last executing test programs: 6m29.776357959s ago: executing program 32 (id=7479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 5m38.458309199s ago: executing program 33 (id=8187): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003d80), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000003dc0)={0xe, @output={0x1000, 0x0, {0x3, 0x7fffffff}, 0x81, 0x7}}) 4m30.048182853s ago: executing program 1 (id=8867): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x24008000) 4m29.267557363s ago: executing program 1 (id=8872): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, &(0x7f0000000240)=""/4089, 0xff9) 4m28.672339181s ago: executing program 1 (id=8875): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@usrquota}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@nointegrity}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota, 0x0}, {}, {@resize_size}, {@quota}, {@errors_continue}, {@quota}, {@umask={'umask', 0x3d, 0x5}}, {@uid}], [{@dont_hash}, {@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'integrity'}}]}, 0x1, 0x6164, &(0x7f000000f9c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x2000) 4m25.916623289s ago: executing program 1 (id=8889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 4m22.801669297s ago: executing program 34 (id=8808): r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 4m18.544809052s ago: executing program 35 (id=8836): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='xfs\x00', 0x8007, 0x0) 4m9.638420905s ago: executing program 36 (id=8889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 4m5.303477019s ago: executing program 37 (id=8912): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) 3m50.229440259s ago: executing program 38 (id=8977): r0 = fanotify_init(0x40, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x20) 3m27.880074095s ago: executing program 3 (id=9064): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000600)=""/121, &(0x7f0000000680)=0x79) 3m27.328215176s ago: executing program 3 (id=9066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) 3m26.854847153s ago: executing program 3 (id=9069): ioperm(0x0, 0x1, 0x1) setresgid(0xffffffffffffffff, 0x0, 0x0) 3m26.440857332s ago: executing program 3 (id=9070): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f00007d0000)) 3m26.040246441s ago: executing program 3 (id=9071): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0xbd45193b3a724a97, 0x3, 0xa}) 3m24.292603375s ago: executing program 9 (id=9074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 3m23.503541159s ago: executing program 9 (id=9075): unshare(0x2040400) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 3m22.728241295s ago: executing program 39 (id=9034): mknod(&(0x7f0000001500)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000018c0), 0x0, &(0x7f0000000000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x100000000}}]}}) 3m22.722469869s ago: executing program 9 (id=9077): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 3m22.132001338s ago: executing program 9 (id=9078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f0020000000040035"], 0xe8}}, 0x0) 3m22.004045258s ago: executing program 3 (id=9079): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x4, 0xf2, 0x8}}}, &(0x7f0000002300), 0x0) 3m21.217140714s ago: executing program 9 (id=9080): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xc) 3m19.743110546s ago: executing program 9 (id=9083): r0 = syz_open_dev$dmmidi(&(0x7f0000000c00), 0x2, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) 3m10.750125966s ago: executing program 40 (id=9068): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m5.712683695s ago: executing program 41 (id=9079): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x4, 0xf2, 0x8}}}, &(0x7f0000002300), 0x0) 3m3.299386761s ago: executing program 42 (id=9083): r0 = syz_open_dev$dmmidi(&(0x7f0000000c00), 0x2, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) 2m58.82673069s ago: executing program 6 (id=9129): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket3={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 2m58.35952519s ago: executing program 6 (id=9130): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m57.895330429s ago: executing program 6 (id=9131): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x900) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x5, 0x20, 0xd6}) 2m57.478073987s ago: executing program 6 (id=9133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46100}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0xec}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x44}}, 0x0) 2m56.618758487s ago: executing program 6 (id=9135): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}) 2m53.449017035s ago: executing program 6 (id=9142): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m37.130658129s ago: executing program 43 (id=9142): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m30.871259596s ago: executing program 1 (id=9095): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0xfd, 0x4439, &(0x7f00000088c0)="$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") open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) 2m27.132587099s ago: executing program 1 (id=9182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) 2m10.568836027s ago: executing program 44 (id=9182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) 3.795231584s ago: executing program 0 (id=10456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25582}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}}, 0x0) 3.740070488s ago: executing program 7 (id=10460): r0 = io_uring_setup(0x67ab, &(0x7f00000000c0)={0x0, 0x4d09, 0x3681, 0xfffffffd, 0x10000000}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 3.444170328s ago: executing program 0 (id=10464): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000140)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mount$nfs(&(0x7f00000000c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8e\xdb\xb1HL\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80\x0e\"\xb0\a\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) 3.431154003s ago: executing program 7 (id=10466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301}, 0x24}}, 0x0) 3.32805023s ago: executing program 4 (id=10467): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x3c, 0x3d, 0x9, 0x0, 0x800, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @str='veth1_virt_wifi\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}}, 0x0) 3.048615087s ago: executing program 4 (id=10470): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") rmdir(&(0x7f00000007c0)='./file1\x00') 3.048328579s ago: executing program 7 (id=10471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x57d, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 2.899452626s ago: executing program 0 (id=10472): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) 2.685285752s ago: executing program 4 (id=10475): r0 = syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.348589789s ago: executing program 0 (id=10478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006d000100000000000000000000000000ba"], 0x20}}, 0x40000) 2.327417355s ago: executing program 7 (id=10480): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) 2.137047432s ago: executing program 0 (id=10482): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.967995227s ago: executing program 5 (id=10485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, &(0x7f0000000b00)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10) 1.849839217s ago: executing program 0 (id=10488): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x0) 1.676641336s ago: executing program 5 (id=10489): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000010000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.525417377s ago: executing program 8 (id=10490): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000280)={0x2, 0x3, 0x1, 0x0, 0x7fffffff}) 1.512524013s ago: executing program 2 (id=10491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 1.283644214s ago: executing program 8 (id=10492): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) 1.21236375s ago: executing program 2 (id=10493): r0 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000c00)={0x0, [[0x8, 0x0, 0x0, 0x80000], [0x0, 0x1000000, 0xe1], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]], '\x00', [{0x0, 0x200000}, {}, {0x80, 0xffffffff}, {0x6}, {}, {0xb, 0x40000000}, {0x9}, {}, {}, {}, {}, {0x0, 0xfffff403}]}) 1.111451435s ago: executing program 5 (id=10494): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(0xffffffffffffffff, 0x0, 0xee01) 999.278833ms ago: executing program 8 (id=10495): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) 897.290656ms ago: executing program 5 (id=10496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 854.502698ms ago: executing program 2 (id=10497): setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) 726.169856ms ago: executing program 5 (id=10498): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x82002) mmap$snddsp_status(&(0x7f0000fec000/0x12000)=nil, 0x1000, 0x0, 0x12, r0, 0x82000000) 725.817139ms ago: executing program 8 (id=10499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2a43c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) 569.835256ms ago: executing program 2 (id=10500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x101000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x541a, &(0x7f0000005480)) 526.698885ms ago: executing program 8 (id=10501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f0000000740)="b0", &(0x7f00000007c0)=""/55, &(0x7f0000000900), &(0x7f0000000b00), 0x2, r0}, 0x38) 446.786211ms ago: executing program 5 (id=10502): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x280) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) 368.582068ms ago: executing program 2 (id=10503): r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 309.226431ms ago: executing program 4 (id=10504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x46, 0x0, &(0x7f0000000240)) 260.448671ms ago: executing program 7 (id=10505): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x15}) 249.826228ms ago: executing program 4 (id=10506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000150000000000000085100000010000009500000000001000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 131.256675ms ago: executing program 8 (id=10507): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x2) 126.807565ms ago: executing program 4 (id=10508): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 92.914048ms ago: executing program 2 (id=10509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, 0x0, 0x406}, 0x20) 0s ago: executing program 7 (id=10510): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r0, &(0x7f00000008c0)=0x80000000000000c, 0x12) kernel console output (not intermixed with test programs): , setting to 1024 [ 1032.470966][ T5894] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1032.483771][ T5894] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1032.497381][ T5894] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1032.504348][ T5894] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1032.513549][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.517314][T28433] SQUASHFS error: xz decompression failed, data probably corrupt [ 1032.552253][T28429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1032.566669][ T5894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input72 [ 1032.624068][T28433] SQUASHFS error: Failed to read block 0x60: -5 [ 1032.658299][ T5187] input input72: unable to receive magic message: -110 [ 1032.713486][T28245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.720503][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.762881][T28433] SQUASHFS error: xz decompression failed, data probably corrupt [ 1032.776117][ T5187] input input72: unable to receive magic message: -32 [ 1032.826767][T28433] SQUASHFS error: Failed to read block 0x60: -5 [ 1032.850191][T28245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.871784][ T29] audit: type=1800 audit(2000000341.049:152): pid=28433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.9300" name="file1" dev="loop7" ino=1 res=0 errno=0 [ 1032.896229][T28429] input input72: unable to receive magic message: -32 [ 1032.933238][T28245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.953931][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.023175][T27448] usb 3-1: USB disconnect, device number 107 [ 1033.023213][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1033.038630][T27448] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1033.097234][T28245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.156195][T28442] syz.5.9304: attempt to access beyond end of device [ 1033.156195][T28442] md133: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1033.175447][T28025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.554165][T28245] hsr_slave_0: entered promiscuous mode [ 1033.616099][T28245] hsr_slave_1: entered promiscuous mode [ 1033.665115][T28245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.716029][T28245] Cannot create hsr debugfs directory [ 1033.924568][T28465] loop5: detected capacity change from 0 to 256 [ 1034.132812][T28465] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 1034.492307][ T2988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.889748][ T29] audit: type=1326 audit(2000000342.939:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28484 comm="syz.0.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1034.920166][T28486] loop2: detected capacity change from 0 to 1024 [ 1034.988210][T28025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.001168][ T29] audit: type=1326 audit(2000000342.986:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28484 comm="syz.0.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1035.066962][T28486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1035.107456][T28486] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1035.110169][ T29] audit: type=1326 audit(2000000342.986:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28484 comm="syz.0.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1035.156040][T28486] EXT4-fs (loop2): invalid journal inode [ 1035.206519][ T29] audit: type=1326 audit(2000000342.986:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28484 comm="syz.0.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1035.233977][T28486] EXT4-fs (loop2): can't get journal size [ 1035.267852][T28486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1035.276521][ T29] audit: type=1326 audit(2000000342.986:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28484 comm="syz.0.9325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1035.317340][T28493] loop0: detected capacity change from 0 to 4096 [ 1035.335102][ T2988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.348228][T28493] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1035.403644][T28486] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.9324: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1035.454645][T28477] loop7: detected capacity change from 0 to 40427 [ 1035.540051][T28477] F2FS-fs (loop7): Image doesn't support compression [ 1035.549502][T28477] F2FS-fs (loop7): Image doesn't support compression [ 1035.560198][T28477] F2FS-fs (loop7): invalid crc value [ 1035.586007][T28477] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1035.740885][ T2988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.808409][T28477] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1035.817709][T27246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.191028][ T2988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.344212][T28025] veth0_vlan: entered promiscuous mode [ 1036.355927][T28025] veth1_vlan: entered promiscuous mode [ 1036.383063][T28025] veth0_macvtap: entered promiscuous mode [ 1036.392960][T28025] veth1_macvtap: entered promiscuous mode [ 1036.411905][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.422576][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.432701][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.443187][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.453094][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.463649][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.473857][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.484694][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.494572][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.505135][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.515365][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.526258][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.536486][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.547147][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.557177][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.567727][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.577627][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.588103][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.597981][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.608587][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.618742][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.629588][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.640245][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.650958][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.660880][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.671766][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.681645][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.692211][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.704890][T28025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.714803][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.725499][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.735687][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.746381][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.756380][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.767130][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.777030][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.787557][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.797436][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.808358][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.818269][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.828744][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.838606][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.849780][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.860016][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.870795][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.882576][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.893165][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.903109][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.913902][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.923787][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.934255][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.944181][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.954976][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.965042][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.975665][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.985706][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.996204][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.008168][T28025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.018646][T28025] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.027547][T28025] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.036315][T28025] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.045149][T28025] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.450608][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9337'. [ 1038.070748][ T2988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.154285][T28068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.182451][T28068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.734138][T28564] loop5: detected capacity change from 0 to 1024 [ 1038.755669][ T2988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.941763][ T3561] hfsplus: b-tree write err: -5, ino 4 [ 1039.209900][ T2988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.261563][T27037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.284687][T27037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.327097][T28581] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1039.606437][ T2988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.625096][T28588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.892918][T28598] netlink: 'syz.7.9371': attribute type 3 has an invalid length. [ 1039.966869][T28598] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.9371'. [ 1040.614479][T28625] loop8: detected capacity change from 0 to 24 [ 1040.837845][T28634] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 1040.946368][ T2988] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.495825][ T2988] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.593073][T28655] loop5: detected capacity change from 0 to 16 [ 1041.615845][T28245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1041.638402][T28655] erofs (device loop5): mounted with root inode @ nid 36. [ 1041.662793][T28245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1042.226559][ T2988] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.283086][T28245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1042.309154][T28673] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9402'. [ 1042.331246][T28245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1042.643403][ T2988] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.771236][T28688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9411'. [ 1043.040554][T28697] netlink: 'syz.0.9414': attribute type 3 has an invalid length. [ 1043.263694][T28245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.282058][T28245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.332522][T28245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1043.343328][T28245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.384189][T27084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.391457][T27084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.512641][T27084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.519863][T27084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.987320][T28245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.046029][T28732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1044.269487][T28743] loop7: detected capacity change from 0 to 1024 [ 1044.376333][T28743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.922916][T28763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1044.989002][T28767] loop5: detected capacity change from 0 to 4096 [ 1045.009298][T28767] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1045.118824][T28767] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1045.126399][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.180785][ T2988] bridge_slave_1: left allmulticast mode [ 1045.223956][ T2988] bridge_slave_1: left promiscuous mode [ 1045.244456][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.332994][T28782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9440'. [ 1045.453590][ T2988] bridge_slave_0: left allmulticast mode [ 1045.459306][ T2988] bridge_slave_0: left promiscuous mode [ 1045.509589][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.642066][ T2988] bridge_slave_1: left allmulticast mode [ 1045.673340][ T2988] bridge_slave_1: left promiscuous mode [ 1045.690137][T28790] syz.5.9443: attempt to access beyond end of device [ 1045.690137][T28790] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1045.720326][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.730207][ T2988] bridge_slave_0: left allmulticast mode [ 1045.736532][ T2988] bridge_slave_0: left promiscuous mode [ 1045.742923][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.753148][T28790] syz.5.9443: attempt to access beyond end of device [ 1045.753148][T28790] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1045.775354][T28794] loop7: detected capacity change from 0 to 2048 [ 1045.798724][ T2988] bridge_slave_1: left allmulticast mode [ 1045.815499][ T2988] bridge_slave_1: left promiscuous mode [ 1045.834060][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.851106][T28794] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1045.870197][ T2988] bridge_slave_0: left allmulticast mode [ 1045.877310][ T2988] bridge_slave_0: left promiscuous mode [ 1045.891187][T27448] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1045.902208][T28794] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1045.914956][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.934073][ T2988] bridge_slave_1: left allmulticast mode [ 1045.940523][ T2988] bridge_slave_1: left promiscuous mode [ 1045.947088][T28794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.956792][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.015208][ T2988] bridge_slave_0: left allmulticast mode [ 1046.036235][ T2988] bridge_slave_0: left promiscuous mode [ 1046.049113][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.084591][ T2988] bridge_slave_1: left allmulticast mode [ 1046.094502][T27448] usb 3-1: Using ep0 maxpacket: 16 [ 1046.107220][ T2988] bridge_slave_1: left promiscuous mode [ 1046.108007][T27448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1046.112969][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.141945][T27448] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1046.154031][T27448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1046.217307][ T2988] bridge_slave_0: left allmulticast mode [ 1046.223645][ T2988] bridge_slave_0: left promiscuous mode [ 1046.233657][T27448] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1046.249476][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.272438][T27448] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1046.284329][T27448] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1046.297631][ T5894] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1046.311787][T27448] usb 3-1: Product: syz [ 1046.330698][T27448] usb 3-1: Manufacturer: syz [ 1046.361355][T27448] usb 3-1: SerialNumber: syz [ 1046.373625][T27448] usb 3-1: config 0 descriptor?? [ 1046.406185][T27448] usb 3-1: NFC: intf ffff888040eaf000 id ffffffff8f30f340 [ 1046.514344][ T5894] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1046.525245][ T5894] usb 6-1: config 0 has no interface number 0 [ 1046.531397][ T5894] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1046.551833][ T5894] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1046.566808][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.606021][ T5894] usb 6-1: Product: syz [ 1046.618341][ T5894] usb 6-1: Manufacturer: syz [ 1046.629028][ T5894] usb 6-1: SerialNumber: syz [ 1046.646231][ T5894] usb 6-1: config 0 descriptor?? [ 1046.667932][T27448] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 1046.699484][ T5894] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1046.706421][T27448] usb 3-1: USB disconnect, device number 108 [ 1046.723309][T27448] usb 3-1: NFC: intf ffff888040eaf000 [ 1046.922091][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1047.168602][T27535] usb 6-1: USB disconnect, device number 101 [ 1047.183644][T27535] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1047.498922][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.505485][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.049608][ T29] audit: type=1107 audit(2000000355.250:158): pid=28821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1048.625235][T28834] loop5: detected capacity change from 0 to 1024 [ 1048.736219][T28834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.799442][T28836] loop2: detected capacity change from 0 to 4096 [ 1048.832783][T28834] EXT4-fs error (device loop5): ext4_get_first_dir_block:3561: inode #11: comm syz.5.9464: directory missing '..' [ 1048.849965][T28836] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1048.935580][T28836] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1048.965674][T27561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.969921][T28836] ntfs3(loop2): Failed to load $Extend (-22). [ 1048.990845][T28836] ntfs3(loop2): Failed to initialize $Extend. [ 1050.708182][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.726223][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.741320][ T2988] bond0 (unregistering): Released all slaves [ 1050.927442][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.940419][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.952353][ T2988] bond0 (unregistering): Released all slaves [ 1051.100372][ T2988] bond0 (unregistering): Released all slaves [ 1051.113865][ T2988] bond1 (unregistering): Released all slaves [ 1051.295196][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.310481][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.321952][ T2988] bond0 (unregistering): Released all slaves [ 1051.494592][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.515539][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.528608][ T2988] bond0 (unregistering): Released all slaves [ 1051.682418][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.697196][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.709401][ T2988] bond0 (unregistering): Released all slaves [ 1051.801912][T28802] netlink: 'syz.7.9450': attribute type 7 has an invalid length. [ 1051.839746][T28802] netlink: 'syz.7.9450': attribute type 8 has an invalid length. [ 1051.855661][T28843] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9468'. [ 1051.882214][T28843] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9468'. [ 1052.211177][T28245] veth0_vlan: entered promiscuous mode [ 1052.288936][T28245] veth1_vlan: entered promiscuous mode [ 1052.344476][T28867] loop8: detected capacity change from 0 to 256 [ 1052.442344][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9480'. [ 1052.467304][T28245] veth0_macvtap: entered promiscuous mode [ 1052.538182][T28245] veth1_macvtap: entered promiscuous mode [ 1052.578995][T28867] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1052.654475][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.706680][T28878] loop2: detected capacity change from 0 to 4096 [ 1052.729846][T28878] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1052.754165][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.798327][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.849916][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.890657][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.901412][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.911550][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.924197][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.936796][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.948050][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.958241][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.976950][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.988089][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.998691][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.008655][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.072294][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.107097][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.159813][T28878] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1053.159931][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.177054][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.193059][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.203106][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.224122][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.233987][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.266400][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.293923][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.327783][T28882] loop7: detected capacity change from 0 to 2048 [ 1053.335144][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.353084][T28882] EXT4-fs: Ignoring removed mblk_io_submit option [ 1053.372391][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.394997][T28882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1053.410014][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.426551][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.486710][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.602248][ T2988] IPVS: stopping backup sync thread 14669 ... [ 1053.611230][T28875] loop5: detected capacity change from 0 to 32768 [ 1053.618469][T28875] XFS: attr2 mount option is deprecated. [ 1053.630222][T28245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.688051][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.763122][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.773595][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.784701][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.795101][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.802244][T28875] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1053.813535][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.830345][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.841721][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.851935][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.862848][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.872776][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.935046][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.974433][T28875] XFS (loop5): Quotacheck needed: Please wait. [ 1054.002510][T28885] loop0: detected capacity change from 0 to 32768 [ 1054.026894][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.117016][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.119997][T28875] XFS (loop5): Quotacheck: Done. [ 1054.138769][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.143712][T28885] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1054.150047][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.170230][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.202875][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.266280][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.273738][T28885] XFS (loop0): Ending clean mount [ 1054.277012][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.288237][T28885] XFS (loop0): Quotacheck needed: Please wait. [ 1054.291763][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.308686][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.318601][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.329250][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.339599][T28875] XFS (loop5): syz.5.9482 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1054.417406][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.428789][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.438976][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.449630][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.474221][T28245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.516982][T28885] XFS (loop0): Quotacheck: Done. [ 1054.551241][T28245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.597035][T28245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.609015][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.624230][T27561] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1054.662969][T28245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.677618][T28245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.686927][T28245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.699540][T28245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.028592][T27762] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1055.304292][T21784] Bluetooth: hci10: command 0x0406 tx timeout [ 1055.319068][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1055.502487][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1055.567905][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 1055.618279][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1055.674394][ T9] usb 3-1: Product: syz [ 1055.678615][ T9] usb 3-1: Manufacturer: syz [ 1055.736155][ T9] usb 3-1: SerialNumber: syz [ 1055.779955][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1055.814042][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 1056.360781][T28713] r8152-cfgselector 3-1: USB disconnect, device number 109 [ 1056.663214][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.709539][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.169651][T28980] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1057.210341][T28980] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1057.540704][T28964] loop0: detected capacity change from 0 to 32768 [ 1057.580175][T28964] (syz.0.9498,28964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1057.691470][T28964] (syz.0.9498,28964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1057.793475][T28964] JBD2: Ignoring recovery information on journal [ 1057.911117][T28964] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1058.324993][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.332610][T27762] ocfs2: Unmounting device (7,0) on (node local) [ 1058.332857][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.681469][T29028] netlink: 'syz.2.9527': attribute type 1 has an invalid length. [ 1058.721786][T29028] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9527'. [ 1058.768186][T29028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9527'. [ 1058.892545][T29024] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1058.933004][T29024] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1058.980442][T29024] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1059.044318][T29024] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1059.089658][T29024] geneve3: entered promiscuous mode [ 1059.113846][T29024] geneve3: entered allmulticast mode [ 1059.159102][T29042] loop0: detected capacity change from 0 to 1024 [ 1060.033130][ T9] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1060.199776][T29029] loop7: detected capacity change from 0 to 32768 [ 1060.238361][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1060.248354][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.304418][ T9] usb 6-1: config 0 descriptor?? [ 1060.388237][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1060.524655][T29083] netlink: 'syz.8.9545': attribute type 13 has an invalid length. [ 1060.559470][T29085] loop4: detected capacity change from 0 to 256 [ 1060.653680][T29085] FAT-fs (loop4): Directory bread(block 64) failed [ 1060.661285][T29085] FAT-fs (loop4): Directory bread(block 65) failed [ 1060.674464][T29085] FAT-fs (loop4): Directory bread(block 66) failed [ 1060.743082][T29085] FAT-fs (loop4): Directory bread(block 67) failed [ 1060.776940][T29085] FAT-fs (loop4): Directory bread(block 68) failed [ 1060.791918][T29085] FAT-fs (loop4): Directory bread(block 69) failed [ 1060.821846][T29085] FAT-fs (loop4): Directory bread(block 70) failed [ 1060.839606][T29085] FAT-fs (loop4): Directory bread(block 71) failed [ 1060.846659][ T9] gspca_sunplus: reg_w_riv err -71 [ 1060.853195][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1060.864323][ T9] usb 6-1: USB disconnect, device number 102 [ 1060.881094][T29085] FAT-fs (loop4): Directory bread(block 72) failed [ 1060.896584][T29085] FAT-fs (loop4): Directory bread(block 73) failed [ 1060.919803][T29083] gretap0: refused to change device tx_queue_len [ 1060.942314][T29083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1061.030087][T29091] loop2: detected capacity change from 0 to 128 [ 1061.076712][T29085] syz.4.9546: attempt to access beyond end of device [ 1061.076712][T29085] loop4: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1061.102262][T29091] FAT-fs (loop2): Directory bread(block 162) failed [ 1061.131801][T29091] FAT-fs (loop2): Directory bread(block 163) failed [ 1061.167719][T29091] FAT-fs (loop2): Directory bread(block 164) failed [ 1061.174447][T29091] FAT-fs (loop2): Directory bread(block 165) failed [ 1061.264421][T29096] loop7: detected capacity change from 0 to 4096 [ 1061.272049][T29091] FAT-fs (loop2): Directory bread(block 166) failed [ 1061.293506][T29096] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1061.315808][T29091] FAT-fs (loop2): Directory bread(block 167) failed [ 1061.322523][T29091] FAT-fs (loop2): Directory bread(block 168) failed [ 1061.443110][T29091] FAT-fs (loop2): Directory bread(block 169) failed [ 1061.455936][T29096] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1061.527299][T29091] FAT-fs (loop2): Directory bread(block 162) failed [ 1061.580477][T29091] FAT-fs (loop2): Directory bread(block 163) failed [ 1061.609533][T29091] syz.2.9550: attempt to access beyond end of device [ 1061.609533][T29091] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1061.690491][T29091] syz.2.9550: attempt to access beyond end of device [ 1061.690491][T29091] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1061.881263][T29106] loop5: detected capacity change from 0 to 4096 [ 1061.953746][T29106] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1062.120347][T29117] loop2: detected capacity change from 0 to 512 [ 1062.203196][T29117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1062.246710][T29117] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.352615][ T47] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1062.560234][T27246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1062.621254][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 1062.790783][ T47] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1062.864373][ T47] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1062.873817][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.887831][ T47] usb 8-1: Product: syz [ 1062.892117][ T47] usb 8-1: Manufacturer: syz [ 1062.898762][ T47] usb 8-1: SerialNumber: syz [ 1062.907275][ T47] usb 8-1: config 0 descriptor?? [ 1062.916034][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1062.955276][T29107] loop4: detected capacity change from 0 to 32768 [ 1063.197163][T29107] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1063.283701][T29154] loop5: detected capacity change from 0 to 256 [ 1063.295171][ T47] gspca_zc3xx: reg_w_i err -71 [ 1063.356967][T29154] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3f264f71, utbl_chksum : 0xe619d30d) [ 1063.514237][T29154] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1063.765290][T29107] XFS (loop4): Ending clean mount [ 1064.066086][ T47] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1064.072577][ T47] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1064.109915][T28245] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1064.540203][ T47] usb 8-1: USB disconnect, device number 4 [ 1064.642909][T29173] loop8: detected capacity change from 0 to 40427 [ 1064.698007][T29173] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1064.746925][T29173] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1064.876727][T29192] CIFS mount error: No usable UNC path provided in device string! [ 1064.876727][T29192] [ 1064.897201][T29173] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1064.971762][T29192] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1065.270716][T29173] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1065.277826][T29173] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1065.703024][T29216] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1065.716063][T29214] loop5: detected capacity change from 0 to 1024 [ 1065.851261][T29214] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1065.870227][T29214] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.9590: Invalid block bitmap block 0 in block_group 0 [ 1066.002292][T29214] Quota error (device loop5): write_blk: dquota write failed [ 1066.029613][T29214] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.092721][T29228] loop0: detected capacity change from 0 to 512 [ 1066.107047][T29228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1066.126866][T29214] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.9590: Failed to acquire dquot type 0 [ 1066.160023][T29228] EXT4-fs (loop0): 1 truncate cleaned up [ 1066.222474][T29214] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.9590: Freeing blocks not in datazone - block = 0, count = 4096 [ 1066.237901][T29228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.334956][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9599'. [ 1066.356456][T29214] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.9590: Invalid inode bitmap blk 0 in block_group 0 [ 1066.372455][T27037] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1066.425032][T27037] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 0 [ 1066.460798][T29214] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 1066.484676][T29231] loop4: detected capacity change from 0 to 2048 [ 1066.506802][T29214] EXT4-fs (loop5): 1 orphan inode deleted [ 1066.599002][T27762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.664061][T29214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.880228][T29214] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1067.024616][ T2988] hsr_slave_0: left promiscuous mode [ 1067.119990][ T2988] hsr_slave_1: left promiscuous mode [ 1067.125249][T27561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.203968][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.247836][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.293554][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.340348][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.399616][ T2988] hsr_slave_0: left promiscuous mode [ 1067.478761][ T2988] hsr_slave_1: left promiscuous mode [ 1067.581211][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.591168][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.633945][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.641477][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.755096][T29235] loop2: detected capacity change from 0 to 32768 [ 1067.762388][ T2988] hsr_slave_0: left promiscuous mode [ 1067.789176][ T2988] hsr_slave_1: left promiscuous mode [ 1067.815362][T29235] (syz.2.9598,29235,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1067.881835][T29235] (syz.2.9598,29235,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1067.919679][ T2988] hsr_slave_0: left promiscuous mode [ 1067.949394][T29271] loop0: detected capacity change from 0 to 22 [ 1067.967121][ T2988] hsr_slave_1: left promiscuous mode [ 1067.979098][T29235] JBD2: Ignoring recovery information on journal [ 1067.992955][T29241] loop7: detected capacity change from 0 to 32768 [ 1068.000824][T29271] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1068.001685][T29241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9601 (29241) [ 1068.026145][T29241] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.039231][T29241] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 1068.040751][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.047837][T29241] BTRFS info (device loop7): using free-space-tree [ 1068.104106][T29271] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1068.118105][T29235] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1068.150409][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.190307][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.236711][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.439971][T29294] loop0: detected capacity change from 0 to 64 [ 1068.485999][T27739] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.519258][T29294] syz.0.9612: attempt to access beyond end of device [ 1068.519258][T29294] loop0: rw=0, sector=32783, nr_sectors = 1 limit=64 [ 1068.546331][ T2988] hsr_slave_0: left promiscuous mode [ 1068.583017][ T2988] hsr_slave_1: left promiscuous mode [ 1068.596397][T27246] ocfs2: Unmounting device (7,2) on (node local) [ 1068.632757][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.652651][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.674205][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.723840][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.863719][ T2988] hsr_slave_0: left promiscuous mode [ 1068.915320][ T2988] hsr_slave_1: left promiscuous mode [ 1068.954761][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.971925][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.028229][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.039108][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.132025][ T5832] Bluetooth: hci10: unexpected event for opcode 0x0c14 [ 1069.322097][T29304] openvswitch: netlink: IP tunnel TTL not specified. [ 1069.539666][T29310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1069.682156][ T2988] veth1_macvtap: left promiscuous mode [ 1069.717417][ T2988] veth0_macvtap: left promiscuous mode [ 1069.723351][ T2988] veth1_vlan: left promiscuous mode [ 1069.738863][ T2988] veth0_vlan: left promiscuous mode [ 1069.790168][ T2988] veth1_macvtap: left promiscuous mode [ 1069.795915][ T2988] veth0_macvtap: left promiscuous mode [ 1069.801547][ T2988] veth1_vlan: left promiscuous mode [ 1069.813899][ T2988] veth0_vlan: left promiscuous mode [ 1069.851482][ T2988] veth1_macvtap: left promiscuous mode [ 1069.867773][ T2988] veth0_macvtap: left promiscuous mode [ 1069.873487][ T2988] veth1_vlan: left promiscuous mode [ 1069.900742][ T2988] veth0_vlan: left promiscuous mode [ 1069.915807][ T2988] veth1_macvtap: left promiscuous mode [ 1069.925718][ T2988] veth0_macvtap: left promiscuous mode [ 1069.942538][ T2988] veth1_vlan: left promiscuous mode [ 1069.942649][ T2988] veth0_vlan: left promiscuous mode [ 1069.948501][ T2988] veth1_macvtap: left promiscuous mode [ 1069.948599][ T2988] veth0_macvtap: left promiscuous mode [ 1069.948734][ T2988] veth1_vlan: left promiscuous mode [ 1069.949782][ T2988] veth0_vlan: left promiscuous mode [ 1069.953503][ T2988] veth1_macvtap: left promiscuous mode [ 1069.953573][ T2988] veth0_macvtap: left promiscuous mode [ 1069.953705][ T2988] veth1_vlan: left promiscuous mode [ 1069.953807][ T2988] veth0_vlan: left promiscuous mode [ 1070.364649][T29326] loop2: detected capacity change from 0 to 4096 [ 1070.390018][T29326] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1070.436943][T29326] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1070.670501][ T2988] infiniband sz1: set down [ 1071.726771][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1071.818915][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1073.103407][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1073.180240][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1075.356317][ T64] smc: removing ib device sz1 [ 1076.091654][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1076.171538][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1077.528623][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1077.590729][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1078.778069][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1078.844671][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1079.572902][T29249] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9593'. [ 1079.582022][T29249] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9593'. [ 1079.646775][ T9] dummy0 speed is unknown, defaulting to 1000 [ 1079.653888][T28713] C! speed is unknown, defaulting to 1000 [ 1079.672677][ T9] infiniband syz0: ib_query_port failed (-19) [ 1079.897878][T29344] loop4: detected capacity change from 0 to 8 [ 1080.029061][T29351] netlink: 'syz.0.9634': attribute type 1 has an invalid length. [ 1080.802345][T27448] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1081.102917][T27448] usb 3-1: Using ep0 maxpacket: 8 [ 1081.235058][T27448] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1081.331709][T27448] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1081.393615][T27448] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1081.497094][T27448] usb 3-1: Product: syz [ 1081.501765][T27448] usb 3-1: Manufacturer: syz [ 1081.506390][T27448] usb 3-1: SerialNumber: syz [ 1081.529273][T29404] tmpfs: Bad value for 'mpol' [ 1081.875636][T29417] loop0: detected capacity change from 0 to 256 [ 1081.882793][T29417] exfat: Deprecated parameter 'namecase' [ 1081.917878][T29417] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1082.008689][T29417] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 1082.069315][T29421] loop4: detected capacity change from 0 to 2048 [ 1082.149998][T29421] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1082.193610][T29421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.223783][T27448] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1082.231662][T27448] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1082.330780][T27448] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1082.462917][T27448] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1082.495643][T27448] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1082.497291][T28245] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1367 (mode 120777) has inode size 157 different from extent length 512. Filesystem need not be standards compliant. [ 1082.533237][T27448] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1082.558597][ T5140] Bluetooth: hci11: command 0x0406 tx timeout [ 1082.601007][T27448] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1082.632879][T27448] usb 3-1: USB disconnect, device number 110 [ 1082.645583][T27448] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1082.766384][T27448] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1082.844522][T27448] visor 3-1:1.0: device disconnected [ 1083.165497][T29449] tmpfs: Group quota inode hardlimit too large. [ 1083.289379][T29437] loop4: detected capacity change from 0 to 8192 [ 1083.311873][T29405] loop7: detected capacity change from 0 to 32768 [ 1083.337883][T29405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9655 (29405) [ 1083.406543][T29405] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1083.417100][T29405] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 1083.425718][T29405] BTRFS info (device loop7): using free-space-tree [ 1083.865169][T29480] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1084.509903][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9683'. [ 1084.607879][T27739] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1084.927968][T29524] loop8: detected capacity change from 0 to 512 [ 1084.949786][T29525] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1085.269891][T29539] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1085.291788][T29539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9699'. [ 1085.367261][T29524] Quota error (device loop8): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 1085.399553][T29539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1085.420403][T29524] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1085.430384][T29524] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.9690: Failed to acquire dquot type 1 [ 1085.478074][T29546] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.549012][T29548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9698'. [ 1085.569762][T29524] EXT4-fs (loop8): 1 truncate cleaned up [ 1085.587254][T29524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.609650][T29524] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.755125][T29524] Quota error (device loop8): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 1085.783378][T29552] netlink: 'syz.5.9702': attribute type 4 has an invalid length. [ 1085.857160][T29524] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1086.061310][T29524] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.9690: Failed to acquire dquot type 1 [ 1086.063375][T29534] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1086.114982][T29561] binder: 29560:29561 ioctl c00c6211 9999999999999999 returned -14 [ 1086.156812][T29563] loop0: detected capacity change from 0 to 8 [ 1086.524538][T29571] loop2: detected capacity change from 0 to 512 [ 1086.586545][T28025] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.741074][T29575] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1087.062183][ T29] audit: type=1326 audit(2000000391.764:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.7.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1087.151015][T29571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1087.183719][ T29] audit: type=1326 audit(2000000391.792:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.7.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1087.224718][ T29] audit: type=1326 audit(2000000391.820:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.7.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1087.247811][ T29] audit: type=1326 audit(2000000391.820:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.7.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1087.270859][ T29] audit: type=1326 audit(2000000391.820:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29591 comm="syz.7.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1087.302958][T29571] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.696003][T29605] loop8: detected capacity change from 0 to 1024 [ 1087.932220][T14248] hfsplus: b-tree write err: -5, ino 4 [ 1088.079009][T27246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1090.050815][T29699] loop5: detected capacity change from 0 to 64 [ 1090.615267][T29715] netlink: 'syz.7.9764': attribute type 32 has an invalid length. [ 1090.662955][T29718] loop2: detected capacity change from 0 to 1024 [ 1090.775594][T29722] loop5: detected capacity change from 0 to 2048 [ 1090.871417][T29722] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1090.909444][T27535] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1091.082219][T27535] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 1091.104446][T29730] kAFS: unparsable volume name [ 1091.110829][T27535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.237208][T27535] usb 5-1: config 0 descriptor?? [ 1091.478508][T29742] loop2: detected capacity change from 0 to 2048 [ 1091.564861][T29747] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1091.582018][T29742] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1091.726857][T27535] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1091.735351][T27535] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 1091.769934][T29742] Remounting filesystem read-only [ 1091.776375][T27535] usb 5-1: USB disconnect, device number 88 [ 1091.835216][T29744] netlink: set zone limit has 4 unknown bytes [ 1092.288021][T29773] netlink: 'syz.2.9782': attribute type 13 has an invalid length. [ 1092.334928][T29773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9782'. [ 1092.420412][T29773] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 1092.640338][T29785] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9792'. [ 1092.701837][T29789] loop7: detected capacity change from 0 to 1024 [ 1093.163694][T29804] loop7: detected capacity change from 0 to 512 [ 1093.276812][T29804] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1093.302586][T29806] loop8: detected capacity change from 0 to 2048 [ 1093.321657][T29804] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1093.377718][T29804] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1093.415863][T29804] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1093.431000][T28713] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1093.462412][T29804] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1093.468379][T29806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.471456][T29804] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9797: bg 0: block 40: padding at end of block bitmap is not set [ 1093.501147][T29804] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1093.527491][T21784] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0 [ 1093.537974][T21784] Bluetooth: hci13: Injecting HCI hardware error event [ 1093.550596][T21784] Bluetooth: hci13: hardware error 0x00 [ 1093.578423][T29804] EXT4-fs (loop7): 1 truncate cleaned up [ 1093.585198][T29804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1093.590208][T29806] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1093.615327][T28713] usb 5-1: Using ep0 maxpacket: 8 [ 1093.901167][T28025] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.014681][T28713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1094.021336][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.026056][T28713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1094.045077][T28713] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1094.054896][T28713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1094.066251][T28713] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1094.076342][T28713] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1094.085786][T28713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.229522][T28713] usb 5-1: config 0 descriptor?? [ 1094.235309][T29799] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.925395][ T47] usb 5-1: USB disconnect, device number 89 [ 1094.933703][T29865] loop8: detected capacity change from 0 to 128 [ 1094.936706][ T5140] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1095.114031][T29877] loop2: detected capacity change from 0 to 512 [ 1095.138073][T29865] FAT-fs (loop8): Directory bread(block 3236) failed [ 1095.155791][T29865] FAT-fs (loop8): Directory bread(block 3237) failed [ 1095.223400][T29877] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1095.225911][T29865] FAT-fs (loop8): Directory bread(block 3238) failed [ 1095.231620][T29877] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1095.240331][T29865] FAT-fs (loop8): Directory bread(block 3239) failed [ 1095.331186][T29865] FAT-fs (loop8): Directory bread(block 3240) failed [ 1095.337957][T29865] FAT-fs (loop8): Directory bread(block 3241) failed [ 1095.371054][T29877] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1095.384969][T29865] FAT-fs (loop8): Directory bread(block 3242) failed [ 1095.407782][T29877] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1095.411181][T29865] FAT-fs (loop8): Directory bread(block 3243) failed [ 1095.425039][T29877] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1095.438914][T29877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9823: bg 0: block 40: padding at end of block bitmap is not set [ 1095.477661][T29877] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1095.484036][T29865] FAT-fs (loop8): Directory bread(block 3236) failed [ 1095.494457][T29865] FAT-fs (loop8): Directory bread(block 3237) failed [ 1095.566994][T29877] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.573455][T29877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1095.903943][T29904] loop4: detected capacity change from 0 to 128 [ 1095.906285][T21784] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1095.984476][T27246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.002078][T29904] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1096.187233][T29904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.334091][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1097.902188][T29987] overlayfs: failed to resolve './file0.': -2 [ 1097.980722][T29984] VFS: could not find a valid V7 on nullb0. [ 1098.189907][T29995] loop7: detected capacity change from 0 to 512 [ 1098.267099][T29995] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.9866: invalid block [ 1098.418253][T29995] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9866: invalid indirect mapped block 4294967295 (level 1) [ 1098.550623][T29995] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9866: invalid indirect mapped block 4294967295 (level 1) [ 1098.638360][T30013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9873'. [ 1098.643221][T29995] EXT4-fs (loop7): 2 truncates cleaned up [ 1098.680815][T29995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.700203][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9873'. [ 1098.945812][T29957] loop2: detected capacity change from 0 to 32768 [ 1098.976327][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.135292][T30038] sctp: [Deprecated]: syz.8.9881 (pid 30038) Use of int in maxseg socket option. [ 1099.135292][T30038] Use struct sctp_assoc_value instead [ 1099.137990][ T5140] Bluetooth: hci14: command 0x0406 tx timeout [ 1099.256596][T30032] loop4: detected capacity change from 0 to 64 [ 1099.263615][T29957] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1099.405603][T29957] XFS (loop2): Quotacheck needed: Please wait. [ 1099.629114][T27448] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 1099.658809][T27448] XFS (loop2): Unmount and run xfs_repair [ 1099.713502][T27448] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1099.776355][T27448] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 1099.828306][T27448] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 1099.861717][T27448] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1099.870665][T27448] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 1099.938549][T27448] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1099.955751][T30066] ksmbd: Unknown IPC event: 1, ignore. [ 1099.979363][T28713] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1099.982512][T27448] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1100.075601][T27448] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 1100.084517][T27448] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1100.128074][ T3520] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 1100.194549][T28713] usb 5-1: Using ep0 maxpacket: 16 [ 1100.204609][T28713] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1100.213697][T28713] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1100.265073][ T3520] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1100.310634][T28713] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1100.319433][T28713] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1100.358395][ T3520] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1100.389301][T28713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1100.470970][T28713] usb 5-1: config 0 has no interface number 0 [ 1100.477136][T28713] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1100.493888][T29957] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1100.563702][T28713] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1100.573900][ T29] audit: type=1326 audit(1042.162:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30086 comm="syz.7.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1100.595858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.630267][T28713] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1100.688016][ T29] audit: type=1326 audit(1042.172:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30086 comm="syz.7.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1100.710241][T28713] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.724610][T27246] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1100.757950][T28713] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1100.768839][T28713] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1100.806410][ T29] audit: type=1326 audit(1042.172:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30086 comm="syz.7.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1100.828748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.877728][T28713] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1100.887909][T28713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.903158][T28713] usb 5-1: Product: syz [ 1100.907387][T28713] usb 5-1: Manufacturer: syz [ 1100.920470][T28713] usb 5-1: SerialNumber: syz [ 1100.943384][T28713] usb 5-1: config 0 descriptor?? [ 1100.955513][ T29] audit: type=1326 audit(1042.172:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30086 comm="syz.7.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c985d29 code=0x7ffc0000 [ 1100.982606][T28713] usb 5-1: selecting invalid altsetting 2 [ 1101.045398][T30098] loop0: detected capacity change from 0 to 8 [ 1101.140297][T30098] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1101.181861][T30098] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1101.221126][T30098] SQUASHFS error: Unable to read directory block [631:26] [ 1101.423965][ C0] usb 5-1: async_complete: urb error -71 [ 1101.429730][ C0] usb 5-1: async_complete: urb error -71 [ 1101.435445][ C0] usb 5-1: async_complete: urb error -71 [ 1101.458614][T28713] get_1284_register: usb error -71 [ 1101.463866][T28713] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 1101.499389][T30109] loop7: detected capacity change from 0 to 256 [ 1101.561990][T28713] usb 5-1: USB disconnect, device number 90 [ 1101.572543][T30109] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1101.665844][T30109] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1101.700992][T30109] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1101.802687][T30109] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1101.819830][ T29] audit: type=1800 audit(1043.332:168): pid=30109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.9907" name="file1" dev="loop7" ino=1048755 res=0 errno=0 [ 1101.821020][T30109] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 1101.927663][T30122] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9913'. [ 1103.246425][T30139] loop4: detected capacity change from 0 to 32768 [ 1103.374806][T30139] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 1103.374806][T30139] [ 1103.564205][T30184] loop5: detected capacity change from 0 to 128 [ 1103.571797][T30184] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1103.731678][T27535] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1104.112795][T27535] usb 3-1: Using ep0 maxpacket: 8 [ 1104.159744][T30209] loop0: detected capacity change from 0 to 1024 [ 1104.167399][T30209] hfsplus: Bad value for 'uid' [ 1104.184352][T30209] nfs4: Deprecated parameter 'intr' [ 1104.290413][T30211] gretap0: entered promiscuous mode [ 1104.338424][T27535] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.348843][T27535] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.362084][T27535] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1104.372451][T27535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.468583][T27535] usbtmc 3-1:16.0: bulk endpoints not found [ 1104.596249][T30211] netlink: 'syz.5.9944': attribute type 2 has an invalid length. [ 1104.618960][T30211] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1104.653238][T30200] loop8: detected capacity change from 0 to 32768 [ 1104.704968][T30200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.9942 (30200) [ 1104.981487][T30200] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1105.018997][T30200] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 1105.057861][T30200] BTRFS info (device loop8): using free-space-tree [ 1105.063578][T30229] loop0: detected capacity change from 0 to 64 [ 1105.080824][T30231] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9952'. [ 1105.208066][T30236] netlink: 'syz.5.9955': attribute type 8 has an invalid length. [ 1106.017433][T28025] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1106.915617][ T5894] usb 3-1: USB disconnect, device number 111 [ 1107.316976][T30321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.366764][T30321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9979'. [ 1107.704357][T30330] loop7: detected capacity change from 0 to 1764 [ 1107.926004][T30330] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1108.393334][T30355] netlink: 'syz.7.9994': attribute type 13 has an invalid length. [ 1108.452257][T30355] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9994'. [ 1108.512243][T30355] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 1108.702877][T30309] loop4: detected capacity change from 0 to 32768 [ 1108.724387][T25059] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1108.910806][T25059] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1108.926425][T25059] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1108.999162][T25059] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1109.008778][T25059] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.045131][T25059] usb 9-1: Product: syz [ 1109.049368][T25059] usb 9-1: Manufacturer: syz [ 1109.053990][T25059] usb 9-1: SerialNumber: syz [ 1109.096770][T25059] usb 9-1: config 0 descriptor?? [ 1109.108238][T25059] usb 9-1: selecting invalid altsetting 0 [ 1109.410720][T27535] usb 9-1: USB disconnect, device number 3 [ 1109.758654][T30396] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1110.215726][T30408] netlink: 'syz.4.10013': attribute type 1 has an invalid length. [ 1110.263750][T30408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10013'. [ 1110.263790][T30411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10015'. [ 1110.532399][T30380] loop2: detected capacity change from 0 to 32768 [ 1110.552617][T30383] loop5: detected capacity change from 0 to 32768 [ 1110.787443][T30420] loop0: detected capacity change from 0 to 512 [ 1110.800334][T30380] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 1110.800334][T30380] [ 1110.991559][T30380] ERROR: (device loop2): remounting filesystem as read-only [ 1111.022667][T30380] xtLookup: xtSearch returned -5 [ 1111.154254][T30420] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.10016: bad orphan inode 655360 [ 1111.191665][T30420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1111.768010][T30467] loop7: detected capacity change from 0 to 764 [ 1111.803920][T27762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1111.911179][T27535] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1112.069817][T30474] Cannot find add_set index 0 as target [ 1112.126833][T27535] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 1112.136463][T27535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.198933][T27535] usb 5-1: Product: syz [ 1112.203165][T27535] usb 5-1: Manufacturer: syz [ 1112.207783][T27535] usb 5-1: SerialNumber: syz [ 1112.266196][T27535] usb 5-1: config 0 descriptor?? [ 1112.320004][T27535] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1112.402647][T30483] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10041'. [ 1112.560921][T30491] loop8: detected capacity change from 0 to 256 [ 1112.697754][T27535] usb 5-1: USB disconnect, device number 91 [ 1112.763734][T30491] FAT-fs (loop8): Directory bread(block 64) failed [ 1112.795391][T30491] FAT-fs (loop8): Directory bread(block 65) failed [ 1112.848913][T30491] FAT-fs (loop8): Directory bread(block 66) failed [ 1112.872226][T30491] FAT-fs (loop8): Directory bread(block 67) failed [ 1112.883135][T30491] FAT-fs (loop8): Directory bread(block 68) failed [ 1112.889704][T30491] FAT-fs (loop8): Directory bread(block 69) failed [ 1112.949399][T30491] FAT-fs (loop8): Directory bread(block 70) failed [ 1112.956037][T30491] FAT-fs (loop8): Directory bread(block 71) failed [ 1112.983143][T30491] FAT-fs (loop8): Directory bread(block 72) failed [ 1113.017398][T30491] FAT-fs (loop8): Directory bread(block 73) failed [ 1113.118057][T30510] openvswitch: netlink: Flow key attr not present in new flow. [ 1113.338207][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.345843][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.552712][T30530] loop5: detected capacity change from 0 to 256 [ 1113.571393][T30529] loop0: detected capacity change from 0 to 8 [ 1113.804115][T30524] loop2: detected capacity change from 0 to 8 [ 1113.888458][T28713] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1113.940803][T30524] SQUASHFS error: xz decompression failed, data probably corrupt [ 1113.995090][T30524] SQUASHFS error: Failed to read block 0x108: -5 [ 1114.026767][T30524] SQUASHFS error: Unable to read metadata cache entry [106] [ 1114.063099][T30524] SQUASHFS error: Unable to read inode 0x11f [ 1114.086616][T28713] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 1114.117749][T28713] usb 5-1: config 0 has no interface number 0 [ 1114.168736][T28713] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1114.294602][T28713] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1114.379983][T28713] usb 5-1: config 0 interface 153 has no altsetting 0 [ 1114.413977][T28713] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1114.457591][T28713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.475638][T28713] usb 5-1: Product: syz [ 1114.479833][T28713] usb 5-1: Manufacturer: syz [ 1114.484445][T28713] usb 5-1: SerialNumber: syz [ 1114.513348][T28713] usb 5-1: config 0 descriptor?? [ 1114.552254][T28713] hub 5-1:0.153: bad descriptor, ignoring hub [ 1114.558404][T28713] hub 5-1:0.153: probe with driver hub failed with error -5 [ 1114.580483][T28713] sierra 5-1:0.153: Sierra USB modem converter detected [ 1114.659942][T27448] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1114.721772][ T5894] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1114.790052][T30572] loop0: detected capacity change from 0 to 256 [ 1114.800158][T28713] usb 5-1: USB disconnect, device number 92 [ 1114.806557][T28713] sierra 5-1:0.153: device disconnected [ 1114.841938][T30570] loop8: detected capacity change from 0 to 256 [ 1114.910521][T30572] exfat: Deprecated parameter 'utf8' [ 1114.946633][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1114.972069][ T5894] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 1114.983739][T30570] FAT-fs (loop8): Directory bread(block 64) failed [ 1115.003284][T30570] FAT-fs (loop8): Directory bread(block 65) failed [ 1115.026780][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 1115.053159][T30570] FAT-fs (loop8): Directory bread(block 66) failed [ 1115.059752][T30570] FAT-fs (loop8): Directory bread(block 67) failed [ 1115.082869][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 38305, setting to 1024 [ 1115.090765][T27448] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.108004][T27448] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1115.117233][T30570] FAT-fs (loop8): Directory bread(block 68) failed [ 1115.117282][T30570] FAT-fs (loop8): Directory bread(block 69) failed [ 1115.117365][T30570] FAT-fs (loop8): Directory bread(block 70) failed [ 1115.117403][T30570] FAT-fs (loop8): Directory bread(block 71) failed [ 1115.117481][T30570] FAT-fs (loop8): Directory bread(block 72) failed [ 1115.117520][T30570] FAT-fs (loop8): Directory bread(block 73) failed [ 1115.123991][T27448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.140844][ T5894] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1115.158413][T30572] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1115.223151][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1115.239722][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1115.249220][ T5894] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1115.260155][ T5894] usb 3-1: Manufacturer: syz [ 1115.272643][ T5894] usb 3-1: config 0 descriptor?? [ 1115.289496][T30524] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1115.585565][T27535] usb 3-1: USB disconnect, device number 112 [ 1115.646158][T27448] ath6kl: Failed to read usb control message: -71 [ 1115.653382][T27448] ath6kl: Unable to read the bmi data from the device: -71 [ 1115.685894][T27448] ath6kl: Unable to recv target info: -71 [ 1115.712859][T27448] ath6kl: Failed to init ath6kl core: -71 [ 1115.758962][T27448] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1115.802221][T27448] usb 6-1: USB disconnect, device number 103 [ 1115.968906][T30599] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0 [ 1116.334440][T30609] netlink: 'syz.4.10087': attribute type 2 has an invalid length. [ 1116.673270][T30587] loop7: detected capacity change from 0 to 32768 [ 1116.878643][T30638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10099'. [ 1116.887967][T30638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10099'. [ 1116.962155][T30641] loop2: detected capacity change from 0 to 16 [ 1116.997465][T30587] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=lz4,degraded,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1117.032198][T30641] erofs (device loop2): mounted with root inode @ nid 36. [ 1117.037477][T30647] loop5: detected capacity change from 0 to 512 [ 1117.039996][T30644] cgroup: none used incorrectly [ 1117.091882][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10098'. [ 1117.113062][T30587] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1117.124609][T30647] EXT4-fs: Ignoring removed bh option [ 1117.144893][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10098'. [ 1117.155545][T30587] bcachefs (loop7): Version upgrade required: [ 1117.155545][T30587] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1117.155545][T30587] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 1117.155545][T30587] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1117.338634][T30647] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz.5.10096: invalid block [ 1117.405830][T30653] ubi0: attaching mtd0 [ 1117.414616][T30653] ubi0: scanning is finished [ 1117.431751][T30647] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.10096: couldn't read orphan inode 15 (err -117) [ 1117.444343][T30587] bcachefs (loop7): dropping and reconstructing all alloc info [ 1117.457441][T30653] ubi0: empty MTD device detected [ 1117.493575][T30587] bcachefs (loop7): accounting_read... [ 1117.527481][ T29] audit: type=1326 audit(1057.980:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.2.10104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7809185d29 code=0x7ffc0000 [ 1117.528310][T30587] done [ 1117.533195][ T29] audit: type=1326 audit(1057.989:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.2.10104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7809185d29 code=0x7ffc0000 [ 1117.580194][ T29] audit: type=1326 audit(1057.989:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.2.10104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7809185d29 code=0x7ffc0000 [ 1117.602469][ T29] audit: type=1326 audit(1057.989:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.2.10104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7809185d29 code=0x7ffc0000 [ 1117.625146][ T29] audit: type=1326 audit(1057.989:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.2.10104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7809185d29 code=0x7ffc0000 [ 1117.650276][T30647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.712567][T30587] bcachefs (loop7): alloc_read... done [ 1117.727895][T27561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.757527][T30587] bcachefs (loop7): stripes_read... done [ 1117.763572][T30587] bcachefs (loop7): snapshots_read... done [ 1117.776640][T30587] bcachefs (loop7): check_allocations... done [ 1117.879431][T30587] bcachefs (loop7): going read-write [ 1117.898801][T30587] bcachefs (loop7): done starting filesystem [ 1117.907364][T30653] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1118.016920][T30653] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1118.025591][T30587] bcachefs (loop7): going read-only [ 1118.030831][T30587] bcachefs (loop7): finished waiting for writes to stop [ 1118.081728][T30653] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1118.088850][T30653] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1118.096642][T30653] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1118.112369][T30629] loop8: detected capacity change from 0 to 32768 [ 1118.115754][T30653] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1118.127122][T30653] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1500707239 [ 1118.143477][T30653] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1118.174786][T30663] ubi0: background thread "ubi_bgt0d" started, PID 30663 [ 1118.300949][T30587] bcachefs (loop7): flushing journal and stopping allocators, journal seq 10 [ 1118.341306][T30587] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 10 [ 1118.437206][T30587] bcachefs (loop7): unshutdown complete, journal seq 11 [ 1118.495463][T30587] bcachefs (loop7): done going read-only, filesystem not clean [ 1118.564018][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10116'. [ 1118.624130][T30684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10116'. [ 1118.642737][T30686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10114'. [ 1118.670725][T27739] bcachefs (loop7): shutting down [ 1118.690919][T30686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10114'. [ 1118.786672][T30686] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10114'. [ 1118.799012][T30686] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1118.851067][T27739] bcachefs (loop7): shutdown complete [ 1118.869974][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10119'. [ 1119.087479][T30700] x_tables: duplicate underflow at hook 1 [ 1119.337371][T30710] loop0: detected capacity change from 0 to 256 [ 1119.379331][T30710] exfat: Deprecated parameter 'utf8' [ 1119.400216][T30710] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1120.433462][T30753] SET target dimension over the limit! [ 1120.459215][T30756] loop4: detected capacity change from 0 to 2048 [ 1120.586332][T30756] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1120.648240][T30764] loop0: detected capacity change from 0 to 256 [ 1120.685077][T30756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1120.778617][T30768] loop2: detected capacity change from 0 to 736 [ 1120.956106][T30764] FAT-fs (loop0): Directory bread(block 64) failed [ 1120.962716][T30764] FAT-fs (loop0): Directory bread(block 65) failed [ 1120.986026][T30764] FAT-fs (loop0): Directory bread(block 66) failed [ 1121.018838][T30764] FAT-fs (loop0): Directory bread(block 67) failed [ 1121.025548][T30764] FAT-fs (loop0): Directory bread(block 68) failed [ 1121.068282][T30764] FAT-fs (loop0): Directory bread(block 69) failed [ 1121.076948][T30764] FAT-fs (loop0): Directory bread(block 70) failed [ 1121.083919][T30764] FAT-fs (loop0): Directory bread(block 71) failed [ 1121.090619][T30764] FAT-fs (loop0): Directory bread(block 72) failed [ 1121.097347][T30764] FAT-fs (loop0): Directory bread(block 73) failed [ 1121.237491][T30781] ebt_limit: overflow, try lower: 570423552/2483027968 [ 1121.274199][T30768] rock: directory entry would overflow storage [ 1121.317141][T30768] rock: sig=0x3b10, size=4, remaining=3 [ 1121.830837][T27448] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1121.867879][T25059] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1121.893880][ T29] audit: type=1326 audit(1062.077:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.8.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa337b85d29 code=0x7ffc0000 [ 1121.916701][ T29] audit: type=1326 audit(1062.077:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.8.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa337b85d29 code=0x7ffc0000 [ 1121.944949][ T29] audit: type=1326 audit(1062.077:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.8.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fa337b85d29 code=0x7ffc0000 [ 1121.967404][ T29] audit: type=1326 audit(1062.077:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.8.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa337b85d29 code=0x7ffc0000 [ 1121.989876][ T29] audit: type=1326 audit(1062.077:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30806 comm="syz.8.10161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa337b85d29 code=0x7ffc0000 [ 1122.042944][T27448] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1122.053656][T27448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.135355][T27448] usb 6-1: config 0 descriptor?? [ 1122.146161][T30812] loop4: detected capacity change from 0 to 1024 [ 1122.232802][T27448] cp210x 6-1:0.0: cp210x converter detected [ 1122.238554][T30812] hfsplus: bad catalog entry type [ 1122.264254][T25059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1122.284953][T25059] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1122.354622][T25059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1122.369420][T25059] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1122.381311][T25059] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1122.440578][T25059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.496123][T25059] usb 1-1: config 0 descriptor?? [ 1122.664052][T27448] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1122.672979][T27448] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1122.697409][T27448] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1122.707520][T30823] x_tables: duplicate underflow at hook 4 [ 1122.741008][T25059] hdpvr 1-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL [ 1122.741290][T27448] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1122.906545][T27448] usb 6-1: USB disconnect, device number 104 [ 1122.927255][T27448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1122.948506][T27448] cp210x 6-1:0.0: device disconnected [ 1122.956938][T25059] hdpvr 1-1:0.0: device init failed [ 1122.964300][T25059] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1123.015123][T25059] usb 1-1: USB disconnect, device number 106 [ 1123.124207][T30832] __nla_validate_parse: 2 callbacks suppressed [ 1123.124233][T30832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10171'. [ 1123.140275][T30832] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10171'. [ 1123.150509][T30832] netlink: 'syz.2.10171': attribute type 3 has an invalid length. [ 1123.159355][T30832] netlink: 'syz.2.10171': attribute type 2 has an invalid length. [ 1123.167688][T30832] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10171'. [ 1123.316940][ T5894] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1123.529539][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 1123.750408][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.774097][ T5894] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.808679][ T5894] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1123.826160][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.852176][ T5894] usb 9-1: config 0 descriptor?? [ 1123.869590][ T5894] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input74 [ 1124.298141][T27535] usb 9-1: USB disconnect, device number 4 [ 1124.298845][ C0] pxrc 9-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1124.320781][T30867] loop7: detected capacity change from 0 to 512 [ 1124.388228][T27448] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1124.439349][T30867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 1124.474884][T30867] System zones: 1-12 [ 1124.542540][T30867] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #11: comm syz.7.10184: iget: bogus i_mode (0) [ 1124.609004][T30867] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.10184: couldn't read orphan inode 11 (err -117) [ 1124.655354][T30867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.842933][T27448] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1124.852913][T27448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.863211][T27448] usb 6-1: config 0 descriptor?? [ 1124.910765][T30888] loop0: detected capacity change from 0 to 1024 [ 1124.964453][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.198795][T28068] hfsplus: b-tree write err: -5, ino 4 [ 1125.206968][T30897] loop8: detected capacity change from 0 to 512 [ 1125.291930][T30897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1125.308712][T27448] usb 6-1: Cannot set MAC address [ 1125.316978][T27448] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1125.326008][T30897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.454351][T27448] usb 6-1: USB disconnect, device number 105 [ 1125.731681][T30919] netlink: 'syz.4.10202': attribute type 9 has an invalid length. [ 1125.739913][T27535] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1125.787886][T28025] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.910301][T27535] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1125.921177][T27535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.975401][T27535] usb 1-1: Product: syz [ 1126.000271][T27535] usb 1-1: Manufacturer: syz [ 1126.027543][T27535] usb 1-1: SerialNumber: syz [ 1126.076565][T27535] usb 1-1: config 0 descriptor?? [ 1126.099058][T27535] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1126.358221][ T5140] Bluetooth: hci15: command 0x0406 tx timeout [ 1126.494632][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10209'. [ 1126.518039][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10209'. [ 1126.580984][ T5894] usb 1-1: USB disconnect, device number 107 [ 1126.653917][T30946] erspan1: entered promiscuous mode [ 1126.705774][T30946] erspan1: entered allmulticast mode [ 1126.722034][T30940] loop2: detected capacity change from 0 to 32768 [ 1126.796584][T30940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10208 (30940) [ 1126.874304][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10212'. [ 1126.956992][T30940] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1127.014708][T30940] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1127.186545][T30971] loop7: detected capacity change from 0 to 256 [ 1127.232954][T30974] x_tables: unsorted entry at hook 3 [ 1127.411402][T30981] netlink: 'syz.8.10217': attribute type 11 has an invalid length. [ 1127.481202][T30940] BTRFS info (device loop2): rebuilding free space tree [ 1127.619099][T30940] BTRFS info (device loop2): disabling free space tree [ 1127.668500][T30940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1127.680328][T30940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1127.768544][T30993] loop7: detected capacity change from 0 to 256 [ 1127.798881][T30993] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1127.996477][T31003] bridge2: entered promiscuous mode [ 1128.065284][T31003] bridge2: entered allmulticast mode [ 1128.181592][T27246] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1128.626726][T31027] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1128.629818][T31023] loop0: detected capacity change from 0 to 4096 [ 1128.650384][T31023] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1128.678988][T31023] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1128.797039][T31032] loop7: detected capacity change from 0 to 16 [ 1128.903622][T31032] erofs (device loop7): mounted with root inode @ nid 36. [ 1129.284485][T31045] futex_wake_op: syz.5.10239 tries to shift op by -1; fix this program [ 1129.332491][T31041] loop4: detected capacity change from 0 to 4096 [ 1129.357266][T31047] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1129.402870][T31041] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1129.485092][T31052] loop7: detected capacity change from 0 to 1024 [ 1129.557284][T31047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1129.983796][T31065] loop5: detected capacity change from 0 to 1024 [ 1130.098320][T31065] hfsplus: extend alloc file! (16384,256,150995124) [ 1130.212834][T31076] loop2: detected capacity change from 0 to 256 [ 1130.364787][T31076] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1130.406164][T31083] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1130.757667][T31091] netlink: 'syz.0.10256': attribute type 12 has an invalid length. [ 1131.914638][T31133] raw_sendmsg: syz.2.10271 forgot to set AF_INET. Fix it! [ 1131.959897][T31094] loop8: detected capacity change from 0 to 32768 [ 1131.970484][ T29] audit: type=1326 audit(1071.534:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31125 comm="syz.0.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1132.048757][ T29] audit: type=1326 audit(1071.534:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31125 comm="syz.0.10269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9373985d29 code=0x7ffc0000 [ 1132.120353][T31094] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1132.156365][T31140] geneve2: entered promiscuous mode [ 1132.168632][T31140] geneve2: entered allmulticast mode [ 1132.421072][T31155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.844702][T31094] XFS (loop8): Ending clean mount [ 1132.886516][T31094] XFS (loop8): Quotacheck needed: Please wait. [ 1133.015649][T31169] IPv6: Can't replace route, no match found [ 1133.054200][T31173] loop4: detected capacity change from 0 to 128 [ 1133.110304][T31094] XFS (loop8): Quotacheck: Done. [ 1133.117690][ T29] audit: type=1326 audit(1072.600:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.5.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d385d29 code=0x7ffc0000 [ 1133.275902][ T29] audit: type=1326 audit(1072.600:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.5.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d385d29 code=0x7ffc0000 [ 1133.298531][ T29] audit: type=1326 audit(1072.600:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.5.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8d0d385d29 code=0x7ffc0000 [ 1133.321277][ T29] audit: type=1326 audit(1072.600:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.5.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d385d29 code=0x7ffc0000 [ 1133.345035][ T29] audit: type=1326 audit(1072.600:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.5.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d385d29 code=0x7ffc0000 [ 1133.509834][T31173] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1133.524248][T31184] loop0: detected capacity change from 0 to 2048 [ 1133.533895][T28025] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.584239][T31191] loop5: detected capacity change from 0 to 128 [ 1133.599898][T31191] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1133.633869][T31191] sysv_free_block: trying to free block not in datazone [ 1133.641524][T31191] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1133.677720][T31173] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.10284: corrupted xattr block 7: invalid header [ 1133.719320][T31195] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1133.738822][T31191] overlay: Unknown parameter '/f6ʉV5ɩUaw(Zdn8y"U"h{/+xx_Q0di4;"G_bkpM [ 1133.738822][T31191] VLYE t{' [ 1133.740878][T31195] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1133.775294][T31198] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.797946][T31184] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 1133.915458][T31184] Remounting filesystem read-only [ 1133.959195][T28245] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1133.979010][T31197] loop2: detected capacity change from 0 to 4096 [ 1134.251868][T31206] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1134.676625][T31197] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB [ 1134.846220][T31230] loop7: detected capacity change from 0 to 2048 [ 1134.862724][T25059] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1134.922788][T31228] cgroup: none used incorrectly [ 1134.992899][T31230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.071830][T25059] usb 1-1: Using ep0 maxpacket: 8 [ 1135.098021][T25059] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1135.130790][T25059] usb 1-1: config 0 has no interface number 0 [ 1135.137009][T25059] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1135.242096][T25059] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1135.291524][T25059] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 1135.338689][T25059] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 1135.385532][T25059] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1135.475768][T25059] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1135.508727][T25059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.554469][T25059] usb 1-1: Product: syz [ 1135.586688][T25059] usb 1-1: Manufacturer: syz [ 1135.609380][T31255] netlink: 'syz.5.10309': attribute type 30 has an invalid length. [ 1135.621743][T25059] usb 1-1: SerialNumber: syz [ 1135.644741][T25059] usb 1-1: config 0 descriptor?? [ 1135.740507][T31261] loop7: detected capacity change from 0 to 512 [ 1135.786992][T31261] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1135.999872][T31261] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.10314: invalid indirect mapped block 83886080 (level 1) [ 1136.019933][T31272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10319'. [ 1136.029235][T31272] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 1136.062804][T25059] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1136.172432][T31261] EXT4-fs (loop7): Remounting filesystem read-only [ 1136.188678][T31261] EXT4-fs (loop7): 1 orphan inode deleted [ 1136.194472][T31261] EXT4-fs (loop7): 1 truncate cleaned up [ 1136.291887][T31261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.391173][T27535] usb 1-1: USB disconnect, device number 108 [ 1136.723741][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.014741][T31313] program syz.7.10329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.040291][T31314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1137.482040][T31331] netlink: 'syz.0.10340': attribute type 10 has an invalid length. [ 1137.513112][T31333] netlink: 'syz.2.10336': attribute type 9 has an invalid length. [ 1137.579325][T31331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.586874][T31331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.685708][T31331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.692923][T31331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.703079][T31331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.710284][T31331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.814507][T31342] loop4: detected capacity change from 0 to 256 [ 1137.844947][T31331] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1137.895503][T31342] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1137.949724][T31342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 1138.001051][ T47] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1138.206907][T31357] loop2: detected capacity change from 0 to 64 [ 1138.241908][ T47] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 1138.250354][ T47] usb 8-1: config 0 has no interface number 0 [ 1138.293509][ T47] usb 8-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1138.346478][ T47] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1138.365430][ T47] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1138.406760][ T47] usb 8-1: Product: syz [ 1138.410984][ T47] usb 8-1: Manufacturer: syz [ 1138.461715][ T47] usb 8-1: SerialNumber: syz [ 1138.485096][ T47] usb 8-1: config 0 descriptor?? [ 1138.519452][ T47] keyspan 8-1:0.107: Keyspan 4 port adapter converter detected [ 1138.556665][ T47] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 81 [ 1138.620477][ T47] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 1 [ 1138.674904][ T47] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1138.756033][ T47] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 2 [ 1138.791821][ T47] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1138.887641][ T47] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 4 [ 1138.928928][ T47] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1138.964349][T31387] netlink: 'syz.5.10358': attribute type 1 has an invalid length. [ 1138.977406][T31386] xt_TCPMSS: Only works on TCP SYN packets [ 1138.984872][ T47] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 6 [ 1139.053941][ T47] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1139.079493][ T47] usb 8-1: USB disconnect, device number 5 [ 1139.128915][ T47] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1139.172844][ T47] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1139.192073][T31385] loop2: detected capacity change from 0 to 4096 [ 1139.246809][ T47] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1139.276778][ T47] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1139.293358][ T47] keyspan 8-1:0.107: device disconnected [ 1139.335922][T31394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1139.372158][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10360'. [ 1139.519354][T31385] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1139.545206][T27448] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1139.638394][T31404] loop7: detected capacity change from 0 to 736 [ 1139.660349][T31408] loop8: detected capacity change from 0 to 512 [ 1139.691409][T31409] loop4: detected capacity change from 0 to 128 [ 1139.744642][T27448] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 1139.768989][T31408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.773478][T31400] loop0: detected capacity change from 0 to 4096 [ 1139.814440][T27448] usb 6-1: config 0 has no interface number 0 [ 1139.828949][T27448] usb 6-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1139.879457][T31409] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1139.896262][T27448] usb 6-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1139.937967][T31409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.962507][T27448] usb 6-1: config 0 interface 153 has no altsetting 0 [ 1139.997713][T27448] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1140.021532][T27448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.064704][T27448] usb 6-1: Product: syz [ 1140.080552][T27448] usb 6-1: Manufacturer: syz [ 1140.081340][T28025] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.085190][T27448] usb 6-1: SerialNumber: syz [ 1140.103175][T27448] usb 6-1: config 0 descriptor?? [ 1140.116565][T31415] loop2: detected capacity change from 0 to 128 [ 1140.135391][T27448] hub 6-1:0.153: bad descriptor, ignoring hub [ 1140.162411][T27448] hub 6-1:0.153: probe with driver hub failed with error -5 [ 1140.240977][T27448] sierra 6-1:0.153: Sierra USB modem converter detected [ 1140.316617][T31415] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1140.344725][T31420] cgroup: No subsys list or none specified [ 1140.570624][T27448] usb 6-1: USB disconnect, device number 106 [ 1140.575557][T31434] loop0: detected capacity change from 0 to 256 [ 1140.593384][T27448] sierra 6-1:0.153: device disconnected [ 1140.622760][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10371'. [ 1140.673093][T27246] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1140.697580][T31434] FAT-fs (loop0): Directory bread(block 64) failed [ 1140.724697][T31434] FAT-fs (loop0): Directory bread(block 65) failed [ 1140.779368][T31434] FAT-fs (loop0): Directory bread(block 66) failed [ 1140.796745][T31434] FAT-fs (loop0): Directory bread(block 67) failed [ 1140.817638][T31434] FAT-fs (loop0): Directory bread(block 68) failed [ 1140.859854][T31434] FAT-fs (loop0): Directory bread(block 69) failed [ 1140.896224][T31434] FAT-fs (loop0): Directory bread(block 70) failed [ 1140.922132][T31434] FAT-fs (loop0): Directory bread(block 71) failed [ 1140.989269][T31434] FAT-fs (loop0): Directory bread(block 72) failed [ 1140.995876][T31434] FAT-fs (loop0): Directory bread(block 73) failed [ 1141.687496][T31471] QAT: failed to copy from user cfg_data. [ 1142.066176][T31485] loop0: detected capacity change from 0 to 128 [ 1142.558461][T31503] netlink: 'syz.7.10402': attribute type 2 has an invalid length. [ 1142.565831][T31504] ieee802154 phy0 wpan0: encryption failed: -22 [ 1142.611877][T31503] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.10402'. [ 1142.710972][T31500] loop4: detected capacity change from 0 to 4096 [ 1142.740633][T31510] loop8: detected capacity change from 0 to 64 [ 1142.873984][T31508] loop2: detected capacity change from 0 to 4096 [ 1142.981148][T31508] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1143.041143][T31508] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1143.705636][T31535] netlink: 'syz.0.10412': attribute type 10 has an invalid length. [ 1143.841841][T31548] loop7: detected capacity change from 0 to 1024 [ 1144.066252][T31562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10426'. [ 1144.098852][T31548] syz.7.10421: attempt to access beyond end of device [ 1144.098852][T31548] loop7: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1144.124171][T31564] loop5: detected capacity change from 0 to 1024 [ 1144.166620][T31564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.238508][T31548] Buffer I/O error on dev loop7, logical block 100663296, async page read [ 1144.250536][T31548] hfsplus: unable to mark blocks free: error -5 [ 1144.256888][T31548] hfsplus: can't free extent [ 1144.335927][T31564] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: inode #11: comm syz.5.10425: missing EA_INODE flag [ 1144.379003][T31564] EXT4-fs (loop5): Remounting filesystem read-only [ 1144.712190][T27561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.951032][T31601] loop2: detected capacity change from 0 to 512 [ 1144.995472][T31601] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.10437: casefold flag without casefold feature [ 1145.116313][T31601] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.10437: couldn't read orphan inode 15 (err -117) [ 1145.236687][T31601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.636895][T27246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.660409][T31630] snd_dummy snd_dummy.0: control 3:1:-8:syz0:3 is already present [ 1146.553883][T31670] loop2: detected capacity change from 0 to 16 [ 1146.601200][T31670] erofs (device loop2): mounted with root inode @ nid 36. [ 1146.615450][T31671] loop0: detected capacity change from 0 to 1024 [ 1146.668512][T31670] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1146.714763][T31676] openvswitch: netlink: IP tunnel TTL not specified. [ 1146.795165][T31670] erofs (device loop2): read error -117 @ 43 of nid 36 [ 1146.858704][T31680] loop7: detected capacity change from 0 to 1024 [ 1146.951080][T31684] loop4: detected capacity change from 0 to 64 [ 1147.147479][T31680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.349654][T31680] EXT4-fs error (device loop7): __ext4_new_inode:1071: comm syz.7.10471: reserved inode found cleared - inode=18 [ 1147.560584][T27739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.691693][ T5877] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1147.885713][ T5877] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 1147.905259][ T5877] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 1147.933838][ T5877] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 1147.959673][ T5877] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1147.999715][ T5877] usb 5-1: config 0 has no interface number 0 [ 1148.031454][ T5877] usb 5-1: config 0 has no interface number 1 [ 1148.044296][T27448] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1148.053738][ T5877] usb 5-1: config 0 has no interface number 2 [ 1148.086333][T31720] loop2: detected capacity change from 0 to 64 [ 1148.097435][ T5877] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.129946][ T5877] usb 5-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 1148.149853][T31720] syz.2.10486: attempt to access beyond end of device [ 1148.149853][T31720] loop2: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 1148.167050][ T5877] usb 5-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 1148.192536][T31720] Buffer I/O error on dev loop2, logical block 32767, async page read [ 1148.222929][ T5877] usb 5-1: config 0 interface 150 has no altsetting 0 [ 1148.238407][T27448] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1148.244537][ T5877] usb 5-1: config 0 interface 112 has no altsetting 0 [ 1148.259098][T27448] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.302976][ T5877] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1148.314504][T27448] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1148.328308][T31724] netlink: 'syz.5.10489': attribute type 10 has an invalid length. [ 1148.338640][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.351294][T31724] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10489'. [ 1148.361825][T27448] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1148.383524][T31724] bridge0: port 3(batadv0) entered blocking state [ 1148.396545][T27448] usb 8-1: Product: syz [ 1148.402284][ T5877] usb 5-1: config 0 descriptor?? [ 1148.418714][T31724] bridge0: port 3(batadv0) entered disabled state [ 1148.431961][T31724] batadv0: entered allmulticast mode [ 1148.435104][T27448] usb 8-1: Manufacturer: syz [ 1148.467082][T27448] hub 8-1:4.0: USB hub found [ 1148.494641][T31724] batadv0: entered promiscuous mode [ 1148.501185][T31724] bridge0: port 3(batadv0) entered blocking state [ 1148.507926][T31724] bridge0: port 3(batadv0) entered forwarding state [ 1148.707507][T27448] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1148.878753][ T5877] usb 5-1: string descriptor 0 read error: -71 [ 1148.897834][ T5877] usb 5-1: USB disconnect, device number 93 [ 1148.926663][ T3502] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1148.937355][ T3502] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1148.967219][T29334] udevd[29334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.120853][ T5894] usb 8-1: USB disconnect, device number 6 [ 1149.312848][T31722] loop0: detected capacity change from 0 to 32768 [ 1149.341442][T31722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10488 (31722) [ 1149.404232][T31722] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1149.436367][T31722] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1149.465002][T31722] BTRFS info (device loop0): using free-space-tree [ 1149.821434][T31763] [ 1149.823808][T31763] ====================================================== [ 1149.830834][T31763] WARNING: possible circular locking dependency detected [ 1149.837864][T31763] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 1149.845018][T31763] ------------------------------------------------------ [ 1149.852044][T31763] syz.5.10502/31763 is trying to acquire lock: [ 1149.858223][T31763] ffff8881437368c8 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x43f/0x900 [ 1149.868209][T31763] [ 1149.868209][T31763] but task is already holding lock: [ 1149.875585][T31763] ffff888143736278 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1149.885491][T31763] [ 1149.885491][T31763] which lock already depends on the new lock. [ 1149.885491][T31763] [ 1149.895907][T31763] [ 1149.895907][T31763] the existing dependency chain (in reverse order) is: [ 1149.904935][T31763] [ 1149.904935][T31763] -> #6 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 1149.913602][T31763] lock_acquire+0x1ed/0x550 [ 1149.918669][T31763] blk_mq_submit_bio+0x1536/0x2390 [ 1149.924338][T31763] __submit_bio+0x2c6/0x560 [ 1149.929396][T31763] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1149.935577][T31763] ocfs2_read_blocks+0x8d9/0x1600 [ 1149.941152][T31763] ocfs2_read_inode_block+0x106/0x1e0 [ 1149.947079][T31763] ocfs2_get_clusters+0x3d2/0xbd0 [ 1149.952657][T31763] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 1149.959019][T31763] ocfs2_read_virt_blocks+0x313/0xb10 [ 1149.964950][T31763] ocfs2_find_entry+0x433/0x2570 [ 1149.970526][T31763] ocfs2_find_files_on_disk+0xff/0x360 [ 1149.976538][T31763] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 1149.982723][T31763] ocfs2_get_system_file_inode+0x305/0x7b0 [ 1149.989089][T31763] ocfs2_init_global_system_inodes+0x32c/0x730 [ 1149.995803][T31763] ocfs2_fill_super+0x2f5b/0x5760 [ 1150.001381][T31763] mount_bdev+0x20c/0x2d0 [ 1150.006258][T31763] legacy_get_tree+0xf0/0x190 [ 1150.011486][T31763] vfs_get_tree+0x92/0x2b0 [ 1150.016540][T31763] do_new_mount+0x2be/0xb40 [ 1150.021593][T31763] __se_sys_mount+0x2d6/0x3c0 [ 1150.026817][T31763] do_syscall_64+0xf3/0x230 [ 1150.031860][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.038314][T31763] [ 1150.038314][T31763] -> #5 (&oi->ip_io_mutex){+.+.}-{4:4}: [ 1150.046093][T31763] lock_acquire+0x1ed/0x550 [ 1150.051142][T31763] __mutex_lock+0x1ac/0xee0 [ 1150.056209][T31763] __ocfs2_journal_access+0x4a1/0x8b0 [ 1150.062128][T31763] ocfs2_shutdown_local_alloc+0x430/0xa90 [ 1150.068418][T31763] ocfs2_dismount_volume+0x202/0x910 [ 1150.074254][T31763] generic_shutdown_super+0x13b/0x2d0 [ 1150.080187][T31763] kill_block_super+0x44/0x90 [ 1150.085414][T31763] deactivate_locked_super+0xc6/0x130 [ 1150.091343][T31763] cleanup_mnt+0x41f/0x4b0 [ 1150.096317][T31763] task_work_run+0x251/0x310 [ 1150.101460][T31763] syscall_exit_to_user_mode+0x13f/0x340 [ 1150.107637][T31763] do_syscall_64+0x100/0x230 [ 1150.112758][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.119381][T31763] [ 1150.119381][T31763] -> #4 (jbd2_handle){++++}-{0:0}: [ 1150.126710][T31763] lock_acquire+0x1ed/0x550 [ 1150.131752][T31763] start_this_handle+0x1eb4/0x2110 [ 1150.137397][T31763] jbd2__journal_start+0x2da/0x5d0 [ 1150.143041][T31763] __ext4_journal_start_sb+0x239/0x600 [ 1150.149038][T31763] ext4_dirty_inode+0x92/0x110 [ 1150.154339][T31763] __mark_inode_dirty+0x2f0/0xe90 [ 1150.159900][T31763] touch_atime+0x413/0x690 [ 1150.164859][T31763] ext4_file_mmap+0x18c/0x540 [ 1150.170066][T31763] __mmap_region+0x2250/0x2d30 [ 1150.175366][T31763] mmap_region+0x226/0x2c0 [ 1150.180322][T31763] do_mmap+0x97a/0x10d0 [ 1150.185014][T31763] vm_mmap_pgoff+0x1dd/0x3d0 [ 1150.190126][T31763] ksys_mmap_pgoff+0x4eb/0x720 [ 1150.195427][T31763] do_syscall_64+0xf3/0x230 [ 1150.200456][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.206892][T31763] [ 1150.206892][T31763] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 1150.214565][T31763] lock_acquire+0x1ed/0x550 [ 1150.219692][T31763] __might_fault+0xc6/0x120 [ 1150.224895][T31763] _copy_from_user+0x2a/0xc0 [ 1150.230032][T31763] blk_trace_setup+0xd2/0x1e0 [ 1150.235235][T31763] sg_ioctl+0xa46/0x2e80 [ 1150.240012][T31763] __se_sys_ioctl+0xf7/0x170 [ 1150.245127][T31763] do_syscall_64+0xf3/0x230 [ 1150.250157][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.256597][T31763] [ 1150.256597][T31763] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1150.264444][T31763] lock_acquire+0x1ed/0x550 [ 1150.269480][T31763] __mutex_lock+0x1ac/0xee0 [ 1150.274522][T31763] blk_mq_init_sched+0x3fa/0x830 [ 1150.279985][T31763] elevator_init_mq+0x20e/0x320 [ 1150.285447][T31763] add_disk_fwnode+0x10d/0xf80 [ 1150.290739][T31763] sd_probe+0xba6/0x1100 [ 1150.295516][T31763] really_probe+0x2ba/0xad0 [ 1150.300549][T31763] __driver_probe_device+0x1a2/0x390 [ 1150.306360][T31763] driver_probe_device+0x50/0x430 [ 1150.311917][T31763] __device_attach_driver+0x2d6/0x530 [ 1150.317822][T31763] bus_for_each_drv+0x250/0x2e0 [ 1150.323205][T31763] __device_attach_async_helper+0x22d/0x300 [ 1150.329627][T31763] async_run_entry_fn+0xaa/0x420 [ 1150.335090][T31763] process_scheduled_works+0xa68/0x1840 [ 1150.341162][T31763] worker_thread+0x870/0xd30 [ 1150.346283][T31763] kthread+0x2f2/0x390 [ 1150.351058][T31763] ret_from_fork+0x4d/0x80 [ 1150.356003][T31763] ret_from_fork_asm+0x1a/0x30 [ 1150.361295][T31763] [ 1150.361295][T31763] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1150.370201][T31763] lock_acquire+0x1ed/0x550 [ 1150.375244][T31763] blk_queue_enter+0xe1/0x600 [ 1150.380462][T31763] blk_mq_alloc_request+0x4fa/0xaa0 [ 1150.386281][T31763] scsi_execute_cmd+0x16c/0x10e0 [ 1150.391746][T31763] read_capacity_16+0x2b4/0x1450 [ 1150.397220][T31763] sd_revalidate_disk+0x1013/0xbce0 [ 1150.402953][T31763] sd_probe+0x9fa/0x1100 [ 1150.407733][T31763] really_probe+0x2ba/0xad0 [ 1150.412766][T31763] __driver_probe_device+0x1a2/0x390 [ 1150.418581][T31763] driver_probe_device+0x50/0x430 [ 1150.424138][T31763] __device_attach_driver+0x2d6/0x530 [ 1150.430042][T31763] bus_for_each_drv+0x250/0x2e0 [ 1150.435431][T31763] __device_attach_async_helper+0x22d/0x300 [ 1150.441953][T31763] async_run_entry_fn+0xaa/0x420 [ 1150.447415][T31763] process_scheduled_works+0xa68/0x1840 [ 1150.453487][T31763] worker_thread+0x870/0xd30 [ 1150.458604][T31763] kthread+0x2f2/0x390 [ 1150.463207][T31763] ret_from_fork+0x4d/0x80 [ 1150.468241][T31763] ret_from_fork_asm+0x1a/0x30 [ 1150.473532][T31763] [ 1150.473532][T31763] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 1150.481200][T31763] validate_chain+0x18ef/0x5920 [ 1150.486586][T31763] __lock_acquire+0x1397/0x2100 [ 1150.491965][T31763] lock_acquire+0x1ed/0x550 [ 1150.497025][T31763] __mutex_lock+0x1ac/0xee0 [ 1150.502085][T31763] loop_reconfigure_limits+0x43f/0x900 [ 1150.508171][T31763] lo_ioctl+0x1351/0x1f50 [ 1150.513043][T31763] blkdev_ioctl+0x57f/0x6a0 [ 1150.518083][T31763] __se_sys_ioctl+0xf7/0x170 [ 1150.523203][T31763] do_syscall_64+0xf3/0x230 [ 1150.528236][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.534671][T31763] [ 1150.534671][T31763] other info that might help us debug this: [ 1150.534671][T31763] [ 1150.545092][T31763] Chain exists of: [ 1150.545092][T31763] &q->limits_lock --> &oi->ip_io_mutex --> &q->q_usage_counter(io)#26 [ 1150.545092][T31763] [ 1150.559233][T31763] Possible unsafe locking scenario: [ 1150.559233][T31763] [ 1150.566681][T31763] CPU0 CPU1 [ 1150.572044][T31763] ---- ---- [ 1150.577409][T31763] lock(&q->q_usage_counter(io)#26); [ 1150.582841][T31763] lock(&oi->ip_io_mutex); [ 1150.589881][T31763] lock(&q->q_usage_counter(io)#26); [ 1150.597799][T31763] lock(&q->limits_lock); [ 1150.602312][T31763] [ 1150.602312][T31763] *** DEADLOCK *** [ 1150.602312][T31763] [ 1150.610536][T31763] 3 locks held by syz.5.10502/31763: [ 1150.615817][T31763] #0: ffff888025696b60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 1150.625179][T31763] #1: ffff888143736278 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1150.635413][T31763] #2: ffff8881437362b0 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1150.645911][T31763] [ 1150.645911][T31763] stack backtrace: [ 1150.651798][T31763] CPU: 1 UID: 0 PID: 31763 Comm: syz.5.10502 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1150.662648][T31763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1150.672702][T31763] Call Trace: [ 1150.675983][T31763] [ 1150.678915][T31763] dump_stack_lvl+0x241/0x360 [ 1150.683616][T31763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.688837][T31763] ? __pfx__printk+0x10/0x10 [ 1150.693444][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.699089][T31763] print_circular_bug+0x13a/0x1b0 [ 1150.704135][T31763] check_noncircular+0x36a/0x4a0 [ 1150.709093][T31763] ? __pfx_check_noncircular+0x10/0x10 [ 1150.714568][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.720213][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.725858][T31763] validate_chain+0x18ef/0x5920 [ 1150.730742][T31763] ? __pfx_validate_chain+0x10/0x10 [ 1150.735964][T31763] ? __pfx_validate_chain+0x10/0x10 [ 1150.741264][T31763] ? lockdep_unlock+0x16a/0x300 [ 1150.746122][T31763] ? __pfx_lockdep_unlock+0x10/0x10 [ 1150.751341][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.756982][T31763] ? mark_lock+0x9a/0x360 [ 1150.761325][T31763] __lock_acquire+0x1397/0x2100 [ 1150.766198][T31763] lock_acquire+0x1ed/0x550 [ 1150.770713][T31763] ? loop_reconfigure_limits+0x43f/0x900 [ 1150.776357][T31763] ? __pfx_lock_acquire+0x10/0x10 [ 1150.781390][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.787035][T31763] ? __pfx___might_resched+0x10/0x10 [ 1150.792328][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.797973][T31763] ? mark_lock+0x9a/0x360 [ 1150.802319][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.807967][T31763] __mutex_lock+0x1ac/0xee0 [ 1150.812489][T31763] ? loop_reconfigure_limits+0x43f/0x900 [ 1150.818141][T31763] ? loop_reconfigure_limits+0x43f/0x900 [ 1150.823790][T31763] ? __pfx___mutex_lock+0x10/0x10 [ 1150.828836][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.834478][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.840115][T31763] ? shmem_statfs+0x225/0x2c0 [ 1150.844815][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.850458][T31763] ? vfs_statfs+0x18e/0x2c0 [ 1150.854976][T31763] loop_reconfigure_limits+0x43f/0x900 [ 1150.860452][T31763] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 1150.866448][T31763] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1150.872359][T31763] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1150.878703][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.884343][T31763] ? finish_wait+0xd4/0x1e0 [ 1150.888855][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.894496][T31763] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 1150.900325][T31763] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1150.906413][T31763] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1150.912494][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.918136][T31763] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 1150.924050][T31763] ? lo_ioctl+0x1344/0x1f50 [ 1150.928561][T31763] lo_ioctl+0x1351/0x1f50 [ 1150.932897][T31763] ? mark_lock+0x9a/0x360 [ 1150.937242][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.942883][T31763] ? validate_chain+0x11e/0x5920 [ 1150.947839][T31763] ? __pfx_lo_ioctl+0x10/0x10 [ 1150.952528][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.958170][T31763] ? mark_lock+0x9a/0x360 [ 1150.962519][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.968160][T31763] ? __lock_acquire+0x1397/0x2100 [ 1150.973300][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.978949][T31763] ? __pfx_lock_acquire+0x10/0x10 [ 1150.983986][T31763] ? is_bpf_text_address+0x26/0x2a0 [ 1150.989201][T31763] ? __pfx_lock_release+0x10/0x10 [ 1150.994323][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.999965][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.005611][T31763] ? preempt_count_add+0x93/0x190 [ 1151.010663][T31763] ? 0xffffffffa0003d80 [ 1151.014825][T31763] ? 0xffffffffa0003d80 [ 1151.018987][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.024628][T31763] ? is_bpf_text_address+0x285/0x2a0 [ 1151.029927][T31763] ? is_bpf_text_address+0x26/0x2a0 [ 1151.035137][T31763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1151.041305][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.047038][T31763] ? kernel_text_address+0xa7/0xe0 [ 1151.052166][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.057811][T31763] ? __kernel_text_address+0xd/0x40 [ 1151.063028][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.068667][T31763] ? unwind_get_return_address+0x4d/0x90 [ 1151.074336][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.080017][T31763] ? arch_stack_walk+0xfd/0x150 [ 1151.084911][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.090563][T31763] ? stack_trace_save+0x118/0x1d0 [ 1151.096441][T31763] ? __pfx_stack_trace_save+0x10/0x10 [ 1151.101919][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.107565][T31763] ? stack_depot_save_flags+0x37/0x940 [ 1151.113041][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.118688][T31763] ? kasan_save_track+0x51/0x80 [ 1151.123553][T31763] ? kasan_save_track+0x3f/0x80 [ 1151.128426][T31763] ? kasan_save_free_info+0x40/0x50 [ 1151.133648][T31763] ? __kasan_slab_free+0x59/0x70 [ 1151.138696][T31763] ? kfree+0x196/0x430 [ 1151.142954][T31763] ? tomoyo_path_number_perm+0x679/0x860 [ 1151.148611][T31763] ? security_file_ioctl+0xc6/0x2a0 [ 1151.153831][T31763] ? __se_sys_ioctl+0x46/0x170 [ 1151.158603][T31763] ? do_syscall_64+0xf3/0x230 [ 1151.163289][T31763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.169385][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.175031][T31763] ? do_vfs_ioctl+0xf07/0x2e40 [ 1151.179812][T31763] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1151.184877][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.190572][T31763] ? mark_lock+0x9a/0x360 [ 1151.194930][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.200581][T31763] ? tomoyo_path_number_perm+0x206/0x860 [ 1151.206235][T31763] ? __pfx_lock_release+0x10/0x10 [ 1151.211273][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.216920][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.222568][T31763] ? tomoyo_path_number_perm+0x679/0x860 [ 1151.228224][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.233870][T31763] ? tomoyo_path_number_perm+0x679/0x860 [ 1151.239530][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.245170][T31763] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1151.250553][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.256206][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.261892][T31763] ? __lock_acquire+0x1397/0x2100 [ 1151.266937][T31763] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1151.272580][T31763] ? tomoyo_path_number_perm+0x206/0x860 [ 1151.278237][T31763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1151.284257][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.289905][T31763] ? file_to_blk_mode+0xcc/0x140 [ 1151.294898][T31763] ? __pfx_lo_ioctl+0x10/0x10 [ 1151.299588][T31763] blkdev_ioctl+0x57f/0x6a0 [ 1151.304102][T31763] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1151.309135][T31763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1151.314780][T31763] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1151.319810][T31763] __se_sys_ioctl+0xf7/0x170 [ 1151.324407][T31763] do_syscall_64+0xf3/0x230 [ 1151.328919][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.334836][T31763] RIP: 0033:0x7f8d0d385d29 [ 1151.339257][T31763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.358971][T31763] RSP: 002b:00007f8d0e106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.367401][T31763] RAX: ffffffffffffffda RBX: 00007f8d0d575fa0 RCX: 00007f8d0d385d29 [ 1151.375420][T31763] RDX: 0000000000000009 RSI: 0000000000004c09 RDI: 0000000000000003 [ 1151.383407][T31763] RBP: 00007f8d0d401b08 R08: 0000000000000000 R09: 0000000000000000 [ 1151.391392][T31763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.399380][T31763] R13: 0000000000000000 R14: 00007f8d0d575fa0 R15: 00007ffe5c08ff38 [ 1151.407371][T31763] [ 1151.458130][T31763] Invalid logical block size (9) [ 1151.525565][T27762] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1153.711073][ T5140] Bluetooth: hci2: command 0x0406 tx timeout