last executing test programs: 6.066714413s ago: executing program 3 (id=2065): socket$inet6(0xa, 0x3, 0x2f) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xb0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd6, 0xd, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xac, 0x7, 0x5, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7}}}}}}}}]}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 5.82374594s ago: executing program 0 (id=2067): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.408040883s ago: executing program 0 (id=2069): write$dsp(0xffffffffffffffff, &(0x7f0000000340)="74ad", 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000100)) 5.284153117s ago: executing program 0 (id=2072): socket$key(0xf, 0x3, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5) 5.075607294s ago: executing program 0 (id=2075): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "83e624170a20290000deff1e0400000027e6ff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.155666902s ago: executing program 3 (id=2076): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000005200000429bd7000fddbdf25000000006df17b07c6df794345114076972737a0"], 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x20040844) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x26900, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r2, 0x80800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000006c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x7}, {0x61, 0x0, 0x1}, {0x24, 0x0, 0x0, 0x2}, {0x2, 0xf}, {0x6, 0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000024c0), 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000002500)={0x2, 0x0, 0xfffffe01, 0x3, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000040)=ANY=[], 0x11, 0x6ba, &(0x7f00000001c0)="$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") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000040)=0x400000000000ff, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r5, &(0x7f0000001540)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1, 0x101, 0x0, 0x17) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x6, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$l2tp6(r7, &(0x7f0000000540)="d4fa31268bc8cc9901bbf4b0131693ed63029176f795e3cb6c941daf97260ba42bfcfeb9bcd1d6ab0cfab396f4fa86afd5fb685b5de04369ecb83a5e6655f3cf0f7fe71129283a114061057aff030000de3060e404bc6e1b883c6e424d833b6a394fff94a77d8500000000000000c2", 0x6f, 0x10, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x20, 0x11}, {0x80000000, 0x9, 0x1ff, 0x2, 0xc, 0x40000000081, 0xfc, 0x1}, {0x800, 0x4d, 0x2cb, 0x1}, 0x85, 0xfffffffc, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) 3.756593594s ago: executing program 3 (id=2079): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 3.737375925s ago: executing program 2 (id=2080): write$dsp(0xffffffffffffffff, &(0x7f0000000340)="74ad", 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000100)) 3.501258162s ago: executing program 2 (id=2081): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa6}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x21) 2.999783528s ago: executing program 2 (id=2083): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980), 0x1, 0x5ae, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2.879082371s ago: executing program 0 (id=2084): socket$inet6(0xa, 0x3, 0x2f) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xb0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd6, 0xd, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xac, 0x7, 0x5, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7}}}}}}}}]}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 2.843570023s ago: executing program 1 (id=2085): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 2.694382317s ago: executing program 3 (id=2086): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0xfffffffffffffffd, 0x22000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r3 = epoll_create1(0x0) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0) socket$alg(0x26, 0x5, 0x0) 2.60941838s ago: executing program 1 (id=2087): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000005200000429bd7000fddbdf25000000006df17b07c6df794345114076972737a0"], 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x20040844) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x26900, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r2, 0x80800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000006c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x7}, {0x61, 0x0, 0x1}, {0x24, 0x0, 0x0, 0x2}, {0x2, 0xf}, {0x6, 0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000024c0), 0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000002500)={0x2, 0x0, 0xfffffe01, 0x3, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000040)=ANY=[], 0x11, 0x6ba, &(0x7f00000001c0)="$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") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000040)=0x400000000000ff, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r5, &(0x7f0000001540)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1, 0x101, 0x0, 0x17) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x6, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$l2tp6(r7, &(0x7f0000000540)="d4fa31268bc8cc9901bbf4b0131693ed63029176f795e3cb6c941daf97260ba42bfcfeb9bcd1d6ab0cfab396f4fa86afd5fb685b5de04369ecb83a5e6655f3cf0f7fe71129283a114061057aff030000de3060e404bc6e1b883c6e424d833b6a394fff94a77d8500000000000000c2", 0x6f, 0x10, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x20, 0x11}, {0x80000000, 0x9, 0x1ff, 0x2, 0xc, 0x40000000081, 0xfc, 0x1}, {0x800, 0x4d, 0x2cb, 0x1}, 0x85, 0xfffffffc, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) 1.589301561s ago: executing program 2 (id=2088): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x2b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r1, 0x4}}, 0x48) 1.588491471s ago: executing program 3 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.501030534s ago: executing program 1 (id=2090): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.353678338s ago: executing program 3 (id=2091): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4437, &(0x7f0000008940)="$eJzs3c9vE1ceAPA3k+ySsMAmwIGVVlpLi7Sr3VWUcNrdIG0IgZBAlhVbUNWLcRIDaZ0YJU7VA1LTG1JPlXqoekCt1FtOKIde6Z/QS4/0jNQeeqlUCdWV7XHimdiNi+KkoM9HIuN5v+2v5/nNYXhxonJvaS23tJYrrOTKC3fWzuXeLpfWl4shPiCH3T/d6UWcxP7wXL94+f+3zoXwxeJXz6rVajXU9Ie2xlpef//dg4XWY1OcqVNrt31r++WNEMLpXeOq6QshvP55CFEI4UKSNpkcB0MIJ0Ij79aD92/n9mk0j58Wz+efzz3cGj87u/loq/N7j0L4uPSHf9xd/ubPfeNf/22fugcAAAAAAAAAAAAAAAAA4CU3feP6zf+NjoUnUejfjHY/rzudHDs9H1vdN3/q/ZsFAAAAAAAAAAAAAAAAAACAX6md5/9z0ck2z/9PJceJDvWr/+n9GOmdmf9en7o0Opbs/x7tyv9nkvTthb4w3Gbf9+z+7xcy9dvv/767nxfVHF+z36EQxSOp8zgeGQnh02Tj9zPR0bhUXqv8/U55fWVx34bx0krHv7F7fyo6yYb+3cZ/MtN+S/yr1eq7PXgHp3Z9m2rnt/fvK/ZKS8e/r0OpnfS94n8xU7P99b+fTvW2+VdcOv799bTB1gITjQngs/ei8EH/3vGfyrTfq/ifCCHkotpYc6kZoLaGiX5mvUJaOv6/qaelps7kg6zFv938/0Mm/pcy7R/E9d9u/t/I/hDRVjr+v62nDaRK7Fz/w/He1//lTPuHEf/a+Df8/nclHf8jjcT+VJH6J9nt/D+dab9X8b8ZJ+M8EaW+AZtRI73T/1dHWjr+A7vyd+7/4q7W/1cy9Q/q/q/Zb/P+rzn9/zVq3P/RXjr+gx3LdXv9z2Tq9Xr+n6iv/3hR6fgfrael185D9b/dxn82036v4l9flQw0478zn/x4pJH+ifVfV9Lx/10jMW4tsVH/W1//RXuv/69m2j+M9V9t/Btxb3t9VaTjf6xjuVr8v+zi9/9apl7v4x/CqLX+C0vH/3jHcvXrf2Dv+M9l6vU6/n/pZeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL4HJ5DgUongkdR7HIyMhXEzOz4Sj0XxhMT9fKi+8tRbCVJKeCyeju6XyfKGUX1opLxbzhVKpvBDCpST/dBiI1krlSn65cP/ydluD0b1iYbUyXyxUQgjTSfofw/FmW/NLleXC/RDCle2838fl1fv3Civ5xaXVf4+Ojo6Gme0xDEfFdyrFlUqj90ZuCLPbdYeilsHVs69uj+VY9GZ5fXWlUKqnX2upUyovFEotdeaSvA/DcFRZXV9ZKFSK+VL5brO/wzSRHKdmbrx249rYrvzbUeM4ebDDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXejL+r49CCP2NsziEkIuSF1HyL+Xx0+L5/PO5h1vjZ2c3H209a1cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5iBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrv0j9JAEMUB+M1YaOkxrJbdznZFES1cETyBHsPD6FG8hHewSJE2RQgksxD2D2yTVN/XPJgfM+/BPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLnHt+79tW4iUlxtLyN+P//+j/PnUr/vpu9fnGFGTufppbt/qJvy72mU35ajVZv36Wb99RETtfcz2JPhPh2M+wzN7dvcfH3f60i5ioi25Dcp56pa9hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2j6NsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//+ieyF6") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x900) 1.041268718s ago: executing program 2 (id=2092): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "83e624170a20290000deff1e0400000027e6ff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 979.87587ms ago: executing program 1 (id=2093): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa6}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x21) 934.914732ms ago: executing program 0 (id=2094): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 740.664058ms ago: executing program 1 (id=2095): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 428.26µs ago: executing program 1 (id=2096): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x19d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x0) 0s ago: executing program 2 (id=2097): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x3, 0xa, 0x4e24, 0x10, 0x2}, {0x2, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x6, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0xa, @in6=@remote, 0x7504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) kernel console output (not intermixed with test programs): [ 258.185762][ T28] audit: type=1326 audit(1781755862.675:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 258.240657][ T28] audit: type=1326 audit(1781755862.675:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 258.326421][ T28] audit: type=1326 audit(1781755862.675:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 259.682773][ T28] audit: type=1326 audit(1781755862.675:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 259.722237][ T7358] Bluetooth: MGMT ver 1.22 [ 259.766535][ T28] audit: type=1326 audit(1781755862.675:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 259.791070][ T28] audit: type=1326 audit(1781755862.675:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.2.383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd18db9ce59 code=0x7ffc0000 [ 261.933901][ T7390] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 261.966167][ T1191] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 262.210811][ T1191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.235750][ T1191] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 262.265710][ T1191] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 262.288443][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.306138][ T1191] usb 2-1: Product: syz [ 262.310385][ T1191] usb 2-1: Manufacturer: syz [ 262.331328][ T1191] usb 2-1: SerialNumber: syz [ 262.877116][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 263.133501][ T1191] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.281113][ T1191] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 263.364244][ T1191] usb 2-1: USB disconnect, device number 7 [ 263.553911][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.849656][ T7408] loop1: detected capacity change from 0 to 64 [ 263.866374][ T5822] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 263.880499][ T7408] hfs: found bad thread record in catalog [ 263.887360][ T7408] hfs: get root inode failed [ 264.120779][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 264.991667][ T5822] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 265.645476][ T5822] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 265.656902][ T5822] usb 4-1: config 246 has no interface number 0 [ 265.663859][ T5822] usb 4-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.674699][ T5822] usb 4-1: config 246 interface 166 altsetting 118 bulk endpoint 0xB has invalid maxpacket 0 [ 265.727050][ T5822] usb 4-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.757389][ T5822] usb 4-1: config 246 interface 166 has no altsetting 0 [ 265.788349][ T5822] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 265.816129][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.830181][ T5822] usb 4-1: Product: syz [ 265.839777][ T5822] usb 4-1: Manufacturer: syz [ 265.845760][ T5822] usb 4-1: SerialNumber: syz [ 265.884229][ T7424] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 266.008001][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 266.035933][ T7426] l2tp_ppp: sess 2/0: no socket in recv [ 266.594078][ T5822] usb 4-1: Limiting number of CPorts to U8_MAX [ 266.652680][ T5822] usb 4-1: Not enough endpoints found in device, aborting! [ 266.963757][ T5822] usb 4-1: USB disconnect, device number 8 [ 270.376861][ T7470] fuse: Bad value for 'fd' [ 271.979625][ T7480] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 272.160782][ T5822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 273.180743][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 273.432804][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.984716][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 274.054587][ T5822] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 274.075905][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 274.120210][ T5822] usb 4-1: Product: syz [ 274.125040][ T5822] usb 4-1: Manufacturer: syz [ 274.135177][ T5822] usb 4-1: SerialNumber: syz [ 274.152741][ T5822] usb 4-1: config 0 descriptor?? [ 274.169621][ T5822] imon_raw 4-1:0.0: IR endpoint missing [ 274.529425][ T5822] usb 4-1: USB disconnect, device number 9 [ 275.229758][ T7506] loop2: detected capacity change from 0 to 128 [ 275.292029][ T7506] befs: Unrecognized mount option "ä" or missing value [ 275.299063][ T7506] befs: (loop2): cannot parse mount options [ 275.327782][ T7510] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.589986][ T7527] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.763868][ T7531] loop2: detected capacity change from 0 to 128 [ 277.872398][ T7531] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.963209][ T7531] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.556177][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.403229][ T7546] loop1: detected capacity change from 0 to 128 [ 281.441597][ T7546] befs: Unrecognized mount option "ä" or missing value [ 281.448970][ T7546] befs: (loop1): cannot parse mount options [ 281.567652][ T6432] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.117464][ T7557] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 285.588580][ T7575] loop3: detected capacity change from 0 to 128 [ 286.098113][ T5826] IPVS: starting estimator thread 0... [ 286.222764][ T7575] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.268060][ T7575] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.452308][ T7577] IPVS: using max 17 ests per chain, 40800 per kthread [ 287.456131][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.580261][ T7587] loop1: detected capacity change from 0 to 128 [ 287.602729][ T7587] befs: Unrecognized mount option "ä" or missing value [ 287.621896][ T7587] befs: (loop1): cannot parse mount options [ 287.673789][ T7591] loop2: detected capacity change from 0 to 64 [ 288.209243][ T7591] hfs: bad catalog namelength [ 288.214235][ T7591] hfs: get root inode failed [ 288.761556][ T7599] xt_connbytes: Forcing CT accounting to be enabled [ 288.768292][ T7599] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 288.905697][ T7602] loop3: detected capacity change from 0 to 128 [ 288.964518][ T7602] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.018912][ T7602] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.937762][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.972243][ T7611] loop2: detected capacity change from 0 to 512 [ 290.236833][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.291955][ T7611] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.510075][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.539306][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.613514][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.654258][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.809765][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.376811][ T7637] loop2: detected capacity change from 0 to 64 [ 293.389045][ T7637] hfs: found bad thread record in catalog [ 293.394933][ T7637] hfs: get root inode failed [ 293.467700][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.754961][ T7643] loop1: detected capacity change from 0 to 128 [ 293.795073][ T7644] xt_connbytes: Forcing CT accounting to be enabled [ 293.801816][ T7644] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 293.982761][ T7643] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.110388][ T7643] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.686229][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.011082][ T7659] loop1: detected capacity change from 0 to 4096 [ 298.616518][ T7681] loop2: detected capacity change from 0 to 128 [ 298.625167][ T7679] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 298.748948][ T7681] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.777826][ T7681] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.842791][ T1191] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 299.967760][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.978853][ T7694] syzkaller0: entered promiscuous mode [ 299.993273][ T7694] syzkaller0: entered allmulticast mode [ 300.063881][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.156058][ T1191] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 300.356325][ T1191] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 300.484424][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.609033][ T1191] usb 4-1: Product: syz [ 300.663556][ T1191] usb 4-1: Manufacturer: syz [ 300.722184][ T1191] usb 4-1: SerialNumber: syz [ 301.205254][ T1191] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 301.414463][ T1191] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 301.571992][ T7702] syzkaller0: entered promiscuous mode [ 301.577668][ T7702] syzkaller0: entered allmulticast mode [ 301.975729][ T7712] loop2: detected capacity change from 0 to 4096 [ 302.770892][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 302.770910][ T28] audit: type=1800 audit(1781755908.315:55): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 302.912668][ T27] usb 4-1: USB disconnect, device number 10 [ 303.256846][ T7724] loop3: detected capacity change from 0 to 128 [ 303.276260][ T7723] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 303.557022][ T7724] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.687065][ T7724] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.342970][ T7731] loop2: detected capacity change from 0 to 128 [ 304.352857][ T7731] befs: Unrecognized mount option "ä" or missing value [ 304.360032][ T7731] befs: (loop2): cannot parse mount options [ 305.316315][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.231034][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.426051][ T7752] loop1: detected capacity change from 0 to 32768 [ 307.455295][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 307.465640][ T7752] JBD2: Ignoring recovery information on journal [ 307.499180][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 307.553414][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 307.592477][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.619503][ T27] usb 1-1: Product: syz [ 307.629018][ T27] usb 1-1: Manufacturer: syz [ 307.634283][ T7752] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 307.678347][ T27] usb 1-1: SerialNumber: syz [ 307.730531][ T28] audit: type=1800 audit(1781755913.285:56): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.511" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 307.914214][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 308.173868][ T27] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 308.218922][ T7764] xt_connbytes: Forcing CT accounting to be enabled [ 308.225749][ T7764] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 308.368929][ T7766] loop1: detected capacity change from 0 to 128 [ 308.384637][ T27] usb 1-1: 2:1 : bogus bTerminalLink 2 [ 308.445811][ T7766] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.473380][ T7766] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.908241][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.192851][ T8] usb 1-1: USB disconnect, device number 8 [ 313.724742][ T7794] loop3: detected capacity change from 0 to 128 [ 313.748272][ T7794] befs: Unrecognized mount option "ä" or missing value [ 313.781514][ T7794] befs: (loop3): cannot parse mount options [ 313.971119][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 314.004113][ T7798] capability: warning: `syz.0.523' uses deprecated v2 capabilities in a way that may be insecure [ 315.317861][ T7801] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 316.021577][ T7806] loop1: detected capacity change from 0 to 128 [ 316.094130][ T7806] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.162704][ T7806] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.398106][ T7814] loop2: detected capacity change from 0 to 256 [ 317.292310][ T7814] FAT-fs (loop2): Unrecognized mount option "umask=00000000000000000"00004" or missing value [ 317.378470][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.415763][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.424833][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769918][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 318.151502][ T7841] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 318.580467][ T7845] loop2: detected capacity change from 0 to 128 [ 318.609706][ T7845] befs: Unrecognized mount option "ä" or missing value [ 318.624790][ T7845] befs: (loop2): cannot parse mount options [ 320.310782][ T5822] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 320.329878][ T7855] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 321.343554][ T5822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.353314][ T5822] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 321.466549][ T5822] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 321.477092][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.489263][ T5822] usb 4-1: Product: syz [ 321.752019][ T5822] usb 4-1: Manufacturer: syz [ 321.769179][ T5822] usb 4-1: SerialNumber: syz [ 322.020108][ T5822] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 322.222151][ T5822] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 322.889257][ T5822] usb 4-1: USB disconnect, device number 11 [ 323.028812][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.041118][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 327.017110][ T7898] loop3: detected capacity change from 0 to 128 [ 327.039242][ T7898] befs: Unrecognized mount option "ä" or missing value [ 327.090836][ T7898] befs: (loop3): cannot parse mount options [ 330.529868][ T5825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 330.777485][ T7932] loop2: detected capacity change from 0 to 128 [ 330.805790][ T7932] befs: Unrecognized mount option "ä" or missing value [ 330.810914][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 330.867320][ T7932] befs: (loop2): cannot parse mount options [ 332.598993][ T5825] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 333.026571][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.040722][ T5825] usb 2-1: Product: syz [ 333.044953][ T5825] usb 2-1: Manufacturer: syz [ 333.049600][ T5825] usb 2-1: SerialNumber: syz [ 333.210846][ T5825] usb 2-1: can't set config #1, error -71 [ 333.262369][ T5825] usb 2-1: USB disconnect, device number 8 [ 338.257063][ T7973] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 344.559529][ T8009] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 351.849804][ T8056] loop2: detected capacity change from 0 to 1024 [ 351.890974][ T8056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.922562][ T8056] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.982231][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.041349][ T8056] EXT4-fs (loop2): shut down requested (2) [ 352.216722][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.523430][ T8118] loop2: detected capacity change from 0 to 128 [ 359.597975][ T8118] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.631230][ T8118] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.611841][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.925398][ T8162] loop1: detected capacity change from 0 to 2048 [ 365.005568][ T8162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.690882][ T8165] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 367.807970][ T8168] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 367.821059][ T8168] EXT4-fs (loop1): This should not happen!! Data will be lost [ 367.821059][ T8168] [ 367.830835][ T8168] EXT4-fs (loop1): Total free blocks count 0 [ 367.836856][ T8168] EXT4-fs (loop1): Free/Dirty block details [ 367.842840][ T8168] EXT4-fs (loop1): free_blocks=2415919104 [ 367.848591][ T8168] EXT4-fs (loop1): dirty_blocks=39744 [ 367.854011][ T8168] EXT4-fs (loop1): Block reservation details [ 367.860006][ T8168] EXT4-fs (loop1): i_reserved_data_blocks=2484 [ 369.104040][ T8180] loop2: detected capacity change from 0 to 128 [ 369.106605][ T7060] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2048 with error 28 [ 369.153001][ T8180] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.214973][ T8180] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.085723][ T8187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 370.181808][ T8187] kvm: pic: non byte read [ 370.197838][ T8187] kvm: pic: level sensitive irq not supported [ 370.198719][ T8187] kvm: pic: non byte read [ 370.223881][ T8187] kvm: pic: level sensitive irq not supported [ 370.224217][ T8187] kvm: pic: non byte read [ 370.246479][ T8187] kvm: pic: level sensitive irq not supported [ 370.246809][ T8187] kvm: pic: non byte read [ 370.269191][ T8187] kvm: pic: level sensitive irq not supported [ 370.269466][ T8187] kvm: pic: non byte read [ 371.885428][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.140456][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 373.481101][ T8203] loop3: detected capacity change from 0 to 32768 [ 373.621945][ T8203] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 374.567807][ T8203] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 374.624848][ T8203] BTRFS info (device loop3): using free space tree [ 374.882408][ T8203] BTRFS info (device loop3): enabling ssd optimizations [ 374.889446][ T8203] BTRFS info (device loop3): auto enabling async discard [ 375.085995][ T5778] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 376.830549][ T8253] loop2: detected capacity change from 0 to 128 [ 376.918206][ T8253] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.991069][ T8253] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 377.292306][ T5777] EXT4-fs: 15 callbacks suppressed [ 377.292320][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.831441][ T8270] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 378.857937][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.864970][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.615442][ T5783] Bluetooth: hci1: ISO packet for unknown connection handle 1039 [ 382.354739][ T8294] loop3: detected capacity change from 0 to 128 [ 382.378736][ T8294] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.410336][ T8294] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.830489][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.902902][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 385.249926][ T8319] netlink: 'syz.1.663': attribute type 2 has an invalid length. [ 385.258019][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.663'. [ 387.532656][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.638048][ T8330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 387.652646][ T8338] loop3: detected capacity change from 0 to 128 [ 387.676966][ T8330] kvm: pic: non byte read [ 387.683071][ T8330] kvm: pic: non byte read [ 387.684742][ T8338] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.701869][ T8338] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 387.719024][ T8330] kvm: pic: non byte read [ 387.933681][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 387.942790][ T8330] kvm: pic: non byte read [ 388.135795][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.151849][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 388.159453][ T5844] usb 2-1: can't read configurations, error -71 [ 388.229809][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 388.710241][ T8353] kernel profiling enabled (shift: 9) [ 390.637868][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 390.994602][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.101696][ T5844] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 391.238449][ T8368] loop3: detected capacity change from 0 to 128 [ 391.298428][ T5844] usb 1-1: config 0 has no interfaces? [ 391.305269][ T5844] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.344022][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.358601][ T8368] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.382605][ T5844] usb 1-1: config 0 descriptor?? [ 391.479165][ T8368] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.676539][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.741241][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.874678][ T5844] usb 1-1: USB disconnect, device number 9 [ 392.471528][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 393.674642][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 394.653644][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 394.671836][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 394.679488][ T8] usb 2-1: can't read configurations, error -71 [ 396.078031][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.530820][ T5826] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 396.534624][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 396.538790][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 397.240897][ T5826] usb 4-1: device descriptor read/64, error -32 [ 397.391814][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 397.534255][ T5826] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 397.755462][ T5826] usb 4-1: config 0 has no interfaces? [ 397.767556][ T5826] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.807181][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.835828][ T5826] usb 4-1: config 0 descriptor?? [ 397.870182][ T8418] syzkaller0: entered promiscuous mode [ 397.877537][ T8418] syzkaller0: entered allmulticast mode [ 398.132394][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.340012][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.864012][ T5844] usb 4-1: USB disconnect, device number 13 [ 399.850779][ T5826] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 400.208487][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 400.250932][ T5826] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 400.279980][ T5826] usb 2-1: can't read configurations, error -71 [ 400.477277][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 402.629566][ T8460] loop1: detected capacity change from 0 to 128 [ 402.639446][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 402.740926][ T28] audit: type=1400 audit(1781756008.305:57): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=8456 comm="syz.2.705" [ 402.906440][ T8460] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.032519][ T8460] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.064495][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.119484][ T8476] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 407.894910][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.040927][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 410.325740][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 411.741687][ T5826] IPVS: starting estimator thread 0... [ 411.990839][ T8525] IPVS: using max 17 ests per chain, 40800 per kthread [ 412.046669][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 414.044851][ T8550] loop3: detected capacity change from 0 to 64 [ 414.200007][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 416.138416][ T8570] loop1: detected capacity change from 0 to 128 [ 416.295859][ T8570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.496296][ T8570] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.215529][ T5825] IPVS: starting estimator thread 0... [ 417.351790][ T8583] IPVS: using max 20 ests per chain, 48000 per kthread [ 418.840874][ T27] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 418.900761][ T8599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 419.053094][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.821775][ T27] usb 3-1: config 0 has no interfaces? [ 419.831616][ T27] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 419.850721][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.858944][ T27] usb 3-1: Product: syz [ 419.863828][ T27] usb 3-1: Manufacturer: syz [ 419.868472][ T27] usb 3-1: SerialNumber: syz [ 419.876473][ T27] usb 3-1: config 0 descriptor?? [ 420.146786][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.234634][ T27] usb 3-1: USB disconnect, device number 7 [ 422.683496][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 423.530851][ T8635] loop2: detected capacity change from 0 to 128 [ 423.582498][ T8635] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.603696][ T8635] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 423.724997][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 424.510287][ T1191] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 424.530105][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.702827][ T1191] usb 2-1: config 0 has no interfaces? [ 424.708581][ T1191] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.754565][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.866995][ T1191] usb 2-1: config 0 descriptor?? [ 425.438434][ T8658] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 425.467108][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.500157][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.695103][ T1191] usb 2-1: USB disconnect, device number 15 [ 426.202928][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 426.222666][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 426.426635][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.443931][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 426.495571][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 426.506128][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.517678][ T27] usb 4-1: Product: syz [ 426.523295][ T27] usb 4-1: Manufacturer: syz [ 426.528939][ T27] usb 4-1: SerialNumber: syz [ 426.925429][ T27] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 426.939944][ T27] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 427.852602][ T8678] loop2: detected capacity change from 0 to 128 [ 428.152492][ T27] usb 4-1: USB disconnect, device number 14 [ 428.193540][ T8678] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.262008][ T8678] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.294033][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.316168][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.468294][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.558925][ T8695] loop3: detected capacity change from 0 to 1024 [ 429.591933][ T8695] hfsplus: unable to parse mount options [ 429.977040][ T8706] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 430.098775][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 430.243894][ T5844] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 430.453690][ T5844] usb 2-1: config 0 has no interfaces? [ 430.566691][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.580284][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.624014][ T5844] usb 2-1: config 0 descriptor?? [ 430.894386][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.906563][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.022534][ T8] usb 2-1: USB disconnect, device number 16 [ 431.141529][ T8719] loop3: detected capacity change from 0 to 128 [ 431.258428][ T8719] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.295455][ T8719] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.327406][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.621914][ T5844] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 432.252864][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.722379][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 433.114329][ T5844] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 433.147883][ T5844] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 433.164344][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.172672][ T5844] usb 3-1: Product: syz [ 433.177828][ T5844] usb 3-1: Manufacturer: syz [ 433.182686][ T5844] usb 3-1: SerialNumber: syz [ 433.349505][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 433.454950][ T5844] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 433.478666][ T5844] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 433.550310][ T5844] usb 3-1: USB disconnect, device number 8 [ 434.109866][ T1191] IPVS: starting estimator thread 0... [ 434.169208][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.271075][ T8747] IPVS: using max 17 ests per chain, 40800 per kthread [ 435.640948][ T5821] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 436.552852][ T5821] usb 2-1: config 0 has no interfaces? [ 436.558595][ T5821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.568400][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.426806][ T5821] usb 2-1: config 0 descriptor?? [ 438.763965][ T5821] usb 2-1: can't set config #0, error -71 [ 438.773220][ T5821] usb 2-1: USB disconnect, device number 17 [ 438.954583][ T8782] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 440.295075][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.334174][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.603280][ T8860] loop2: detected capacity change from 0 to 7 [ 450.391421][ T8860] loop2: [ 450.397144][ T8860] loop2: partition table partially beyond EOD, truncated [ 460.100677][ T5844] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 460.772939][ T8923] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20004 [ 461.771246][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 461.791429][ T5844] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 461.825435][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 461.842580][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.875301][ T5844] usb 2-1: Product: syz [ 461.879545][ T5844] usb 2-1: Manufacturer: syz [ 461.893536][ T5844] usb 2-1: SerialNumber: syz [ 462.247746][ T5844] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 462.315105][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 463.049820][ T5844] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 463.589988][ T1191] usb 2-1: USB disconnect, device number 18 [ 464.386445][ T8952] loop1: detected capacity change from 0 to 128 [ 465.319305][ T8952] befs: Unrecognized mount option "ä" or missing value [ 465.339602][ T8952] befs: (loop1): cannot parse mount options [ 476.493263][ T9032] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 486.030831][ T9112] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 492.358543][ T9143] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 499.089619][ T9204] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 500.038295][ T1191] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 500.408831][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.420293][ T1191] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 500.464911][ T1191] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 500.483670][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.500779][ T1191] usb 4-1: Product: syz [ 500.507984][ T1191] usb 4-1: Manufacturer: syz [ 500.520651][ T1191] usb 4-1: SerialNumber: syz [ 500.570125][ T9219] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 500.762826][ T1191] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 501.154172][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 501.581302][ T1191] usb 4-1: failed to enable PITCH for EP 0x82 [ 501.599207][ T1191] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 502.441620][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.448034][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.472770][ T1191] usb 4-1: clock source 0 is not valid, cannot use [ 502.494402][ T1191] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 502.580787][ T1191] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 502.730855][ T1191] usb 4-1: USB disconnect, device number 15 [ 502.892235][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.038181][ T5826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 503.271222][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 503.300985][ T1191] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 503.343625][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 503.530725][ T5826] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 503.546686][ T5826] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 503.569427][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 503.596067][ T5826] usb 3-1: Product: syz [ 503.600350][ T5826] usb 3-1: Manufacturer: syz [ 503.605863][ T5826] usb 3-1: SerialNumber: syz [ 503.621336][ T5826] usb 3-1: config 0 descriptor?? [ 503.635209][ T5826] hub 3-1:0.0: bad descriptor, ignoring hub [ 503.651908][ T5826] hub: probe of 3-1:0.0 failed with error -5 [ 503.703493][ T1191] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 503.715269][ T1191] usb 4-1: config 4 has no interface number 0 [ 503.724734][ T1191] usb 4-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 503.751954][ T1191] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 503.776143][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.797945][ T1191] usb 4-1: Product: syz [ 503.816343][ T1191] usb 4-1: Manufacturer: syz [ 503.914011][ T1191] usb 4-1: SerialNumber: syz [ 504.173095][ T5826] usb 3-1: USB disconnect, device number 9 [ 504.649033][ T1191] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 504.742902][ T1191] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 504.766651][ T1191] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 504.793174][ T1191] usb 4-1: media controller created [ 504.802738][ T1191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.897983][ T1191] DVB: Unable to find symbol dib7000p_attach() [ 504.905959][ T1191] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 505.022838][ T1191] rc_core: IR keymap rc-dib0700-rc5 not found [ 505.038363][ T1191] Registered IR keymap rc-empty [ 505.049151][ T1191] dvb-usb: could not initialize remote control. [ 505.057911][ T1191] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 505.360718][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 505.370735][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 505.418514][ T5821] usb 4-1: USB disconnect, device number 16 [ 505.723143][ T5821] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 506.434046][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.491045][ T5826] usb 1-1: config 0 has no interfaces? [ 506.547941][ T5826] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.600600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 506.742231][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 506.787114][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.546974][ T5826] usb 1-1: config 0 descriptor?? [ 507.553909][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 507.568379][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.682892][ T8] usb 3-1: Product: syz [ 507.687095][ T8] usb 3-1: Manufacturer: syz [ 507.695286][ T8] usb 3-1: SerialNumber: syz [ 508.306966][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.431076][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.518343][ T5825] usb 1-1: USB disconnect, device number 10 [ 508.548087][ T8] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 508.582342][ T8] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 508.641259][ T8] usb 3-1: USB disconnect, device number 10 [ 508.747227][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.760895][ T8388] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 514.163767][ T9329] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 514.264470][ T8388] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.356663][ T8388] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 514.498324][ T8388] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 514.583700][ T8388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.664213][ T8388] usb 4-1: Product: syz [ 514.708004][ T8388] usb 4-1: Manufacturer: syz [ 514.735149][ T8388] usb 4-1: SerialNumber: syz [ 514.819325][ T9332] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 516.026100][ T8388] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 516.456422][ T8388] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 516.960827][ T8388] usb 4-1: USB disconnect, device number 17 [ 517.056535][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.508406][ T9368] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 522.706355][ T9393] loop2: detected capacity change from 0 to 128 [ 522.760116][ T9393] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.790978][ T9393] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 523.801372][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.357317][ T9420] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 529.940063][ T9464] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 530.976779][ T9469] loop3: detected capacity change from 0 to 128 [ 531.170025][ T9469] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.587738][ T9469] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 533.298522][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.004855][ T9500] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 536.173309][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 536.401459][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.423553][ T5844] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 536.473356][ T5844] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 536.506895][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.519375][ T5844] usb 3-1: Product: syz [ 536.526217][ T5844] usb 3-1: Manufacturer: syz [ 536.533685][ T5844] usb 3-1: SerialNumber: syz [ 537.662872][ T5844] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 538.259784][ T5844] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 540.287462][ T5844] usb 3-1: USB disconnect, device number 11 [ 540.522513][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.100299][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1031'. [ 548.113220][ T9585] loop2: detected capacity change from 0 to 128 [ 548.151925][ T9585] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.174450][ T9585] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.171780][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.163447][ T9602] loop2: detected capacity change from 0 to 1024 [ 550.200158][ T9602] hfsplus: unable to parse mount options [ 550.728242][ T9609] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 550.991189][ T9614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 553.055377][ T9630] loop2: detected capacity change from 0 to 1024 [ 553.085365][ T9630] hfsplus: unable to parse mount options [ 553.377441][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1049'. [ 554.012594][ T9647] loop1: detected capacity change from 0 to 128 [ 554.295590][ T9647] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 554.362358][ T9647] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 555.348192][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 555.956376][ T9669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1060'. [ 556.929223][ T9665] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 557.244436][ T9687] loop1: detected capacity change from 0 to 128 [ 557.331903][ T9687] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.439822][ T9687] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 558.365071][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.824192][ T9701] loop2: detected capacity change from 0 to 1024 [ 559.841995][ T9701] hfsplus: unable to parse mount options [ 560.000736][ T5821] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 560.062422][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 560.213315][ T5821] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7 [ 560.226047][ T5821] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7 [ 560.240200][ T5821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.249722][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.258155][ T5821] usb 2-1: Product: syz [ 560.290793][ T5821] usb 2-1: Manufacturer: syz [ 560.312072][ T5821] usb 2-1: SerialNumber: syz [ 561.242206][ T5821] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 561.249400][ T5821] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 561.276386][ T5821] usb 2-1: USB disconnect, device number 19 [ 561.327084][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.385976][ T9723] loop2: detected capacity change from 0 to 128 [ 561.462784][ T9723] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 561.489064][ T9723] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 561.521086][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.798451][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.095502][ T9735] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 563.175812][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.182759][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.395485][ T9741] loop1: detected capacity change from 0 to 1024 [ 563.435966][ T9741] hfsplus: unable to parse mount options [ 565.394010][ T9757] loop2: detected capacity change from 0 to 128 [ 565.642055][ T9757] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 565.747211][ T9757] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 566.089470][ T9764] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 567.920266][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.886650][ T9787] loop1: detected capacity change from 0 to 1024 [ 568.924965][ T9787] hfsplus: unable to parse mount options [ 571.337859][ T9804] syzkaller0: entered promiscuous mode [ 571.386871][ T9804] syzkaller0: entered allmulticast mode [ 572.021913][ T9814] loop2: detected capacity change from 0 to 1024 [ 572.062762][ T9814] hfsplus: unable to parse mount options [ 572.436461][ T9828] loop2: detected capacity change from 0 to 128 [ 572.498701][ T9828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.542435][ T9828] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 573.741239][ T9839] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 575.028781][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.380635][ T5844] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 575.601583][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.616632][ T5844] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 575.642984][ T5844] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 575.659197][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.675699][ T5844] usb 4-1: Product: syz [ 575.684507][ T5844] usb 4-1: Manufacturer: syz [ 575.699120][ T5844] usb 4-1: SerialNumber: syz [ 575.934673][ T5844] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 580.207804][ T5844] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 580.350804][ T5844] usb 4-1: USB disconnect, device number 18 [ 580.456186][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.904846][ T9878] loop1: detected capacity change from 0 to 128 [ 581.993181][ T9878] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 582.112493][ T9878] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 583.474688][ T9894] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 583.861735][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 584.071087][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 584.123461][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 584.149454][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 584.275754][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 584.383157][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.466027][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 584.478873][ T8] usb 3-1: Product: syz [ 584.509399][ T8] usb 3-1: Manufacturer: syz [ 584.571589][ T8] usb 3-1: SerialNumber: syz [ 584.995349][ T8] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 586.033423][ T8] usb 3-1: failed to enable PITCH for EP 0x82 [ 586.264658][ T8] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 586.284742][ T8] usb 3-1: clock source 0 is not valid, cannot use [ 586.295346][ T8] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 586.310907][ T8] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 586.366337][ T8] usb 3-1: USB disconnect, device number 12 [ 586.769176][ T6795] udevd[6795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.536011][ T9930] loop3: detected capacity change from 0 to 128 [ 587.667224][ T9930] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 587.761307][ T9930] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 588.667079][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.805276][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 591.303077][ T9965] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 591.920689][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 591.998753][ T9972] loop3: detected capacity change from 0 to 128 [ 592.018921][ T9972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.037976][ T9972] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.155002][ T9975] loop1: detected capacity change from 0 to 128 [ 592.179436][ T9975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.262427][ T9975] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.345720][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 593.069493][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 593.084193][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 593.094923][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.105679][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.114287][ T8] usb 1-1: Product: syz [ 593.118509][ T8] usb 1-1: Manufacturer: syz [ 593.124440][ T8] usb 1-1: SerialNumber: syz [ 593.820663][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 594.420401][ T8] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 595.362365][ T8] usb 1-1: failed to enable PITCH for EP 0x82 [ 595.374799][ T8] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 595.383660][ T8] usb 1-1: clock source 0 is not valid, cannot use [ 595.391752][ T8] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 595.401424][ T8] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 595.572085][ T9994] fuse: Bad value for 'fd' [ 595.580708][ T8] usb 1-1: USB disconnect, device number 11 [ 595.701555][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.245715][T10003] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 596.458935][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.688082][T10008] loop1: detected capacity change from 0 to 128 [ 596.916875][T10008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.980250][T10008] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 597.110587][T10009] loop3: detected capacity change from 0 to 32768 [ 597.133873][T10009] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 597.142667][T10009] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 597.324336][T10009] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 597.338232][ T1191] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 597.370735][ T1191] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 597.716572][ T1191] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 345ms [ 597.771677][ T1191] gfs2: fsid=syz:syz.0: jid=0: Done [ 597.778553][T10009] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 598.064857][T10009] gfs2: fsid=syz:syz.0: found 1 quota changes [ 598.112131][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.006424][ T5778] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 599.006424][ T5778] inode = 11 2339 [ 599.006424][ T5778] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 599.044464][ T5778] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 599.057341][ T5778] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5778 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 599.069477][ T5778] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 599.078396][ T5778] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 599.098209][ T5778] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 599.109175][ T5778] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 599.118671][ T5778] gfs2: fsid=syz:syz.0: File system withdrawn [ 599.125090][ T5778] CPU: 0 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 599.132681][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.142795][ T5778] Call Trace: [ 599.146118][ T5778] [ 599.149084][ T5778] dump_stack_lvl+0x18c/0x250 [ 599.153815][ T5778] ? kobject_uevent_env+0x363/0x8b0 [ 599.159066][ T5778] ? show_regs_print_info+0x20/0x20 [ 599.164310][ T5778] ? load_image+0x420/0x420 [ 599.168853][ T5778] ? kobject_uevent_env+0x363/0x8b0 [ 599.174154][ T5778] gfs2_withdraw+0xb24/0x13d0 [ 599.178902][ T5778] ? gfs2_lm+0x240/0x240 [ 599.183218][ T5778] ? gfs2_consist_inode_i+0xf5/0x110 [ 599.188559][ T5778] gfs2_inode_refresh+0xc50/0x1160 [ 599.193725][ T5778] ? gfs2_inode_metasync+0xf0/0xf0 [ 599.198889][ T5778] ? gfs2_glock_nq+0xd4f/0x1420 [ 599.203838][ T5778] gfs2_instantiate+0x162/0x220 [ 599.208739][ T5778] gfs2_glock_wait+0x1d4/0x2a0 [ 599.213571][ T5778] do_sync+0x4c6/0xe50 [ 599.217733][ T5778] ? gfs2_quota_sync+0x411/0x5a0 [ 599.222735][ T5778] ? bh_get+0x760/0x760 [ 599.226948][ T5778] ? __lock_acquire+0x7d40/0x7d40 [ 599.232021][ T5778] ? do_raw_spin_lock+0x11f/0x2c0 [ 599.237106][ T5778] ? gfs2_quota_sync+0x411/0x5a0 [ 599.242094][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 599.247349][ T5778] gfs2_quota_sync+0x411/0x5a0 [ 599.252175][ T5778] gfs2_sync_fs+0x4c/0xb0 [ 599.256557][ T5778] sync_filesystem+0xea/0x220 [ 599.261281][ T5778] generic_shutdown_super+0x6f/0x2b0 [ 599.266620][ T5778] kill_block_super+0x44/0x90 [ 599.271345][ T5778] deactivate_locked_super+0x97/0x100 [ 599.276763][ T5778] cleanup_mnt+0x43b/0x4d0 [ 599.281232][ T5778] task_work_run+0x1d4/0x260 [ 599.285879][ T5778] ? task_work_cancel+0x220/0x220 [ 599.290959][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 599.296482][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 599.301851][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 599.307449][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 599.312978][ T5778] do_syscall_64+0x61/0xb0 [ 599.317453][ T5778] ? clear_bhb_loop+0x40/0x90 [ 599.322183][ T5778] ? clear_bhb_loop+0x40/0x90 [ 599.326905][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.332850][ T5778] RIP: 0033:0x7fb49cf9e097 [ 599.337323][ T5778] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 599.356997][ T5778] RSP: 002b:00007ffcfee925e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 599.365459][ T5778] RAX: 0000000000000000 RBX: 00007fb49d0321ca RCX: 00007fb49cf9e097 [ 599.373499][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfee926a0 [ 599.381526][ T5778] RBP: 00007ffcfee926a0 R08: 00007ffcfee936a0 R09: 00000000ffffffff [ 599.389552][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfee93730 [ 599.397562][ T5778] R13: 00007fb49d0321ca R14: 00000000000920f3 R15: 00007ffcfee93770 [ 599.405592][ T5778] [ 600.316186][T10039] NILFS (nullb0): couldn't find nilfs on the device [ 600.527697][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 601.449516][T10047] loop3: detected capacity change from 0 to 128 [ 601.853076][T10047] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 601.899905][T10047] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.184239][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 607.353121][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.124340][T10105] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 609.317082][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 612.031957][T10123] loop2: detected capacity change from 0 to 128 [ 612.810194][T10123] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.898778][T10123] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 613.646614][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.940776][T10147] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 616.498602][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 616.708254][T10156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 616.739606][T10156] kvm: pic: non byte read [ 616.745977][T10156] kvm: pic: non byte read [ 616.750897][T10156] kvm: pic: non byte read [ 616.756449][T10156] kvm: pic: non byte read [ 616.761802][T10156] kvm: pic: non byte read [ 618.911521][T10179] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 620.922018][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 623.252453][T10204] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 623.277850][T10204] kvm: pic: non byte read [ 623.282999][T10204] kvm: pic: non byte read [ 623.287813][T10204] kvm: pic: non byte read [ 623.296831][T10204] kvm: pic: non byte read [ 623.302266][T10204] kvm: pic: non byte read [ 624.618503][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.625115][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.434290][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 627.784138][T10238] loop3: detected capacity change from 0 to 128 [ 627.819359][T10238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.862426][ T1191] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 627.871449][T10238] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 627.912693][T10242] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 628.116178][ T1191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 628.127361][ T1191] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 628.149514][ T1191] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 628.160344][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.172848][ T1191] usb 2-1: Product: syz [ 628.177180][ T1191] usb 2-1: Manufacturer: syz [ 628.183771][ T1191] usb 2-1: SerialNumber: syz [ 628.514416][ T1191] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 629.363173][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 629.561616][ T1191] usb 2-1: failed to enable PITCH for EP 0x82 [ 629.581576][ T1191] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 629.596323][ T1191] usb 2-1: clock source 0 is not valid, cannot use [ 629.606565][ T1191] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 629.623065][ T1191] usb 2-1: 2:1: cannot set freq 361372465 (v2/v3): err -71 [ 631.019863][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 631.110940][ T1191] usb 2-1: USB disconnect, device number 20 [ 631.246948][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.264887][T10267] loop3: detected capacity change from 0 to 512 [ 631.283107][T10267] EXT4-fs: Ignoring removed oldalloc option [ 631.297385][T10267] EXT4-fs (loop3): Test dummy encryption mode enabled [ 631.357680][T10267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.911539][T10267] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 632.023783][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.129111][T10299] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 632.276474][T10303] fuse: Bad value for 'fd' [ 633.570705][ T1191] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 633.885531][ T1191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 633.951205][ T1191] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 634.012971][ T1191] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 634.041187][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.060702][ T1191] usb 1-1: Product: syz [ 634.064934][ T1191] usb 1-1: Manufacturer: syz [ 634.099951][ T1191] usb 1-1: SerialNumber: syz [ 635.069413][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 635.268581][ T1191] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 635.541122][T10327] loop3: detected capacity change from 0 to 1024 [ 635.551783][T10327] hfsplus: unable to parse mount options [ 635.948423][T10332] can: request_module (can-proto-0) failed. [ 636.015664][ T1191] usb 1-1: failed to enable PITCH for EP 0x82 [ 636.032462][ T1191] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.042612][T10332] batman_adv: batadv0: Adding interface: dummy0 [ 636.048921][T10332] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.061293][ T1191] usb 1-1: clock source 0 is not valid, cannot use [ 636.107095][T10332] batman_adv: batadv0: Interface activated: dummy0 [ 636.115929][ T1191] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 636.136706][ T1191] usb 1-1: 2:1: cannot set freq 361372465 (v2/v3): err -71 [ 636.147705][T10334] batadv0: mtu less than device minimum [ 636.160685][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.173735][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.186213][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.198741][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.211357][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.223910][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.236515][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.249015][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.259903][ T1191] usb 1-1: USB disconnect, device number 12 [ 636.264139][T10334] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 636.310495][T10337] loop2: detected capacity change from 0 to 128 [ 636.349870][T10337] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 636.381094][T10337] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 636.457630][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.789136][T10342] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 636.893277][T10342] kvm: pic: non byte read [ 636.976612][T10342] kvm: pic: non byte read [ 637.761061][T10342] kvm: pic: non byte read [ 639.611113][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 639.630210][T10372] loop1: detected capacity change from 0 to 4096 [ 641.144633][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.955121][ T5783] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 645.483946][T10413] loop2: detected capacity change from 0 to 1024 [ 645.491646][T10413] EXT4-fs: Ignoring removed nobh option [ 645.497292][T10413] EXT4-fs: Ignoring removed i_version option [ 645.563976][T10413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.348124][T10416] loop1: detected capacity change from 0 to 4096 [ 646.496676][T10424] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 646.522742][T10424] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 646.537098][T10424] EXT4-fs (loop2): This should not happen!! Data will be lost [ 646.537098][T10424] [ 646.547243][T10424] EXT4-fs (loop2): Total free blocks count 0 [ 646.553847][T10424] EXT4-fs (loop2): Free/Dirty block details [ 646.560065][T10424] EXT4-fs (loop2): free_blocks=20480 [ 646.565745][T10424] EXT4-fs (loop2): dirty_blocks=80 [ 646.572068][T10424] EXT4-fs (loop2): Block reservation details [ 646.578553][T10424] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 646.876127][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.950490][T10416] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 647.320675][ T8388] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 647.513082][ T8388] usb 3-1: unable to get BOS descriptor or descriptor too short [ 647.527375][ T8388] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 647.549012][ T8388] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 647.570698][ T8388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.579136][ T8388] usb 3-1: Product: syz [ 647.583825][ T8388] usb 3-1: Manufacturer: syz [ 647.588527][ T8388] usb 3-1: SerialNumber: syz [ 647.821658][ T8388] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 648.709877][ T8388] usb 3-1: invalid uac2 rates [ 648.749585][ T8388] usb 3-1: invalid uac2 rates [ 649.661205][ T8388] usb 3-1: failed to enable PITCH for EP 0x82 [ 649.667803][ T8388] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 649.676928][ T8388] usb 3-1: clock source 0 is not valid, cannot use [ 649.684270][ T8388] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 649.691460][ T8388] usb 3-1: 2:1: cannot set freq 386527012 (v2/v3): err -71 [ 649.808952][ T8388] usb 3-1: USB disconnect, device number 13 [ 650.619949][T10462] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 650.737661][T10273] udevd[10273]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.452174][T10490] syz_tun: entered allmulticast mode [ 653.574469][T10487] syz_tun: left allmulticast mode [ 654.140807][ T5844] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 654.866158][T10511] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 655.086688][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 655.102223][ T5844] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 655.116785][ T5844] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 655.126366][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.229758][ T5844] usb 4-1: Product: syz [ 655.250864][ T5844] usb 4-1: Manufacturer: syz [ 655.264923][ T5844] usb 4-1: SerialNumber: syz [ 655.869283][ T5844] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 656.074937][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 656.086633][T10518] l2tp_ppp: sess 2/0: no socket in recv [ 656.413438][ T5844] usb 4-1: invalid uac2 rates [ 656.418342][ T5844] usb 4-1: invalid uac2 rates [ 656.615097][ T5844] usb 4-1: failed to enable PITCH for EP 0x82 [ 656.629172][ T5844] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 656.650640][ T5844] usb 4-1: clock source 0 is not valid, cannot use [ 656.662551][ T5844] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 656.677172][ T5844] usb 4-1: 2:1: cannot set freq 386527012 (v2/v3): err -71 [ 656.720962][ T5844] usb 4-1: USB disconnect, device number 19 [ 656.804393][T10273] udevd[10273]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.328246][T10529] loop1: detected capacity change from 0 to 32768 [ 658.835125][T10529] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 659.070968][T10529] XFS (loop1): Ending clean mount [ 659.324815][T10557] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 661.281775][ T5777] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 661.323679][T10565] loop3: detected capacity change from 0 to 32768 [ 661.434261][T10565] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 661.470886][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 661.528836][T10565] XFS (loop3): Ending clean mount [ 661.672930][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 661.697073][ T5844] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 661.749468][ T5844] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 661.790169][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.815861][ T5844] usb 3-1: Product: syz [ 661.843948][ T5844] usb 3-1: Manufacturer: syz [ 661.848710][ T5844] usb 3-1: SerialNumber: syz [ 661.987090][T10584] loop1: detected capacity change from 0 to 1024 [ 662.016568][T10584] hfsplus: unable to parse mount options [ 662.115984][ T5844] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 663.295202][ T5844] usb 3-1: invalid uac2 rates [ 663.304232][ T5844] usb 3-1: invalid uac2 rates [ 663.479992][ T5778] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 663.511459][ T5844] usb 3-1: failed to enable PITCH for EP 0x82 [ 663.524898][ T5844] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 663.534936][ T5844] usb 3-1: clock source 0 is not valid, cannot use [ 663.542442][ T5844] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 663.553098][ T5844] usb 3-1: 2:1: cannot set freq 386527012 (v2/v3): err -71 [ 663.644362][ T5844] usb 3-1: USB disconnect, device number 14 [ 663.901370][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.942530][T10597] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 664.391571][T10605] (null): rxe_set_mtu: Set mtu to 1024 [ 664.515494][T10605] infiniband syz1: set active [ 664.520764][T10605] infiniband syz1: added team_slave_0 [ 664.629274][T10605] RDS/IB: syz1: added [ 664.634312][T10605] smc: adding ib device syz1 with port count 1 [ 664.640881][T10605] smc: ib device syz1 port 1 has pnetid [ 665.457840][T10614] loop3: detected capacity change from 0 to 1024 [ 665.478461][T10614] hfsplus: unable to parse mount options [ 667.939902][T10638] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 668.243420][T10624] loop1: detected capacity change from 0 to 32768 [ 668.317238][T10624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1327 (10624) [ 668.444274][T10624] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 668.490781][T10624] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 668.499727][T10624] BTRFS info (device loop1): setting nodatasum [ 668.550566][T10624] BTRFS info (device loop1): force zlib compression, level 3 [ 668.558122][T10624] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 668.635656][T10624] BTRFS info (device loop1): use lzo compression, level 0 [ 668.664789][T10624] BTRFS info (device loop1): turning on flush-on-commit [ 668.710170][T10624] BTRFS info (device loop1): enabling auto defrag [ 668.742615][T10624] BTRFS info (device loop1): max_inline at 4096 [ 668.790924][T10624] BTRFS info (device loop1): using free space tree [ 668.822555][T10646] loop3: detected capacity change from 0 to 1024 [ 668.866098][T10646] hfsplus: unable to parse mount options [ 669.071575][T10624] BTRFS info (device loop1): enabling ssd optimizations [ 669.719318][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 669.770480][T10669] loop2: detected capacity change from 0 to 4096 [ 669.790104][T10669] ntfs: (device loop2): parse_options(): Unrecognized mount option 184467440737095516150x000000000000000001777777777777777777777ß]/NWÞ—Ì r%*ty|@ëõÍNý. [ 669.845216][T10669] ntfs: (device loop2): parse_options(): Invalid uid option argument: 0x00000000000000000xffffffffffffffff [ 670.421788][T10666] loop3: detected capacity change from 0 to 32768 [ 670.452459][T10666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1335 (10666) [ 670.587449][T10666] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 670.632291][T10666] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 670.761133][T10666] BTRFS info (device loop3): setting nodatasum [ 670.792866][T10666] BTRFS info (device loop3): force zlib compression, level 3 [ 670.812023][T10666] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 670.823311][T10666] BTRFS info (device loop3): use lzo compression, level 0 [ 670.832135][T10666] BTRFS info (device loop3): turning on flush-on-commit [ 670.839164][T10666] BTRFS info (device loop3): enabling auto defrag [ 670.845934][T10666] BTRFS info (device loop3): max_inline at 4096 [ 670.870650][T10666] BTRFS info (device loop3): using free space tree [ 671.789086][T10666] BTRFS info (device loop3): enabling ssd optimizations [ 671.951134][T10709] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 673.435536][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.660736][T10726] (null): rxe_set_mtu: Set mtu to 1024 [ 673.673581][T10726] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 674.945703][T10739] loop3: detected capacity change from 0 to 256 [ 675.008183][T10739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 676.175879][T10748] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 676.226472][T10748] kvm: pic: non byte read [ 676.238586][T10748] kvm: pic: non byte read [ 676.250973][T10748] kvm: pic: non byte read [ 676.262154][T10748] kvm: pic: non byte read [ 676.272867][T10748] kvm: pic: non byte read [ 676.574416][T10744] loop3: detected capacity change from 0 to 32768 [ 676.660001][T10744] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 676.732234][T10755] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 677.181263][T10759] loop1: detected capacity change from 0 to 4096 [ 677.238752][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 679.424506][T10787] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 679.485557][T10789] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 679.535849][T10789] kvm: pic: non byte read [ 679.547611][T10789] kvm: pic: non byte read [ 679.560923][T10789] kvm: pic: non byte read [ 679.581041][T10789] kvm: pic: non byte read [ 679.599470][T10789] kvm: pic: non byte read [ 681.823017][T10829] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 682.856223][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 683.518107][T10861] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 684.121705][T10866] loop2: detected capacity change from 0 to 7 [ 684.200999][T10866] Dev loop2: unable to read RDB block 7 [ 684.238434][T10866] loop2: AHDI p1 p2 p3 [ 684.254907][T10866] loop2: partition table partially beyond EOD, truncated [ 684.284081][T10866] loop2: p1 start 1601398130 is beyond EOD, truncated [ 684.294642][T10866] loop2: p2 start 1702059890 is beyond EOD, truncated [ 685.625633][T10887] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 685.801162][T10889] loop1: detected capacity change from 0 to 4096 [ 685.925497][T10889] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 686.056868][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.063433][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.258766][T10911] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 690.559697][T10944] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 692.502888][T10980] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 696.230322][T11014] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 698.980823][T11045] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 702.794126][T11088] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 706.652485][T11121] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 708.706282][T11141] loop1: detected capacity change from 0 to 1024 [ 708.715368][T11141] hfsplus: unable to parse mount options [ 710.377831][T11157] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 710.430737][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 710.822909][ T5821] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 711.802753][ T5821] usb 2-1: can't read configurations, error -61 [ 713.811694][ T5821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 714.250912][T11187] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 717.150836][ T1191] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 717.353753][ T1191] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 717.368163][ T1191] usb 3-1: can't read configurations, error -61 [ 717.530826][ T1191] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 717.873483][ T1191] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 717.901126][T11230] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 717.924171][ T1191] usb 3-1: can't read configurations, error -61 [ 717.973909][ T1191] usb usb3-port1: attempt power cycle [ 718.855387][ T1191] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 718.895271][ T1191] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 718.904561][ T1191] usb 3-1: can't read configurations, error -61 [ 719.061616][ T1191] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 719.109705][ T1191] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 719.130718][ T1191] usb 3-1: can't read configurations, error -61 [ 719.147649][ T1191] usb usb3-port1: unable to enumerate USB device [ 720.656571][T11271] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 723.548592][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 723.879576][T11292] loop3: detected capacity change from 0 to 512 [ 724.040734][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 724.627874][ T5844] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 724.635683][ T5844] usb 1-1: can't read configurations, error -61 [ 724.722462][T11303] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 724.994559][ T5844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 725.169655][T11314] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1515'. [ 725.940835][T11314] bond0: (slave bond_slave_0): Releasing backup interface [ 725.960108][T11314] net_ratelimit: 10 callbacks suppressed [ 725.960123][T11314] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 726.101010][ T5844] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 726.108653][ T5844] usb 1-1: can't read configurations, error -61 [ 726.133947][ T5844] usb usb1-port1: attempt power cycle [ 726.180366][T11316] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 726.760623][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 726.811077][ T5844] usb 1-1: device descriptor read/8, error -71 [ 726.875521][T11334] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 726.925480][T11332] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 727.923486][T11346] overlayfs: missing 'lowerdir' [ 727.935333][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 730.686422][T11365] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 731.140676][ T1191] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 731.464644][ T1191] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 731.508933][ T1191] usb 2-1: can't read configurations, error -61 [ 731.596501][T11370] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 731.690989][ T1191] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 732.127256][T11386] overlayfs: missing 'lowerdir' [ 732.527521][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 734.181474][ T1191] usb 2-1: device descriptor read/all, error -71 [ 734.292897][ T1191] usb usb2-port1: attempt power cycle [ 734.561164][T11398] loop1: detected capacity change from 0 to 512 [ 736.105611][T11408] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 737.271675][T11398] loop1: detected capacity change from 0 to 512 [ 737.306893][T11398] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1542: Directory hole found for htree index block 0 [ 737.326702][T11398] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 737.359680][T11398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.517998][T11418] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 737.681234][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.154690][T11426] overlayfs: missing 'lowerdir' [ 738.184361][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 739.718296][T11441] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 741.709838][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 743.412934][T11477] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 747.511410][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.620738][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.629116][ T5783] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 747.991879][T11511] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 748.276076][T11517] fuse: Unknown parameter 'grou00000000000000000000' [ 748.388198][T11522] loop2: detected capacity change from 0 to 4096 [ 749.539615][T11534] loop1: detected capacity change from 0 to 64 [ 751.121404][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 751.816824][T11548] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 752.820360][T11559] fuse: Unknown parameter 'grou00000000000000000000' [ 754.172968][T11568] loop2: detected capacity change from 0 to 40427 [ 754.833841][T11568] F2FS-fs (loop2): invalid crc value [ 755.050313][T11568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 756.885123][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 758.345491][T11588] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 760.164985][T11603] fuse: Bad value for 'fd' [ 764.598182][ T5783] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 765.178563][T11634] binder_alloc: 11633: binder_alloc_buf, no vma [ 766.226668][T11649] fuse: Unknown parameter 'group_i00000000000000000000' [ 767.614298][T11663] loop2: detected capacity change from 0 to 512 [ 768.372175][T11663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.442627][T11663] ext4 filesystem being mounted at /410/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.109135][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.633861][T11696] fuse: Unknown parameter 'group_i00000000000000000000' [ 776.795295][T11745] fuse: Unknown parameter 'group_i00000000000000000000' [ 777.802774][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 780.577597][T11789] fuse: Unknown parameter 'group_id00000000000000000000' [ 780.684418][T11787] loop3: detected capacity change from 0 to 4096 [ 781.093217][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 783.097526][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 784.101497][T11826] fuse: Unknown parameter 'group_id00000000000000000000' [ 786.250106][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 789.074232][T11862] fuse: Unknown parameter 'group_id00000000000000000000' [ 789.926522][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1681'. [ 791.428654][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 791.449600][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 792.678999][T11908] loop2: detected capacity change from 0 to 512 [ 793.212772][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 793.896199][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 795.002959][T11941] loop3: detected capacity change from 0 to 512 [ 795.049244][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1702'. [ 795.847349][T11951] loop2: detected capacity change from 0 to 4096 [ 796.011021][T11951] ntfs: (device loop2): parse_options(): NLS character set cp84 not found. [ 796.809146][T11971] loop2: detected capacity change from 0 to 512 [ 798.067311][T11982] syzkaller0: entered promiscuous mode [ 798.073067][T11982] syzkaller0: entered allmulticast mode [ 799.585509][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 803.011547][T12045] loop3: detected capacity change from 0 to 512 [ 803.801948][T12051] loop3: detected capacity change from 0 to 32768 [ 803.877057][T12051] JBD2: Ignoring recovery information on journal [ 804.012908][T12051] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 804.390784][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 805.455758][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 806.227894][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 806.361553][T12086] team0 (unregistering): Port device team_slave_0 removed [ 806.402870][T12086] team0 (unregistering): Port device team_slave_1 removed [ 807.548751][T12103] loop3: detected capacity change from 0 to 512 [ 808.130743][ T5785] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 808.935057][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.950301][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.890811][T12121] loop2: detected capacity change from 0 to 32768 [ 809.966277][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 810.438589][T12121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1759 (12121) [ 810.635769][T12121] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 810.687344][T12121] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 810.730829][T12121] BTRFS info (device loop2): enabling auto defrag [ 810.737345][T12121] BTRFS info (device loop2): disabling auto defrag [ 810.744330][T12121] BTRFS info (device loop2): force zlib compression, level 3 [ 810.761255][T12121] BTRFS info (device loop2): max_inline at 4096 [ 810.773332][T12121] BTRFS info (device loop2): disabling free space tree [ 810.790548][T12121] BTRFS error (device loop2): cannot disable free space tree [ 810.812474][T12121] BTRFS error (device loop2): open_ctree failed: -22 [ 810.824731][T11188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (11188) [ 814.567437][T12171] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 814.831844][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 816.982873][T12196] fuse: Bad value for 'fd' [ 818.913560][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 819.293381][T12222] loop2: detected capacity change from 0 to 4096 [ 819.404108][T12222] NILFS (loop2): invalid segment: Checksum error in segment payload [ 819.438413][T12222] NILFS (loop2): trying rollback from an earlier position [ 820.188625][T12222] NILFS (loop2): recovery complete [ 820.272090][T12232] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 821.480991][T12245] loop2: detected capacity change from 0 to 512 [ 822.044592][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 824.269621][T12270] loop3: detected capacity change from 0 to 512 [ 826.039144][T12286] loop2: detected capacity change from 0 to 7 [ 826.068142][T12286] Dev loop2: unable to read RDB block 7 [ 826.087379][T12286] loop2: unable to read partition table [ 826.097309][T12286] loop2: partition table beyond EOD, truncated [ 826.103674][T12286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 826.295388][ T5142] Dev loop2: unable to read RDB block 7 [ 826.304348][ T5142] loop2: unable to read partition table [ 826.311295][ T5142] loop2: partition table beyond EOD, truncated [ 827.139477][T12303] loop2: detected capacity change from 0 to 512 [ 828.295581][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.303877][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.939033][T12292] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.950669][T12292] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.959627][T12292] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.990513][T12292] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.292787][T12312] bridge_slave_0: left allmulticast mode [ 830.298552][T12312] bridge_slave_0: left promiscuous mode [ 830.324315][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.397344][T12312] bridge_slave_1: left allmulticast mode [ 830.430507][T12312] bridge_slave_1: left promiscuous mode [ 830.436444][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.456775][T12312] bond0: (slave bond_slave_0): Releasing backup interface [ 830.511181][T12312] bond0: (slave bond_slave_1): Releasing backup interface [ 830.543981][T12312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.571196][T12312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.592696][T12312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.597233][T12346] loop2: detected capacity change from 0 to 7 [ 830.600134][T12312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.636207][T12346] Dev loop2: unable to read RDB block 7 [ 830.654114][T12346] loop2: AHDI p2 p3 [ 830.658098][T12346] loop2: partition table partially beyond EOD, truncated [ 830.710937][T12346] loop2: p2 start 1702059890 is beyond EOD, truncated [ 831.794996][T12352] loop3: detected capacity change from 0 to 512 [ 832.981453][T12362] loop3: detected capacity change from 0 to 512 [ 833.151393][T12372] loop2: detected capacity change from 0 to 7 [ 833.174018][T12372] Dev loop2: unable to read RDB block 7 [ 833.193338][T12372] loop2: AHDI p2 p3 [ 833.197322][T12372] loop2: partition table partially beyond EOD, truncated [ 833.235812][T12372] loop2: p2 start 1702059890 is beyond EOD, truncated [ 833.259597][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 833.336418][ T5142] Dev loop2: unable to read RDB block 7 [ 833.352624][ T5142] loop2: AHDI p2 p3 [ 833.367472][ T5142] loop2: partition table partially beyond EOD, truncated [ 833.387426][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated [ 833.608240][T12378] loop3: detected capacity change from 0 to 512 [ 833.918942][T12378] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1837: Directory hole found for htree index block 0 [ 834.551297][T12378] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 834.565485][T12378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.682809][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.492552][ T5785] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 838.603356][T12425] loop3: detected capacity change from 0 to 4096 [ 838.660766][T12425] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 838.785642][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 838.809872][T12425] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 850.010036][T12539] loop2: detected capacity change from 0 to 512 [ 852.238401][T12567] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 855.557483][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 856.676202][T12612] loop2: detected capacity change from 0 to 7 [ 856.690791][T12612] Dev loop2: unable to read RDB block 7 [ 856.702151][T12612] loop2: AHDI p2 p3 [ 856.706119][T12612] loop2: partition table partially beyond EOD, truncated [ 856.730814][T12612] loop2: p2 start 1702059890 is beyond EOD, truncated [ 856.765424][ T5142] Dev loop2: unable to read RDB block 7 [ 856.782831][ T5142] loop2: AHDI p2 p3 [ 856.802150][ T5142] loop2: partition table partially beyond EOD, truncated [ 856.809461][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated [ 856.969912][T12617] fuse: Unknown parameter '00000000000000000000' [ 858.410056][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 860.519186][T12654] fuse: Unknown parameter '00000000000000000000' [ 864.740682][T12676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1940'. [ 864.869527][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 866.877518][T12699] syzkaller0: entered promiscuous mode [ 866.918654][T12699] syzkaller0: entered allmulticast mode [ 868.703783][T12708] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1950'. [ 868.770974][T12710] loop2: detected capacity change from 0 to 7 [ 868.782267][T12710] Dev loop2: unable to read RDB block 7 [ 868.787891][T12710] loop2: AHDI p2 p3 [ 868.793285][T12710] loop2: partition table partially beyond EOD, truncated [ 868.801260][T12710] loop2: p2 start 1702059890 is beyond EOD, truncated [ 868.822943][ T5142] Dev loop2: unable to read RDB block 7 [ 868.838525][ T5142] loop2: AHDI p2 p3 [ 868.843549][ T5142] loop2: partition table partially beyond EOD, truncated [ 868.967720][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated [ 870.391211][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.397603][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.346918][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 871.390631][T12739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1959'. [ 871.609786][T12744] loop2: detected capacity change from 0 to 7 [ 871.632830][T12744] Dev loop2: unable to read RDB block 7 [ 871.650859][T12744] loop2: AHDI p2 p3 [ 871.654863][T12744] loop2: partition table partially beyond EOD, truncated [ 871.672125][T12744] loop2: p2 start 1702059890 is beyond EOD, truncated [ 872.100553][T11388] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 872.547787][T11388] usb 4-1: config 0 has no interfaces? [ 872.586748][T11388] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.763052][T11388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.781958][T11388] usb 4-1: config 0 descriptor?? [ 873.058964][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.121181][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.204138][ T8] usb 4-1: USB disconnect, device number 20 [ 874.199906][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 874.249621][T12774] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 874.439518][T12781] loop2: detected capacity change from 0 to 7 [ 874.450765][T12781] Dev loop2: unable to read RDB block 7 [ 874.464318][T12781] loop2: AHDI p2 p3 [ 874.479723][T12781] loop2: partition table partially beyond EOD, truncated [ 874.505231][T12781] loop2: p2 start 1702059890 is beyond EOD, truncated [ 876.876944][T12807] fuse: Unknown parameter 'user00000000000000000000' [ 877.124849][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 877.134623][T12812] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 877.522508][T12823] loop2: detected capacity change from 0 to 7 [ 877.549036][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 877.557191][T12823] Dev loop2: unable to read RDB block 7 [ 877.563767][T12823] loop2: AHDI p2 p3 [ 877.580713][T12823] loop2: partition table partially beyond EOD, truncated [ 877.597891][T12823] loop2: p2 start 1702059890 is beyond EOD, truncated [ 877.755190][ T8] usb 3-1: config 0 has no interfaces? [ 877.763318][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 877.782793][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.802968][ T8] usb 3-1: config 0 descriptor?? [ 877.888046][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 878.097418][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.213715][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.567550][ T8] usb 3-1: USB disconnect, device number 19 [ 880.512883][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 880.931777][T12848] fuse: Unknown parameter 'user00000000000000000000' [ 881.025604][T12850] loop2: detected capacity change from 0 to 7 [ 881.046865][T12850] Dev loop2: unable to read RDB block 7 [ 881.064892][T12850] loop2: unable to read partition table [ 881.079048][T12850] loop2: partition table beyond EOD, truncated [ 881.100535][T12850] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 881.135616][ T5142] Dev loop2: unable to read RDB block 7 [ 881.148236][ T5142] loop2: unable to read partition table [ 881.160721][ T5142] loop2: partition table beyond EOD, truncated [ 881.450172][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 882.519325][T12843] loop3: detected capacity change from 0 to 32768 [ 882.561772][T12843] XFS (loop3): no-recovery mounts must be read-only. [ 882.744853][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 882.920787][T11388] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 883.130049][T11388] usb 2-1: config 0 has no interfaces? [ 883.148313][T11388] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 883.188811][T11388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.246538][T11388] usb 2-1: config 0 descriptor?? [ 883.561358][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.951655][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.045422][ T8] usb 2-1: USB disconnect, device number 26 [ 884.225863][T12876] loop2: detected capacity change from 0 to 7 [ 884.237303][T12876] Dev loop2: unable to read RDB block 7 [ 884.250528][T12876] loop2: unable to read partition table [ 884.264457][T12876] loop2: partition table beyond EOD, truncated [ 884.284054][T12876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 884.528815][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 885.370609][T12881] fuse: Unknown parameter 'user_i00000000000000000000' [ 887.280912][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 887.463537][T12335] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 887.781279][T12335] usb 1-1: config 0 has no interfaces? [ 887.825986][T12335] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.920356][T12335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.957139][T12335] usb 1-1: config 0 descriptor?? [ 888.197482][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.216951][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.263293][T12335] usb 1-1: USB disconnect, device number 17 [ 889.811587][T12927] fuse: Unknown parameter 'user_i00000000000000000000' [ 889.996445][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 890.530786][T12913] loop3: detected capacity change from 0 to 32768 [ 890.707722][T12913] (syz.3.2022,12913,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 890.788491][T12913] (syz.3.2022,12913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 890.904742][T12913] JBD2: Ignoring recovery information on journal [ 891.050345][T12913] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 891.503526][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 891.710755][T12335] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 891.925578][T12335] usb 3-1: config 0 has no interfaces? [ 892.423555][T12335] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 892.788185][T12335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.803535][T12335] usb 3-1: config 0 descriptor?? [ 893.195687][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 893.219571][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.248675][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.319277][T11388] usb 3-1: USB disconnect, device number 20 [ 893.381512][T12961] bond1: entered promiscuous mode [ 893.397285][T12961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.477798][T12963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.492901][T12963] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 893.521993][T12963] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 893.774585][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 1039 [ 893.847367][T12970] fuse: Unknown parameter 'user_i00000000000000000000' [ 893.900617][T11388] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 894.887438][T11388] usb 1-1: device descriptor read/64, error -71 [ 895.760533][T11388] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 895.980622][T11388] usb 1-1: device descriptor read/64, error -71 [ 896.953678][T11388] usb usb1-port1: attempt power cycle [ 897.370789][ T5785] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 897.501222][ T5825] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 897.802048][ T5825] usb 2-1: config 0 has no interfaces? [ 897.858591][ T5825] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 897.982141][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.152140][ T5825] usb 2-1: config 0 descriptor?? [ 898.395987][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.435811][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.495963][ T5825] usb 2-1: USB disconnect, device number 27 [ 899.531773][T13019] loop2: detected capacity change from 0 to 1024 [ 899.559911][T13019] hfsplus: unable to parse mount options [ 900.928391][ T5785] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 901.837491][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 901.905730][T13046] fuse: Unknown parameter 'user_id00000000000000000000' [ 902.184281][T13052] loop2: detected capacity change from 0 to 1024 [ 902.193373][T13052] hfsplus: unable to parse mount options [ 902.220691][T12335] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 902.235057][T11188] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 902.433987][T12335] usb 4-1: config 0 has no interfaces? [ 902.447571][T12335] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.460058][T12335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.488109][T12335] usb 4-1: config 0 descriptor?? [ 902.714019][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.744790][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.812311][T12335] usb 4-1: USB disconnect, device number 21 [ 902.915673][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'. [ 903.765765][T13073] Can't find ip_set type hash:ip,port,n [ 903.976273][T13084] loop3: detected capacity change from 0 to 1024 [ 903.998981][T13084] hfsplus: unable to parse mount options [ 904.021053][T13085] loop2: detected capacity change from 0 to 7 [ 904.029722][T13085] Dev loop2: unable to read RDB block 7 [ 904.037813][T13085] loop2: unable to read partition table [ 904.044171][T13085] loop2: partition table beyond EOD, truncated [ 904.052919][T13085] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 904.303388][T13095] fuse: Unknown parameter 'user_id00000000000000000000' [ 904.526071][T13103] loop2: detected capacity change from 0 to 512 [ 905.141927][T13108] loop2: detected capacity change from 0 to 1024 [ 905.175521][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'. [ 905.195432][T13108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 905.210852][T13108] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.470825][ T5825] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 905.774238][ T5825] usb 1-1: config 0 has no interfaces? [ 905.825819][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 905.910183][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.040682][ T5825] usb 1-1: config 0 descriptor?? [ 906.313798][T13112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.333420][T13112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.374884][ T7068] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:18: lblock 0 mapped to illegal pblock 0 (length 6) [ 906.411115][ T5825] usb 1-1: USB disconnect, device number 21 [ 906.426434][ T7068] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 906.450557][ T7068] EXT4-fs (loop2): This should not happen!! Data will be lost [ 906.450557][ T7068] [ 906.468799][ T59] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 906.489085][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 906.501723][ T59] EXT4-fs (loop2): This should not happen!! Data will be lost [ 906.501723][ T59] [ 906.576887][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 907.105121][T13147] fuse: Bad value for 'fd' [ 907.294464][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 907.396657][T13136] loop3: detected capacity change from 0 to 32768 [ 907.649086][T13136] JBD2: Ignoring recovery information on journal [ 907.845577][T13136] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 908.016319][T13136] [ 908.018731][T13136] ====================================================== [ 908.025796][T13136] WARNING: possible circular locking dependency detected [ 908.032860][T13136] syzkaller #0 Not tainted [ 908.037308][T13136] ------------------------------------------------------ [ 908.044354][T13136] syz.3.2091/13136 is trying to acquire lock: [ 908.050444][T13136] ffff88804f709818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba4/0x13e0 [ 908.062730][T13136] [ 908.062730][T13136] but task is already holding lock: [ 908.070130][T13136] ffff88804f70a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 908.079683][T13136] [ 908.079683][T13136] which lock already depends on the new lock. [ 908.079683][T13136] [ 908.090121][T13136] [ 908.090121][T13136] the existing dependency chain (in reverse order) is: [ 908.099176][T13136] [ 908.099176][T13136] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 908.107041][T13136] down_read+0x46/0x2e0 [ 908.111779][T13136] ocfs2_init_acl+0x30a/0x770 [ 908.117019][T13136] ocfs2_mknod+0x140f/0x2300 [ 908.122189][T13136] ocfs2_create+0x196/0x430 [ 908.127263][T13136] path_openat+0x12a0/0x3230 [ 908.132411][T13136] do_filp_open+0x1f5/0x430 [ 908.137489][T13136] do_sys_openat2+0x134/0x1d0 [ 908.142744][T13136] __x64_sys_openat+0x139/0x160 [ 908.148163][T13136] do_syscall_64+0x55/0xb0 [ 908.153148][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.159619][T13136] [ 908.159619][T13136] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 908.168196][T13136] down_read+0x46/0x2e0 [ 908.172926][T13136] ocfs2_start_trans+0x3a8/0x6f0 [ 908.178429][T13136] ocfs2_modify_bh+0xe4/0x4c0 [ 908.183685][T13136] ocfs2_local_read_info+0x1445/0x1800 [ 908.189727][T13136] dquot_load_quota_sb+0x757/0xb80 [ 908.195411][T13136] dquot_load_quota_inode+0x2dc/0x5d0 [ 908.201365][T13136] ocfs2_enable_quotas+0x1c9/0x490 [ 908.207052][T13136] ocfs2_fill_super+0x417d/0x5010 [ 908.212645][T13136] mount_bdev+0x221/0x2d0 [ 908.217545][T13136] legacy_get_tree+0xea/0x180 [ 908.222791][T13136] vfs_get_tree+0x8c/0x280 [ 908.227770][T13136] do_new_mount+0x24b/0xa40 [ 908.232826][T13136] __se_sys_mount+0x2e7/0x3d0 [ 908.238066][T13136] do_syscall_64+0x55/0xb0 [ 908.243053][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.249522][T13136] [ 908.249522][T13136] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 908.257057][T13136] ocfs2_start_trans+0x2a9/0x6f0 [ 908.262573][T13136] ocfs2_remove_btree_range+0x849/0x15e0 [ 908.268783][T13136] ocfs2_remove_inode_range+0xf32/0x2560 [ 908.274994][T13136] ocfs2_reflink_remap_blocks+0xab7/0x1a20 [ 908.281376][T13136] ocfs2_remap_file_range+0x4b6/0x740 [ 908.287329][T13136] vfs_copy_file_range+0xfeb/0x15c0 [ 908.293117][T13136] __se_sys_copy_file_range+0x324/0x470 [ 908.299245][T13136] do_syscall_64+0x55/0xb0 [ 908.304233][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.310703][T13136] [ 908.310703][T13136] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 908.321281][T13136] __lock_acquire+0x2df1/0x7d40 [ 908.326704][T13136] lock_acquire+0x19e/0x420 [ 908.331798][T13136] down_write+0x97/0x200 [ 908.336611][T13136] ocfs2_xattr_set+0xba4/0x13e0 [ 908.342039][T13136] __vfs_setxattr+0x431/0x470 [ 908.347283][T13136] __vfs_setxattr_noperm+0x12d/0x5e0 [ 908.353143][T13136] vfs_setxattr+0x16b/0x2f0 [ 908.358212][T13136] path_setxattr+0x3f3/0x5d0 [ 908.363386][T13136] __x64_sys_setxattr+0xbb/0xd0 [ 908.368806][T13136] do_syscall_64+0x55/0xb0 [ 908.373790][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.380256][T13136] [ 908.380256][T13136] other info that might help us debug this: [ 908.380256][T13136] [ 908.390529][T13136] Chain exists of: [ 908.390529][T13136] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 908.390529][T13136] [ 908.407534][T13136] Possible unsafe locking scenario: [ 908.407534][T13136] [ 908.415015][T13136] CPU0 CPU1 [ 908.420411][T13136] ---- ---- [ 908.425807][T13136] lock(&oi->ip_xattr_sem); [ 908.430444][T13136] lock(&journal->j_trans_barrier); [ 908.438291][T13136] lock(&oi->ip_xattr_sem); [ 908.445447][T13136] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 908.452783][T13136] [ 908.452783][T13136] *** DEADLOCK *** [ 908.452783][T13136] [ 908.460953][T13136] 3 locks held by syz.3.2091/13136: [ 908.466183][T13136] #0: ffff88801c338418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 908.475491][T13136] #1: ffff88804f70a658 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 908.486025][T13136] #2: ffff88804f70a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 908.496018][T13136] [ 908.496018][T13136] stack backtrace: [ 908.501937][T13136] CPU: 0 PID: 13136 Comm: syz.3.2091 Not tainted syzkaller #0 [ 908.509431][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 908.519533][T13136] Call Trace: [ 908.522851][T13136] [ 908.525822][T13136] dump_stack_lvl+0x18c/0x250 [ 908.530545][T13136] ? load_image+0x420/0x420 [ 908.535082][T13136] ? show_regs_print_info+0x20/0x20 [ 908.540329][T13136] ? print_circular_bug+0x12b/0x1a0 [ 908.545585][T13136] check_noncircular+0x2fc/0x400 [ 908.550620][T13136] ? look_up_lock_class+0x75/0x140 [ 908.555789][T13136] ? print_deadlock_bug+0x5d0/0x5d0 [ 908.561034][T13136] ? lockdep_lock+0xf5/0x230 [ 908.565713][T13136] ? lockdep_unlock+0x146/0x2e0 [ 908.570615][T13136] ? _find_first_zero_bit+0xd3/0x100 [ 908.575961][T13136] __lock_acquire+0x2df1/0x7d40 [ 908.580867][T13136] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 908.587081][T13136] ? _raw_spin_unlock+0x40/0x40 [ 908.591992][T13136] ? verify_lock_unused+0x140/0x140 [ 908.597241][T13136] ? stack_trace_save+0xaa/0x100 [ 908.602236][T13136] lock_acquire+0x19e/0x420 [ 908.606785][T13136] ? ocfs2_xattr_set+0xba4/0x13e0 [ 908.611862][T13136] ? __might_sleep+0xe0/0xe0 [ 908.616500][T13136] ? read_lock_is_recursive+0x20/0x20 [ 908.621917][T13136] ? _raw_spin_unlock+0x28/0x40 [ 908.626809][T13136] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 908.632587][T13136] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 908.638183][T13136] down_write+0x97/0x200 [ 908.642466][T13136] ? ocfs2_xattr_set+0xba4/0x13e0 [ 908.647555][T13136] ? down_read_killable+0x340/0x340 [ 908.652796][T13136] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 908.658318][T13136] ocfs2_xattr_set+0xba4/0x13e0 [ 908.663229][T13136] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 908.669000][T13136] ? __lock_acquire+0x1347/0x7d40 [ 908.674066][T13136] ? verify_lock_unused+0x140/0x140 [ 908.679336][T13136] ? ____kasan_slab_free+0x126/0x1e0 [ 908.684662][T13136] ? aa_get_newest_label+0xfd/0x5c0 [ 908.689908][T13136] ? end_current_label_crit_section+0x170/0x170 [ 908.696200][T13136] ? posix_xattr_acl+0x93/0xb0 [ 908.701006][T13136] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 908.706516][T13136] __vfs_setxattr+0x431/0x470 [ 908.711249][T13136] __vfs_setxattr_noperm+0x12d/0x5e0 [ 908.716586][T13136] vfs_setxattr+0x16b/0x2f0 [ 908.721137][T13136] ? xattr_permission+0x470/0x470 [ 908.726210][T13136] ? __mnt_want_write+0x223/0x2a0 [ 908.731281][T13136] ? path_setxattr+0x3a1/0x5d0 [ 908.736091][T13136] path_setxattr+0x3f3/0x5d0 [ 908.740718][T13136] ? simple_xattrs_free+0x150/0x150 [ 908.745969][T13136] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 908.751991][T13136] ? lock_chain_count+0x20/0x20 [ 908.756886][T13136] __x64_sys_setxattr+0xbb/0xd0 [ 908.761792][T13136] do_syscall_64+0x55/0xb0 [ 908.766250][T13136] ? clear_bhb_loop+0x40/0x90 [ 908.770957][T13136] ? clear_bhb_loop+0x40/0x90 [ 908.775673][T13136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.781619][T13136] RIP: 0033:0x7fb49cf9ce59 [ 908.786097][T13136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.805739][T13136] RSP: 002b:00007fb49de92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 908.814192][T13136] RAX: ffffffffffffffda RBX: 00007fb49d215fa0 RCX: 00007fb49cf9ce59 [ 908.822201][T13136] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 908.830228][T13136] RBP: 00007fb49d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 908.838236][T13136] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 908.846248][T13136] R13: 00007fb49d216038 R14: 00007fb49d215fa0 R15: 00007ffcfee93378 [ 908.854265][T13136] [ 908.998535][ T5778] ocfs2: Unmounting device (7,3) on (node local)