last executing test programs: 4.929853321s ago: executing program 1 (id=910): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) getcwd(&(0x7f0000000440)=""/210, 0xd2) 4.729035114s ago: executing program 1 (id=913): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xd, 0x6000, @fd_index=0xa, 0x4, 0x0, 0xffff, 0x7, 0x1, {0x2}}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 4.521629227s ago: executing program 1 (id=916): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1}, 0x18) sendmmsg(r0, &(0x7f000000d300)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, 0x2}, 0x80, 0x0}}], 0x1, 0x4000040) 4.330937649s ago: executing program 1 (id=918): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 3.576805669s ago: executing program 1 (id=928): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 2.943443679s ago: executing program 1 (id=936): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) 1.849878634s ago: executing program 3 (id=952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000001700)={0xa, 0x4e22, 0x2000005, @private2, 0x9}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001740)='H', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x7d, &(0x7f00000001c0)={0xb, 0x1c, 0x5, 0x8, 0x6, 0x8, 0xff, 0x6, 0x9, 0x5, 0x38, 0x5, 0xff, 0x6}, 0xe) 1.688642606s ago: executing program 3 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040104}, 0x400c000) 1.573299198s ago: executing program 3 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 1.505626369s ago: executing program 3 (id=960): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r1 = syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1.388727401s ago: executing program 3 (id=962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.172497013s ago: executing program 0 (id=966): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername(r1, 0x0, &(0x7f0000000180)) 1.122770364s ago: executing program 0 (id=967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x420, 0x3f3, 0x100, 0x70bd27, 0x25dfdbfc, {0x11, 0x2, 0x35, [0xcd0, 0xfffffff7, 0x9, 0x84, 0x5, 0x1, 0x1ff, 0x10, 0x7, 0x9, 0x4, 0x9, 0x7, 0x8, 0xc, 0xfffffff1, 0x2, 0x1, 0x1, 0x800, 0x0, 0x4, 0x0, 0x815, 0xf598, 0x6, 0x2219c7e3, 0xb35, 0x8, 0xd0, 0xce59, 0x2, 0x0, 0x9, 0x6071, 0x59, 0x91f7, 0x200, 0x107, 0x400, 0xc7, 0x7ff, 0x881c, 0x7, 0x4, 0x10000, 0x9, 0x9, 0x0, 0xa, 0x3, 0x6, 0x1, 0x1, 0x2, 0x9, 0xe, 0x0, 0x0, 0x4, 0xd214, 0x40000000, 0x7, 0x1000], [0x4, 0x40000000, 0x72daa0de, 0x6, 0x8, 0x4, 0x1, 0x8, 0x8, 0x0, 0xfffffffd, 0x7a3, 0xffffffa1, 0x800, 0x9, 0x1, 0x1, 0x6, 0x9, 0xa, 0xa6, 0x8, 0x80000001, 0x1, 0x2, 0x7, 0x9, 0x0, 0x7fffffff, 0xa, 0x9, 0x5, 0xd, 0x7, 0x4, 0x3, 0x0, 0xd, 0xb, 0xfffffffb, 0x6, 0x7, 0x567, 0x7, 0x5, 0x0, 0x3, 0x100, 0x189, 0x1, 0x1, 0x3, 0x10, 0x0, 0x7fffffff, 0x0, 0x77, 0x3, 0x1, 0x7ff, 0x7, 0x9, 0x40, 0x9], [0x86c, 0x7, 0x1, 0x922, 0x5, 0x4, 0x3, 0x0, 0x10001, 0x6, 0x1, 0xfbf, 0x8, 0x4, 0xfffffff8, 0xc13, 0x9, 0xc000, 0xfffffffa, 0x9, 0x1, 0xa, 0x4, 0x4, 0x2, 0x4, 0x995, 0x0, 0x9, 0x0, 0xa69, 0x0, 0x9, 0x5, 0x6, 0xfffffff8, 0x7, 0xff, 0x3, 0xffffffbb, 0x1, 0x3, 0x2, 0x2, 0x400, 0x8000, 0x20, 0x18, 0x3, 0x4, 0x4, 0x79, 0xf, 0x6, 0x1, 0xf, 0x8000, 0x80, 0x8, 0xfff, 0xffff0000, 0x3, 0x7, 0x8], [0x240, 0x9, 0x0, 0xd1, 0x80000001, 0x7, 0x3, 0x8, 0xff, 0x8001, 0x6, 0x401, 0x4, 0x3, 0xf8ed, 0x4, 0xd84, 0x4, 0x9, 0x6cb56623, 0x7, 0x4, 0xfffffffd, 0x3, 0x8, 0x1a4, 0x400, 0x736, 0x7d59, 0x9, 0x1, 0x5cc, 0xff, 0x2, 0x3, 0x1, 0x9, 0x3, 0xed9, 0x9, 0x80000000, 0x2, 0x200, 0x1000, 0xffffff2e, 0x9, 0x0, 0x3, 0x4, 0x7, 0x5, 0x1ff, 0x3, 0x1, 0xffffff2f, 0x4, 0x4, 0x0, 0x10000, 0x5, 0x4, 0x5, 0x5, 0x80]}}, 0x420}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.046805295s ago: executing program 0 (id=969): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000bc0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5a34325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c70c7dd0ceb659e250e5119c5992ee82dcfb95d0269ade1e10bd70f4b00"/197], 0xff, 0x6de, &(0x7f0000000180)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) mmap$snddsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x100010, r0, 0xb000) 862.350558ms ago: executing program 0 (id=971): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x3000000, 0x10000002000003, 0x0, 0x2000000}) 773.468489ms ago: executing program 2 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "d12af006cd174426478ccc39485890d81905f660a043e81e31537849327f27e5", "b2d406f5df4de1dd520cb4c46995e6db4515579fbc9d055c2d1f121aef5616a1", "662a2ab2f58f8657115cc356227f0e2dbc1a961b61e7f5c33066357173b41d1e", "386caf5b8c02a4b9fb6c7f3c20ef13f3dfc2599a5d5aba480d1f5f280ddc1953", "154af4dc4b644090e11f16be8459885d586cb3428a76cedd4784ea48f2a34cf0", "9fe9ad5e70ec5e256a3695bf", 0xe, 0x6, 0x7, 0xb6, 0x90000}}) 740.152299ms ago: executing program 0 (id=973): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 660.570091ms ago: executing program 2 (id=974): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 525.847722ms ago: executing program 2 (id=975): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x4, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 470.925973ms ago: executing program 2 (id=976): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 456.302114ms ago: executing program 3 (id=977): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x5, 0xffffffff, 0x2000000000000000, 0x3, 0x2, 0x5, 0x7b, 0x30, 0x7fff}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 269.613556ms ago: executing program 2 (id=978): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) ioctl$FITRIM(r0, 0x40086e8b, &(0x7f00000000c0)={0x200000, 0xfffffffffffffff7, 0x1}) 64.704889ms ago: executing program 0 (id=979): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48}) 0s ago: executing program 2 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x10, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x5, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) kernel console output (not intermixed with test programs): device batadv0 [ 89.287912][ T5769] veth0_vlan: entered promiscuous mode [ 89.297775][ T5785] Bluetooth: hci2: command tx timeout [ 89.332511][ T5769] veth1_vlan: entered promiscuous mode [ 89.463398][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.487013][ T5771] veth0_vlan: entered promiscuous mode [ 89.561179][ T5771] veth1_vlan: entered promiscuous mode [ 89.594757][ T5769] veth0_macvtap: entered promiscuous mode [ 89.610011][ T5770] veth0_vlan: entered promiscuous mode [ 89.633402][ T5769] veth1_macvtap: entered promiscuous mode [ 89.662199][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.691356][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.702677][ T5770] veth1_vlan: entered promiscuous mode [ 89.723258][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.732478][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742308][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.751426][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.777255][ T5771] veth0_macvtap: entered promiscuous mode [ 89.809963][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.820318][ T5771] veth1_macvtap: entered promiscuous mode [ 89.870957][ T5770] veth0_macvtap: entered promiscuous mode [ 89.890339][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.904095][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.918883][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.930620][ T5770] veth1_macvtap: entered promiscuous mode [ 89.957717][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.968368][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.982127][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.013831][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.024094][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034575][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.043735][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.093777][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.108423][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.119596][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.130351][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.141781][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.195036][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.206184][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.222040][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.237241][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.247856][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.259136][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.270937][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.321635][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331667][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.342007][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.351637][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368391][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.376858][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.416463][ T5781] veth0_vlan: entered promiscuous mode [ 90.463236][ T5781] veth1_vlan: entered promiscuous mode [ 90.538453][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.556977][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.632578][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.656930][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.723805][ T5781] veth0_macvtap: entered promiscuous mode [ 90.738699][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.767783][ T5781] veth1_macvtap: entered promiscuous mode [ 90.770634][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.881596][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.892243][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.903669][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.914798][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.931696][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.942936][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.959704][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.991595][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.003659][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.019271][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.030049][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.048015][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.075716][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.091253][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.118206][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.131445][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142037][ T5872] Zero length message leads to an empty skb [ 91.159735][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.172468][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185880][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.216452][ T5785] Bluetooth: hci0: command tx timeout [ 91.222564][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.269173][ T5874] syz.0.7[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.297466][ T5773] Bluetooth: hci3: command tx timeout [ 91.303107][ T5785] Bluetooth: hci1: command tx timeout [ 91.375919][ T5785] Bluetooth: hci2: command tx timeout [ 91.449376][ T5878] loop1: detected capacity change from 0 to 64 [ 91.605836][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.613726][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.800008][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.824478][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.930483][ T5884] loop1: detected capacity change from 0 to 64 [ 92.104883][ T23] cfg80211: failed to load regulatory.db [ 92.580089][ T5874] loop0: detected capacity change from 0 to 40427 [ 92.638944][ T5874] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 92.671334][ T5874] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.759856][ T5874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.807492][ T5882] loop3: detected capacity change from 0 to 32768 [ 92.823244][ T5882] ======================================================= [ 92.823244][ T5882] WARNING: The mand mount option has been deprecated and [ 92.823244][ T5882] and is ignored by this kernel. Remove the mand [ 92.823244][ T5882] option from the mount to silence this warning. [ 92.823244][ T5882] ======================================================= [ 92.895844][ T5882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.10 (5882) [ 93.024206][ T5882] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.036566][ T5874] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.043908][ T5874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.056991][ T5882] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.066620][ T5882] BTRFS info (device loop3): enabling disk space caching [ 93.073737][ T5882] BTRFS info (device loop3): use zlib compression, level 3 [ 93.081418][ T5882] BTRFS info (device loop3): force clearing of disk cache [ 93.089454][ T5882] BTRFS info (device loop3): doing ref verification [ 93.100739][ T5882] BTRFS info (device loop3): disk space caching is enabled [ 93.165682][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.266785][ T5882] BTRFS info (device loop3): auto enabling async discard [ 93.295585][ T5785] Bluetooth: hci0: command tx timeout [ 93.307938][ T5882] BTRFS info (device loop3): rebuilding free space tree [ 93.375994][ T5785] Bluetooth: hci1: command tx timeout [ 93.381481][ T5785] Bluetooth: hci3: command tx timeout [ 93.387413][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 93.402285][ T5862] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 93.419362][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.428148][ T5862] usb 2-1: Product: syz [ 93.432359][ T5862] usb 2-1: Manufacturer: syz [ 93.441742][ T5862] usb 2-1: SerialNumber: syz [ 93.455658][ T5785] Bluetooth: hci2: command tx timeout [ 93.464944][ T5862] usb 2-1: config 0 descriptor?? [ 93.487953][ T5862] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 93.517968][ T5882] BTRFS info (device loop3): disabling free space tree [ 93.546756][ T5882] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.579045][ T5882] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.189382][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.317479][ T5862] gspca_stk1135: reg_w 0x5 err -71 [ 94.333173][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.365037][ T5862] gspca_stk1135: Sensor write failed [ 94.385407][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.391826][ T5862] gspca_stk1135: Sensor write failed [ 94.407529][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.413934][ T5862] gspca_stk1135: Sensor read failed [ 94.440131][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.460558][ T5862] gspca_stk1135: Sensor read failed [ 94.467810][ T5862] gspca_stk1135: Detected sensor type unknown (0x0) [ 94.475048][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.485313][ T5862] gspca_stk1135: Sensor read failed [ 94.490601][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.545765][ T5862] gspca_stk1135: Sensor read failed [ 94.551063][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.579582][ T5862] gspca_stk1135: Sensor write failed [ 94.584975][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 94.610310][ T5862] gspca_stk1135: Sensor write failed [ 94.625056][ T5862] stk1135: probe of 2-1:0.0 failed with error -71 [ 94.677404][ T5862] usb 2-1: USB disconnect, device number 2 [ 95.228616][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 95.448317][ T5945] loop1: detected capacity change from 0 to 256 [ 95.560511][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.638347][ T5945] FAT-fs (loop1): Directory bread(block 64) failed [ 95.654060][ T5945] FAT-fs (loop1): Directory bread(block 65) failed [ 95.676860][ T5945] FAT-fs (loop1): Directory bread(block 66) failed [ 95.683461][ T5945] FAT-fs (loop1): Directory bread(block 67) failed [ 95.712834][ T5945] FAT-fs (loop1): Directory bread(block 68) failed [ 95.743875][ T5945] FAT-fs (loop1): Directory bread(block 69) failed [ 95.752186][ T5945] FAT-fs (loop1): Directory bread(block 70) failed [ 95.764889][ T5945] FAT-fs (loop1): Directory bread(block 71) failed [ 95.773249][ T5945] FAT-fs (loop1): Directory bread(block 72) failed [ 95.784182][ T5945] FAT-fs (loop1): Directory bread(block 73) failed [ 95.968179][ T5958] loop2: detected capacity change from 0 to 4096 [ 96.061856][ T5961] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.172053][ T28] audit: type=1800 audit(1751520956.512:2): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 96.743500][ T5976] loop3: detected capacity change from 0 to 1024 [ 96.765060][ T5976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.846026][ T5862] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.948456][ T5978] loop1: detected capacity change from 0 to 256 [ 96.962078][ T5978] exfat: Deprecated parameter 'namecase' [ 96.977035][ T5978] exfat: Deprecated parameter 'utf8' [ 97.039787][ T5862] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 97.048565][ T5862] usb 3-1: config 0 has no interface number 0 [ 97.049990][ T5978] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 97.062144][ T5862] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 97.076650][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.095377][ T5862] usb 3-1: Product: syz [ 97.099827][ T5862] usb 3-1: Manufacturer: syz [ 97.104465][ T5862] usb 3-1: SerialNumber: syz [ 97.125180][ T5862] usb 3-1: config 0 descriptor?? [ 97.303971][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.354037][ T5862] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 97.375103][ T5862] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 97.385775][ T5862] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 97.394686][ T5862] usb 3-1: media controller created [ 97.404450][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.496678][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 97.513142][ T5862] DVB: Unable to find symbol dib7000p_attach() [ 97.522654][ T5862] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 97.526068][ T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.547436][ T5862] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 97.551298][ T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.566579][ T27] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 97.578554][ T5862] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 97.580393][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.597447][ T27] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 97.598770][ T5862] usb 3-1: media controller created [ 97.607553][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.610299][ T27] usb 4-1: config 0 descriptor?? [ 97.629406][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 97.636665][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.657797][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.690404][ T5862] dib0700: the master dib7090 has to be initialized first [ 97.706247][ T5862] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 97.855746][ T5862] rc_core: IR keymap rc-dib0700-rc5 not found [ 97.872138][ T5862] Registered IR keymap rc-empty [ 97.888336][ T5862] dvb-usb: could not initialize remote control. [ 97.915098][ T5862] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 98.172935][ T27] hid (null): global environment stack underflow [ 98.185174][ T27] hid (null): invalid report_count 107748025 [ 98.275913][ T5862] usb 3-1: USB disconnect, device number 2 [ 98.438112][ T5862] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 98.465080][ T27] usb 4-1: USB disconnect, device number 2 [ 98.500362][ T6001] binder: 6000:6001 ioctl 40046205 0 returned -22 [ 99.123541][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.584312][ T6025] netlink: 428 bytes leftover after parsing attributes in process `syz.2.64'. [ 99.599461][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.64'. [ 99.665204][ T6021] loop3: detected capacity change from 0 to 8192 [ 99.789375][ T6030] loop2: detected capacity change from 0 to 512 [ 99.835846][ T6030] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.911011][ T6030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.023432][ T6030] EXT4-fs (loop2): 1 truncate cleaned up [ 100.080909][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.306779][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.361425][ T6017] loop0: detected capacity change from 0 to 32768 [ 100.420216][ T6017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (6017) [ 100.477496][ T6017] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.520173][ T6017] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.554172][ T6017] BTRFS info (device loop0): max_inline at 0 [ 100.567749][ T6017] BTRFS info (device loop0): enabling disk space caching [ 100.596439][ T6017] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 100.638588][ T6017] BTRFS info (device loop0): turning off barriers [ 100.653638][ T6017] BTRFS info (device loop0): turning on flush-on-commit [ 100.666576][ T6017] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.695463][ T6017] BTRFS info (device loop0): use zstd compression, level 3 [ 100.702785][ T6017] BTRFS info (device loop0): force clearing of disk cache [ 100.740566][ T6017] BTRFS info (device loop0): enabling ssd optimizations [ 100.769407][ T6017] BTRFS info (device loop0): max_inline at 2048 [ 100.795337][ T6017] BTRFS info (device loop0): disk space caching is enabled [ 101.005741][ T6017] BTRFS info (device loop0): auto enabling async discard [ 101.178056][ T6017] BTRFS error (device loop0: state M): unrecognized mount option 'cpu.stat' [ 101.397498][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.690872][ T6080] Bluetooth: MGMT ver 1.22 [ 102.110816][ T6094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.331122][ T6098] loop0: detected capacity change from 0 to 256 [ 102.359054][ T6098] exfat: Deprecated parameter 'utf8' [ 102.383861][ T6098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x35d78f5b, utbl_chksum : 0xe619d30d) [ 102.533222][ T2955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.697685][ T2955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.863247][ T2955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.026906][ T6103] loop0: detected capacity change from 0 to 4096 [ 103.046719][ T6103] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 103.064662][ T2955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.137680][ T6106] warning: `syz.1.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.397224][ T6111] loop1: detected capacity change from 0 to 128 [ 103.567018][ T6111] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.632181][ T6111] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.709620][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.719817][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.728228][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.741245][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.750891][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.765739][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.939512][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.315526][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.435581][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.512088][ T6122] loop3: detected capacity change from 0 to 40427 [ 104.517925][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 104.530625][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 104.551001][ T6122] F2FS-fs (loop3): invalid crc value [ 104.560117][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 104.608109][ T6122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.618383][ T5831] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 104.656627][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 104.658700][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.671907][ T23] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.692541][ T23] usb 2-1: config 0 has no interface number 0 [ 104.703860][ T5831] usb 1-1: Product: syz [ 104.715364][ T23] usb 2-1: config 0 interface 184 has no altsetting 0 [ 104.731246][ T5831] usb 1-1: Manufacturer: syz [ 104.740458][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.762989][ T5831] usb 1-1: SerialNumber: syz [ 104.765321][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.789460][ T23] usb 2-1: Product: syz [ 104.793705][ T23] usb 2-1: Manufacturer: syz [ 104.809074][ T5831] usb 1-1: config 0 descriptor?? [ 104.817763][ T6122] F2FS-fs (loop3): Start checkpoint disabled! [ 104.827047][ T23] usb 2-1: SerialNumber: syz [ 104.865570][ T6122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 104.876094][ T5831] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 104.879459][ T23] usb 2-1: config 0 descriptor?? [ 104.931159][ T23] smsc75xx v1.0.0 [ 105.160676][ T788] usb 1-1: USB disconnect, device number 2 [ 105.213512][ T6118] chnl_net:caif_netlink_parms(): no params data found [ 105.336502][ T48] kworker/u4:3: attempt to access beyond end of device [ 105.336502][ T48] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.363756][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.375088][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.538327][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.586119][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.616448][ T6118] bridge_slave_0: entered allmulticast mode [ 105.624029][ T6118] bridge_slave_0: entered promiscuous mode [ 105.684273][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.704266][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.713579][ T6118] bridge_slave_1: entered allmulticast mode [ 105.721511][ T6118] bridge_slave_1: entered promiscuous mode [ 105.759872][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 105.794970][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.832624][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 105.845734][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 105.861296][ T5773] Bluetooth: hci3: command tx timeout [ 105.870821][ T6118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.880290][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 105.932529][ T6118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.948505][ T6150] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.956605][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.012472][ T23] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 106.021335][ T2955] hsr_slave_0: left promiscuous mode [ 106.052111][ T2955] hsr_slave_1: left promiscuous mode [ 106.054397][ T23] usb 2-1: USB disconnect, device number 3 [ 106.097682][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.124431][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.150026][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.158145][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.166821][ T2955] bridge_slave_1: left allmulticast mode [ 106.172709][ T2955] bridge_slave_1: left promiscuous mode [ 106.210680][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.254120][ T2955] bridge_slave_0: left allmulticast mode [ 106.260068][ T2955] bridge_slave_0: left promiscuous mode [ 106.266497][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.329864][ T2955] veth1_macvtap: left promiscuous mode [ 106.340747][ T2955] veth0_macvtap: left promiscuous mode [ 106.349099][ T2955] veth1_vlan: left promiscuous mode [ 106.354798][ T2955] veth0_vlan: left promiscuous mode [ 107.404467][ T6176] loop1: detected capacity change from 0 to 32768 [ 107.420504][ T6176] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.108 (6176) [ 107.456413][ T6176] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.467755][ T6176] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 107.479669][ T6176] BTRFS info (device loop1): use zlib compression, level 3 [ 107.487486][ T6176] BTRFS info (device loop1): using free space tree [ 107.488569][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 107.554134][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 107.622643][ T6176] BTRFS info (device loop1): enabling ssd optimizations [ 107.643372][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.652315][ T6176] BTRFS info (device loop1): auto enabling async discard [ 107.766673][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.936808][ T5773] Bluetooth: hci3: command tx timeout [ 108.128253][ T5769] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.740733][ T2955] bond0 (unregistering): Released all slaves [ 108.870314][ T6196] loop1: detected capacity change from 0 to 32768 [ 108.943013][ T6196] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 108.996373][ T6196] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.051208][ T6118] team0: Port device team_slave_0 added [ 109.110110][ T6118] team0: Port device team_slave_1 added [ 109.126803][ T6196] XFS (loop1): Ending clean mount [ 109.203522][ T6196] XFS (loop1): Quotacheck needed: Please wait. [ 109.291058][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.291100][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.291125][ T6118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.293635][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.346815][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.346845][ T6118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.373337][ T6196] XFS (loop1): Quotacheck: Done. [ 109.495822][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.580288][ T6118] hsr_slave_0: entered promiscuous mode [ 109.630149][ T6118] hsr_slave_1: entered promiscuous mode [ 109.636848][ T6118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.644470][ T6118] Cannot create hsr debugfs directory [ 109.688178][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.695562][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 109.742636][ T788] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 109.775507][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.783614][ T788] usb 4-1: Product: syz [ 109.825150][ T788] usb 4-1: Manufacturer: syz [ 109.853853][ T788] usb 4-1: SerialNumber: syz [ 109.877360][ T788] usb 4-1: config 0 descriptor?? [ 109.929576][ T788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 109.985359][ T788] usb 4-1: setting power ON [ 110.004862][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 110.016938][ T5773] Bluetooth: hci3: command tx timeout [ 110.048560][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.060388][ T788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.069133][ T788] usb 4-1: media controller created [ 110.113185][ T6208] dvb-usb: bulk message failed: -22 (3/0) [ 110.139018][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.148032][ T6208] dvb-usb: bulk message failed: -22 (5/0) [ 110.157441][ T6208] dvb-usb: bulk message failed: -22 (4/0) [ 110.163235][ T6208] cxusb: i2c read failed [ 110.209054][ T788] usb 4-1: selecting invalid altsetting 6 [ 110.215070][ T788] usb 4-1: digital interface selection failed (-22) [ 110.261627][ T788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 110.274071][ T788] usb 4-1: setting power OFF [ 110.284486][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 110.297822][ T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 110.351002][ T788] (NULL device *): no alternate interface [ 110.448664][ T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 110.519783][ T788] usb 4-1: USB disconnect, device number 3 [ 111.033997][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 111.520061][ T6245] loop3: detected capacity change from 0 to 1024 [ 111.578417][ T6118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.616276][ T6118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.715407][ T6118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.760131][ T6118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.095581][ T5773] Bluetooth: hci3: command tx timeout [ 112.191838][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.286231][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.328198][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.335478][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.397372][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.404620][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.460794][ T6243] loop0: detected capacity change from 0 to 32768 [ 112.571212][ T6243] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.604046][ T6118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.875073][ T6243] XFS (loop0): Ending clean mount [ 112.906386][ T6243] XFS (loop0): Quotacheck needed: Please wait. [ 113.076233][ T6243] XFS (loop0): Quotacheck: Done. [ 113.375498][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.564706][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.612815][ T6118] veth0_vlan: entered promiscuous mode [ 113.666979][ T6118] veth1_vlan: entered promiscuous mode [ 113.874364][ T6118] veth0_macvtap: entered promiscuous mode [ 113.907077][ T6118] veth1_macvtap: entered promiscuous mode [ 113.993530][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.031763][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.054279][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.087260][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.126693][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.153329][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.182527][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.231703][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.252551][ T6309] TCP: TCP_TX_DELAY enabled [ 114.264708][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.296085][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.314151][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.330647][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.342440][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.356495][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.424460][ T6118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.465010][ T6118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.474989][ T6118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.489808][ T6118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.737789][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.764723][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.883677][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.915740][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.450022][ T6342] erspan0: entered promiscuous mode [ 115.678870][ T6348] loop2: detected capacity change from 0 to 256 [ 115.694625][ T6348] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000Ò<ö앳¸ ±ú#3”Æ" or missing value [ 115.909506][ T6326] loop0: detected capacity change from 0 to 32768 [ 116.034111][ T6326] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 116.129030][ T6326] (syz.0.135,6326,0):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0. [ 116.159602][ T6326] (syz.0.135,6326,1):ocfs2_clear_journal_error:1149 ERROR: File system on device loop0 needs checking. [ 116.172809][ T28] audit: type=1326 audit(1751520976.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15c98e929 code=0x7ffc0000 [ 116.238410][ T6326] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.268565][ T28] audit: type=1326 audit(1751520976.542:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15c98e929 code=0x7ffc0000 [ 116.289608][ T6360] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 116.312048][ T28] audit: type=1326 audit(1751520976.542:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe15c98e929 code=0x7ffc0000 [ 116.405406][ T28] audit: type=1326 audit(1751520976.542:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15c98e929 code=0x7ffc0000 [ 116.515358][ T28] audit: type=1326 audit(1751520976.542:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15c98e929 code=0x7ffc0000 [ 116.670750][ T6326] (syz.0.135,6326,1):ocfs2_double_lock:1190 ERROR: status = -2 [ 116.722142][ T6326] (syz.0.135,6326,1):ocfs2_rename:1299 ERROR: status = -2 [ 116.736156][ T6326] (syz.0.135,6326,1):ocfs2_rename:1690 ERROR: status = -2 [ 116.758942][ T6372] mmap: syz.3.150 (6372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.801228][ T6374] loop1: detected capacity change from 0 to 64 [ 116.920579][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 117.456768][ T6385] Falling back ldisc for ptm0. [ 117.590577][ T6389] loop3: detected capacity change from 0 to 128 [ 118.113312][ T6403] loop0: detected capacity change from 0 to 1024 [ 118.203504][ T6400] loop1: detected capacity change from 0 to 8192 [ 118.655055][ T6412] loop1: detected capacity change from 0 to 256 [ 119.316032][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.492079][ T6438] loop1: detected capacity change from 0 to 256 [ 119.522799][ T23] usb 1-1: config 0 has no interfaces? [ 119.534893][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 119.560495][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.605014][ T23] usb 1-1: config 0 descriptor?? [ 119.834225][ T5819] usb 1-1: USB disconnect, device number 3 [ 119.981540][ T6450] loop3: detected capacity change from 0 to 4096 [ 120.251447][ T6452] loop3: detected capacity change from 0 to 512 [ 120.264409][ T6452] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 120.282934][ T6452] EXT4-fs (loop3): invalid journal inode [ 120.291541][ T6452] EXT4-fs (loop3): can't get journal size [ 120.312586][ T6452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 120.325922][ T6452] System zones: 1-12, 13-13 [ 120.340279][ T6452] EXT4-fs (loop3): 1 truncate cleaned up [ 120.348531][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.464692][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.050602][ T6471] team0: Device gtp0 is of different type [ 121.268063][ T6458] loop3: detected capacity change from 0 to 32768 [ 121.302928][ T6475] process 'syz.1.195' launched './file1' with NULL argv: empty string added [ 121.981621][ T6491] loop0: detected capacity change from 0 to 8192 [ 122.010738][ T6491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.037062][ T6491] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 122.047191][ T6491] REISERFS (device loop0): using ordered data mode [ 122.053759][ T6491] reiserfs: using flush barriers [ 122.063781][ T6491] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.082119][ T6491] REISERFS (device loop0): checking transaction log (loop0) [ 122.103320][ T6491] REISERFS (device loop0): Using r5 hash to sort names [ 122.115392][ T6491] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.149571][ T6495] loop1: detected capacity change from 0 to 32768 [ 123.167121][ T6495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.201 (6495) [ 123.207613][ T6495] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.218249][ T6495] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 123.227740][ T6495] BTRFS info (device loop1): using free space tree [ 123.325489][ T788] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 123.386701][ T6495] BTRFS info (device loop1): enabling ssd optimizations [ 123.393730][ T6495] BTRFS info (device loop1): auto enabling async discard [ 123.421184][ T6540] loop0: detected capacity change from 0 to 24 [ 123.527715][ T788] usb 3-1: config 0 has no interfaces? [ 123.565587][ T788] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.590848][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.615484][ T788] usb 3-1: Product: syz [ 123.627175][ T788] usb 3-1: Manufacturer: syz [ 123.655757][ T788] usb 3-1: SerialNumber: syz [ 123.705129][ T788] usb 3-1: config 0 descriptor?? [ 123.825829][ T6549] loop0: detected capacity change from 0 to 1024 [ 123.833479][ T6549] UDF-fs: bad mount option "y•^7ÍÙY‘yÍöçŽ){Üm«_(q¼ŒèS#X00000000000000000000ÿÿ" or missing value [ 123.880933][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.912575][ T5783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.015150][ T6520] netlink: 136 bytes leftover after parsing attributes in process `syz.2.206'. [ 124.102290][ T6520] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 124.175187][ T788] usb 3-1: USB disconnect, device number 3 [ 124.343716][ T6556] loop1: detected capacity change from 0 to 512 [ 125.308661][ T6583] netlink: 27 bytes leftover after parsing attributes in process `syz.1.221'. [ 125.500200][ T6589] loop3: detected capacity change from 0 to 64 [ 125.656123][ T6587] loop2: detected capacity change from 0 to 4096 [ 125.741877][ T5770] hfs: node 4:3 still has 2 user(s)! [ 125.760556][ T6595] tipc: Started in network mode [ 125.778769][ T6595] tipc: Node identity ac14140f, cluster identity 4711 [ 125.793726][ T6595] tipc: New replicast peer: 255.255.255.255 [ 125.819426][ T6595] tipc: Enabled bearer , priority 10 [ 126.022604][ T6600] loop2: detected capacity change from 0 to 1024 [ 126.196486][ T59] hfsplus: bad catalog file entry [ 126.202794][ T59] hfsplus: b-tree write err: -5, ino 3 [ 126.612658][ T6616] loop2: detected capacity change from 0 to 1024 [ 126.700332][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.837470][ T28] audit: type=1800 audit(1751520987.182:8): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 126.939415][ T6598] loop3: detected capacity change from 0 to 40427 [ 126.941062][ T5831] tipc: Node number set to 2886997007 [ 126.996788][ T6625] netlink: 'syz.0.238': attribute type 25 has an invalid length. [ 126.999531][ T6598] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.024202][ T6598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.037688][ T6625] netlink: 'syz.0.238': attribute type 7 has an invalid length. [ 127.046694][ T6625] netlink: 164 bytes leftover after parsing attributes in process `syz.0.238'. [ 127.057907][ T6598] F2FS-fs (loop3): invalid crc value [ 127.072057][ T6598] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.252329][ T6598] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.273126][ T6598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.420573][ T6616] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.236: Allocating blocks 497-513 which overlap fs metadata [ 127.467758][ T28] audit: type=1800 audit(1751520987.802:9): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 127.514392][ T6615] EXT4-fs (loop2): pa ffff88807a31ed98: logic 32, phys. 161, len 22 [ 127.523538][ T6615] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 127.693885][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.922174][ T6646] loop1: detected capacity change from 0 to 64 [ 128.026366][ T6646] syz.1.248: attempt to access beyond end of device [ 128.026366][ T6646] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 128.072078][ T6646] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 128.931446][ T6648] loop0: detected capacity change from 0 to 32768 [ 128.996471][ T6648] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.178273][ T6648] XFS (loop0): Ending clean mount [ 129.275727][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 129.379684][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.769771][ T6688] loop1: detected capacity change from 0 to 512 [ 129.851924][ T6688] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.264: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 129.875320][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.884924][ T6688] EXT4-fs (loop1): get root inode failed [ 129.893538][ T6673] loop3: detected capacity change from 0 to 32768 [ 129.898312][ T6688] EXT4-fs (loop1): mount failed [ 129.935501][ T6673] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.257 (6673) [ 129.994100][ T6688] loop1: detected capacity change from 0 to 128 [ 130.014770][ T6688] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.032552][ T6673] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.077875][ T6673] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 130.088051][ T6673] BTRFS info (device loop3): enabling auto defrag [ 130.095672][ T6673] BTRFS info (device loop3): doing ref verification [ 130.105116][ T6673] BTRFS info (device loop3): use no compression [ 130.112001][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 130.144781][ T6673] BTRFS info (device loop3): force clearing of disk cache [ 130.182843][ T5862] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 130.192426][ T6673] BTRFS info (device loop3): setting nodatacow, compression disabled [ 130.201525][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.215742][ T6673] BTRFS info (device loop3): disabling free space tree [ 130.222992][ T5862] usb 3-1: Product: syz [ 130.230046][ T5862] usb 3-1: Manufacturer: syz [ 130.237825][ T5862] usb 3-1: SerialNumber: syz [ 130.312363][ T5862] usb 3-1: config 0 descriptor?? [ 130.338977][ T5862] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 130.455434][ T6673] BTRFS info (device loop3): enabling ssd optimizations [ 130.491536][ T6673] BTRFS info (device loop3): auto enabling async discard [ 130.542718][ T5862] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 130.546300][ T6673] BTRFS info (device loop3): rebuilding free space tree [ 130.582889][ T5862] usb 3-1: USB disconnect, device number 4 [ 130.632472][ T6673] BTRFS info (device loop3): disabling free space tree [ 130.639118][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.646516][ T6673] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.753915][ T6673] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.899617][ T6673] fs-verity: sha512 using implementation "sha512-avx2" [ 130.899654][ T28] audit: type=1800 audit(1751520991.242:10): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.257" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 130.979385][ T6673] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 131.083353][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.482727][ T6727] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 131.737052][ T6734] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.756847][ T6735] tun0: tun_chr_ioctl cmd 1074812118 [ 131.868169][ T6739] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET) [ 132.430714][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 132.526984][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 132.964504][ T6776] loop3: detected capacity change from 0 to 128 [ 132.972923][ T6776] EXT4-fs: Ignoring removed nobh option [ 133.008459][ T6776] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.021486][ T6776] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.066018][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073006][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220264][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.865407][ T5819] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.055372][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 134.076372][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.110397][ T5819] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 134.126138][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.168139][ T5819] usb 4-1: config 0 descriptor?? [ 134.313270][ T6794] loop2: detected capacity change from 0 to 32768 [ 134.409503][ T6794] find_entry called with index = 0 [ 134.430178][ T6794] find_entry called with index = 0 [ 134.447539][ T6794] read_mapping_page failed! [ 134.452242][ T6794] ERROR: (device loop2): txCommit: [ 134.452242][ T6794] [ 134.646481][ T5819] kye 0003:0458:4018.0002: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 134.908413][ T5862] usb 4-1: USB disconnect, device number 4 [ 135.365426][ T5819] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.545912][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 135.571318][ T5819] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.579296][ T6827] loop0: detected capacity change from 0 to 256 [ 135.587093][ T5819] usb 3-1: config 0 has no interface number 0 [ 135.593878][ T5819] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.637366][ T5819] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.653035][ T5819] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 135.663179][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.684154][ T5819] usb 3-1: config 0 descriptor?? [ 135.955909][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 136.288102][ T6845] loop0: detected capacity change from 0 to 16 [ 136.313364][ T6845] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.328325][ T5819] uclogic 0003:28BD:0071.0003: pen parameters not found [ 136.336859][ T5819] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 136.360670][ T6845] erofs: (device loop0): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 136.378036][ T6845] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 136.567277][ T788] usb 3-1: USB disconnect, device number 5 [ 136.855490][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.038462][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 137.045820][ T27] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 137.060123][ T27] usb 1-1: config 0 has no interface number 0 [ 137.067606][ T27] usb 1-1: config 0 interface 219 has no altsetting 0 [ 137.074469][ T27] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 137.084422][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.095336][ T27] usb 1-1: config 0 descriptor?? [ 137.421332][ T27] usb 1-1: string descriptor 0 read error: -71 [ 137.445724][ T27] usb 1-1: USB disconnect, device number 4 [ 137.901187][ T6862] loop3: detected capacity change from 0 to 40427 [ 137.965515][ T6862] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 137.973957][ T6862] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 138.001272][ T6862] F2FS-fs (loop3): Image doesn't support compression [ 138.008963][ T6862] F2FS-fs (loop3): Image doesn't support compression [ 138.018354][ T6862] F2FS-fs (loop3): invalid crc value [ 138.029477][ T6862] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.159417][ T6862] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.239921][ T28] audit: type=1800 audit(1751520998.582:11): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.335" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 138.319808][ T5770] syz-executor: attempt to access beyond end of device [ 138.319808][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.343707][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.525393][ T6884] loop0: detected capacity change from 0 to 164 [ 138.611305][ T6884] Unable to read rock-ridge attributes [ 138.680561][ T6884] Unable to read rock-ridge attributes [ 139.273680][ T6896] loop1: detected capacity change from 0 to 4096 [ 140.159544][ T6921] loop3: detected capacity change from 0 to 1024 [ 140.292211][ T6899] loop2: detected capacity change from 0 to 32768 [ 140.373108][ T6899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.684723][ T6899] XFS (loop2): Ending clean mount [ 140.696851][ T6936] netlink: 'syz.3.363': attribute type 21 has an invalid length. [ 140.700785][ T6899] XFS (loop2): Quotacheck needed: Please wait. [ 140.731388][ T6936] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 140.755394][ T6936] netlink: 'syz.3.363': attribute type 2 has an invalid length. [ 140.775338][ T6936] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.363'. [ 140.799336][ T6899] XFS (loop2): Quotacheck: Done. [ 140.979370][ T6118] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.221678][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 141.715463][ T6954] loop0: detected capacity change from 0 to 2048 [ 141.764452][ T6954] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 141.801391][ T6954] hpfs: filesystem error: improperly stopped [ 141.824189][ T6954] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 142.174649][ T6967] loop0: detected capacity change from 0 to 512 [ 142.225363][ T28] audit: type=1326 audit(1751521002.562:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.1.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe15c9858e7 code=0x0 [ 142.336753][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.355585][ T6967] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.439996][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.548444][ T6980] loop3: detected capacity change from 0 to 64 [ 142.802698][ T6984] Illegal XDP return value 16128 on prog (id 42) dev syz_tun, expect packet loss! [ 143.197572][ T6976] loop2: detected capacity change from 0 to 40427 [ 143.215683][ T6976] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 143.222372][ T6976] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.321755][ T6976] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.456846][ T6982] loop0: detected capacity change from 0 to 32768 [ 143.504586][ T6976] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.514237][ T6982] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.382 (6982) [ 143.522118][ T6976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.622480][ T6982] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.660515][ T6982] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 143.707102][ T6982] BTRFS info (device loop0): use zlib compression, level 3 [ 143.735387][ T6982] BTRFS info (device loop0): using free space tree [ 143.886320][ T6118] syz-executor: attempt to access beyond end of device [ 143.886320][ T6118] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.913595][ T6982] BTRFS info (device loop0): enabling ssd optimizations [ 143.919868][ T6118] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 143.932218][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 143.955537][ T6982] BTRFS info (device loop0): auto enabling async discard [ 144.258211][ T7019] loop3: detected capacity change from 0 to 64 [ 144.340541][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.878287][ T7025] loop2: detected capacity change from 0 to 256 [ 145.413754][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 145.765048][ T7055] loop1: detected capacity change from 0 to 1024 [ 145.833910][ T7055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.914763][ T7055] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.994840][ T28] audit: type=1326 audit(1751521006.332:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54fc3858e7 code=0x7ffc0000 [ 146.019618][ T7055] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.407: lblock 3 mapped to illegal pblock 3 (length 1) [ 146.103975][ T28] audit: type=1326 audit(1751521006.332:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54fc32ab19 code=0x7ffc0000 [ 146.126554][ T7055] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 146.146371][ T28] audit: type=1326 audit(1751521006.332:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54fc3858e7 code=0x7ffc0000 [ 146.175596][ T7055] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.175596][ T7055] [ 146.200694][ T7066] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.407: lblock 3 mapped to illegal pblock 3 (length 1) [ 146.216648][ T28] audit: type=1326 audit(1751521006.332:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54fc32ab19 code=0x7ffc0000 [ 146.272499][ T28] audit: type=1326 audit(1751521006.332:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54fc3858e7 code=0x7ffc0000 [ 146.332441][ T7065] loop3: detected capacity change from 0 to 8192 [ 146.343143][ T28] audit: type=1326 audit(1751521006.332:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54fc32ab19 code=0x7ffc0000 [ 146.371418][ T28] audit: type=1326 audit(1751521006.332:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54fc3858e7 code=0x7ffc0000 [ 146.393780][ T28] audit: type=1326 audit(1751521006.332:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54fc32ab19 code=0x7ffc0000 [ 146.414802][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.437699][ T28] audit: type=1326 audit(1751521006.332:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54fc3858e7 code=0x7ffc0000 [ 146.487005][ T28] audit: type=1326 audit(1751521006.332:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54fc32ab19 code=0x7ffc0000 [ 146.695531][ T7071] capability: warning: `syz.2.414' uses deprecated v2 capabilities in a way that may be insecure [ 146.912136][ T7064] loop0: detected capacity change from 0 to 32768 [ 146.960476][ T7064] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.057660][ T7064] XFS (loop0): Ending clean mount [ 147.080272][ T7064] XFS (loop0): Quotacheck needed: Please wait. [ 147.146309][ T7064] XFS (loop0): Quotacheck: Done. [ 147.269861][ T7093] input: syz1 as /devices/virtual/input/input8 [ 147.285630][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.669413][ T7101] tun0: tun_chr_ioctl cmd 1074812117 [ 147.994151][ T7110] loop2: detected capacity change from 0 to 8192 [ 148.016018][ T7110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.031410][ T7110] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 148.040834][ T7110] REISERFS (device loop2): using ordered data mode [ 148.047566][ T7110] reiserfs: using flush barriers [ 148.054537][ T7110] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.074070][ T7110] REISERFS (device loop2): checking transaction log (loop2) [ 148.091254][ T7110] REISERFS (device loop2): Using r5 hash to sort names [ 148.102622][ T7110] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 148.211924][ T7117] loop0: detected capacity change from 0 to 128 [ 148.230062][ T7117] EXT4-fs: Ignoring removed nobh option [ 148.241233][ T7117] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.263062][ T7117] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.309112][ T7120] input: syz1 as /devices/virtual/input/input9 [ 148.321501][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.528103][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 149.678394][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.446'. [ 149.763071][ T7157] loop0: detected capacity change from 0 to 1024 [ 150.050149][ T7161] netlink: 'syz.3.450': attribute type 2 has an invalid length. [ 150.065472][ T7161] netlink: 'syz.3.450': attribute type 2 has an invalid length. [ 150.077503][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 150.614783][ T7165] loop3: detected capacity change from 0 to 32768 [ 150.653286][ T7165] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.710480][ T7185] loop0: detected capacity change from 0 to 2048 [ 150.728395][ T7165] XFS (loop3): Ending clean mount [ 150.733984][ T7185] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 150.758357][ T7165] XFS (loop3): Quotacheck needed: Please wait. [ 150.773769][ T7185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.863099][ T7165] XFS (loop3): Quotacheck: Done. [ 151.017827][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.219147][ T7196] loop2: detected capacity change from 0 to 256 [ 151.243930][ T7192] loop1: detected capacity change from 0 to 2048 [ 151.294613][ T7196] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 151.332304][ T7192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.355463][ T7192] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.417117][ T7192] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3 [ 151.512016][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.678881][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 151.858199][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 151.987864][ T7225] netlink: 136 bytes leftover after parsing attributes in process `syz.1.475'. [ 152.556812][ T7240] loop2: detected capacity change from 0 to 2048 [ 152.598867][ T7221] loop0: detected capacity change from 0 to 32768 [ 152.621094][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.634618][ T7240] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.674534][ T7240] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3 [ 152.678209][ T7221] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 152.721348][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.031802][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 153.367507][ T7265] netlink: 'syz.0.486': attribute type 2 has an invalid length. [ 153.385610][ T7265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.486'. [ 153.465834][ T7269] netlink: 300 bytes leftover after parsing attributes in process `syz.3.492'. [ 153.604319][ T7275] loop3: detected capacity change from 0 to 2048 [ 153.627925][ T7275] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 153.638550][ T7275] UDF-fs: Scanning with blocksize 512 failed [ 153.673603][ T7275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.751867][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 153.751890][ T28] audit: type=1800 audit(1751521014.092:144): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.495" name="file2" dev="loop3" ino=819 res=0 errno=0 [ 153.776350][ T7281] loop0: detected capacity change from 0 to 256 [ 153.807126][ T7281] FAT-fs (loop0): bogus number of FAT sectors [ 153.813408][ T7281] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.649448][ T7295] loop1: detected capacity change from 0 to 2048 [ 154.698315][ T7295] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 154.767248][ T7295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.079169][ T7291] loop3: detected capacity change from 0 to 32768 [ 155.118936][ T7291] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.130916][ T7299] loop1: detected capacity change from 0 to 2048 [ 155.188318][ T7299] loop1: p1 < > p4 [ 155.202663][ T7291] XFS (loop3): Ending clean mount [ 155.218231][ T7299] loop1: p4 size 8388608 extends beyond EOD, truncated [ 155.368277][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.431692][ T7309] netlink: 18 bytes leftover after parsing attributes in process `syz.0.505'. [ 155.471485][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 155.489204][ T7311] bond_slave_0: entered promiscuous mode [ 155.495462][ T7311] bond_slave_1: entered promiscuous mode [ 155.513110][ T7311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.545159][ T7311] bond_slave_0: left promiscuous mode [ 155.550778][ T7311] bond_slave_1: left promiscuous mode [ 155.827044][ T7315] ipvlan0: entered promiscuous mode [ 155.831365][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 156.136955][ T7329] program syz.3.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.165561][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.282596][ T7337] loop2: detected capacity change from 0 to 2048 [ 156.299386][ T7337] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 156.310145][ T7337] UDF-fs: Scanning with blocksize 512 failed [ 156.325440][ T7337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.341489][ T7339] loop3: detected capacity change from 0 to 512 [ 156.371257][ T28] audit: type=1800 audit(1751521016.712:145): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.520" name="file2" dev="loop2" ino=819 res=0 errno=0 [ 156.395601][ T7339] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.521: corrupted in-inode xattr: invalid ea_ino [ 156.407193][ T5862] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 156.411004][ T7339] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.521: couldn't read orphan inode 15 (err -117) [ 156.431798][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.433501][ T5862] usb 1-1: config 0 has no interface number 0 [ 156.510825][ T5862] usb 1-1: config 0 interface 104 has no altsetting 0 [ 156.529091][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.544826][ T5862] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 156.561692][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.586527][ T5862] usb 1-1: Product: syz [ 156.598984][ T5862] usb 1-1: Manufacturer: syz [ 156.613999][ T5862] usb 1-1: SerialNumber: syz [ 156.630273][ T5862] usb 1-1: config 0 descriptor?? [ 156.651032][ T5862] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 156.690261][ T28] audit: type=1326 audit(1751521017.032:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b115858e7 code=0x7ffc0000 [ 156.755494][ T28] audit: type=1326 audit(1751521017.032:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b1152ab19 code=0x7ffc0000 [ 156.805336][ T28] audit: type=1326 audit(1751521017.032:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1158e929 code=0x7ffc0000 [ 156.851252][ T28] audit: type=1326 audit(1751521017.032:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b115858e7 code=0x7ffc0000 [ 156.877180][ T5862] gspca_vc032x: reg_r err -71 [ 156.881933][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.900330][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.907121][ T28] audit: type=1326 audit(1751521017.032:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b1152ab19 code=0x7ffc0000 [ 156.919429][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.929492][ T7333] loop1: detected capacity change from 0 to 32768 [ 156.946249][ T28] audit: type=1326 audit(1751521017.032:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b115858e7 code=0x7ffc0000 [ 156.952124][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.969501][ T28] audit: type=1326 audit(1751521017.032:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b1152ab19 code=0x7ffc0000 [ 157.023406][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.025476][ T7333] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.035299][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.037677][ T28] audit: type=1326 audit(1751521017.032:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b115858e7 code=0x7ffc0000 [ 157.049396][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.130677][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.137410][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.145342][ T7333] XFS (loop1): Ending clean mount [ 157.151089][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.156892][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.163235][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.168939][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.174268][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.179814][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.185478][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.191003][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.196533][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 157.204034][ T5862] gspca_vc032x: Unknown sensor... [ 157.209362][ T5862] vc032x: probe of 1-1:0.104 failed with error -22 [ 157.221701][ T5862] usb 1-1: USB disconnect, device number 5 [ 157.303852][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.595409][ T7365] program syz.2.530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.944552][ T7371] syz.2.532 (7371) used greatest stack depth: 19248 bytes left [ 157.987277][ T7376] loop8: detected capacity change from 0 to 1 [ 158.005082][ T7376] Dev loop8: unable to read RDB block 1 [ 158.010927][ T7376] loop8: unable to read partition table [ 158.026694][ T7376] loop8: partition table beyond EOD, truncated [ 158.033085][ T7376] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 159.183889][ T7415] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 159.191928][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 159.740236][ T7423] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.556'. [ 160.210506][ T7440] input: syz0 as /devices/virtual/input/input10 [ 160.833669][ T7472] loop0: detected capacity change from 0 to 128 [ 160.939636][ T7477] loop2: detected capacity change from 0 to 512 [ 160.948139][ T7477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.985096][ T7477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.011034][ T7477] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.064635][ T7477] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 161.083917][ T7477] __quota_error: 37 callbacks suppressed [ 161.083936][ T7477] Quota error (device loop2): write_blk: dquota write failed [ 161.098884][ T7477] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 161.111498][ T7477] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.582: Failed to acquire dquot type 0 [ 161.188094][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.362622][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 161.565038][ T7501] loop2: detected capacity change from 0 to 1024 [ 161.578446][ T7501] EXT4-fs: Ignoring removed orlov option [ 161.584472][ T7501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.602135][ T7503] loop3: detected capacity change from 0 to 128 [ 161.632206][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.782041][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.951941][ T7516] loop3: detected capacity change from 0 to 512 [ 161.977582][ T7516] EXT4-fs: Ignoring removed nobh option [ 162.001551][ T7516] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 162.055873][ T7516] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.598: attempt to clear invalid blocks 2 len 1 [ 162.093617][ T7516] EXT4-fs (loop3): Remounting filesystem read-only [ 162.129270][ T7516] EXT4-fs (loop3): 1 truncate cleaned up [ 162.151389][ T7516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.288312][ T7525] loop1: detected capacity change from 0 to 128 [ 162.357856][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.393274][ T7514] loop2: detected capacity change from 0 to 32768 [ 162.431766][ T7530] batadv_slave_1: entered promiscuous mode [ 162.441249][ T7529] batadv_slave_1: left promiscuous mode [ 162.485578][ T7514] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.589507][ T7514] XFS (loop2): Ending clean mount [ 162.739657][ T7514] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 162.972439][ T6118] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.457209][ T7561] loop1: detected capacity change from 0 to 1024 [ 163.496833][ T7561] EXT4-fs: Ignoring removed orlov option [ 163.534111][ T7561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.594658][ T7561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.638533][ T7566] loop0: detected capacity change from 0 to 512 [ 163.691586][ T7566] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.616: casefold flag without casefold feature [ 163.735226][ C1] sched: RT throttling activated [ 163.750869][ T7566] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.616: couldn't read orphan inode 15 (err -117) [ 163.776400][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.014060][ T7552] loop3: detected capacity change from 0 to 262144 [ 165.026986][ T7552] F2FS-fs (loop3): invalid crc value [ 165.039250][ T7552] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.079203][ T7552] F2FS-fs (loop3): Start checkpoint disabled! [ 165.091657][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.093741][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.114903][ T7552] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.460647][ T7583] batadv_slave_1: entered promiscuous mode [ 165.468235][ T7582] batadv_slave_1: left promiscuous mode [ 166.039541][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 166.067750][ T7604] ip6tnl1: entered promiscuous mode [ 166.530081][ T7618] loop0: detected capacity change from 0 to 256 [ 166.564695][ T7618] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 167.100537][ T7616] loop2: detected capacity change from 0 to 32768 [ 167.158585][ T7616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 167.356854][ T6118] ocfs2: Unmounting device (7,2) on (node local) [ 167.647863][ T7626] loop1: detected capacity change from 0 to 32768 [ 167.685700][ T7626] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.731207][ T7642] loop2: detected capacity change from 0 to 512 [ 167.735474][ T28] audit: type=1326 audit(1751521028.072:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.738763][ T7642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.767599][ T7626] XFS (loop1): Ending clean mount [ 167.770956][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.784783][ T28] audit: type=1326 audit(1751521028.072:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.795428][ T7642] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.812358][ T28] audit: type=1326 audit(1751521028.072:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.844842][ T28] audit: type=1326 audit(1751521028.072:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.869950][ T28] audit: type=1326 audit(1751521028.072:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.898530][ T28] audit: type=1326 audit(1751521028.072:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.915911][ T7645] loop0: detected capacity change from 0 to 512 [ 167.934267][ T7645] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.942601][ T7645] EXT4-fs: Ignoring removed oldalloc option [ 167.950839][ T28] audit: type=1326 audit(1751521028.072:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.961555][ T7645] ext4: Unknown parameter '.' [ 167.973961][ T28] audit: type=1326 audit(1751521028.072:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 167.978588][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 168.000750][ T28] audit: type=1326 audit(1751521028.072:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 168.017130][ T7642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.028515][ T28] audit: type=1326 audit(1751521028.072:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350d8e929 code=0x7fc00000 [ 168.052091][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.063660][ T7642] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.087844][ T5831] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.096709][ T5831] usb 4-1: config 0 has no interface number 0 [ 168.107428][ T5831] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.134528][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.159986][ T5831] usb 4-1: Product: syz [ 168.164915][ T5831] usb 4-1: Manufacturer: syz [ 168.178919][ T5831] usb 4-1: SerialNumber: syz [ 168.202231][ T5831] usb 4-1: config 0 descriptor?? [ 168.211929][ T5831] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.372034][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.417164][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 168.426439][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 168.453575][ T5831] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.508811][ T5831] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.950563][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.951057][ T23] usb 4-1: USB disconnect, device number 5 [ 168.985663][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 169.021445][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 169.041445][ T23] quatech2 4-1:0.51: device disconnected [ 169.256829][ T7684] netlink: 'syz.0.658': attribute type 9 has an invalid length. [ 169.271392][ T7684] bond_slave_0: entered promiscuous mode [ 169.277217][ T7684] bond_slave_1: entered promiscuous mode [ 169.289274][ T7684] macvlan2: entered promiscuous mode [ 169.294739][ T7684] bond0: entered promiscuous mode [ 169.302091][ T7684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.574226][ T7690] loop2: detected capacity change from 0 to 512 [ 169.582779][ T7690] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.597874][ T7690] EXT4-fs: Ignoring removed oldalloc option [ 169.603855][ T7690] ext4: Unknown parameter '.' [ 169.665600][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.865343][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 169.873000][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.895705][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.906150][ T7699] loop2: detected capacity change from 0 to 128 [ 169.915112][ T7699] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.922284][ T23] usb 1-1: config 0 descriptor?? [ 169.943867][ T7699] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.152104][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.173524][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.195646][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.202898][ T23] usb 1-1: media controller created [ 170.277718][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.354043][ T23] az6027: usb out operation failed. (-71) [ 170.365693][ T23] az6027: usb out operation failed. (-71) [ 170.373552][ T23] stb0899_attach: Driver disabled by Kconfig [ 170.379687][ T23] az6027: no front-end attached [ 170.379687][ T23] [ 170.388665][ T23] az6027: usb out operation failed. (-71) [ 170.394449][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 170.404301][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 170.445943][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 170.452973][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.471866][ T23] usb 1-1: USB disconnect, device number 6 [ 170.510807][ T7714] loop2: detected capacity change from 0 to 128 [ 170.531868][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.551899][ T7714] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 170.569078][ T7714] FAT-fs (loop2): Filesystem has been set read-only [ 170.595441][ T7714] syz.2.672: attempt to access beyond end of device [ 170.595441][ T7714] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 170.643381][ T7714] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 170.662928][ T7714] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 170.685993][ T7714] syz.2.672: attempt to access beyond end of device [ 170.685993][ T7714] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 170.708753][ T7714] syz.2.672: attempt to access beyond end of device [ 170.708753][ T7714] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 170.727850][ T7714] syz.2.672: attempt to access beyond end of device [ 170.727850][ T7714] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 170.857478][ T7723] loop3: detected capacity change from 0 to 1024 [ 170.883682][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.944800][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.413681][ T7751] 9p: Unknown uid 00000000004294967295 [ 171.875418][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.008397][ T7779] 9p: Unknown uid 00000000004294967295 [ 172.075373][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 172.086805][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.118478][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 172.133976][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.154731][ T23] usb 4-1: Product: syz [ 172.167099][ T23] usb 4-1: Manufacturer: syz [ 172.178901][ T23] usb 4-1: SerialNumber: syz [ 172.193338][ T23] usb 4-1: config 0 descriptor?? [ 172.620273][ T23] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 172.710827][ T7797] loop0: detected capacity change from 0 to 2048 [ 172.721405][ T7797] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.742624][ T7798] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.957439][ T7806] loop0: detected capacity change from 0 to 8 [ 172.970659][ T7806] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 173.028145][ T23] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 173.045117][ T23] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 173.068178][ T23] gs_usb: probe of 4-1:0.0 failed with error -71 [ 173.100544][ T23] usb 4-1: USB disconnect, device number 6 [ 173.338062][ T7822] kernel read not supported for file /file1 (pid: 7822 comm: syz.0.718) [ 173.348462][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 173.348476][ T28] audit: type=1800 audit(1751521033.692:257): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.718" name="file1" dev="mqueue" ino=14624 res=0 errno=0 [ 173.916915][ T7840] loop2: detected capacity change from 0 to 2048 [ 173.944917][ T7842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.005598][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.195367][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 174.208880][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.226132][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.255482][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.272943][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.282643][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.294040][ T23] usb 1-1: Manufacturer: syz [ 174.301870][ T23] usb 1-1: config 0 descriptor?? [ 174.324907][ T7856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 174.331881][ T7856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.350177][ T7856] vhci_hcd vhci_hcd.0: Device attached [ 174.528977][ T5862] usb 1-1: USB disconnect, device number 7 [ 174.615404][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 174.625381][ T5831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.809190][ T5831] usb 3-1: config 0 has no interfaces? [ 174.815772][ T5831] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 174.824898][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.840525][ T5831] usb 3-1: config 0 descriptor?? [ 175.071366][ T5831] usb 3-1: USB disconnect, device number 6 [ 175.078122][ T7857] vhci_hcd: connection closed [ 175.083820][ T34] vhci_hcd: stop threads [ 175.100749][ T34] vhci_hcd: release socket [ 175.114583][ T34] vhci_hcd: disconnect device [ 175.140828][ T7864] loop3: detected capacity change from 0 to 2048 [ 175.147762][ T8] vhci_hcd: vhci_device speed not set [ 175.157348][ T7864] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.187115][ T7866] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.802483][ T7891] loop2: detected capacity change from 0 to 256 [ 175.817811][ T7891] FAT-fs (loop2): Directory bread(block 1285) failed [ 175.857221][ T7891] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 175.915326][ T5831] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.988694][ T7895] loop3: detected capacity change from 0 to 256 [ 176.001539][ T7895] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.012788][ T7895] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 176.061337][ T7895] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 176.130742][ T5831] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 176.150203][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.170863][ T5831] usb 1-1: config 0 has no interfaces? [ 176.180294][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.195267][ T5831] usb 1-1: config 0 has no interfaces? [ 176.206843][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.226361][ T5831] usb 1-1: config 0 has no interfaces? [ 176.233790][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.265309][ T5831] usb 1-1: config 0 has no interfaces? [ 176.272428][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.302348][ T5831] usb 1-1: config 0 has no interfaces? [ 176.317525][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.331189][ T5831] usb 1-1: config 0 has no interfaces? [ 176.343704][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.358953][ T5831] usb 1-1: config 0 has no interfaces? [ 176.369576][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.390153][ T5831] usb 1-1: config 0 has no interfaces? [ 176.408046][ T5831] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 176.417980][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 176.435294][ T5831] usb 1-1: Product: syz [ 176.445281][ T5831] usb 1-1: Manufacturer: syz [ 176.455335][ T5831] usb 1-1: SerialNumber: syz [ 176.478351][ T5831] usb 1-1: config 0 descriptor?? [ 176.687761][ T7912] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 176.870432][ T5831] usb 1-1: USB disconnect, device number 8 [ 177.751224][ T7940] loop0: detected capacity change from 0 to 4096 [ 178.148015][ T7950] loop2: detected capacity change from 0 to 4096 [ 178.155980][ T7950] ntfs3: Unknown parameter 'measure' [ 178.385407][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.588469][ T23] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 178.610259][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.635322][ T23] usb 4-1: config 0 has no interfaces? [ 178.646853][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.665327][ T23] usb 4-1: config 0 has no interfaces? [ 178.678019][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.695291][ T23] usb 4-1: config 0 has no interfaces? [ 178.702454][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.724099][ T23] usb 4-1: config 0 has no interfaces? [ 178.745658][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.766598][ T23] usb 4-1: config 0 has no interfaces? [ 178.785889][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.807518][ T23] usb 4-1: config 0 has no interfaces? [ 178.830939][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.847445][ T23] usb 4-1: config 0 has no interfaces? [ 178.857064][ T7976] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 178.864694][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.875444][ T23] usb 4-1: config 0 has no interfaces? [ 178.884044][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 178.893558][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 178.915287][ T23] usb 4-1: Product: syz [ 178.919525][ T23] usb 4-1: Manufacturer: syz [ 178.934392][ T23] usb 4-1: SerialNumber: syz [ 178.950426][ T23] usb 4-1: config 0 descriptor?? [ 179.017938][ T7983] loop2: detected capacity change from 0 to 64 [ 179.251497][ T7991] loop1: detected capacity change from 0 to 256 [ 179.280647][ T7991] exfat: Deprecated parameter 'namecase' [ 179.288953][ T5819] usb 4-1: USB disconnect, device number 7 [ 179.299229][ T7991] exfat: Deprecated parameter 'namecase' [ 179.314584][ T7991] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 179.346915][ T7991] syz.1.792: attempt to access beyond end of device [ 179.346915][ T7991] loop1: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 179.364045][ T7991] syz.1.792: attempt to access beyond end of device [ 179.364045][ T7991] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 179.388733][ T28] audit: type=1800 audit(1751521039.732:258): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.792" name="file1" dev="loop1" ino=1048608 res=0 errno=0 [ 179.399190][ T7991] syz.1.792: attempt to access beyond end of device [ 179.399190][ T7991] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 179.453279][ T7993] syz.1.792: attempt to access beyond end of device [ 179.453279][ T7993] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 179.456700][ T28] audit: type=1804 audit(1751521039.792:259): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.792" name="/newroot/186/file0/file1" dev="loop1" ino=1048608 res=1 errno=0 [ 179.468421][ T7993] Buffer I/O error on dev loop1, logical block 34225520824, async page read [ 179.489195][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.511515][ T28] audit: type=1800 audit(1751521039.852:260): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.792" name="file1" dev="loop1" ino=1048608 res=0 errno=0 [ 179.543937][ T7994] loop0: detected capacity change from 0 to 2048 [ 179.567879][ T7995] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.157854][ T8017] loop2: detected capacity change from 0 to 4096 [ 180.190196][ T8017] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 180.214080][ T8017] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 180.280761][ T8017] ntfs: volume version 3.1. [ 180.324417][ T8017] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 180.352037][ T8017] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 180.365822][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 180.749570][ T8037] loop2: detected capacity change from 0 to 4096 [ 181.575908][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 181.960850][ T8072] loop3: detected capacity change from 0 to 4096 [ 181.982752][ T8072] ntfs3: Unknown parameter 'measure' [ 182.021634][ T8077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.828'. [ 182.224538][ T8084] loop2: detected capacity change from 0 to 256 [ 182.236324][ T8084] exfat: Deprecated parameter 'namecase' [ 182.255494][ T8084] exfat: Deprecated parameter 'namecase' [ 182.286870][ T8084] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 182.331303][ T8084] syz.2.831: attempt to access beyond end of device [ 182.331303][ T8084] loop2: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 182.351204][ T8084] syz.2.831: attempt to access beyond end of device [ 182.351204][ T8084] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 182.368186][ T28] audit: type=1800 audit(1751521042.712:261): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 182.393165][ T8084] syz.2.831: attempt to access beyond end of device [ 182.393165][ T8084] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 182.427464][ T28] audit: type=1804 audit(1751521042.772:262): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.831" name="/newroot/188/file0/file1" dev="loop2" ino=1048609 res=1 errno=0 [ 182.427691][ T8084] syz.2.831: attempt to access beyond end of device [ 182.427691][ T8084] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 182.468036][ T8084] Buffer I/O error on dev loop2, logical block 34225520824, async page read [ 182.479141][ T28] audit: type=1800 audit(1751521042.822:263): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 182.882751][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.841'. [ 182.944405][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 183.054094][ T8113] loop3: detected capacity change from 0 to 256 [ 183.061741][ T8113] exfat: Deprecated parameter 'namecase' [ 183.069209][ T8113] exfat: Deprecated parameter 'namecase' [ 183.081713][ T8113] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 183.120760][ T8113] syz.3.845: attempt to access beyond end of device [ 183.120760][ T8113] loop3: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 183.145772][ T8113] syz.3.845: attempt to access beyond end of device [ 183.145772][ T8113] loop3: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 183.178597][ T8113] Buffer I/O error on dev loop3, logical block 34225520824, async page read [ 183.310991][ T8122] loop3: detected capacity change from 0 to 8 [ 183.522818][ T8128] loop3: detected capacity change from 0 to 4096 [ 183.830614][ T8130] loop0: detected capacity change from 0 to 32768 [ 183.846161][ T5773] block nbd0: Receive control failed (result -32) [ 183.862071][ T8130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.854 (8130) [ 183.916238][ T8130] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.929033][ T8130] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 183.938077][ T8136] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 183.944632][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.952312][ T8130] BTRFS info (device loop0): setting nodatacow, compression disabled [ 183.960754][ T8130] BTRFS info (device loop0): max_inline at 0 [ 183.966929][ T8130] BTRFS info (device loop0): enabling disk space caching [ 183.974200][ T8130] BTRFS info (device loop0): turning off barriers [ 183.976577][ T8136] vhci_hcd vhci_hcd.0: Device attached [ 183.984290][ T8130] BTRFS info (device loop0): turning on flush-on-commit [ 183.994031][ T8130] BTRFS info (device loop0): doing ref verification [ 184.001135][ T8130] BTRFS info (device loop0): force clearing of disk cache [ 184.015385][ T8130] BTRFS info (device loop0): enabling ssd optimizations [ 184.023979][ T8130] BTRFS info (device loop0): max_inline at 4096 [ 184.036763][ T8130] BTRFS info (device loop0): disk space caching is enabled [ 184.086540][ T8130] BTRFS info (device loop0): auto enabling async discard [ 184.095344][ T8130] BTRFS info (device loop0): rebuilding free space tree [ 184.119335][ T8130] BTRFS info (device loop0): disabling free space tree [ 184.126448][ T8130] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.137192][ T8130] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.241369][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.251899][ T5819] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 184.266778][ T788] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.467726][ T788] usb 4-1: config 0 has no interfaces? [ 184.473669][ T788] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 184.505468][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.533497][ T8164] loop2: detected capacity change from 0 to 4096 [ 184.542291][ T788] usb 4-1: config 0 descriptor?? [ 184.561891][ T8164] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 184.624444][ T8168] loop0: detected capacity change from 0 to 256 [ 184.653376][ T8168] exfat: Deprecated parameter 'namecase' [ 184.670614][ T8168] exfat: Deprecated parameter 'namecase' [ 184.705633][ T8168] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 184.757632][ T8168] bio_check_eod: 2 callbacks suppressed [ 184.757647][ T8168] syz.0.859: attempt to access beyond end of device [ 184.757647][ T8168] loop0: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 184.802446][ T8168] syz.0.859: attempt to access beyond end of device [ 184.802446][ T8168] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 184.825943][ T8172] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 184.832473][ T23] usb 4-1: USB disconnect, device number 8 [ 184.839144][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 184.839173][ T28] audit: type=1800 audit(1751521045.172:269): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.859" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 184.847022][ T8137] vhci_hcd: connection closed [ 184.877446][ T8168] syz.0.859: attempt to access beyond end of device [ 184.877446][ T8168] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 184.928080][ T48] vhci_hcd: stop threads [ 184.932417][ T48] vhci_hcd: release socket [ 184.937985][ T8172] team0: Port device dummy0 added [ 184.947630][ T48] vhci_hcd: disconnect device [ 184.967759][ T8174] syz.0.859: attempt to access beyond end of device [ 184.967759][ T8174] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 184.975634][ T28] audit: type=1804 audit(1751521045.312:270): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.859" name="/newroot/223/file0/file1" dev="loop0" ino=1048611 res=1 errno=0 [ 185.020217][ T5819] usb 39-1: device descriptor read/64, error -71 [ 185.020800][ T8174] Buffer I/O error on dev loop0, logical block 34225520824, async page read [ 185.067418][ T28] audit: type=1800 audit(1751521045.412:271): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.859" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 185.156026][ T8177] loop1: detected capacity change from 0 to 512 [ 185.213007][ T8177] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 185.231515][ T8177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 185.235645][ T5819] vhci_hcd: vhci_device speed not set [ 185.239890][ T8177] System zones: 0-1, 15-15, 18-18, 34-34 [ 185.251463][ T8177] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.259266][ T8177] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 185.268763][ T8177] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.283696][ T8177] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 185.298048][ T8177] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.868: bg 0: block 40: padding at end of block bitmap is not set [ 185.312804][ T8177] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 185.323491][ T8177] EXT4-fs (loop1): 1 truncate cleaned up [ 185.330654][ T8177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.374854][ T8177] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.868: bad symlink. [ 185.398810][ T8177] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.868: bad symlink. [ 185.499489][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.642796][ T8175] loop2: detected capacity change from 0 to 32768 [ 185.779590][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 185.966947][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 186.058165][ T8196] loop1: detected capacity change from 0 to 4096 [ 186.171696][ T8200] loop0: detected capacity change from 0 to 2048 [ 186.214034][ T8200] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.288507][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.326888][ T8200] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 9: comm syz.0.877: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 186.370271][ T8200] EXT4-fs (loop0): Remounting filesystem read-only [ 186.470780][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.783771][ T8204] loop2: detected capacity change from 0 to 32768 [ 186.810041][ T8204] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.945804][ T8204] XFS (loop2): Ending clean mount [ 186.966060][ T8204] XFS (loop2): Quotacheck needed: Please wait. [ 187.061382][ T8204] XFS (loop2): Quotacheck: Done. [ 187.207163][ T6118] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.405341][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.462470][ T8236] loop3: detected capacity change from 0 to 1024 [ 187.583571][ T8238] loop2: detected capacity change from 0 to 4096 [ 187.590565][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 187.604966][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 187.629911][ T27] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 187.655006][ T27] usb 1-1: Product: syz [ 187.662278][ T27] usb 1-1: Manufacturer: syz [ 187.668191][ T8240] loop3: detected capacity change from 0 to 4096 [ 187.675284][ T27] usb 1-1: SerialNumber: syz [ 187.681322][ T8240] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 187.688247][ T27] usb 1-1: config 0 descriptor?? [ 187.702781][ T27] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 187.730833][ T8240] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 187.744265][ T8240] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 187.957319][ T8244] loop3: detected capacity change from 0 to 256 [ 187.982955][ T8244] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 187.995852][ T8244] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 188.043074][ T8244] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 188.051886][ T8244] exFAT-fs (loop3): Filesystem has been set read-only [ 188.287430][ T8242] loop2: detected capacity change from 0 to 32768 [ 188.300070][ T8242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.893 (8242) [ 188.312854][ T8249] loop3: detected capacity change from 0 to 512 [ 188.318947][ T8242] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.333160][ T27] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 188.334730][ T8242] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 188.351947][ T8242] BTRFS info (device loop2): setting nodatacow, compression disabled [ 188.355449][ T8249] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.896: casefold flag without casefold feature [ 188.364958][ T8242] BTRFS info (device loop2): max_inline at 0 [ 188.380071][ T8249] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.896: couldn't read orphan inode 15 (err -117) [ 188.383447][ T8242] BTRFS info (device loop2): enabling disk space caching [ 188.394129][ T8249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.403950][ T8242] BTRFS info (device loop2): turning off barriers [ 188.422718][ T8242] BTRFS info (device loop2): turning on flush-on-commit [ 188.433572][ T8242] BTRFS info (device loop2): doing ref verification [ 188.440528][ T8242] BTRFS info (device loop2): force clearing of disk cache [ 188.447993][ T8242] BTRFS info (device loop2): enabling ssd optimizations [ 188.455142][ T8242] BTRFS info (device loop2): max_inline at 4096 [ 188.461730][ T8242] BTRFS info (device loop2): disk space caching is enabled [ 188.502271][ T8242] BTRFS info (device loop2): auto enabling async discard [ 188.511770][ T8242] BTRFS info (device loop2): rebuilding free space tree [ 188.514758][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.546683][ T8242] BTRFS info (device loop2): disabling free space tree [ 188.553638][ T788] usb 1-1: USB disconnect, device number 9 [ 188.553670][ T8242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.572437][ T8242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.648233][ T28] audit: type=1804 audit(1751521048.992:272): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.893" name="/newroot/203/file1/file1" dev="loop2" ino=260 res=1 errno=0 [ 188.695504][ T28] audit: type=1800 audit(1751521049.012:273): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 188.725854][ T6118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.737821][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 188.813112][ T8272] loop3: detected capacity change from 0 to 256 [ 188.822600][ T8272] exfat: Deprecated parameter 'utf8' [ 188.861013][ T8272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 189.070087][ T8276] loop2: detected capacity change from 0 to 16 [ 189.084013][ T8276] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 189.265106][ T8282] loop2: detected capacity change from 0 to 1024 [ 189.534883][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.582650][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.589558][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.596384][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.603158][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.609970][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.616792][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.623559][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.630430][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.637247][ T8291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 189.704004][ T8280] loop3: detected capacity change from 0 to 32768 [ 189.744346][ T8280] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.951864][ T8280] XFS (loop3): Ending clean mount [ 189.971651][ T8280] XFS (loop3): Quotacheck needed: Please wait. [ 190.158417][ T8280] XFS (loop3): Quotacheck: Done. [ 190.379393][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 190.394154][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.912'. [ 190.414326][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.425082][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 190.443561][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.912'. [ 190.563046][ T8298] loop2: detected capacity change from 0 to 32768 [ 190.706685][ T8298] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.938938][ T8298] XFS (loop2): Ending clean mount [ 191.187486][ T8335] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 191.289936][ T6118] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.740969][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 191.877366][ T8358] bridge_slave_0: left allmulticast mode [ 191.883089][ T8358] bridge_slave_0: left promiscuous mode [ 191.906320][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.934929][ T8358] bridge_slave_1: left allmulticast mode [ 191.945069][ T8358] bridge_slave_1: left promiscuous mode [ 191.955443][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.984079][ T8358] bond0: (slave bond_slave_0): Releasing backup interface [ 192.003046][ T8358] bond_slave_0: left promiscuous mode [ 192.050403][ T8358] bond0: (slave bond_slave_1): Releasing backup interface [ 192.061180][ T8358] bond_slave_1: left promiscuous mode [ 192.186391][ T8358] team0: Port device team_slave_0 removed [ 192.236068][ T8358] team0: Port device team_slave_1 removed [ 192.251903][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.261976][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.286580][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.312226][ T8358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.497791][ T8377] loop3: detected capacity change from 0 to 8192 [ 192.506959][ T8377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 192.520272][ T8377] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 192.530938][ T8377] REISERFS (device loop3): using ordered data mode [ 192.537835][ T8377] reiserfs: using flush barriers [ 192.548653][ T8377] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.572219][ T8377] REISERFS (device loop3): checking transaction log (loop3) [ 192.590061][ T8377] REISERFS (device loop3): Using rupasov hash to sort names [ 192.603092][ T8377] REISERFS (device loop3): using 3.5.x disk format [ 192.612796][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.625537][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.638554][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.650098][ T8377] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 192.664687][ T8377] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 192.697611][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.715635][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.747738][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.771067][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.792987][ T8377] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.793375][ T8386] netlink: 'syz.0.943': attribute type 6 has an invalid length. [ 192.815747][ T8386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.943'. [ 192.829425][ T8387] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.842636][ T8387] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 192.987369][ T8393] capability: warning: `syz.0.946' uses 32-bit capabilities (legacy support in use) [ 192.998206][ T8393] Falling back ldisc for ttyS3. [ 193.201051][ T8402] loop2: detected capacity change from 0 to 16 [ 193.212633][ T8402] erofs: (device loop2): mounted with root inode @ nid 36. [ 193.304740][ T8406] loop2: detected capacity change from 0 to 512 [ 193.318026][ T8406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.372192][ T8406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.389536][ T8406] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.475377][ T28] audit: type=1800 audit(1751521053.812:274): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.495799][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.534148][ T28] audit: type=1800 audit(1751521053.842:275): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 193.600007][ T6118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.775089][ T8429] netlink: 'syz.0.961': attribute type 11 has an invalid length. [ 194.115867][ T8445] loop0: detected capacity change from 0 to 1024 [ 194.170002][ T8445] hfsplus: xattr searching failed [ 194.176453][ T28] audit: type=1800 audit(1751521054.522:276): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 194.201402][ T8445] hfsplus: xattr searching failed [ 194.210414][ T28] audit: type=1800 audit(1751521054.552:277): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 194.300796][ T8450] loop0: detected capacity change from 0 to 16 [ 194.312767][ T8450] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.500192][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.506899][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.813119][ T8454] loop0: detected capacity change from 0 to 32768 [ 194.858854][ T8454] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 194.912421][ T8465] loop2: detected capacity change from 0 to 4096 [ 194.955485][ T8467] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.998939][ T28] audit: type=1800 audit(1751521055.342:278): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.978" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 195.100466][ T5771] [ 195.102863][ T5771] ====================================================== [ 195.109904][ T5771] WARNING: possible circular locking dependency detected [ 195.116965][ T5771] 6.6.95-syzkaller #0 Not tainted [ 195.122013][ T5771] ------------------------------------------------------ [ 195.129170][ T5771] syz-executor/5771 is trying to acquire lock: [ 195.135352][ T5771] ffff888059bc5f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 195.135722][ T8461] loop3: detected capacity change from 0 to 32768 [ 195.148529][ T5771] [ 195.148529][ T5771] but task is already holding lock: [ 195.148538][ T5771] ffff888059bbd118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 195.148600][ T5771] [ 195.148600][ T5771] which lock already depends on the new lock. [ 195.148600][ T5771] [ 195.148606][ T5771] [ 195.148606][ T5771] the existing dependency chain (in reverse order) is: [ 195.148612][ T5771] [ 195.148612][ T5771] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 195.157862][ T8461] (syz.3.977,8461,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.162410][ T5771] #5){+.+.}-{3:3} [ 195.175550][ T8461] (syz.3.977,8461,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.185489][ T5771] : [ 195.185510][ T5771] down_write+0x97/0x1f0 [ 195.185542][ T5771] __ocfs2_move_extents_range+0x1a65/0x3360 [ 195.247686][ T5771] ocfs2_move_extents+0x379/0x940 [ 195.253257][ T5771] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 195.259376][ T5771] ocfs2_ioctl+0x195/0x750 [ 195.264416][ T5771] __se_sys_ioctl+0xfd/0x170 [ 195.269545][ T5771] do_syscall_64+0x55/0xb0 [ 195.274498][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.280979][ T5771] [ 195.280979][ T5771] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 195.291515][ T5771] __lock_acquire+0x2ddb/0x7c80 [ 195.296907][ T5771] lock_acquire+0x197/0x410 [ 195.301960][ T5771] down_write+0x97/0x1f0 [ 195.306740][ T5771] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 195.313093][ T5771] ocfs2_flush_truncate_log+0x4f/0x60 [ 195.319034][ T5771] ocfs2_sync_fs+0x117/0x310 [ 195.324160][ T5771] sync_filesystem+0x1c2/0x220 [ 195.329459][ T5771] generic_shutdown_super+0x6f/0x2b0 [ 195.335276][ T5771] kill_block_super+0x44/0x90 [ 195.340515][ T5771] deactivate_locked_super+0x97/0x100 [ 195.346418][ T5771] cleanup_mnt+0x429/0x4c0 [ 195.351370][ T5771] task_work_run+0x1ce/0x250 [ 195.356493][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 195.362318][ T5771] exit_to_user_mode_prepare+0xb1/0x140 [ 195.368404][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 195.374409][ T5771] do_syscall_64+0x61/0xb0 [ 195.379368][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.385805][ T5771] [ 195.385805][ T5771] other info that might help us debug this: [ 195.385805][ T5771] [ 195.396046][ T5771] Possible unsafe locking scenario: [ 195.396046][ T5771] [ 195.403500][ T5771] CPU0 CPU1 [ 195.408874][ T5771] ---- ---- [ 195.414252][ T5771] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 195.421556][ T5771] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 195.431382][ T5771] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 195.441224][ T5771] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 195.448525][ T5771] [ 195.448525][ T5771] *** DEADLOCK *** [ 195.448525][ T5771] [ 195.456678][ T5771] 2 locks held by syz-executor/5771: [ 195.461974][ T5771] #0: ffff888140b400e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 195.472183][ T5771] #1: ffff888059bbd118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 195.485369][ T5771] [ 195.485369][ T5771] stack backtrace: [ 195.491275][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 195.499438][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.509513][ T5771] Call Trace: [ 195.512803][ T5771] [ 195.515759][ T5771] dump_stack_lvl+0x16c/0x230 [ 195.520474][ T5771] ? load_image+0x3b0/0x3b0 [ 195.525020][ T5771] ? show_regs_print_info+0x20/0x20 [ 195.530248][ T5771] ? print_circular_bug+0x12b/0x1a0 [ 195.535465][ T5771] check_noncircular+0x2bd/0x3c0 [ 195.540424][ T5771] ? print_deadlock_bug+0x5d0/0x5d0 [ 195.545634][ T5771] ? lockdep_lock+0xe0/0x220 [ 195.550263][ T5771] ? _find_first_zero_bit+0xd3/0x100 [ 195.555589][ T5771] __lock_acquire+0x2ddb/0x7c80 [ 195.560462][ T5771] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 195.566463][ T5771] ? __lock_acquire+0x7c80/0x7c80 [ 195.571761][ T5771] ? verify_lock_unused+0x140/0x140 [ 195.576974][ T5771] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 195.582624][ T5771] ? do_raw_spin_lock+0x121/0x2c0 [ 195.587691][ T5771] ? mutex_unlock+0x10/0x10 [ 195.592224][ T5771] lock_acquire+0x197/0x410 [ 195.596741][ T5771] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 195.602752][ T5771] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 195.608751][ T5771] ? __might_sleep+0xe0/0xe0 [ 195.613356][ T5771] ? read_lock_is_recursive+0x20/0x20 [ 195.618743][ T5771] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 195.624915][ T5771] ? __wake_up+0x11f/0x190 [ 195.629353][ T5771] down_write+0x97/0x1f0 [ 195.633612][ T5771] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 195.639614][ T5771] ? down_read_killable+0x340/0x340 [ 195.644835][ T5771] ? _raw_write_unlock+0x28/0x40 [ 195.649782][ T5771] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 195.655604][ T5771] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 195.661437][ T5771] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 195.667694][ T5771] ? read_lock_is_recursive+0x20/0x20 [ 195.673089][ T5771] ? down_write+0x162/0x1f0 [ 195.677610][ T5771] ? down_read_killable+0x340/0x340 [ 195.682825][ T5771] ? __rwlock_init+0x150/0x150 [ 195.687614][ T5771] ocfs2_flush_truncate_log+0x4f/0x60 [ 195.693008][ T5771] ocfs2_sync_fs+0x117/0x310 [ 195.697615][ T5771] ? ocfs2_put_super+0x1c0/0x1c0 [ 195.702565][ T5771] ? writeback_inodes_sb_nr+0x30/0x30 [ 195.708002][ T5771] ? get_nr_dirty_inodes+0x1d4/0x220 [ 195.713306][ T5771] sync_filesystem+0x1c2/0x220 [ 195.718090][ T5771] generic_shutdown_super+0x6f/0x2b0 [ 195.723394][ T5771] kill_block_super+0x44/0x90 [ 195.728172][ T5771] deactivate_locked_super+0x97/0x100 [ 195.733562][ T5771] cleanup_mnt+0x429/0x4c0 [ 195.738002][ T5771] task_work_run+0x1ce/0x250 [ 195.742614][ T5771] ? task_work_cancel+0x240/0x240 [ 195.747655][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 195.753135][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 195.758436][ T5771] exit_to_user_mode_prepare+0xb1/0x140 [ 195.763998][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 195.769471][ T5771] do_syscall_64+0x61/0xb0 [ 195.773917][ T5771] ? clear_bhb_loop+0x40/0x90 [ 195.778603][ T5771] ? clear_bhb_loop+0x40/0x90 [ 195.783291][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.789205][ T5771] RIP: 0033:0x7f9350d8fc57 [ 195.793653][ T5771] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 195.813396][ T5771] RSP: 002b:00007ffe8d4675b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 195.821827][ T5771] RAX: 0000000000000000 RBX: 00007f9350e10925 RCX: 00007f9350d8fc57 [ 195.829809][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8d467670 [ 195.837793][ T5771] RBP: 00007ffe8d467670 R08: 0000000000000000 R09: 0000000000000000 [ 195.845772][ T5771] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8d468700 [ 195.853751][ T5771] R13: 00007f9350e10925 R14: 000000000002f993 R15: 00007ffe8d468740 [ 195.861741][ T5771] [ 195.864832][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.893524][ T8461] JBD2: Ignoring recovery information on journal [ 195.922243][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 195.968612][ T8461] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.042707][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 196.098418][ T8474] iommufd_mock iommufd_mock1: Adding to iommu group 0