579] ext4_map_blocks+0x338/0x1a90 [ 217.759801][ T6579] ext4_append+0x22d/0x560 [ 217.764735][ T6579] ext4_init_new_dir+0x2b8/0x550 [ 217.770190][ T6579] ext4_mkdir+0x4c3/0xc90 [ 217.775026][ T6579] vfs_mkdir+0x386/0x570 [ 217.779782][ T6579] do_mkdirat+0x1d8/0x440 [ 217.784635][ T6579] __x64_sys_mkdir+0x6a/0x80 [ 217.789782][ T6579] do_syscall_64+0x4c/0xa0 [ 217.794748][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.801178][ T6579] [ 217.801178][ T6579] -> #2 (jbd2_handle){++++}-{0:0}: [ 217.808587][ T6579] wait_transaction_locked+0x1bf/0x270 [ 217.814709][ T6579] start_this_handle+0x7e7/0x2240 [ 217.820272][ T6579] jbd2__journal_start+0x2b7/0x5a0 [ 217.826012][ T6579] jbd2_journal_start+0x26/0x30 [ 217.831398][ T6579] ocfs2_start_trans+0x3b0/0x6f0 [ 217.836970][ T6579] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 217.843307][ T6579] ocfs2_dio_end_io+0x10ed/0x1400 [ 217.848854][ T6579] dio_complete+0x249/0x710 [ 217.853914][ T6579] __blockdev_direct_IO+0x2e15/0x34c0 [ 217.859826][ T6579] ocfs2_direct_IO+0x233/0x2a0 [ 217.865106][ T6579] generic_file_direct_write+0x112/0x330 [ 217.871258][ T6579] __generic_file_write_iter+0x15f/0x2a0 [ 217.877411][ T6579] ocfs2_file_write_iter+0x1731/0x1fc0 [ 217.883390][ T6579] do_iter_write+0x638/0xb10 [ 217.888733][ T6579] iter_file_splice_write+0x6be/0xcf0 [ 217.894642][ T6579] direct_splice_actor+0xe1/0x130 [ 217.900282][ T6579] splice_direct_to_actor+0x4b8/0xbd0 [ 217.906183][ T6579] do_splice_direct+0x1ce/0x2f0 [ 217.911664][ T6579] do_sendfile+0x51b/0xe20 [ 217.916873][ T6579] __se_sys_sendfile64+0x141/0x1a0 [ 217.922603][ T6579] do_syscall_64+0x4c/0xa0 [ 217.927541][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.934520][ T6579] [ 217.934520][ T6579] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 217.943055][ T6579] down_read+0x42/0x2d0 [ 217.947732][ T6579] ocfs2_start_trans+0x3a4/0x6f0 [ 217.953188][ T6579] ocfs2_mknod+0x1273/0x2580 [ 217.958296][ T6579] ocfs2_create+0x1b6/0x4b0 [ 217.963318][ T6579] path_openat+0x11b9/0x2f10 [ 217.968437][ T6579] do_filp_open+0x1ee/0x420 [ 217.973462][ T6579] do_sys_openat2+0x14b/0x4f0 [ 217.978700][ T6579] __x64_sys_open+0x11b/0x140 [ 217.983904][ T6579] do_syscall_64+0x4c/0xa0 [ 217.988960][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.995379][ T6579] [ 217.995379][ T6579] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 218.002854][ T6579] __lock_acquire+0x2d18/0x7c40 [ 218.008226][ T6579] lock_acquire+0x1bb/0x4a0 [ 218.013242][ T6579] ocfs2_start_trans+0x2a5/0x6f0 [ 218.018700][ T6579] ocfs2_acquire_dquot+0x69a/0xb80 [ 218.024355][ T6579] dqget+0x713/0xbb0 [ 218.028781][ T6579] __dquot_initialize+0x3a9/0xd00 [ 218.034326][ T6579] ocfs2_get_init_inode+0x144/0x1b0 [ 218.040141][ T6579] ocfs2_mknod+0xb90/0x2580 [ 218.045434][ T6579] ocfs2_create+0x1b6/0x4b0 [ 218.050521][ T6579] path_openat+0x11b9/0x2f10 [ 218.055636][ T6579] do_filp_open+0x1ee/0x420 [ 218.060656][ T6579] do_sys_openat2+0x14b/0x4f0 [ 218.065850][ T6579] __x64_sys_creat+0x8c/0xb0 [ 218.070951][ T6579] do_syscall_64+0x4c/0xa0 [ 218.075886][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.082301][ T6579] [ 218.082301][ T6579] other info that might help us debug this: [ 218.082301][ T6579] [ 218.092520][ T6579] Chain exists of: [ 218.092520][ T6579] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 218.092520][ T6579] [ 218.109484][ T6579] Possible unsafe locking scenario: [ 218.109484][ T6579] [ 218.116951][ T6579] CPU0 CPU1 [ 218.122332][ T6579] ---- ---- [ 218.127688][ T6579] lock(&ocfs2_quota_ip_alloc_sem_key); [ 218.133342][ T6579] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 218.143143][ T6579] lock(&ocfs2_quota_ip_alloc_sem_key); [ 218.151294][ T6579] lock(sb_internal#3); [ 218.155532][ T6579] [ 218.155532][ T6579] *** DEADLOCK *** [ 218.155532][ T6579] [ 218.163764][ T6579] 6 locks held by syz.2.526/6579: [ 218.168794][ T6579] #0: ffff888027918460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 218.178114][ T6579] #1: ffff88804e4e42c8 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: path_openat+0x7e8/0x2f10 [ 218.188587][ T6579] #2: ffff88823bc54c08 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 218.202244][ T6579] #3: ffff8880554580a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2ab/0xb80 [ 218.212282][ T6579] #4: ffff888072366d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 218.225249][ T6579] #5: ffff888072366a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 218.236590][ T6579] [ 218.236590][ T6579] stack backtrace: [ 218.242477][ T6579] CPU: 0 PID: 6579 Comm: syz.2.526 Not tainted syzkaller #0 [ 218.249761][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.259832][ T6579] Call Trace: [ 218.263106][ T6579] [ 218.266023][ T6579] dump_stack_lvl+0x188/0x24e [ 218.270732][ T6579] ? load_image+0x410/0x410 [ 218.275241][ T6579] ? show_regs_print_info+0x12/0x12 [ 218.280446][ T6579] ? print_circular_bug+0x12b/0x1a0 [ 218.285652][ T6579] check_noncircular+0x296/0x330 [ 218.290596][ T6579] ? add_chain_block+0x9b0/0x9b0 [ 218.295531][ T6579] ? lockdep_lock+0xf1/0x1f0 [ 218.300119][ T6579] ? _find_first_zero_bit+0xd2/0x100 [ 218.305403][ T6579] __lock_acquire+0x2d18/0x7c40 [ 218.310271][ T6579] ? verify_lock_unused+0x140/0x140 [ 218.315468][ T6579] ? verify_lock_unused+0x140/0x140 [ 218.320669][ T6579] ? mark_lock+0x94/0x320 [ 218.325010][ T6579] ? verify_lock_unused+0x140/0x140 [ 218.330252][ T6579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.336244][ T6579] lock_acquire+0x1bb/0x4a0 [ 218.340834][ T6579] ? ocfs2_acquire_dquot+0x69a/0xb80 [ 218.346388][ T6579] ? __might_sleep+0xd0/0xd0 [ 218.351057][ T6579] ? do_raw_spin_lock+0x128/0x2f0 [ 218.356178][ T6579] ? read_lock_is_recursive+0x10/0x10 [ 218.361649][ T6579] ? __rwlock_init+0x140/0x140 [ 218.366542][ T6579] ? do_raw_spin_unlock+0x11d/0x230 [ 218.371745][ T6579] ocfs2_start_trans+0x2a5/0x6f0 [ 218.376724][ T6579] ? ocfs2_acquire_dquot+0x69a/0xb80 [ 218.382036][ T6579] ? ocfs2_recovery_exit+0x50/0x50 [ 218.387271][ T6579] ? do_raw_spin_unlock+0x11d/0x230 [ 218.392483][ T6579] ? _raw_spin_unlock+0x24/0x40 [ 218.397343][ T6579] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 218.402594][ T6579] ocfs2_acquire_dquot+0x69a/0xb80 [ 218.407868][ T6579] ? ocfs2_destroy_dquot+0x40/0x40 [ 218.413081][ T6579] ? percpu_counter_add_batch+0x135/0x150 [ 218.418825][ T6579] dqget+0x713/0xbb0 [ 218.422717][ T6579] __dquot_initialize+0x3a9/0xd00 [ 218.427759][ T6579] ? do_raw_spin_unlock+0x11d/0x230 [ 218.432970][ T6579] ? dquot_initialize+0x20/0x20 [ 218.437841][ T6579] ? do_raw_spin_unlock+0x11d/0x230 [ 218.443045][ T6579] ? inode_init_owner+0x277/0x420 [ 218.448102][ T6579] ocfs2_get_init_inode+0x144/0x1b0 [ 218.453314][ T6579] ? ocfs2_create_inode_in_orphan+0x1180/0x1180 [ 218.459565][ T6579] ? mark_lock+0x94/0x320 [ 218.463898][ T6579] ocfs2_mknod+0xb90/0x2580 [ 218.468681][ T6579] ? ocfs2_mkdir+0x4b0/0x4b0 [ 218.473286][ T6579] ? __lock_acquire+0x7c40/0x7c40 [ 218.478323][ T6579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 218.484440][ T6579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.490333][ T6579] ? _raw_spin_unlock+0x40/0x40 [ 218.495207][ T6579] ? ocfs2_inode_unlock+0xa1/0x140 [ 218.500334][ T6579] ? __lock_acquire+0x7c40/0x7c40 [ 218.505362][ T6579] ? __rwlock_init+0x140/0x140 [ 218.510510][ T6579] ? do_raw_spin_unlock+0x11d/0x230 [ 218.515738][ T6579] ? rcu_is_watching+0x11/0xa0 [ 218.520526][ T6579] ? ocfs2_lookup+0x51c/0xae0 [ 218.525197][ T6579] ocfs2_create+0x1b6/0x4b0 [ 218.529872][ T6579] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 218.536237][ T6579] ? rwsem_write_trylock+0x135/0x1c0 [ 218.541524][ T6579] ? ocfs2_lookup+0xae0/0xae0 [ 218.546195][ T6579] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 218.551125][ T6579] ? inode_permission+0xef/0x480 [ 218.556064][ T6579] ? bpf_lsm_inode_create+0x5/0x10 [ 218.561211][ T6579] ? security_inode_create+0xb3/0x100 [ 218.566668][ T6579] ? ocfs2_lookup+0xae0/0xae0 [ 218.571343][ T6579] path_openat+0x11b9/0x2f10 [ 218.576336][ T6579] ? do_filp_open+0x420/0x420 [ 218.581201][ T6579] do_filp_open+0x1ee/0x420 [ 218.585716][ T6579] ? vfs_tmpfile+0x470/0x470 [ 218.590415][ T6579] ? _raw_spin_unlock+0x24/0x40 [ 218.595270][ T6579] ? alloc_fd+0x590/0x640 [ 218.599605][ T6579] do_sys_openat2+0x14b/0x4f0 [ 218.604297][ T6579] ? do_sys_open+0xe0/0xe0 [ 218.608795][ T6579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.614859][ T6579] ? lock_chain_count+0x20/0x20 [ 218.619748][ T6579] __x64_sys_creat+0x8c/0xb0 [ 218.624373][ T6579] do_syscall_64+0x4c/0xa0 [ 218.628800][ T6579] ? clear_bhb_loop+0x60/0xb0 [ 218.633497][ T6579] ? clear_bhb_loop+0x60/0xb0 [ 218.638184][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.644094][ T6579] RIP: 0033:0x7f60ec59e159 [ 218.648508][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.668107][ T6579] RSP: 002b:00007f60ed470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 218.676515][ T6579] RAX: ffffffffffffffda RBX: 00007f60ec825fa0 RCX: 00007f60ec59e159 [ 218.684522][ T6579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 218.692500][ T6579] RBP: 00007f60ec635024 R08: 0000000000000000 R09: 0000000000000000 [ 218.700473][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.708526][ T6579] R13: 00007f60ec826038 R14: 00007f60ec825fa0 R15: 00007ffed849cb08 [ 218.716498][ T6579] [ 218.720953][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.785782][ T6612] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.830223][ T4285] ocfs2: Unmounting device (7,2) on (node local)