last executing test programs: 1m38.859295304s ago: executing program 3 (id=277): r0 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x100, 0x1, 0x127}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x80053c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m38.45657922s ago: executing program 3 (id=280): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m37.673030762s ago: executing program 3 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) 1m37.423087427s ago: executing program 3 (id=287): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[], 0xde, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x9c) lseek(r0, 0x12, 0x0) 1m36.989752084s ago: executing program 3 (id=289): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 1m36.221477636s ago: executing program 3 (id=292): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 1m35.821864103s ago: executing program 32 (id=292): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 35.982620896s ago: executing program 4 (id=710): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) 35.736035849s ago: executing program 4 (id=713): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4445, &(0x7f0000000380)="$eJzs3b9vHFkdAPDvjH13drgc9nHFISGxEieBAFn2VYBPwnGc+OyLCQokQjSbtb1JDGtvZK8RRSRMF4kKiQJRRCDRuYpc0IY/gYYy1JGgoEGKFGG0u7O2Z3ZXXoLXIdHnU3g87/f6O/P2TTF+aaZxb2OntLFTqmyV6mt3dj4u/axe292svh0R6Xno2f9b1fPpnIH1uU7+pzgNo00Gc/3y1R/c+jjiz+t/fXZ4eHgYTaPR08yJ3//1zwdrJ48daaFOs93erZ2VH0fEB13jahqJiB/9KSKJiEtZ2nx2HI+Ii9HOu/XgV7dLZzSax0+rn5RfrDw8mP1oef/RQf/PnkT8rvbFb97d/PtXRmb/9vUz6h4AAAAAAAAAAAAAAAAAgNfc4o3rN78/PRNPkhjdT7rf113Mjv3ejz08M18e/ocFAAAAAAAAAAAAAAAAAACA/1PH7/+Xkvd7vP+/kB3n+tQ//O7wx8jwLH3v+sKV6Zls//ekK/9bWdI/Lo3EZI9934v7v18q1O+9/3t3Py+rM75OvxMxlk7lztN0airiD9nG7x8mF9JafafxjTv13a31MxvGaysf//bu/bnoZBv6Dxr/+UL7w9///wtdV1Pz/PbZXWJvtHz8R/qW++Mvk4Hif7lQ7zziH/HWcLt4g+XjP9pKGz9ZYK49ATTj/+vR0+O/UGh/WPF/LyJKSXOspdwM0FzDNNP7rVfIy8e/fR/lps7sD9nv/n9eiP+VQvuvav7fK34R0VM+/m+30sZyJY7v/8n09Pv/aqH9VxH/5vj3fP8PJB//d9qJoxHPs//K1pkOBp3/FwvtDyv+N9P2OOO9JHcF7Cft9H7/r468fPzHuvKPn//SgdZ/nxbqn9fzX6ffiUhaz3+d6f9rSfv5j97y8R/vW27Q+3+pUG/Y8/9ca/3Hy8rH/0IrLb92nmj9HDT+y4X2hxX/1qpkrBP/4/nk3++0039v/TeQfPw/105MT5bYa/1srf+S09f/nxXab8X/8BdD/ATd67/m+PfSIXb5BsnH/92+5Zrx/8sA3//XCvWGv/7vzFC8jHz8L/Yt17r/x06P/0qh3rDj/9VhNg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwGpjPjhORpFO58zSdmoq4nJ1/GBeS1cp6ebVWX/vpTsRCll6K95O7tfpqpVbe2KqvV8uVWq2+FnEly/8gxpKdWr1R3qzcv3rU1nhyr1rZbqxWK42IWMzSvxQXO22tbjQ2K/cj4tOjvM+n9e379ypb5fWN7e9MT09Px9LRGCaT6s8b1a1Gu/d2bsTyUd2J5MTgWtmfHY3l3eQn9d3trUqtlX7tRJ1afa1SO1FnJcv7TUwmje3drbVKo1qu1e92+nuV5rLjwtKNH964NtOVfztpH+fPd1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JeezH77txEx2j5LI2Ku80vSq/zjp9VPyi9WHh7MfrS8/+jgWb9yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLh2jRAwFYQCe9xTUzmNYhaSzjSiihRHBE+gxPIwexUt4BwsL2y2Whd0XWLIJhMB239cM5GcyA28AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ77l+71uW4iUpyvzyK+339+9/PHUj9vxvtPlgw9XdLEMTw8dbd3dVPePR3k1+XTX5u36er/4y1Gau9rcCfDe9rp51xM7jV1b1P79XMvI+UqItqSX6Wcq2revwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//yGeKG8=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) 34.675052157s ago: executing program 4 (id=720): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 34.113649806s ago: executing program 4 (id=728): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@nogc_merge}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@noinline_dentry}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000940), 0x0) 33.183515351s ago: executing program 4 (id=733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)='k', 0x1}], 0x1) socket$inet6(0xa, 0x200000000003, 0x87) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x4005013, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000f8ff00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 31.883559812s ago: executing program 4 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 31.488610949s ago: executing program 33 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 3.450344505s ago: executing program 0 (id=968): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x88, 0x66, &(0x7f00000009c0)=r2, 0x4) 3.294405597s ago: executing program 0 (id=969): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 3.13338285s ago: executing program 0 (id=972): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) 2.939084283s ago: executing program 0 (id=976): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.777988146s ago: executing program 2 (id=978): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000620000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x1d) 2.567524079s ago: executing program 2 (id=979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 2.50561782s ago: executing program 2 (id=980): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/146, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xffffffffffffff8d}, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f06952a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a3408000000c57c6f0cd8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636610f2e2c7945ed5000529e4f8f9f5", 0x9a}], 0x1, 0x0, 0x0, 0x94}, 0x20004001) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 2.375021722s ago: executing program 2 (id=981): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) setxattr$system_posix_acl(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x7}}, 0x24, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.195622555s ago: executing program 2 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) 2.054362007s ago: executing program 0 (id=984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x4, 0x0, 0x70, 0x4}) 1.998567078s ago: executing program 2 (id=985): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.535184636s ago: executing program 5 (id=991): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.396850318s ago: executing program 5 (id=993): mlockall(0x2) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 1.24754513s ago: executing program 5 (id=994): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) 1.154445912s ago: executing program 5 (id=995): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) 1.003572914s ago: executing program 5 (id=997): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 923.265376ms ago: executing program 1 (id=999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 833.511907ms ago: executing program 1 (id=1000): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb2, &(0x7f00000008c0)="$eJzs1zFqAkEUBuC3G0i2CqQJgRSpt8kdcpSQMjZipQjeQLyIV/EI9hYW24o4ws6KiJ3FCvJ9xcA/Pw9e+1a75eeijkiziFR/DDfpbDSe/P8O8hs8pDIiXiKiioivt5y3P7kruv61mf6tm6fr4ed57/sCAAC3K+P7Mh9S97HvrsA2vJ/6Kp8KraK/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu5hgAAP//VS0nxA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000140)='./file1\x00') 691.63342ms ago: executing program 1 (id=1001): r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0x32b}, 0x8}, 0x1) 642.70209ms ago: executing program 1 (id=1002): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000120001"], 0x118}}, 0x4048850) 567.415091ms ago: executing program 1 (id=1003): syz_mount_image$udf(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x0, &(0x7f00000019c0), 0x1, 0x1905, &(0x7f0000001a00)="$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") sync() preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 115.535418ms ago: executing program 0 (id=1004): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 115.024749ms ago: executing program 5 (id=1005): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 0s ago: executing program 1 (id=1006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400", 0x28}], 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) kernel console output (not intermixed with test programs): :22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ef78e929 code=0x7ffc0000 [ 137.718855][ T28] audit: type=1326 audit(1750792370.451:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f59ef78e929 code=0x7ffc0000 [ 137.806001][ T28] audit: type=1326 audit(1750792370.451:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ef78e929 code=0x7ffc0000 [ 137.871480][ T28] audit: type=1326 audit(1750792370.451:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ef78e929 code=0x7ffc0000 [ 138.330008][ T7021] loop0: detected capacity change from 0 to 2048 [ 138.381969][ T7025] loop2: detected capacity change from 0 to 512 [ 138.385835][ T7021] loop0: p1 < > p4 [ 138.389229][ T7025] EXT4-fs: Ignoring removed nobh option [ 138.405726][ T7021] loop0: p4 size 8388608 extends beyond EOD, truncated [ 138.448304][ T7025] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.406: invalid indirect mapped block 256 (level 2) [ 138.475278][ T7025] EXT4-fs (loop2): 2 truncates cleaned up [ 138.486751][ T7025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.566038][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.722130][ T7036] overlay: filesystem on ./bus is read-only [ 138.791577][ T5819] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.803760][ T7038] loop0: detected capacity change from 0 to 1764 [ 138.992172][ T5819] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 139.014002][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.036307][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.041017][ T7042] loop0: detected capacity change from 0 to 2048 [ 139.057658][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.080088][ T7042] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 139.083845][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.120476][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.141429][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.156982][ T7046] loop1: detected capacity change from 0 to 512 [ 139.165962][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.181083][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.198801][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.207284][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.217905][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.229649][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.239743][ T7046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.253581][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.262741][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.273972][ T7046] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.291400][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.329616][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.339764][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.386214][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.415057][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.432220][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.466555][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.476647][ T7046] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.417: invalid size [ 139.494990][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.514860][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.526020][ T7046] EXT4-fs (loop1): Remounting filesystem read-only [ 139.537801][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.547650][ T5819] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.564087][ T5819] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 139.581461][ T5819] usb 5-1: Product: syz [ 139.585765][ T5819] usb 5-1: Manufacturer: syz [ 139.590392][ T5819] usb 5-1: SerialNumber: syz [ 139.612396][ T5819] usb 5-1: config 0 descriptor?? [ 139.637495][ T5819] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 139.639106][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.654314][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.833606][ T7051] loop0: detected capacity change from 0 to 32768 [ 139.858950][ T7051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.418 (7051) [ 139.904857][ T7051] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.930002][ T7051] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.948939][ T7051] BTRFS info (device loop0): setting nodatacow, compression disabled [ 139.964358][ T5819] usb 5-1: USB disconnect, device number 6 [ 139.966206][ T7051] BTRFS info (device loop0): force clearing of disk cache [ 139.987354][ T5819] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 139.999474][ T7051] BTRFS info (device loop0): setting datacow [ 140.021494][ T7051] BTRFS info (device loop0): enabling disk space caching [ 140.040867][ T7051] BTRFS info (device loop0): turning on sync discard [ 140.054824][ T7051] BTRFS info (device loop0): disabling disk space caching [ 140.070012][ T7051] BTRFS info (device loop0): turning off discard [ 140.083228][ T7051] BTRFS info (device loop0): use no compression [ 140.172541][ T7051] BTRFS info (device loop0): rebuilding free space tree [ 140.212709][ T7051] BTRFS info (device loop0): disabling free space tree [ 140.239851][ T7051] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.265914][ T7051] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.344846][ T7054] loop1: detected capacity change from 0 to 40427 [ 140.366948][ T7054] F2FS-fs (loop1): invalid crc value [ 140.392551][ T7054] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.479887][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.506025][ T7054] F2FS-fs (loop1): Start checkpoint disabled! [ 140.537579][ T7054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 140.779343][ T7081] loop4: detected capacity change from 0 to 2048 [ 140.849671][ T7081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.298150][ T12] kworker/u4:1: attempt to access beyond end of device [ 141.298150][ T12] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 141.315554][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 141.918137][ T7108] overlay: filesystem on ./bus is read-only [ 142.848473][ T7118] loop4: detected capacity change from 0 to 32768 [ 142.868693][ T7118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.439 (7118) [ 142.921728][ T7118] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.948138][ T7118] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 142.962588][ T7130] input: syz1 as /devices/virtual/input/input19 [ 142.967136][ T7131] loop0: detected capacity change from 0 to 512 [ 142.976030][ T7118] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.995372][ T7118] BTRFS info (device loop4): trying to use backup root at mount time [ 143.004319][ T7118] BTRFS info (device loop4): setting nodatasum [ 143.013647][ T7118] BTRFS info (device loop4): force zlib compression, level 3 [ 143.021753][ T7118] BTRFS info (device loop4): doing ref verification [ 143.043062][ T7131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.051928][ T7118] BTRFS info (device loop4): turning on flush-on-commit [ 143.062725][ T7118] BTRFS info (device loop4): allowing degraded mounts [ 143.069552][ T7118] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.079375][ T7118] BTRFS info (device loop4): use lzo compression, level 0 [ 143.087987][ T7118] BTRFS info (device loop4): enabling ssd optimizations [ 143.095613][ T7118] BTRFS info (device loop4): using spread ssd allocation scheme [ 143.100440][ T7131] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.103438][ T7118] BTRFS info (device loop4): using free space tree [ 143.188588][ T7146] Invalid ELF header len 8 [ 143.243239][ T7131] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.444: invalid size [ 143.263383][ T7118] BTRFS info (device loop4): auto enabling async discard [ 143.283842][ T7131] EXT4-fs (loop0): Remounting filesystem read-only [ 143.408121][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.424222][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 143.424238][ T28] audit: type=1800 audit(1750792376.641:28): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.439" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 143.462258][ T1130] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 143.507380][ T1130] Quota error (device loop0): write_blk: dquota write failed [ 143.530998][ T1130] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 143.855982][ T6673] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.029586][ T7170] loop2: detected capacity change from 0 to 4096 [ 144.082894][ T7170] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 144.162416][ T7170] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 144.826254][ T7187] loop0: detected capacity change from 0 to 4096 [ 144.859516][ T7187] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 144.976244][ T7193] loop4: detected capacity change from 0 to 256 [ 145.000539][ T7193] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 145.095819][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.283476][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.441746][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.598832][ T7191] loop1: detected capacity change from 0 to 32768 [ 145.615671][ T7191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.462 (7191) [ 145.630540][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.658674][ T7191] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.676001][ T7191] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 145.685105][ T7191] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.695980][ T7191] BTRFS info (device loop1): trying to use backup root at mount time [ 145.704195][ T7191] BTRFS info (device loop1): setting nodatasum [ 145.710440][ T7191] BTRFS info (device loop1): force zlib compression, level 3 [ 145.718055][ T7191] BTRFS info (device loop1): doing ref verification [ 145.734748][ T7191] BTRFS info (device loop1): turning on flush-on-commit [ 145.745782][ T7191] BTRFS info (device loop1): allowing degraded mounts [ 145.770680][ T7191] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 145.811616][ T7191] BTRFS info (device loop1): use lzo compression, level 0 [ 145.818855][ T7191] BTRFS info (device loop1): enabling ssd optimizations [ 145.842862][ T7191] BTRFS info (device loop1): using spread ssd allocation scheme [ 145.876727][ T7191] BTRFS info (device loop1): using free space tree [ 146.033698][ T7191] BTRFS info (device loop1): auto enabling async discard [ 146.195104][ T28] audit: type=1800 audit(1750792379.421:29): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.462" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 146.411097][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.056529][ T7225] loop0: detected capacity change from 0 to 32768 [ 147.080675][ T7225] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.470 (7225) [ 147.100912][ T7225] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.115295][ T7225] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.133828][ T7225] BTRFS info (device loop0): using free space tree [ 147.204829][ T7225] BTRFS info (device loop0): enabling ssd optimizations [ 147.212128][ T7225] BTRFS info (device loop0): auto enabling async discard [ 147.446991][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.458805][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.469589][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.495701][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.505632][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.511504][ T12] hsr_slave_0: left promiscuous mode [ 147.513693][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.535605][ T12] hsr_slave_1: left promiscuous mode [ 147.544885][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.553827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.567346][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.576363][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.578865][ T5769] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.596426][ T12] bridge_slave_1: left allmulticast mode [ 147.605064][ T12] bridge_slave_1: left promiscuous mode [ 147.611036][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.647513][ T12] bridge_slave_0: left allmulticast mode [ 147.668995][ T12] bridge_slave_0: left promiscuous mode [ 147.680378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.773385][ T12] veth1_macvtap: left promiscuous mode [ 147.788473][ T12] veth0_macvtap: left promiscuous mode [ 147.796337][ T12] veth1_vlan: left promiscuous mode [ 147.804552][ T12] veth0_vlan: left promiscuous mode [ 148.211453][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.413534][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 148.433962][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.445359][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.467140][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 148.487113][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.497465][ T23] usb 1-1: config 0 descriptor?? [ 148.648362][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.673001][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.739102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.791874][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.861753][ T9] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 148.869887][ T9] usb 5-1: config 0 has no interface number 0 [ 148.871989][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.877933][ T9] usb 5-1: config 0 interface 98 has no altsetting 0 [ 148.935470][ T9] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 148.945060][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.950165][ T23] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 148.954414][ T9] usb 5-1: Product: syz [ 148.981367][ T9] usb 5-1: Manufacturer: syz [ 148.986041][ T9] usb 5-1: SerialNumber: syz [ 149.003526][ T9] usb 5-1: config 0 descriptor?? [ 149.267569][ T787] usb 1-1: USB disconnect, device number 4 [ 149.277366][ T9] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 149.511634][ T12] bond0 (unregistering): Released all slaves [ 149.604693][ T5777] Bluetooth: hci3: command tx timeout [ 149.763781][ T9] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 149.936407][ T7248] chnl_net:caif_netlink_parms(): no params data found [ 149.962237][ T7265] loop1: detected capacity change from 0 to 512 [ 149.986128][ T7265] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.009658][ T7265] EXT4-fs (loop1): 1 truncate cleaned up [ 150.017354][ T7265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.138876][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.163503][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.183594][ T7272] loop0: detected capacity change from 0 to 256 [ 150.186318][ T7248] bridge_slave_0: entered allmulticast mode [ 150.201228][ T7272] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.206679][ T9] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71) [ 150.222896][ T9] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 150.224070][ T7248] bridge_slave_0: entered promiscuous mode [ 150.236234][ T9] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 150.252807][ T5826] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 150.255982][ T7272] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 150.266523][ T5826] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 150.279206][ T9] usb 5-1: USB disconnect, device number 7 [ 150.296773][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.304333][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.312020][ T7248] bridge_slave_1: entered allmulticast mode [ 150.319527][ T7248] bridge_slave_1: entered promiscuous mode [ 150.327548][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.350639][ T7272] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d) [ 150.424867][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.449728][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.544725][ T7248] team0: Port device team_slave_0 added [ 150.558674][ T7248] team0: Port device team_slave_1 added [ 150.603213][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.622102][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.656681][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.707899][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.721462][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.748945][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.795499][ T7282] loop1: detected capacity change from 0 to 64 [ 150.842849][ T28] audit: type=1800 audit(1750792384.061:30): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.484" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 150.887303][ T7248] hsr_slave_0: entered promiscuous mode [ 150.909220][ T7248] hsr_slave_1: entered promiscuous mode [ 150.917705][ T7248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.926049][ T7248] Cannot create hsr debugfs directory [ 151.231901][ T7293] loop4: detected capacity change from 0 to 8192 [ 151.283770][ T7293] loop4: p2 p3 p4 [ 151.287614][ T7293] loop4: p2 size 327551 extends beyond EOD, truncated [ 151.296040][ T7293] loop4: p3 size 16776960 extends beyond EOD, truncated [ 151.306154][ T7293] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 151.341491][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.387435][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.471657][ T7248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.486024][ T7248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.499380][ T7248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.518232][ T7248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.524805][ T5819] usb 1-1: config 0 has no interfaces? [ 151.537379][ T5819] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 151.547174][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.559144][ T5819] usb 1-1: config 0 descriptor?? [ 151.573142][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 151.584523][ T787] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.596387][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.607191][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.628422][ T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.637575][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.645663][ T787] usb 2-1: Product: syz [ 151.649864][ T787] usb 2-1: Manufacturer: syz [ 151.654532][ T787] usb 2-1: SerialNumber: syz [ 151.673042][ T5777] Bluetooth: hci3: command tx timeout [ 151.752803][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.796550][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.797522][ T5840] usb 1-1: USB disconnect, device number 5 [ 151.822751][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.830686][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.861344][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.868587][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.091449][ T787] usb 2-1: 0:2 : does not exist [ 152.197477][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.279163][ T7248] veth0_vlan: entered promiscuous mode [ 152.310047][ T7248] veth1_vlan: entered promiscuous mode [ 152.393234][ T7248] veth0_macvtap: entered promiscuous mode [ 152.424853][ T7248] veth1_macvtap: entered promiscuous mode [ 152.476583][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.497008][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.510055][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.520528][ T28] audit: type=1326 audit(1750792385.731:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.520583][ T28] audit: type=1326 audit(1750792385.731:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.526584][ T7318] loop4: detected capacity change from 0 to 2048 [ 152.543035][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.580130][ T7318] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 152.589637][ T7318] UDF-fs: Scanning with blocksize 512 failed [ 152.595932][ T28] audit: type=1326 audit(1750792385.811:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.626198][ T28] audit: type=1326 audit(1750792385.831:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.635121][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.649973][ T28] audit: type=1326 audit(1750792385.831:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.685283][ T7318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.701771][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.723595][ T28] audit: type=1326 audit(1750792385.831:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.743460][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.779354][ T28] audit: type=1326 audit(1750792385.851:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.784525][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.820738][ T28] audit: type=1326 audit(1750792385.851:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.831679][ T787] usb 2-1: USB disconnect, device number 5 [ 152.859403][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.880136][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.900307][ T28] audit: type=1326 audit(1750792385.891:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb8c318e929 code=0x7ffc0000 [ 152.901449][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.933198][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.943700][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.956802][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.994010][ T7248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.009431][ T7248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.021041][ T7248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.034837][ T7248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.154029][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.171423][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.223297][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.236167][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.524810][ T7325] loop4: detected capacity change from 0 to 32768 [ 153.545341][ T7325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.499 (7325) [ 153.578353][ T7325] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.591115][ T7325] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 153.600093][ T7325] BTRFS info (device loop4): enabling disk space caching [ 153.607726][ T7325] BTRFS info (device loop4): doing ref verification [ 153.614692][ T7325] BTRFS info (device loop4): use zlib compression, level 3 [ 153.626312][ T7325] BTRFS info (device loop4): force clearing of disk cache [ 153.637570][ T7325] BTRFS info (device loop4): setting nodatacow, compression disabled [ 153.646144][ T7325] BTRFS info (device loop4): doing ref verification [ 153.652903][ T7325] BTRFS info (device loop4): disk space caching is enabled [ 153.669102][ T7333] loop1: detected capacity change from 0 to 1024 [ 153.682395][ T7333] EXT4-fs: Ignoring removed orlov option [ 153.696263][ T7333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.727735][ T7325] BTRFS info (device loop4): enabling ssd optimizations [ 153.757033][ T7333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.769260][ T5777] Bluetooth: hci3: command tx timeout [ 153.781906][ T7325] BTRFS info (device loop4): auto enabling async discard [ 153.794459][ T7325] BTRFS info (device loop4): rebuilding free space tree [ 153.814328][ T7325] BTRFS info (device loop4): disabling free space tree [ 153.830369][ T7352] loop2: detected capacity change from 0 to 1024 [ 153.831729][ T7325] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.860204][ T7352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.871604][ T7325] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.047403][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.236349][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.366581][ T6673] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.983189][ T7383] loop4: detected capacity change from 0 to 256 [ 154.993615][ T7383] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.004693][ T7383] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 155.024376][ T7383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 155.068370][ T7383] process 'syz.4.515' launched './file1' with NULL argv: empty string added [ 155.778043][ T7400] loop4: detected capacity change from 0 to 512 [ 155.806911][ T7400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.817710][ T7400] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.522: bad orphan inode 13 [ 155.831458][ T5773] Bluetooth: hci3: command tx timeout [ 155.841410][ T7400] ext4_test_bit(bit=12, block=18) = 1 [ 155.846971][ T7400] is_bad_inode(inode)=0 [ 155.851539][ T7400] NEXT_ORPHAN(inode)=2130706432 [ 155.856445][ T7400] max_ino=32 [ 155.859799][ T7400] i_nlink=1 [ 155.864869][ T7400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.866831][ T7398] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 155.918863][ T7400] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 155.976277][ T7400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.522: bg 0: block 248: padding at end of block bitmap is not set [ 155.989879][ T7394] loop1: detected capacity change from 0 to 32768 [ 156.003733][ T7400] __quota_error: 10 callbacks suppressed [ 156.003749][ T7400] Quota error (device loop4): write_blk: dquota write failed [ 156.021748][ T7400] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.032249][ T7400] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.522: Failed to acquire dquot type 1 [ 156.034025][ T7394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.518 (7394) [ 156.061076][ T7394] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.077185][ T7400] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.077760][ T7394] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 156.112263][ T7394] BTRFS info (device loop1): enabling disk space caching [ 156.119538][ T7394] BTRFS info (device loop1): doing ref verification [ 156.128558][ T7394] BTRFS info (device loop1): use zlib compression, level 3 [ 156.136863][ T7394] BTRFS info (device loop1): force clearing of disk cache [ 156.145091][ T7394] BTRFS info (device loop1): setting nodatacow, compression disabled [ 156.156535][ T7394] BTRFS info (device loop1): doing ref verification [ 156.163799][ T7394] BTRFS info (device loop1): disk space caching is enabled [ 156.242128][ T6673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.256516][ T7394] BTRFS info (device loop1): enabling ssd optimizations [ 156.264925][ T7394] BTRFS info (device loop1): auto enabling async discard [ 156.277366][ T7394] BTRFS info (device loop1): rebuilding free space tree [ 156.312873][ T7394] BTRFS info (device loop1): disabling free space tree [ 156.320005][ T7394] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.332602][ T7394] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.428003][ T28] audit: type=1800 audit(1750792389.651:50): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 156.558235][ T5774] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.711815][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.737599][ T7404] loop2: detected capacity change from 0 to 32768 [ 156.746328][ T7404] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.523 (7404) [ 156.802073][ T7404] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 156.829239][ T7404] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 156.838149][ T7404] BTRFS info (device loop2): using free space tree [ 156.989548][ T7404] BTRFS info (device loop2): enabling ssd optimizations [ 156.996620][ T7404] BTRFS info (device loop2): auto enabling async discard [ 157.114051][ T7248] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 157.251859][ T1187] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.342163][ T5773] Bluetooth: Frame is too long (len 16, expected len 4) [ 157.482944][ T1187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.504453][ T1187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.524625][ T1187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.557976][ T1187] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.581633][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.596686][ T7454] loop2: detected capacity change from 0 to 4096 [ 157.604277][ T1187] usb 2-1: config 0 descriptor?? [ 157.659372][ T7456] loop0: detected capacity change from 0 to 512 [ 157.667541][ T7456] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.696619][ T7456] EXT4-fs (loop0): 1 truncate cleaned up [ 157.706067][ T7456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.755516][ T7456] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.533: lblock 1 mapped to illegal pblock 3 (length 1) [ 157.810277][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.028743][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.051437][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.069179][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.081487][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.099110][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.130790][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.161438][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.168978][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.191996][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.204156][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.221474][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.236710][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.251698][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.260210][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.268302][ T1187] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 158.278041][ T1187] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 158.316105][ T1187] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 158.351229][ T1187] usb 2-1: USB disconnect, device number 6 [ 158.368619][ T7468] loop0: detected capacity change from 0 to 4096 [ 158.475909][ T7471] mmap: syz.4.536 (7471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.912925][ T7482] loop0: detected capacity change from 0 to 764 [ 158.938733][ T7482] Symlink component flag not implemented [ 158.946786][ T7482] Symlink component flag not implemented (101) [ 159.555630][ T7491] loop4: detected capacity change from 0 to 32768 [ 159.566449][ T7491] XFS: attr2 mount option is deprecated. [ 159.618120][ T7491] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 159.627983][ T7491] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.700096][ T7491] XFS (loop4): Ending clean mount [ 159.716410][ T7491] XFS (loop4): Quotacheck needed: Please wait. [ 159.796498][ T7491] XFS (loop4): Quotacheck: Done. [ 159.908488][ T6673] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.573707][ T7528] loop6: detected capacity change from 0 to 4 [ 160.613206][ C0] blk_print_req_error: 54 callbacks suppressed [ 160.613224][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.847039][ T7546] loop2: detected capacity change from 0 to 8 [ 160.961754][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.136395][ T7558] input: syz1 as /devices/virtual/input/input21 [ 161.171398][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 161.182980][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.192795][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 161.200439][ T23] usb 2-1: can't read configurations, error -71 [ 161.429672][ T7567] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 161.670740][ T7575] loop2: detected capacity change from 0 to 512 [ 161.684297][ T7575] EXT4-fs: Ignoring removed nobh option [ 161.713016][ T7575] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.580: invalid indirect mapped block 256 (level 2) [ 161.728748][ T7575] EXT4-fs (loop2): 2 truncates cleaned up [ 161.736094][ T7575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.797885][ T7579] loop1: detected capacity change from 0 to 1024 [ 162.047542][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.208299][ T7590] loop1: detected capacity change from 0 to 2048 [ 162.211522][ T1187] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.255339][ T7590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.334258][ T7594] loop4: detected capacity change from 0 to 2048 [ 162.358622][ T7594] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 162.369199][ T7594] UDF-fs: Scanning with blocksize 512 failed [ 162.389204][ T7594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.411465][ T1187] usb 1-1: Using ep0 maxpacket: 32 [ 162.419750][ T1187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.455611][ T1187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.461222][ T1187] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 162.461254][ T1187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.465000][ T1187] usb 1-1: config 0 descriptor?? [ 162.753906][ T7609] loop2: detected capacity change from 0 to 1024 [ 162.765175][ T7609] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.794247][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.813573][ T7609] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.856014][ T28] audit: type=1800 audit(1750792396.081:51): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 162.921511][ T5858] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.959943][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.974179][ T1187] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 163.097594][ T7619] loop1: detected capacity change from 0 to 2048 [ 163.107027][ T7619] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.126320][ T7620] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.148860][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.171521][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.190656][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.203934][ T5858] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.217918][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.228512][ T5858] usb 5-1: config 0 descriptor?? [ 163.265101][ T787] usb 1-1: USB disconnect, device number 6 [ 163.378804][ T7624] loop1: detected capacity change from 0 to 4096 [ 163.561596][ T1187] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 163.645679][ T5858] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 163.676808][ T5858] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 163.697995][ T5858] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 163.768300][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 163.784762][ T1187] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 163.794135][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.813244][ T1187] usb 3-1: config 0 descriptor?? [ 163.819313][ T7622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.941055][ T7631] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 163.966155][ T23] usb 5-1: USB disconnect, device number 8 [ 164.136186][ T7637] loop1: detected capacity change from 0 to 512 [ 164.143446][ T7637] EXT4-fs: Ignoring removed bh option [ 164.150974][ T7637] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 164.174613][ T7637] EXT4-fs (loop1): 1 truncate cleaned up [ 164.184254][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.262648][ T1187] ntrig 0003:1B96:000E.000C: unbalanced delimiter at end of report description [ 164.272698][ T1187] ntrig 0003:1B96:000E.000C: parse failed [ 164.278553][ T1187] ntrig: probe of 0003:1B96:000E.000C failed with error -22 [ 164.309752][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.401483][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.469216][ T5858] usb 3-1: USB disconnect, device number 9 [ 164.573352][ T7649] program syz.4.612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.583246][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 164.591905][ T787] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 164.607015][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.627830][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.650204][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.669828][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.690094][ T787] usb 1-1: Product: syz [ 164.695153][ T787] usb 1-1: Manufacturer: syz [ 164.699793][ T787] usb 1-1: SerialNumber: syz [ 164.754199][ T7651] loop1: detected capacity change from 0 to 8192 [ 164.764098][ T7651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.777232][ T7651] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 164.788039][ T7651] REISERFS (device loop1): using ordered data mode [ 164.805154][ T7651] reiserfs: using flush barriers [ 164.814184][ T7651] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.830911][ T7651] REISERFS (device loop1): checking transaction log (loop1) [ 164.839834][ T7651] REISERFS (device loop1): Using r5 hash to sort names [ 164.847147][ T7651] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 165.126815][ T787] usb 1-1: 0:2 : does not exist [ 165.571544][ T1187] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.596834][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.621862][ T7672] loop4: detected capacity change from 0 to 256 [ 165.629021][ T7672] exfat: Deprecated parameter 'utf8' [ 165.636295][ T7672] exfat: Deprecated parameter 'namecase' [ 165.642189][ T7672] exfat: Deprecated parameter 'utf8' [ 165.647492][ T7672] exfat: Deprecated parameter 'utf8' [ 165.665640][ T7672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 165.754424][ T787] usb 1-1: USB disconnect, device number 7 [ 165.775572][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.791509][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.791565][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 165.801262][ T1187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.804853][ T1187] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.839453][ T5840] usb 2-1: config 0 has no interfaces? [ 165.840516][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.855575][ T5840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.864741][ T1187] usb 3-1: config 0 descriptor?? [ 165.875247][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.885958][ T5840] usb 2-1: config 0 descriptor?? [ 166.005317][ T7676] loop4: detected capacity change from 0 to 4096 [ 166.295132][ T1187] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 166.305245][ T1187] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 166.322532][ T1187] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.337517][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.351160][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.365861][ T1187] usb 2-1: USB disconnect, device number 9 [ 166.446375][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 166.604240][ T5840] usb 3-1: USB disconnect, device number 10 [ 166.789824][ T7697] program syz.4.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.111552][ T1187] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.184582][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.301582][ T1187] usb 5-1: Using ep0 maxpacket: 32 [ 167.318965][ T1187] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 167.341453][ T1187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.352229][ T1187] usb 5-1: config 0 descriptor?? [ 167.373881][ T1187] gspca_main: sq930x-2.14.0 probing 041e:403c [ 167.391583][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 167.412323][ T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.429822][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.446486][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 167.459339][ T787] pvrusb2: ********** [ 167.463495][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 167.477404][ T787] pvrusb2: Important functionality might not be entirely working. [ 167.485412][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 167.497089][ T787] pvrusb2: ********** [ 167.625299][ T7711] loop2: detected capacity change from 0 to 32768 [ 167.635223][ T7711] (syz.2.641,7711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.650001][ T7711] (syz.2.641,7711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.665511][ T2318] pvrusb2: Invalid write control endpoint [ 167.684433][ T7711] JBD2: Ignoring recovery information on journal [ 167.755330][ T7711] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 167.770928][ T2318] pvrusb2: Invalid write control endpoint [ 167.777547][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 167.804143][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 167.821469][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 167.832177][ T2318] pvrusb2: Device being rendered inoperable [ 167.850553][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 167.861539][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 167.881692][ T2318] pvrusb2: Attached sub-driver cx25840 [ 167.884679][ T7703] pvrusb2: Attempted to execute control transfer when device not ok [ 167.887586][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 167.904942][ T5857] usb 1-1: USB disconnect, device number 8 [ 167.920045][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 168.012190][ T7248] ocfs2: Unmounting device (7,2) on (node local) [ 168.379845][ T1187] gspca_sq930x: ucbus_write failed -71 [ 168.385922][ T1187] sq930x: probe of 5-1:0.0 failed with error -71 [ 168.404629][ T1187] usb 5-1: USB disconnect, device number 9 [ 168.769423][ T7732] loop1: detected capacity change from 0 to 32768 [ 168.783296][ T7732] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 168.828820][ T7732] XFS (loop1): Ending clean mount [ 168.851420][ T787] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.995136][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 169.012561][ T7752] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.022136][ T7752] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.030880][ T7752] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.039972][ T7752] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.049832][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.057541][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 169.072190][ T7752] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.081270][ T7752] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.081540][ T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.090429][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.101872][ T7752] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.119514][ T7752] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.140270][ T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.149634][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.159171][ T787] usb 3-1: Product: syz [ 169.163558][ T787] usb 3-1: Manufacturer: syz [ 169.168191][ T787] usb 3-1: SerialNumber: syz [ 169.206438][ T5774] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 169.263750][ T5840] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.274754][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.288132][ T5840] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.300306][ T5840] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.308500][ T5840] usb 1-1: Manufacturer: syz [ 169.317316][ T5840] usb 1-1: config 0 descriptor?? [ 169.497299][ T5840] rc_core: IR keymap rc-hauppauge not found [ 169.512852][ T5840] Registered IR keymap rc-empty [ 169.522789][ T5840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 169.549350][ T5840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 169.565623][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 169.577729][ T5840] usb 1-1: USB disconnect, device number 9 [ 169.620438][ T787] usb 3-1: 0:2 : does not exist [ 170.003199][ T7769] loop4: detected capacity change from 0 to 2048 [ 170.031560][ T787] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 170.048920][ T7769] loop4: p1 < > p3 [ 170.059659][ T7769] loop4: p3 size 134217728 extends beyond EOD, truncated [ 170.066888][ T787] usb 3-1: USB disconnect, device number 11 [ 170.273364][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 170.746421][ T7786] loop4: detected capacity change from 0 to 4096 [ 170.755615][ T7786] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 170.816148][ T7790] loop2: detected capacity change from 0 to 1024 [ 170.887851][ T7790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.920081][ T7790] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.039394][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.160837][ T7788] loop1: detected capacity change from 0 to 32768 [ 171.184941][ T7788] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.230784][ T7788] XFS (loop1): Ending clean mount [ 171.303633][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.353452][ T5840] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.496924][ T7797] loop2: detected capacity change from 0 to 32768 [ 171.526021][ T7797] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.672 (7797) [ 171.545886][ T7797] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.557192][ T7797] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 171.566231][ T7797] BTRFS info (device loop2): enabling disk space caching [ 171.573606][ T7797] BTRFS info (device loop2): doing ref verification [ 171.580286][ T7797] BTRFS info (device loop2): use zlib compression, level 3 [ 171.587897][ T7797] BTRFS info (device loop2): force clearing of disk cache [ 171.595259][ T7797] BTRFS info (device loop2): setting nodatacow, compression disabled [ 171.603516][ T7797] BTRFS info (device loop2): doing ref verification [ 171.610177][ T7797] BTRFS info (device loop2): disk space caching is enabled [ 171.624165][ T5840] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 171.632790][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.645894][ T5840] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 171.658019][ T5840] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 171.666785][ T5840] usb 5-1: Manufacturer: syz [ 171.675271][ T5840] usb 5-1: config 0 descriptor?? [ 171.694328][ T7797] BTRFS info (device loop2): enabling ssd optimizations [ 171.702968][ T7797] BTRFS info (device loop2): auto enabling async discard [ 171.725915][ T7797] BTRFS info (device loop2): rebuilding free space tree [ 171.755019][ T7797] BTRFS info (device loop2): disabling free space tree [ 171.771663][ T5840] rc_core: IR keymap rc-hauppauge not found [ 171.777868][ T7797] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.791234][ T5840] Registered IR keymap rc-empty [ 171.798100][ T5840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 171.810644][ T7797] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.828450][ T5840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 171.910734][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 171.913010][ T1187] usb 5-1: USB disconnect, device number 10 [ 171.916940][ C1] igorplugusb 5-1:0.0: submit urb failed: -19 [ 171.936128][ T28] audit: type=1800 audit(1750792405.161:52): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.672" name="file1" dev="loop2" ino=261 res=0 errno=0 [ 172.034247][ T7248] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.043837][ T7830] vlan3: entered allmulticast mode [ 172.051848][ T7830] bridge0: port 3(vlan3) entered blocking state [ 172.058330][ T7830] bridge0: port 3(vlan3) entered disabled state [ 172.074708][ T7830] vlan3: entered promiscuous mode [ 172.081765][ T7830] bridge0: port 3(vlan3) entered blocking state [ 172.088201][ T7830] bridge0: port 3(vlan3) entered forwarding state [ 172.351675][ T7834] loop2: detected capacity change from 0 to 4096 [ 172.376265][ T7835] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.561833][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.668272][ T7840] loop2: detected capacity change from 0 to 1024 [ 172.751450][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 172.762706][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 172.781216][ T9] usb 2-1: config 0 has no interface number 0 [ 172.796049][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 172.811392][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.819417][ T9] usb 2-1: Product: syz [ 172.841447][ T9] usb 2-1: Manufacturer: syz [ 172.846148][ T9] usb 2-1: SerialNumber: syz [ 172.853442][ T9] usb 2-1: config 0 descriptor?? [ 172.861000][ T9] smsc95xx v2.0.0 [ 173.590603][ T7865] loop2: detected capacity change from 0 to 4096 [ 173.657986][ T7867] loop4: detected capacity change from 0 to 512 [ 173.670423][ T7867] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.697808][ T7867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.717816][ T7867] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 173.732023][ T7867] EXT4-fs (loop4): 1 truncate cleaned up [ 173.739494][ T7867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.824786][ T6673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.892714][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 173.913385][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 173.931967][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 173.948893][ T9] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 173.959199][ T9] usb 2-1: USB disconnect, device number 10 [ 174.304725][ T7890] netlink: 'syz.2.701': attribute type 12 has an invalid length. [ 174.312899][ T7890] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 174.321773][ T7890] netlink: 148 bytes leftover after parsing attributes in process `syz.2.701'. [ 174.332541][ T7890] netlink: 'syz.2.701': attribute type 12 has an invalid length. [ 174.340326][ T7890] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 174.348303][ T7890] netlink: 148 bytes leftover after parsing attributes in process `syz.2.701'. [ 174.357487][ T7890] Zero length message leads to an empty skb [ 174.531569][ T5858] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.722513][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 174.736816][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.747208][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.756418][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 174.767731][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 174.778977][ T5858] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.788131][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.799739][ T5858] hub 5-1:1.0: bad descriptor, ignoring hub [ 174.805805][ T5858] hub: probe of 5-1:1.0 failed with error -5 [ 174.812667][ T5858] cdc_wdm 5-1:1.0: skipping garbage [ 174.817914][ T5858] cdc_wdm 5-1:1.0: skipping garbage [ 174.832334][ T5858] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 174.838260][ T5858] cdc_wdm 5-1:1.0: Unknown control protocol [ 175.313635][ T5858] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 175.841761][ T5858] usb 5-1: USB disconnect, device number 11 [ 178.518973][ T7898] loop8: detected capacity change from 0 to 8 [ 178.530025][ T7898] Dev loop8: unable to read RDB block 8 [ 178.541171][ T7898] loop8: unable to read partition table [ 178.549994][ T7898] loop8: partition table beyond EOD, truncated [ 178.556999][ T7898] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 178.621049][ T7901] loop1: detected capacity change from 0 to 256 [ 178.758453][ T7901] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 178.796247][ T7905] program syz.4.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.228406][ T7894] loop0: detected capacity change from 0 to 32768 [ 179.238680][ T7894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.703 (7894) [ 179.252632][ T7913] syzkaller1: entered promiscuous mode [ 179.260577][ T7913] syzkaller1: entered allmulticast mode [ 179.271667][ T7894] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.326184][ T7894] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.365980][ T7894] BTRFS info (device loop0): enabling disk space caching [ 179.381498][ T7894] BTRFS info (device loop0): doing ref verification [ 179.403698][ T7894] BTRFS info (device loop0): use zlib compression, level 3 [ 179.421284][ T7894] BTRFS info (device loop0): force clearing of disk cache [ 179.441374][ T7894] BTRFS info (device loop0): setting nodatacow, compression disabled [ 179.459746][ T7894] BTRFS info (device loop0): doing ref verification [ 179.471436][ T7894] BTRFS info (device loop0): disk space caching is enabled [ 179.584063][ T7894] BTRFS info (device loop0): enabling ssd optimizations [ 179.611471][ T7894] BTRFS info (device loop0): auto enabling async discard [ 179.621727][ T7894] BTRFS info (device loop0): rebuilding free space tree [ 179.667108][ T7894] BTRFS info (device loop0): disabling free space tree [ 179.681536][ T7894] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.691248][ T7894] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.868711][ T28] audit: type=1800 audit(1750792413.081:53): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.703" name="file1" dev="loop0" ino=261 res=0 errno=0 [ 179.893427][ T7915] loop4: detected capacity change from 0 to 32768 [ 179.956260][ T7915] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.997231][ T7941] loop1: detected capacity change from 0 to 64 [ 180.017895][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.018748][ T7915] (syz.4.713,7915,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 180.058965][ T7915] (syz.4.713,7915,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 180.236751][ T6673] ocfs2: Unmounting device (7,4) on (node local) [ 180.590718][ T23] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 180.617158][ T23] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.842733][ T7967] sctp: [Deprecated]: syz.0.727 (pid 7967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.842733][ T7967] Use struct sctp_sack_info instead [ 181.372130][ T7966] loop4: detected capacity change from 0 to 40427 [ 181.386484][ T7966] F2FS-fs (loop4): heap/no_heap options were deprecated [ 181.396917][ T7966] F2FS-fs (loop4): invalid crc value [ 181.408333][ T7966] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.479327][ T7966] F2FS-fs (loop4): Start checkpoint disabled! [ 181.501665][ T7966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 181.684170][ T6673] syz-executor: attempt to access beyond end of device [ 181.684170][ T6673] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 181.707237][ T7977] loop2: detected capacity change from 0 to 7 [ 181.715663][ T6673] syz-executor: attempt to access beyond end of device [ 181.715663][ T6673] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 181.722739][ T7977] Dev loop2: unable to read RDB block 7 [ 181.740843][ T7977] loop2: AHDI p1 p2 p3 [ 181.749973][ T7977] loop2: partition table partially beyond EOD, truncated [ 181.758939][ T7979] program syz.0.732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.769456][ T7977] loop2: p1 start 1601398130 is beyond EOD, truncated [ 181.797061][ T7977] loop2: p2 start 1702059890 is beyond EOD, truncated [ 181.916498][ T11] kworker/u4:0: attempt to access beyond end of device [ 181.916498][ T11] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 181.939204][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 181.946518][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 182.424319][ T1130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.570488][ T1130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.721734][ T1130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.868370][ T7992] loop1: detected capacity change from 0 to 32768 [ 182.891787][ T1130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.969738][ T7992] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 182.999739][ T11] (kworker/u4:0,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 183.315041][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 183.955497][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.973593][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.983909][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.993581][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.001966][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.009572][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.024301][ T8025] loop2: detected capacity change from 0 to 1024 [ 184.102035][ T8025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.130479][ T8030] pim6reg: entered allmulticast mode [ 184.186836][ T8025] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.210732][ T8030] pim6reg: left allmulticast mode [ 184.334539][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.555178][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 184.723533][ T8045] capability: warning: `syz.2.759' uses 32-bit capabilities (legacy support in use) [ 184.783657][ T8045] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 184.814004][ T1130] hsr_slave_0: left promiscuous mode [ 184.824850][ T8045] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.837947][ T1130] hsr_slave_1: left promiscuous mode [ 184.846928][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.868938][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.876553][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 184.895299][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.905835][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.924171][ T1130] bridge_slave_1: left allmulticast mode [ 184.936400][ T1130] bridge_slave_1: left promiscuous mode [ 184.945937][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.962433][ T1130] bridge_slave_0: left allmulticast mode [ 184.978078][ T1130] bridge_slave_0: left promiscuous mode [ 184.985187][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.031622][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.044770][ T1130] veth1_macvtap: left promiscuous mode [ 185.050497][ T1130] veth0_macvtap: left promiscuous mode [ 185.056348][ T1130] veth1_vlan: left promiscuous mode [ 185.069610][ T1130] veth0_vlan: left promiscuous mode [ 185.239475][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.259770][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.278219][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.296294][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.311182][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.324901][ T8064] loop2: detected capacity change from 0 to 128 [ 185.335462][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.346143][ T9] usb 1-1: Manufacturer: syz [ 185.354663][ T8064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 185.363742][ T9] usb 1-1: config 0 descriptor?? [ 185.368943][ T8064] System zones: 1-3, 19-19, 35-36 [ 185.382303][ T8064] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 185.395916][ T8064] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.398727][ T8067] loop1: detected capacity change from 0 to 128 [ 185.494364][ T8064] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 185.556697][ T28] audit: type=1800 audit(1750792418.781:54): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.768" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 185.628078][ T7248] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.714581][ T2933] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 185.737495][ T2933] FAT-fs (loop1): Filesystem has been set read-only [ 185.747248][ T2933] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 185.826675][ T9] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 185.852893][ T9] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 185.925029][ T9] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 186.072639][ T5773] Bluetooth: hci1: command tx timeout [ 186.161002][ T787] usb 1-1: USB disconnect, device number 10 [ 186.429435][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 186.463251][ T8071] loop1: detected capacity change from 0 to 40427 [ 186.486293][ T8071] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 186.516290][ T8071] F2FS-fs (loop1): invalid crc value [ 186.526174][ T8071] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.556449][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 186.600665][ T8071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.616152][ T8069] loop2: detected capacity change from 0 to 40427 [ 186.650256][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.659120][ T8069] F2FS-fs (loop2): build fault injection attr: rate: 691, type: 0x7ffff [ 186.669399][ T8069] F2FS-fs (loop2): Image doesn't support compression [ 186.681933][ T8069] F2FS-fs (loop2): invalid crc value [ 186.716634][ T8069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.732672][ T5774] syz-executor: attempt to access beyond end of device [ 186.732672][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.764908][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 186.826583][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.883019][ T8069] F2FS-fs (loop2): Start checkpoint disabled! [ 186.924068][ T8069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 187.057191][ T8069] syz.2.769: attempt to access beyond end of device [ 187.057191][ T8069] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.108886][ T8069] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_insert_range+0x182/0x3b0 [ 187.140055][ T8069] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 187.898879][ T8094] loop2: detected capacity change from 0 to 256 [ 187.920270][ T1130] bond0 (unregistering): Released all slaves [ 187.920269][ T8094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 188.045862][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 188.175187][ T5773] Bluetooth: hci1: command tx timeout [ 188.417650][ T8096] loop2: detected capacity change from 0 to 32768 [ 188.435243][ T8096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.777 (8096) [ 188.449699][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.456111][ T8096] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.462839][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.467404][ T8096] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 188.488404][ T8021] bridge_slave_0: entered allmulticast mode [ 188.496130][ T8021] bridge_slave_0: entered promiscuous mode [ 188.505447][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.513809][ T8096] BTRFS info (device loop2): setting nodatacow, compression disabled [ 188.526404][ T8096] BTRFS info (device loop2): max_inline at 0 [ 188.532617][ T8096] BTRFS info (device loop2): enabling disk space caching [ 188.534062][ T8101] loop1: detected capacity change from 0 to 512 [ 188.539822][ T8096] BTRFS info (device loop2): turning off barriers [ 188.547216][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.560607][ T8096] BTRFS info (device loop2): turning on flush-on-commit [ 188.560644][ T8096] BTRFS info (device loop2): doing ref verification [ 188.560666][ T8096] BTRFS info (device loop2): force clearing of disk cache [ 188.560690][ T8096] BTRFS info (device loop2): enabling ssd optimizations [ 188.568383][ T8096] BTRFS info (device loop2): max_inline at 4096 [ 188.574883][ T8021] bridge_slave_1: entered allmulticast mode [ 188.590577][ T8101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.597382][ T8021] bridge_slave_1: entered promiscuous mode [ 188.601235][ T8096] BTRFS info (device loop2): disk space caching is enabled [ 188.641132][ T8101] EXT4-fs (loop1): 1 truncate cleaned up [ 188.648401][ T8101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.674328][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.693289][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.745663][ T8021] team0: Port device team_slave_0 added [ 188.753753][ T8096] BTRFS info (device loop2): auto enabling async discard [ 188.764342][ T8021] team0: Port device team_slave_1 added [ 188.782766][ T8096] BTRFS info (device loop2): rebuilding free space tree [ 188.796623][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.807351][ T8096] BTRFS info (device loop2): disabling free space tree [ 188.814676][ T8096] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.824425][ T8096] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.862340][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.869363][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.895813][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.910503][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.917677][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.951798][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.019226][ T8021] hsr_slave_0: entered promiscuous mode [ 189.021761][ T7248] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.035978][ T8021] hsr_slave_1: entered promiscuous mode [ 189.211657][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.426494][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 189.437129][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 189.437374][ T8021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.450521][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 189.462867][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.483129][ T9] usb 2-1: Product: syz [ 189.484735][ T8021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.491428][ T9] usb 2-1: Manufacturer: syz [ 189.502627][ T9] usb 2-1: SerialNumber: syz [ 189.504156][ T8021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.520201][ T9] usb 2-1: config 0 descriptor?? [ 189.529030][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 189.538835][ T8021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.742466][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.806951][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.810549][ T8135] loop2: detected capacity change from 0 to 512 [ 189.824182][ T8135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.832414][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.841271][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.860850][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.864294][ T8135] EXT4-fs (loop2): 1 truncate cleaned up [ 189.868129][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.883696][ T8135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.985590][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.231592][ T5773] Bluetooth: hci1: command tx timeout [ 190.380907][ T8139] loop2: detected capacity change from 0 to 32768 [ 190.393717][ T9] gspca_zc3xx: reg_w_i err -71 [ 190.410951][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.424899][ T8139] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 190.433943][ T8139] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.435363][ T8150] loop0: detected capacity change from 0 to 512 [ 190.451917][ T8150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.470813][ T8150] EXT4-fs (loop0): 1 truncate cleaned up [ 190.495388][ T8150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.511039][ T8139] XFS (loop2): Ending clean mount [ 190.526088][ T8139] XFS (loop2): Quotacheck needed: Please wait. [ 190.605145][ T8139] XFS (loop2): Quotacheck: Done. [ 190.626478][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.676451][ T28] audit: type=1800 audit(1750792423.901:55): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.784" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 190.749165][ T7248] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.928446][ T8166] loop0: detected capacity change from 0 to 128 [ 190.935726][ T8166] EXT4-fs: Ignoring removed orlov option [ 190.972558][ T8166] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.023065][ T8166] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.046127][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 191.056325][ T9] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 191.087423][ T8021] veth0_vlan: entered promiscuous mode [ 191.106802][ T9] usb 2-1: USB disconnect, device number 11 [ 191.153052][ T8021] veth1_vlan: entered promiscuous mode [ 191.273993][ T8021] veth0_macvtap: entered promiscuous mode [ 191.312229][ T8021] veth1_macvtap: entered promiscuous mode [ 191.371940][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.384971][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.395310][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.405938][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.421438][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.440029][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.469389][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.507153][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.527556][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.551444][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.571381][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.583085][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.611489][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.634412][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.660669][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.678863][ T8021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.696423][ T8021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.729247][ T8021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.749183][ T8021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.772984][ T8182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.794'. [ 192.051070][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.059739][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.112633][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.120512][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.312063][ T5773] Bluetooth: hci1: command tx timeout [ 192.418161][ T8203] loop5: detected capacity change from 0 to 2048 [ 192.457717][ T8203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.479714][ T8207] loop2: detected capacity change from 0 to 512 [ 192.495517][ T8206] syzkaller1: entered promiscuous mode [ 192.501679][ T8206] syzkaller1: entered allmulticast mode [ 192.509175][ T8207] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.804: invalid indirect mapped block 256 (level 2) [ 192.527503][ T8207] EXT4-fs (loop2): 2 truncates cleaned up [ 192.537672][ T8207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.572353][ T8207] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.804: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 192.649854][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.752497][ T1187] kernel write not supported for file /media2 (pid: 1187 comm: kworker/0:2) [ 192.820406][ T8218] sit0: entered promiscuous mode [ 192.836334][ T8218] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 192.856054][ T8218] netlink: 1 bytes leftover after parsing attributes in process `syz.0.808'. [ 192.986740][ T8224] loop0: detected capacity change from 0 to 512 [ 193.002676][ T8224] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.021985][ T8224] EXT4-fs (loop0): 1 truncate cleaned up [ 193.030151][ T8224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.057819][ T8224] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 193.139984][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.232108][ T8190] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.249070][ T8282] loop5: detected capacity change from 0 to 8 [ 194.268202][ T8282] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.277629][ T8282] SQUASHFS error: Failed to read block 0x0: -5 [ 194.285835][ T8282] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.295212][ T8282] SQUASHFS error: Failed to read block 0x0: -5 [ 194.303233][ T28] audit: type=1800 audit(1750792427.531:56): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.824" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 194.328746][ T8282] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.338518][ T8282] SQUASHFS error: Failed to read block 0x0: -5 [ 194.346345][ T8282] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.363274][ T8282] SQUASHFS error: Failed to read block 0x0: -5 [ 194.399515][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411194][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.457031][ T8286] netlink: 'syz.5.827': attribute type 3 has an invalid length. [ 194.581017][ T8290] netlink: 'syz.0.829': attribute type 6 has an invalid length. [ 194.590061][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 194.703000][ T787] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 194.891919][ T5840] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.905008][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 194.912990][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.921737][ T787] usb 3-1: config 0 has no interface number 0 [ 194.928410][ T787] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.940089][ T787] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.950307][ T787] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 194.959971][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.974186][ T787] usb 3-1: config 0 descriptor?? [ 195.121645][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 195.133007][ T5840] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 195.142807][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.152042][ T5840] usb 6-1: Product: syz [ 195.161475][ T5840] usb 6-1: Manufacturer: syz [ 195.166151][ T5840] usb 6-1: SerialNumber: syz [ 195.178890][ T5840] usb 6-1: config 0 descriptor?? [ 195.189745][ T5840] gspca_main: se401-2.14.0 probing 047d:5003 [ 195.586718][ T8310] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.838'. [ 195.606754][ T5840] gspca_se401: Frame size: 0x0 1/16th janggu [ 195.623950][ T787] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0010/input/input26 [ 195.718312][ T787] uclogic 0003:28BD:0094.0010: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 195.807686][ T5840] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 195.826545][ T5857] usb 3-1: USB disconnect, device number 12 [ 196.025712][ T1187] usb 6-1: USB disconnect, device number 2 [ 196.042687][ T8326] netlink: 27 bytes leftover after parsing attributes in process `syz.1.846'. [ 196.326046][ T8324] loop0: detected capacity change from 0 to 40427 [ 196.335240][ T8324] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 196.345386][ T8324] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.368337][ T8324] F2FS-fs (loop0): invalid crc value [ 196.377703][ T8324] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.447369][ T8324] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 196.462269][ T8324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.486316][ T8336] loop1: detected capacity change from 0 to 2048 [ 196.503532][ T8336] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 196.514480][ T8336] UDF-fs: Scanning with blocksize 512 failed [ 196.530337][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.601444][ T28] audit: type=1800 audit(1750792429.821:57): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.849" name="file1" dev="loop1" ino=818 res=0 errno=0 [ 196.662197][ T8341] loop8: detected capacity change from 0 to 7 [ 196.677103][ T8341] Dev loop8: unable to read RDB block 7 [ 196.682869][ T8341] loop8: unable to read partition table [ 196.688833][ T8341] loop8: partition table beyond EOD, truncated [ 196.696874][ T8341] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 196.833645][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 197.039972][ T8351] loop2: detected capacity change from 0 to 128 [ 197.050181][ T8351] EXT4-fs: journaled quota format not specified [ 197.485857][ T8363] syz.2.862 (8363) used greatest stack depth: 19528 bytes left [ 197.590770][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.864'. [ 197.613533][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 197.913352][ T8359] loop1: detected capacity change from 0 to 32768 [ 198.000420][ T28] audit: type=1800 audit(1750792431.221:58): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.860" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 198.255531][ T8366] loop0: detected capacity change from 0 to 32768 [ 198.283682][ T8366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.852 (8366) [ 198.307713][ T8366] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.342478][ T8366] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 198.354821][ T8366] BTRFS info (device loop0): force clearing of disk cache [ 198.362150][ T8366] BTRFS info (device loop0): enabling auto defrag [ 198.368756][ T8366] BTRFS info (device loop0): max_inline at 0 [ 198.378855][ T8366] BTRFS info (device loop0): enabling disk space caching [ 198.386860][ T8387] loop2: detected capacity change from 0 to 512 [ 198.388634][ T8366] BTRFS info (device loop0): disk space caching is enabled [ 198.398553][ T8387] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 198.418316][ T8387] EXT4-fs (loop2): invalid journal inode [ 198.425716][ T8387] EXT4-fs (loop2): can't get journal size [ 198.450699][ T8388] loop5: detected capacity change from 0 to 4096 [ 198.451244][ T8387] EXT4-fs (loop2): 1 truncate cleaned up [ 198.467846][ T8387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.491394][ T8404] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.493217][ T8387] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 198.542085][ T8366] BTRFS info (device loop0): enabling ssd optimizations [ 198.551029][ T8366] BTRFS info (device loop0): rebuilding free space tree [ 198.553400][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.574911][ T8366] BTRFS info (device loop0): disabling free space tree [ 198.611405][ T8366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.621118][ T8366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.645321][ T8408] loop2: detected capacity change from 0 to 1024 [ 198.725597][ T8408] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 198.754529][ T8408] hfsplus: xattr searching failed [ 198.796223][ T8410] loop5: detected capacity change from 0 to 512 [ 198.840863][ T8410] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.874: bg 0: block 393: padding at end of block bitmap is not set [ 198.864418][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.889805][ T8410] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 198.891743][ T8413] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 198.907458][ T8410] EXT4-fs (loop5): 2 truncates cleaned up [ 198.908574][ T8413] hfsplus: xattr search failed [ 198.925653][ T8410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.982934][ T2933] hfsplus: b-tree write err: -5, ino 4 [ 199.061600][ T8021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.700929][ T8418] loop5: detected capacity change from 0 to 32768 [ 199.729058][ T8418] JBD2: Ignoring recovery information on journal [ 199.787752][ T8422] loop2: detected capacity change from 0 to 32768 [ 199.800045][ T8422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.876 (8422) [ 199.803455][ T8418] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.840827][ T8422] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.855209][ T8422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 199.864072][ T8422] BTRFS info (device loop2): doing ref verification [ 199.875002][ T8422] BTRFS info (device loop2): turning on async discard [ 199.881999][ T8422] BTRFS info (device loop2): force clearing of disk cache [ 199.882027][ T8422] BTRFS info (device loop2): doing ref verification [ 199.896078][ T8422] BTRFS info (device loop2): disabling free space tree [ 199.909330][ T8422] BTRFS info (device loop2): max_inline at 4096 [ 199.957445][ T8422] BTRFS info (device loop2): rebuilding free space tree [ 199.959172][ T8021] ocfs2: Unmounting device (7,5) on (node local) [ 200.005923][ T8422] BTRFS info (device loop2): disabling free space tree [ 200.019978][ T8422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.034809][ T8422] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.253717][ T7248] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.737851][ T8464] loop1: detected capacity change from 0 to 1024 [ 200.795306][ T12] hfsplus: b-tree write err: -5, ino 4 [ 200.927764][ T8469] loop1: detected capacity change from 0 to 256 [ 200.936127][ T8469] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.948319][ T8469] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 200.976246][ T8469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 201.000837][ T8471] loop5: detected capacity change from 0 to 1024 [ 201.158714][ T2931] hfsplus: b-tree write err: -5, ino 3 [ 201.247017][ T8462] loop2: detected capacity change from 0 to 32768 [ 201.259877][ T8462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.883 (8462) [ 201.287001][ T8462] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.302010][ T8462] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.310796][ T8462] BTRFS info (device loop2): turning on sync discard [ 201.321045][ T8462] BTRFS info (device loop2): setting nodatacow, compression disabled [ 201.329319][ T8462] BTRFS info (device loop2): doing ref verification [ 201.343582][ T8462] BTRFS info (device loop2): enabling auto defrag [ 201.355755][ T8462] BTRFS info (device loop2): max_inline at 0 [ 201.363294][ T8462] BTRFS info (device loop2): using free space tree [ 201.416558][ T8462] BTRFS info (device loop2): enabling ssd optimizations [ 201.494806][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 201.592232][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 201.601053][ T7248] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.750409][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.781703][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 201.790820][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.836838][ T9] usb 6-1: config 0 descriptor?? [ 201.856819][ T8473] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.998396][ T8494] loop1: detected capacity change from 0 to 32768 [ 202.029902][ T8494] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.896 (8494) [ 202.082419][ T8494] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.103444][ T8494] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 202.121559][ T8494] BTRFS info (device loop1): setting nodatacow, compression disabled [ 202.129867][ T8494] BTRFS info (device loop1): max_inline at 0 [ 202.160112][ T8494] BTRFS info (device loop1): turning off barriers [ 202.176579][ T8494] BTRFS info (device loop1): force zlib compression, level 3 [ 202.184621][ T8494] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.211630][ T8494] BTRFS info (device loop1): force zstd compression, level 3 [ 202.229313][ T8494] BTRFS info (device loop1): force clearing of disk cache [ 202.238918][ T8494] BTRFS info (device loop1): enabling ssd optimizations [ 202.246121][ T8494] BTRFS info (device loop1): max_inline at 4096 [ 202.252515][ T8494] BTRFS info (device loop1): using free space tree [ 202.292228][ T8500] bridge0: entered allmulticast mode [ 202.309666][ T8494] BTRFS info (device loop1): auto enabling async discard [ 202.311828][ T9] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 202.356735][ T8494] BTRFS info (device loop1): rebuilding free space tree [ 202.490456][ T8496] loop0: detected capacity change from 0 to 40427 [ 202.508351][ T8517] loop2: detected capacity change from 0 to 16 [ 202.517574][ T9] usb 6-1: USB disconnect, device number 3 [ 202.528628][ T8496] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 202.548960][ T8496] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.564522][ T8517] erofs: (device loop2): mounted with root inode @ nid 36. [ 202.584105][ T8517] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 202.594581][ T8496] F2FS-fs (loop0): invalid crc value [ 202.606208][ T8517] erofs: (device loop2): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 202.615431][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.619841][ T8496] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.631267][ T8517] syz.2.900: attempt to access beyond end of device [ 202.631267][ T8517] loop2: rw=524288, sector=1049264, nr_sectors = 32 limit=16 [ 202.669933][ T8517] syz.2.900: attempt to access beyond end of device [ 202.669933][ T8517] loop2: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 202.706116][ T8517] syz.2.900: attempt to access beyond end of device [ 202.706116][ T8517] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 202.727393][ T8517] syz.2.900: attempt to access beyond end of device [ 202.727393][ T8517] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 202.746938][ T8517] syz.2.900: attempt to access beyond end of device [ 202.746938][ T8517] loop2: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 202.794538][ T8496] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.811562][ T8496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 202.983097][ T5769] syz-executor: attempt to access beyond end of device [ 202.983097][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.011683][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.174279][ T8527] loop5: detected capacity change from 0 to 1024 [ 203.188132][ T8527] EXT4-fs: Ignoring removed oldalloc option [ 203.213900][ T8527] EXT4-fs: Ignoring removed orlov option [ 203.230861][ T8527] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.267830][ T8527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.463114][ T8021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.594535][ T8523] loop2: detected capacity change from 0 to 32768 [ 203.634704][ T8523] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 203.876881][ T8523] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.961547][ T28] audit: type=1800 audit(1750792437.181:59): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.902" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 203.964180][ T8536] loop5: detected capacity change from 0 to 32768 [ 204.001031][ T8536] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.905 (8536) [ 204.007930][ T8543] loop0: detected capacity change from 0 to 64 [ 204.044912][ T8536] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.055255][ T8536] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 204.063966][ T8536] BTRFS info (device loop5): enabling disk space caching [ 204.069087][ T28] audit: type=1800 audit(1750792437.291:60): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.908" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 204.071008][ T8536] BTRFS info (device loop5): turning off barriers [ 204.098126][ T8536] BTRFS info (device loop5): force clearing of disk cache [ 204.105522][ T8536] BTRFS info (device loop5): enabling ssd optimizations [ 204.113580][ T8536] BTRFS info (device loop5): using spread ssd allocation scheme [ 204.121272][ T8536] BTRFS info (device loop5): enabling free space tree [ 204.128138][ T8536] BTRFS info (device loop5): using free space tree [ 204.193481][ T8536] BTRFS info (device loop5): rebuilding free space tree [ 204.218013][ T8536] BTRFS info (device loop5): checking UUID tree [ 204.263169][ T8523] syz.2.902 (8523) used greatest stack depth: 18096 bytes left [ 204.338935][ T7248] ocfs2: Unmounting device (7,2) on (node local) [ 204.355462][ T8021] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.508281][ T8567] loop1: detected capacity change from 0 to 2048 [ 204.575366][ T8567] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.661637][ T8568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.758792][ T8567] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 204.831746][ T8567] Remounting filesystem read-only [ 206.073074][ T8576] loop1: detected capacity change from 0 to 32768 [ 206.082228][ T8576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.914 (8576) [ 206.123125][ T8576] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.132144][ T8588] loop2: detected capacity change from 0 to 1024 [ 206.143750][ T8576] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 206.150977][ T8588] EXT4-fs: Ignoring removed i_version option [ 206.169787][ T8576] BTRFS info (device loop1): enabling disk space caching [ 206.179095][ T8588] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.181372][ T8576] BTRFS info (device loop1): doing ref verification [ 206.201657][ T8576] BTRFS info (device loop1): use zlib compression, level 3 [ 206.209326][ T8576] BTRFS info (device loop1): force clearing of disk cache [ 206.223028][ T8576] BTRFS info (device loop1): setting nodatacow, compression disabled [ 206.234858][ T8576] BTRFS info (device loop1): doing ref verification [ 206.241890][ T8576] BTRFS info (device loop1): disk space caching is enabled [ 206.251876][ T8588] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.920: Invalid block bitmap block 0 in block_group 0 [ 206.331391][ T8588] Quota error (device loop2): write_blk: dquota write failed [ 206.354423][ T8588] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 206.396291][ T8588] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.920: Failed to acquire dquot type 0 [ 206.438215][ T8588] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.920: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.461426][ T8576] BTRFS info (device loop1): enabling ssd optimizations [ 206.479295][ T8576] BTRFS info (device loop1): auto enabling async discard [ 206.487142][ T8588] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.920: Invalid inode bitmap blk 0 in block_group 0 [ 206.510200][ T8576] BTRFS info (device loop1): rebuilding free space tree [ 206.521476][ T2914] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 206.543110][ T2914] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 206.543319][ T8576] BTRFS info (device loop1): disabling free space tree [ 206.580941][ T8576] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.580958][ T8588] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 206.590878][ T8576] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.626762][ T8588] EXT4-fs (loop2): 1 orphan inode deleted [ 206.647770][ T8588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.725669][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.742696][ T28] audit: type=1800 audit(1750792439.961:61): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.914" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 206.781610][ T28] audit: type=1800 audit(1750792440.001:62): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.914" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 206.843653][ T8593] loop5: detected capacity change from 0 to 32768 [ 206.874059][ T8593] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.922 (8593) [ 207.133425][ T8615] pim6reg: entered allmulticast mode [ 207.370600][ T5774] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.458412][ T8625] loop0: detected capacity change from 0 to 64 [ 207.837499][ T5858] IPVS: starting estimator thread 0... [ 207.861569][ T5840] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.941588][ T8638] IPVS: using max 18 ests per chain, 43200 per kthread [ 208.051356][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 208.061374][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.071018][ T5840] usb 3-1: config 7 has an invalid interface number: 1 but max is 0 [ 208.081814][ T5840] usb 3-1: config 7 has no interface number 0 [ 208.099157][ T5840] usb 3-1: config 7 interface 1 has no altsetting 0 [ 208.109959][ T5840] usb 3-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=c1.87 [ 208.119222][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.127664][ T5840] usb 3-1: Product: syz [ 208.137763][ T5840] usb 3-1: Manufacturer: syz [ 208.142543][ T5840] usb 3-1: SerialNumber: syz [ 208.286730][ T787] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 208.297828][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.306941][ T787] usb 2-1: Product: syz [ 208.315836][ T787] usb 2-1: Manufacturer: syz [ 208.320640][ T787] usb 2-1: SerialNumber: syz [ 208.328509][ T787] usb 2-1: config 0 descriptor?? [ 208.337848][ T787] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 012 [ 208.370682][ T5840] usb 3-1: bad CDC descriptors [ 208.386528][ T5840] usb 3-1: bad CDC descriptors [ 208.392678][ T5840] cdc_acm 3-1:7.1: Zero length descriptor references [ 208.399562][ T5840] cdc_acm: probe of 3-1:7.1 failed with error -22 [ 208.436754][ T5840] usb 3-1: USB disconnect, device number 13 [ 208.461857][ T8640] loop5: detected capacity change from 0 to 32768 [ 208.481635][ T8640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.938 (8640) [ 208.512870][ T8640] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.524675][ T8640] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 208.533651][ T8640] BTRFS info (device loop5): enabling disk space caching [ 208.553812][ T8640] BTRFS info (device loop5): doing ref verification [ 208.560523][ T8640] BTRFS info (device loop5): use zlib compression, level 3 [ 208.574354][ T8640] BTRFS info (device loop5): force clearing of disk cache [ 208.583144][ T8640] BTRFS info (device loop5): setting nodatacow, compression disabled [ 208.595474][ T8640] BTRFS info (device loop5): doing ref verification [ 208.603922][ T8640] BTRFS info (device loop5): disk space caching is enabled [ 208.647570][ T8640] BTRFS info (device loop5): enabling ssd optimizations [ 208.655835][ T8640] BTRFS info (device loop5): auto enabling async discard [ 208.666357][ T8640] BTRFS info (device loop5): rebuilding free space tree [ 208.685991][ T8640] BTRFS info (device loop5): disabling free space tree [ 208.695345][ T8640] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.705369][ T8640] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.773845][ T787] (null): failure reading functionality [ 208.791172][ T787] i2c i2c-1: connected i2c-tiny-usb device [ 208.807722][ T28] audit: type=1800 audit(1750792442.031:63): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.938" name="file1" dev="loop5" ino=261 res=0 errno=0 [ 208.939705][ T8648] loop0: detected capacity change from 0 to 32768 [ 208.949145][ T8021] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.007621][ T5819] usb 2-1: USB disconnect, device number 12 [ 209.294544][ T8669] vlan2: entered promiscuous mode [ 209.321376][ T8669] syz_tun: entered promiscuous mode [ 209.823312][ T8681] loop5: detected capacity change from 0 to 4096 [ 210.131140][ T8689] loop5: detected capacity change from 0 to 64 [ 210.168506][ T8689] minix_free_block (loop5:1): bit already cleared [ 210.177188][ T8689] minix_free_block (loop5:4): bit already cleared [ 210.187347][ T8689] minix_free_block (loop5:3): bit already cleared [ 210.195273][ T8689] minix_free_block (loop5:2): bit already cleared [ 210.207049][ T8689] minix_free_block (loop5:1): bit already cleared [ 210.420690][ T8694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 210.489074][ T8683] loop2: detected capacity change from 0 to 32768 [ 210.511516][ T8683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.951 (8683) [ 210.531590][ T8683] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.543360][ T8683] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 210.556394][ T8683] BTRFS info (device loop2): enabling disk space caching [ 210.564241][ T8683] BTRFS info (device loop2): doing ref verification [ 210.582246][ T8683] BTRFS info (device loop2): use zlib compression, level 3 [ 210.588977][ T8696] loop5: detected capacity change from 0 to 1024 [ 210.592172][ T8683] BTRFS info (device loop2): force clearing of disk cache [ 210.600009][ T8696] EXT4-fs: Ignoring removed orlov option [ 210.611824][ T8683] BTRFS info (device loop2): setting nodatacow, compression disabled [ 210.621052][ T8683] BTRFS info (device loop2): doing ref verification [ 210.628467][ T8683] BTRFS info (device loop2): disk space caching is enabled [ 210.647187][ T8696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.732490][ T8683] BTRFS info (device loop2): enabling ssd optimizations [ 210.733488][ T8021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.739731][ T8683] BTRFS info (device loop2): auto enabling async discard [ 210.766901][ T8683] BTRFS info (device loop2): rebuilding free space tree [ 210.814709][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.961'. [ 210.834414][ T8683] BTRFS info (device loop2): disabling free space tree [ 210.853915][ T8683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.891587][ T8683] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.999377][ T8728] loop5: detected capacity change from 0 to 2048 [ 211.010337][ T28] audit: type=1800 audit(1750792444.231:64): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.951" name="file1" dev="loop2" ino=261 res=0 errno=0 [ 211.040404][ T8728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.125956][ T7248] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.145601][ T8021] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.231410][ T5840] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.424228][ T5840] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 211.434450][ T5840] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 211.463812][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.473167][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.481197][ T5840] usb 2-1: Product: syz [ 211.499494][ T5840] usb 2-1: Manufacturer: syz [ 211.504422][ T5840] usb 2-1: SerialNumber: syz [ 211.821581][ T8749] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.940078][ T8726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.950697][ T8726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.350569][ T8751] loop5: detected capacity change from 0 to 32768 [ 212.359941][ T8751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.974 (8751) [ 212.381635][ T8751] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.398988][ T8751] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 212.409302][ T8751] BTRFS info (device loop5): enabling disk space caching [ 212.416679][ T8751] BTRFS info (device loop5): doing ref verification [ 212.423559][ T8751] BTRFS info (device loop5): use zlib compression, level 3 [ 212.430801][ T8751] BTRFS info (device loop5): force clearing of disk cache [ 212.438319][ T8751] BTRFS info (device loop5): setting nodatacow, compression disabled [ 212.446504][ T8751] BTRFS info (device loop5): doing ref verification [ 212.453244][ T8751] BTRFS info (device loop5): disk space caching is enabled [ 212.525910][ T8751] BTRFS info (device loop5): enabling ssd optimizations [ 212.533515][ T8751] BTRFS info (device loop5): auto enabling async discard [ 212.547466][ T8751] BTRFS info (device loop5): rebuilding free space tree [ 212.572147][ T8751] BTRFS info (device loop5): disabling free space tree [ 212.576988][ T5840] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 212.579106][ T8751] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.594519][ T8751] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.594652][ T5840] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 212.652228][ T5840] cdc_ncm 2-1:1.0: bind() failure [ 212.675237][ T5840] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 212.686036][ T5840] cdc_ncm 2-1:1.1: bind() failure [ 212.696318][ T5840] usb 2-1: USB disconnect, device number 13 [ 212.732367][ T28] audit: type=1800 audit(1750792445.961:65): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.974" name="file1" dev="loop5" ino=261 res=0 errno=0 [ 212.835951][ T8021] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.141451][ T1187] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.151637][ T5858] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.175147][ T8791] input: syz0 as /devices/virtual/input/input28 [ 213.321656][ T1187] usb 3-1: Using ep0 maxpacket: 32 [ 213.336414][ T1187] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 213.349917][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.358565][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.370547][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.383352][ T1187] usb 3-1: config 0 descriptor?? [ 213.391450][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.413787][ T1187] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 213.431752][ T5858] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.440897][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.454301][ T5858] usb 1-1: config 0 descriptor?? [ 213.520696][ T8804] loop1: detected capacity change from 0 to 512 [ 213.544942][ T8804] EXT4-fs error (device loop1): ext4_quota_enable:7125: comm syz.1.992: Bad quota inum: 1, type: 2 [ 213.556572][ T8804] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 213.575338][ T8804] EXT4-fs (loop1): mount failed [ 213.872546][ T5858] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 213.899561][ T5858] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 213.915712][ T5858] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 213.978422][ T8825] loop2: detected capacity change from 0 to 7 [ 213.985466][ T8825] Dev loop2: unable to read RDB block 7 [ 213.991123][ T8825] loop2: AHDI p2 [ 213.997966][ T8825] loop2: partition table partially beyond EOD, truncated [ 214.063281][ T8827] loop1: detected capacity change from 0 to 64 [ 214.158927][ T9] usb 1-1: USB disconnect, device number 11 [ 214.260803][ T8831] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1002'. [ 214.399271][ T8833] loop1: detected capacity change from 0 to 8192 [ 214.407698][ T8833] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.415190][ T8833] UDF-fs: Scanning with blocksize 512 failed [ 214.422037][ T1187] gspca_nw80x: reg_w err -71 [ 214.428314][ T8833] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.428483][ T1187] nw80x: probe of 3-1:0.0 failed with error -71 [ 214.435904][ T8833] UDF-fs: Scanning with blocksize 1024 failed [ 214.449906][ T8833] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.459417][ T8833] UDF-fs: Scanning with blocksize 2048 failed [ 214.460782][ T1187] usb 3-1: USB disconnect, device number 14 [ 214.477380][ T8833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.876890][ T5826] ------------[ cut here ]------------ [ 214.883326][ T5826] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 214.900261][ T5826] WARNING: CPU: 0 PID: 5826 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 214.909771][ T5826] Modules linked in: [ 214.913860][ T5826] CPU: 0 PID: 5826 Comm: kworker/0:5 Not tainted 6.6.94-syzkaller #0 [ 214.922034][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.932205][ T5826] Workqueue: events request_firmware_work_func [ 214.938418][ T5826] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 214.944340][ T5826] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ea d0 c9 ff 49 8b 17 48 c7 c7 40 bc ba 8a 48 89 de e8 b8 8e 3b ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 29 71 ff [ 214.964292][ T5826] RSP: 0018:ffffc90004adf800 EFLAGS: 00010246 [ 214.971233][ T5826] RAX: de31636743158000 RBX: ffffffff8b2148e0 RCX: ffff88807a98bc00 [ 214.979754][ T5826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 214.988130][ T5826] RBP: dffffc0000000000 R08: ffffc90004adf407 R09: 1ffff9200095be80 [ 214.996289][ T5826] R10: dffffc0000000000 R11: fffff5200095be81 R12: 1ffffffff1642920 [ 215.004454][ T5826] R13: 0000000000000001 R14: ffff88802efc3ba0 R15: ffff8880239de008 [ 215.012566][ T5826] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 215.021695][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.028325][ T5826] CR2: 000055555cde55c8 CR3: 0000000024ec7000 CR4: 00000000003506f0 [ 215.036592][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.044637][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.052765][ T5826] Call Trace: [ 215.056088][ T5826] [ 215.059069][ T5826] ? sysfs_unmerge_group+0x10d/0x130 [ 215.064446][ T5826] device_del+0x251/0x900 [ 215.068796][ T5826] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 215.075301][ T5826] ? kill_device+0x160/0x160 [ 215.079905][ T5826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 215.086033][ T5826] ? _raw_spin_unlock+0x40/0x40 [ 215.090964][ T5826] ? complete_all+0x2d/0x1d0 [ 215.095633][ T5826] ? __fw_load_abort+0x8b/0x1a0 [ 215.100516][ T5826] firmware_fallback_sysfs+0x682/0x940 [ 215.106056][ T5826] _request_firmware+0xed9/0x1510 [ 215.111137][ T5826] ? request_firmware+0x50/0x50 [ 215.116170][ T5826] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 215.122256][ T5826] ? read_lock_is_recursive+0x20/0x20 [ 215.127674][ T5826] request_firmware_work_func+0xb0/0x1b0 [ 215.133453][ T5826] ? process_scheduled_works+0x957/0x15b0 [ 215.139199][ T5826] process_scheduled_works+0xa45/0x15b0 [ 215.144826][ T5826] ? assign_work+0x400/0x400 [ 215.149438][ T5826] ? assign_work+0x39e/0x400 [ 215.154108][ T5826] worker_thread+0xa55/0xfc0 [ 215.158720][ T5826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 215.164707][ T5826] ? _raw_spin_unlock+0x40/0x40 [ 215.169598][ T5826] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 215.176385][ T5826] kthread+0x2fa/0x390 [ 215.180496][ T5826] ? pr_cont_work+0x560/0x560 [ 215.185396][ T5826] ? kthread_blkcg+0xd0/0xd0 [ 215.190018][ T5826] ret_from_fork+0x48/0x80 [ 215.194519][ T5826] ? kthread_blkcg+0xd0/0xd0 [ 215.199124][ T5826] ret_from_fork_asm+0x11/0x20 [ 215.204013][ T5826] [ 215.207094][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.214385][ T5826] CPU: 0 PID: 5826 Comm: kworker/0:5 Not tainted 6.6.94-syzkaller #0 [ 215.222450][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.232510][ T5826] Workqueue: events request_firmware_work_func [ 215.238676][ T5826] Call Trace: [ 215.241982][ T5826] [ 215.244916][ T5826] dump_stack_lvl+0x16c/0x230 [ 215.249607][ T5826] ? show_regs_print_info+0x20/0x20 [ 215.254820][ T5826] ? load_image+0x3b0/0x3b0 [ 215.259332][ T5826] panic+0x2c0/0x710 [ 215.263244][ T5826] ? bpf_jit_dump+0xd0/0xd0 [ 215.267793][ T5826] ? ret_from_fork_asm+0x11/0x20 [ 215.272762][ T5826] __warn+0x2e0/0x470 [ 215.276749][ T5826] ? sysfs_remove_group+0x178/0x2a0 [ 215.281960][ T5826] ? sysfs_remove_group+0x178/0x2a0 [ 215.287175][ T5826] report_bug+0x2be/0x4f0 [ 215.291529][ T5826] ? sysfs_remove_group+0x178/0x2a0 [ 215.296741][ T5826] ? sysfs_remove_group+0x178/0x2a0 [ 215.301960][ T5826] ? sysfs_remove_group+0x17a/0x2a0 [ 215.307174][ T5826] handle_bug+0xcf/0x120 [ 215.311448][ T5826] exc_invalid_op+0x1a/0x50 [ 215.315999][ T5826] asm_exc_invalid_op+0x1a/0x20 [ 215.320867][ T5826] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 215.326684][ T5826] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ea d0 c9 ff 49 8b 17 48 c7 c7 40 bc ba 8a 48 89 de e8 b8 8e 3b ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a2 29 71 ff [ 215.346294][ T5826] RSP: 0018:ffffc90004adf800 EFLAGS: 00010246 [ 215.352374][ T5826] RAX: de31636743158000 RBX: ffffffff8b2148e0 RCX: ffff88807a98bc00 [ 215.360357][ T5826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 215.368339][ T5826] RBP: dffffc0000000000 R08: ffffc90004adf407 R09: 1ffff9200095be80 [ 215.376316][ T5826] R10: dffffc0000000000 R11: fffff5200095be81 R12: 1ffffffff1642920 [ 215.384297][ T5826] R13: 0000000000000001 R14: ffff88802efc3ba0 R15: ffff8880239de008 [ 215.392306][ T5826] ? sysfs_unmerge_group+0x10d/0x130 [ 215.397604][ T5826] device_del+0x251/0x900 [ 215.401944][ T5826] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 215.407883][ T5826] ? kill_device+0x160/0x160 [ 215.412478][ T5826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 215.418406][ T5826] ? _raw_spin_unlock+0x40/0x40 [ 215.423272][ T5826] ? complete_all+0x2d/0x1d0 [ 215.427892][ T5826] ? __fw_load_abort+0x8b/0x1a0 [ 215.432778][ T5826] firmware_fallback_sysfs+0x682/0x940 [ 215.438255][ T5826] _request_firmware+0xed9/0x1510 [ 215.443300][ T5826] ? request_firmware+0x50/0x50 [ 215.448158][ T5826] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 215.454146][ T5826] ? read_lock_is_recursive+0x20/0x20 [ 215.459528][ T5826] request_firmware_work_func+0xb0/0x1b0 [ 215.465165][ T5826] ? process_scheduled_works+0x957/0x15b0 [ 215.470980][ T5826] process_scheduled_works+0xa45/0x15b0 [ 215.476567][ T5826] ? assign_work+0x400/0x400 [ 215.481176][ T5826] ? assign_work+0x39e/0x400 [ 215.485789][ T5826] worker_thread+0xa55/0xfc0 [ 215.490394][ T5826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 215.496324][ T5826] ? _raw_spin_unlock+0x40/0x40 [ 215.501189][ T5826] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 215.507117][ T5826] kthread+0x2fa/0x390 [ 215.511197][ T5826] ? pr_cont_work+0x560/0x560 [ 215.515887][ T5826] ? kthread_blkcg+0xd0/0xd0 [ 215.520499][ T5826] ret_from_fork+0x48/0x80 [ 215.524932][ T5826] ? kthread_blkcg+0xd0/0xd0 [ 215.529531][ T5826] ret_from_fork_asm+0x11/0x20 [ 215.534334][ T5826] [ 215.537666][ T5826] Kernel Offset: disabled [ 215.542119][ T5826] Rebooting in 86400 seconds..