last executing test programs: 3m3.141563467s ago: executing program 2 (id=7): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x88b81, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 3m3.015579998s ago: executing program 2 (id=8): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000060c0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000400100000000000040"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) 3m2.874290691s ago: executing program 2 (id=9): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40088) 3m2.828483285s ago: executing program 2 (id=10): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000340)={[{@discard_unit_block}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@noinline_data}, {@jqfmt_vfsold}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@memory_normal}, {@alloc_mode_def}, {@noheap}, {@block_mode}, {@extent_cache}, {@atgc}, {@user_xattr}]}, 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m1.97442862s ago: executing program 2 (id=11): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe6a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m0.50958867s ago: executing program 2 (id=15): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa80d, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000300)=""/10, 0xa}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 3m0.138781433s ago: executing program 32 (id=15): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa80d, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000300)=""/10, 0xa}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m44.54689353s ago: executing program 5 (id=649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private}}, {@in, 0x0, 0x32}, @in6=@loopback}, 0x0, 0x4}}, 0xf8}}, 0x0) 1m44.365309086s ago: executing program 5 (id=651): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca34880080000000000000008000380640003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m44.164273734s ago: executing program 5 (id=653): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x61c6, &(0x7f000000ac00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m43.002418807s ago: executing program 5 (id=665): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0) 1m41.514051599s ago: executing program 5 (id=685): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 1m41.283392889s ago: executing program 5 (id=689): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x440100, 0x0) r0 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m26.169725816s ago: executing program 33 (id=689): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x440100, 0x0) r0 = fsopen(&(0x7f0000000200)='cramfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10.16548526s ago: executing program 0 (id=1493): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 9.231966063s ago: executing program 0 (id=1499): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 8.337570452s ago: executing program 0 (id=1508): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) 7.921574539s ago: executing program 0 (id=1511): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 7.475560009s ago: executing program 0 (id=1518): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfffc, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [0x0, 0xffffff00], [], 'veth1\x00', 'wlan1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 6.825576846s ago: executing program 0 (id=1523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 6.589290787s ago: executing program 34 (id=1523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 5.222450298s ago: executing program 4 (id=1538): r0 = syz_io_uring_setup(0x19a, &(0x7f0000000340)={0x0, 0x2, 0x100, 0x2, 0x40059}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@nl=@unspec}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 5.012184396s ago: executing program 4 (id=1541): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x3b) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0x8]}, 0x8}) 4.928501594s ago: executing program 4 (id=1542): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x551c, &(0x7f00000004c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x1800, 0x0, 0x0) 3.441514365s ago: executing program 4 (id=1550): syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)={[{@eas_rw}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x5, 0x9e2c, &(0x7f0000013e80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) lseek(r0, 0xffffffffffffffff, 0x1) 2.873669046s ago: executing program 1 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="38020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1.993523834s ago: executing program 6 (id=1555): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x124) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) 1.92649392s ago: executing program 1 (id=1556): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) 1.889987773s ago: executing program 4 (id=1557): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000640), 0x4000) 1.849876766s ago: executing program 3 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.762142344s ago: executing program 6 (id=1559): set_mempolicy(0x4005, &(0x7f0000000000)=0x2, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x7, 0xd9e1, 0x0, 0xd}) 1.711330838s ago: executing program 1 (id=1560): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000bc0)={[{@nodiscard}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@noblock_validity}, {@minixdf}, {@nolazytime}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1.598919669s ago: executing program 3 (id=1561): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x109) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400dd}, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x0) 1.163166487s ago: executing program 3 (id=1562): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) 1.096400113s ago: executing program 1 (id=1563): r0 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb{(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadTH\f\xe5\x89\xbf\x00\x00\x00\x00\x00\x00\x98*\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\x00\x00#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x00\x00\x00\x00\x00\x00\x00\b\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xae\b;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61d0\x1ctx\xbb\xabd\xe5\x16\xc4\xae\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\xa4\"\x10XL+f1{O<\xea\xe0<\x02%\x16\xc9\xb5]\xb4\xe4\xab?r\x8a\x1a\xa6\x81\x8bg\x1aa\x94\xb5\xda\xe0\xbbq\\\xe3\x8b,Za\f\xf7,H\xbff\xdc\xfaw\x01\x9fZ\x9e\xc7k\xe0\xd4\x88J\xfa5\x15\v\x82\r\xf5\x1fl6\x9cm\xd1My\xb3\x9c\xfb\x95\xd1\x15\x17\f\xe5\x16\xee{9\xf4\xdb\xfa\"\xbe}\xd0\xac\xd5\xde\xa4\xfb\x10\xd1\xa6\x9awD&\xac\xdcyt\xe08\x03\x9dk3{\x81f\xfbb{\x95\x06\xbc0i\xa2\b\x94v\xccdS^\xe7', 0x0) unshare(0x60600) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) 1.094198593s ago: executing program 6 (id=1564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 750.139744ms ago: executing program 3 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 596.874177ms ago: executing program 1 (id=1566): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x461e, @multicast2}}}, 0x88) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 465.554688ms ago: executing program 4 (id=1567): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 419.634113ms ago: executing program 6 (id=1568): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000003"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 407.846114ms ago: executing program 3 (id=1569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4) 266.119706ms ago: executing program 3 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="040023802c0023800600010005"], 0x4c}, 0x1, 0x0, 0x0, 0x41801}, 0x0) 265.442626ms ago: executing program 1 (id=1571): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x2d0, 0x0, @discrete={0xb, 0x7}}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 97.451211ms ago: executing program 6 (id=1572): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="5a000300010003", 0x7) 0s ago: executing program 6 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) kernel console output (not intermixed with test programs): [ 117.114034][ T5766] XFS (loop0): Quotacheck needed: Please wait. [ 117.130459][ T5799] netlink: 'syz.3.393': attribute type 3 has an invalid length. [ 117.142935][ T5172] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.204636][ T5799] netlink: 812 bytes leftover after parsing attributes in process `syz.3.393'. [ 117.228977][ T5766] XFS (loop0): Quotacheck: Done. [ 117.332543][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 117.340129][ T5172] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 117.380228][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.399207][ T5172] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 117.451036][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.499470][ T5172] usb 2-1: config 0 descriptor?? [ 117.672733][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 117.687753][ T5811] loop5: detected capacity change from 0 to 4096 [ 117.730950][ T5811] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 117.829545][ T4270] XFS (loop0): Unmounting Filesystem [ 117.894057][ T5811] ntfs3: loop5: failed to convert "c46c" to cp866 [ 118.106078][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.288710][ T5172] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 118.296614][ T4338] usb 4-1: Using ep0 maxpacket: 32 [ 118.300486][ T5172] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 118.305325][ T4338] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.309798][ T5172] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 118.325056][ T5172] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 118.332790][ T5172] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 118.346258][ T5172] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 118.346746][ T4338] usb 4-1: config 3 has an invalid interface number: 38 but max is 0 [ 118.391385][ T4338] usb 4-1: config 3 has no interface number 0 [ 118.410560][ T4338] usb 4-1: config 3 interface 38 has no altsetting 0 [ 118.439834][ T4338] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=ed.35 [ 118.450067][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.463506][ T4338] usb 4-1: Product: syz [ 118.467698][ T4338] usb 4-1: Manufacturer: syz [ 118.476042][ T4338] usb 4-1: SerialNumber: syz [ 118.538303][ T5830] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 118.691978][ T5172] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-110) [ 118.718548][ T5172] corsair-psu: probe of 0003:1B1C:1C09.0003 failed with error -110 [ 118.736774][ T4338] usb 4-1: Invalid firmware size=18. [ 118.758738][ T5172] usb 2-1: USB disconnect, device number 4 [ 118.777121][ T4338] usb 4-1: USB disconnect, device number 5 [ 118.970556][ T5839] fido_id[5839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.650053][ T5836] loop5: detected capacity change from 0 to 32768 [ 119.706196][ T5836] gfs2: fsid=Աrۻ_ [ 119.706196][ T5836] b瀫]k;.ĠO:.tUM: Trying to join cluster "lock_nolock", "Աrۻ_ [ 119.706196][ T5836] b瀫]k;.ĠO:.tUM" [ 119.783843][ T5836] gfs2: fsid=Աrۻ_ [ 119.783843][ T5836] b瀫]k;.ĠO:.tUM: Now mounting FS (format 1801)... [ 119.846435][ T5866] netlink: 'syz.4.420': attribute type 2 has an invalid length. [ 119.889718][ T5836] gfs2: fsid=Աrۻ_ [ 119.889718][ T5836] b瀫]k;.ĠO:.tUM.s: journal 0 mapped with 5 extents in 0ms [ 119.951662][ T5836] gfs2: fsid=Աrۻ_ [ 119.951662][ T5836] b瀫]k;.ĠO:.tUM.s: first mount done, others may mount [ 120.479918][ T5876] tap0: tun_chr_ioctl cmd 35111 [ 120.516636][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.565889][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.593081][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.617429][ T5878] device bridge_slave_0 left promiscuous mode [ 120.665007][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.682219][ T5498] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.710458][ T5878] device bridge_slave_1 left promiscuous mode [ 120.717641][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.737163][ T5878] bond0: (slave bond_slave_0): Releasing backup interface [ 120.757564][ T5878] bond0: (slave bond_slave_1): Releasing backup interface [ 120.828224][ T5878] team0: Port device team_slave_0 removed [ 120.864906][ T5878] team0: Port device team_slave_1 removed [ 120.871480][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.877395][ T5498] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.879728][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.902067][ T5498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.903622][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.927578][ T5498] usb 5-1: config 0 descriptor?? [ 120.940219][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.940284][ T5498] cp210x 5-1:0.0: cp210x converter detected [ 121.250559][ T5896] netlink: 21 bytes leftover after parsing attributes in process `syz.0.434'. [ 121.370820][ T5498] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 121.410852][ T5901] loop1: detected capacity change from 0 to 512 [ 121.417633][ T5498] usb 5-1: cp210x converter now attached to ttyUSB0 [ 121.427881][ T5901] EXT4-fs: Ignoring removed oldalloc option [ 121.480586][ T5901] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.520503][ T5901] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 121.528330][ T5901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.438: bg 0: block 248: padding at end of block bitmap is not set [ 121.531054][ T5901] Quota error (device loop1): write_blk: dquota write failed [ 121.531173][ T5901] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 121.531215][ T5901] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.438: Failed to acquire dquot type 1 [ 121.562210][ T5901] EXT4-fs (loop1): 1 truncate cleaned up [ 121.639947][ T5498] usb 5-1: USB disconnect, device number 4 [ 121.648043][ T5498] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.654107][ T5498] cp210x 5-1:0.0: device disconnected [ 121.689357][ T5913] loop5: detected capacity change from 0 to 512 [ 121.690117][ T5913] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.722442][ T5913] EXT4-fs: inline encryption not supported [ 121.728336][ T5913] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.799059][ T5913] EXT4-fs (loop5): Test dummy encryption mode enabled [ 121.811532][ T5913] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.841965][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.891815][ T5913] EXT4-fs (loop5): 1 truncate cleaned up [ 121.897605][ T5913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 122.048226][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 122.054896][ T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 122.073417][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 122.102485][ T5183] EXT4-fs (loop5): unmounting filesystem. [ 122.388172][ T5929] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 122.412059][ T5929] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 122.713681][ T5945] program syz.0.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.891222][ T5951] loop5: detected capacity change from 0 to 1764 [ 123.082548][ T5958] program syz.0.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.034589][ T5989] loop4: detected capacity change from 0 to 256 [ 124.320115][ T6001] device macvlan0 entered promiscuous mode [ 124.355287][ T6001] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 124.386733][ T6001] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 125.137262][ T5999] loop3: detected capacity change from 0 to 32768 [ 125.231354][ T5999] XFS (loop3): Mounting V5 Filesystem [ 125.313708][ T5999] XFS (loop3): Ending clean mount [ 125.356544][ T5999] XFS (loop3): Quotacheck needed: Please wait. [ 125.426918][ T5999] XFS (loop3): Quotacheck: Done. [ 125.555606][ T4271] XFS (loop3): Unmounting Filesystem [ 125.609486][ T6049] loop5: detected capacity change from 0 to 4096 [ 126.034594][ T6058] loop0: detected capacity change from 0 to 4096 [ 126.259074][ T26] audit: type=1800 audit(1771389924.396:6): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.507" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 126.279258][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.532841][ T5507] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.577346][ T6079] loop1: detected capacity change from 0 to 256 [ 126.653804][ T6079] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.688495][ T6056] loop4: detected capacity change from 0 to 40427 [ 126.728801][ T6056] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 126.732110][ T5507] usb 6-1: Using ep0 maxpacket: 16 [ 126.742117][ T6056] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.762702][ T6056] F2FS-fs (loop4): invalid crc value [ 126.764981][ T5507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.807926][ T6056] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.813825][ T5507] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 126.858283][ T5507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.900759][ T5507] usb 6-1: config 0 descriptor?? [ 126.915228][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.936534][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.943396][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.950201][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.958304][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.965121][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.971923][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.974634][ T6090] loop1: detected capacity change from 0 to 64 [ 126.978704][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.991649][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 126.998438][ T6088] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 127.012657][ T4272] Bluetooth: hci3: command 0x0405 tx timeout [ 127.040511][ T6056] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 127.058997][ T6056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.161964][ T4567] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.342613][ T5507] hid (null): unknown global tag 0xc [ 127.351974][ T4567] usb 4-1: Using ep0 maxpacket: 8 [ 127.363839][ T4567] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 127.388515][ T4567] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.439003][ T4567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.449112][ T4567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.459324][ T4567] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.472558][ T4567] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.481607][ T4567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.694172][ T4338] usb 6-1: USB disconnect, device number 5 [ 127.712596][ T4567] usb 4-1: GET_CAPABILITIES returned 0 [ 127.718716][ T4567] usbtmc 4-1:16.0: can't read capabilities [ 127.802160][ T6097] loop0: detected capacity change from 0 to 2048 [ 127.834170][ T6097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.972862][ T4338] usb 4-1: USB disconnect, device number 6 [ 128.256436][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 128.300766][ T6109] device vlan0 entered promiscuous mode [ 128.325716][ T6109] device bond0 entered promiscuous mode [ 128.339281][ T6109] device bond_slave_0 entered promiscuous mode [ 128.357648][ T6109] device bond_slave_1 entered promiscuous mode [ 128.437527][ T6116] loop0: detected capacity change from 0 to 512 [ 128.525491][ T6116] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.529: bg 0: block 393: padding at end of block bitmap is not set [ 128.568311][ T6116] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 128.641023][ T6116] EXT4-fs (loop0): 2 truncates cleaned up [ 128.653993][ T6116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.842341][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 129.021126][ T6132] loop0: detected capacity change from 0 to 1024 [ 129.082687][ T6132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.099683][ T6132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.137056][ T6136] loop4: detected capacity change from 0 to 8 [ 129.268984][ T6132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.470055][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 129.592136][ T6134] loop1: detected capacity change from 0 to 32768 [ 129.646880][ T6156] Bluetooth: MGMT ver 1.22 [ 129.675559][ T6156] Bluetooth: hci0: load_link_keys: expected 6403 bytes, got 7 bytes [ 129.714804][ T6134] XFS (loop1): Mounting V5 Filesystem [ 129.857346][ T6134] XFS (loop1): Ending clean mount [ 129.866001][ T6134] XFS (loop1): Quotacheck needed: Please wait. [ 129.896169][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.903007][ T6134] XFS (loop1): Quotacheck: Done. [ 129.993015][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 130.020293][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 130.044546][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 130.068284][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 130.095546][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 130.137909][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 130.159806][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.435716][ T4266] XFS (loop1): Unmounting Filesystem [ 130.622011][ T6179] 9p: Unknown Cache mode readahead [ 131.142210][ T6196] loop5: detected capacity change from 0 to 512 [ 131.173538][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.557'. [ 131.246206][ T6196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 131.269079][ T6196] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.517802][ T5183] EXT4-fs (loop5): unmounting filesystem. [ 131.533484][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 131.582446][ T6214] loop1: detected capacity change from 0 to 16 [ 131.597371][ T6214] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 131.614640][ T6216] loop3: detected capacity change from 0 to 512 [ 131.673722][ T6220] loop4: detected capacity change from 0 to 256 [ 131.985771][ T6231] loop3: detected capacity change from 0 to 256 [ 132.406562][ T6242] loop3: detected capacity change from 0 to 256 [ 132.489777][ T4310] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.595964][ T6246] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.595964][ T6246] The task syz.0.577 (6246) triggered the difference, watch for misbehavior. [ 132.662246][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668566][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.691174][ T4310] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.724199][ T4310] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.758095][ T4310] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.774824][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.807978][ T6236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.967562][ T6257] exfat: Deprecated parameter 'utf8' [ 133.087761][ T6257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 133.158243][ T4567] usb 5-1: USB disconnect, device number 5 [ 133.724003][ T4338] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 133.909100][ T4338] usb 6-1: Using ep0 maxpacket: 8 [ 133.928418][ T4338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.949115][ T4338] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.968362][ T4338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.979967][ T4338] usb 6-1: config 0 descriptor?? [ 134.197470][ T4338] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.413697][ T5171] usb 6-1: USB disconnect, device number 6 [ 134.458876][ T6288] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 134.458876][ T6288] program syz.3.594 not setting count and/or reply_len properly [ 134.599015][ T4338] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.675114][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 134.793559][ T4338] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 134.813018][ T4338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.836224][ T4338] usb 2-1: Product: syz [ 134.845317][ T4338] usb 2-1: Manufacturer: syz [ 134.855430][ T4338] usb 2-1: SerialNumber: syz [ 134.876491][ T4338] usb 2-1: config 0 descriptor?? [ 134.892728][ T6302] set_capacity_and_notify: 2 callbacks suppressed [ 134.892742][ T6302] loop3: detected capacity change from 0 to 1024 [ 134.899552][ T4338] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 134.948353][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 135.077442][ T9] hfsplus: b-tree write err: -5, ino 4 [ 135.080915][ T6306] loop5: detected capacity change from 0 to 256 [ 135.157746][ T6306] exfat: Deprecated parameter 'utf8' [ 135.200927][ T6306] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 135.463940][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.509097][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 135.540253][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 135.568009][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 135.595934][ T6298] loop0: detected capacity change from 0 to 40427 [ 135.607012][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 135.625154][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 135.668418][ T6298] F2FS-fs (loop0): invalid crc value [ 135.682798][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 135.722335][ T6298] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.750407][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.846117][ T6298] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.052971][ T4270] syz-executor: attempt to access beyond end of device [ 136.052971][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.233598][ T6316] loop4: detected capacity change from 0 to 32768 [ 136.281147][ T6316] XFS (loop4): Mounting V5 Filesystem [ 136.354729][ T6316] XFS (loop4): Ending clean mount [ 136.366819][ T6316] XFS (loop4): Quotacheck needed: Please wait. [ 136.493053][ T6316] XFS (loop4): Quotacheck: Done. [ 136.926234][ T6347] Zero length message leads to an empty skb [ 137.082276][ T6351] loop3: detected capacity change from 0 to 128 [ 137.086684][ T4275] XFS (loop4): Unmounting Filesystem [ 137.142757][ T6351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.166127][ T6351] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.273500][ T6351] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 137.347065][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 137.416474][ T5174] usb 2-1: USB disconnect, device number 5 [ 138.296035][ T6365] loop1: detected capacity change from 0 to 32768 [ 138.336142][ T6365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.621 (6365) [ 138.428272][ T6365] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.457566][ T6365] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.486767][ T6365] BTRFS info (device loop1): setting nodatasum [ 138.498304][ T6365] BTRFS info (device loop1): force zlib compression, level 3 [ 138.510697][ T6365] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 138.535643][ T6365] BTRFS info (device loop1): use lzo compression, level 0 [ 138.559873][ T6365] BTRFS info (device loop1): turning on flush-on-commit [ 138.600251][ T6365] BTRFS info (device loop1): enabling auto defrag [ 138.620749][ T6365] BTRFS info (device loop1): max_inline at 4096 [ 138.648592][ T6365] BTRFS info (device loop1): using free space tree [ 139.101327][ T6365] BTRFS info (device loop1): enabling ssd optimizations [ 139.543788][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.606269][ T5171] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.820354][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 139.828022][ T5171] usb 1-1: Using ep0 maxpacket: 16 [ 139.841185][ T5171] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.872912][ T6431] netlink: 152 bytes leftover after parsing attributes in process `syz.4.640'. [ 139.883892][ T5171] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.938747][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.984604][ T5171] usb 1-1: config 0 descriptor?? [ 140.309301][ T6429] loop3: detected capacity change from 0 to 32768 [ 140.384285][ T6453] loop5: detected capacity change from 0 to 16 [ 140.414009][ T5171] hid (null): unknown global tag 0xc [ 140.443941][ T6429] XFS (loop3): Mounting V5 Filesystem [ 140.461324][ T6453] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 140.572281][ T6429] XFS (loop3): Ending clean mount [ 140.592347][ T6429] XFS (loop3): Quotacheck needed: Please wait. [ 140.678385][ T6429] XFS (loop3): Quotacheck: Done. [ 140.730636][ T5171] usb 1-1: USB disconnect, device number 4 [ 140.794188][ T4271] XFS (loop3): Unmounting Filesystem [ 141.274267][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 141.384946][ T6476] device vlan2 entered promiscuous mode [ 141.410209][ T6476] device bond0 entered promiscuous mode [ 141.433823][ T6476] device bond_slave_1 entered promiscuous mode [ 141.712759][ T6485] loop1: detected capacity change from 0 to 4096 [ 141.758224][ T6485] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 141.810651][ T6485] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 141.846081][ T6485] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 141.913695][ T6485] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 141.995040][ T6485] ntfs: volume version 3.1. [ 142.011822][ T6485] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 142.034970][ T6485] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 142.054844][ T6472] loop5: detected capacity change from 0 to 32768 [ 142.119191][ T6472] JFS: Invalid stbl[0] = -1 for inode 2, block = 0 [ 142.205245][ T6485] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x2340, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 142.292243][ T6485] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 142.342331][ T6485] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x2340 as bad. Run chkdsk. [ 142.934714][ T6511] loop1: detected capacity change from 0 to 1024 [ 143.112776][ T4350] hfsplus: b-tree write err: -5, ino 4 [ 143.834425][ T6544] loop0: detected capacity change from 0 to 1024 [ 143.874588][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 143.914186][ T5171] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.007293][ T4350] hfsplus: b-tree write err: -5, ino 4 [ 144.123903][ T5171] usb 2-1: Using ep0 maxpacket: 32 [ 144.130713][ T5171] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.160610][ T5171] usb 2-1: config 0 has no interface number 0 [ 144.182876][ T5171] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.223857][ T5171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.231924][ T5171] usb 2-1: Product: syz [ 144.236652][ T5171] usb 2-1: Manufacturer: syz [ 144.241267][ T5171] usb 2-1: SerialNumber: syz [ 144.264178][ T5171] usb 2-1: config 0 descriptor?? [ 144.290341][ T5171] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.402641][ T6556] loop4: detected capacity change from 0 to 4096 [ 144.478286][ T6556] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 144.488624][ T5171] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.534862][ T5171] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.701849][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 97 [ 144.717993][ T6550] loop3: detected capacity change from 0 to 32768 [ 144.754099][ T6550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.687 (6550) [ 144.872504][ T6550] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.904438][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.908882][ T5507] usb 2-1: USB disconnect, device number 6 [ 144.919613][ T6550] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 144.943640][ T6550] BTRFS info (device loop3): setting nodatacow, compression disabled [ 144.951752][ T6550] BTRFS info (device loop3): using free space tree [ 144.967199][ T5507] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.017094][ T5507] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.053944][ T5507] quatech2 2-1:0.51: device disconnected [ 145.216867][ T6550] BTRFS info (device loop3): enabling ssd optimizations [ 145.554660][ T4271] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.043070][ T5507] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.172479][ T6602] loop4: detected capacity change from 0 to 256 [ 146.244956][ T5507] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.277077][ T5507] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.322509][ T5507] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.350643][ T5507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.369968][ T6593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.680739][ T6612] loop4: detected capacity change from 0 to 256 [ 146.690336][ T7] usb 1-1: USB disconnect, device number 5 [ 146.701093][ T6608] loop3: detected capacity change from 0 to 128 [ 146.749258][ T6612] exFAT-fs (loop4): failed to read boot sector [ 146.787403][ T6612] exFAT-fs (loop4): failed to recognize exfat type [ 146.999987][ T6616] loop1: detected capacity change from 0 to 1024 [ 147.021504][ T6616] EXT4-fs: Ignoring removed bh option [ 147.043282][ T6616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 147.095985][ T6616] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.708: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.116411][ T6616] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 147.124900][ T6616] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.708: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.142447][ T5168] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.154642][ T6616] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 147.165924][ T6616] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.708: Failed to acquire dquot type 0 [ 147.178441][ T6616] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 147.197197][ T6616] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.708: mark_inode_dirty error [ 147.216540][ T6616] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 147.228963][ T6616] EXT4-fs (loop1): 1 orphan inode deleted [ 147.252472][ T6616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.271664][ T4476] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.290904][ T4476] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 147.317681][ T4476] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 147.332510][ T6616] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz.1.708: lblock 0 mapped to illegal pblock 16 (length 1) [ 147.354224][ T5168] usb 5-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 147.382292][ T5168] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.422269][ T5168] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.454174][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.468222][ T5168] usb 5-1: SerialNumber: syz [ 147.485638][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 147.512475][ T4266] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 147.535560][ T4266] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 147.551243][ T6624] loop0: detected capacity change from 0 to 64 [ 147.569648][ T4266] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 147.768442][ T5168] usb 5-1: 0:2 : does not exist [ 147.811836][ T5168] usb 5-1: USB disconnect, device number 6 [ 147.822998][ T6630] loop3: detected capacity change from 0 to 512 [ 147.892778][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.714: inode #2214592512: comm syz.3.714: iget: illegal inode # [ 147.939906][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.714: error while reading EA inode 2214592512 err=-117 [ 147.977350][ T6630] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.072866][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.714: inode #2214592512: comm syz.3.714: iget: illegal inode # [ 148.094179][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.139534][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.714: error while reading EA inode 2214592512 err=-117 [ 148.204378][ T6639] loop1: detected capacity change from 0 to 2048 [ 148.204529][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.714: inode #1: comm syz.3.714: iget: illegal inode # [ 148.246191][ T6630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.714: error while reading EA inode 1 err=-117 [ 148.269168][ T6642] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.280984][ T6630] EXT4-fs (loop3): 1 orphan inode deleted [ 148.306290][ T6630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.617789][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 148.779097][ T6654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.723'. [ 149.089139][ T6664] loop1: detected capacity change from 0 to 256 [ 149.159556][ T4635] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.205113][ T6673] loop7: detected capacity change from 0 to 524255232 [ 149.520290][ T6683] loop3: detected capacity change from 0 to 512 [ 150.096658][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.116950][ T6695] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 150.177795][ T6695] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 150.247661][ T6688] (syz.0.739,6688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.281061][ T6695] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 150.281595][ T6697] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.306269][ T6688] (syz.0.739,6688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.330500][ T6695] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 150.374062][ T6688] JBD2: Ignoring recovery information on journal [ 150.429517][ T6695] ntfs: volume version 3.1. [ 150.498897][ T6695] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 150.520556][ T6697] EXT4-fs (loop3): shut down requested (2) [ 150.529529][ T6695] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 150.577940][ T6688] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.657690][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 150.701144][ T6695] ntfs: (device loop4): map_mft_record_page(): Attempt to read mft record 0x2340, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 151.169544][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 151.277640][ T6718] netlink: 'syz.4.753': attribute type 12 has an invalid length. [ 151.749680][ T6732] set_capacity_and_notify: 3 callbacks suppressed [ 151.749697][ T6732] loop0: detected capacity change from 0 to 256 [ 151.932827][ T6732] FAT-fs (loop0): Directory bread(block 64) failed [ 151.980186][ T6732] FAT-fs (loop0): Directory bread(block 65) failed [ 152.002991][ T6732] FAT-fs (loop0): Directory bread(block 66) failed [ 152.016995][ T6732] FAT-fs (loop0): Directory bread(block 67) failed [ 152.035392][ T6732] FAT-fs (loop0): Directory bread(block 68) failed [ 152.054695][ T6732] FAT-fs (loop0): Directory bread(block 69) failed [ 152.078232][ T6732] FAT-fs (loop0): Directory bread(block 70) failed [ 152.095211][ T6732] FAT-fs (loop0): Directory bread(block 71) failed [ 152.117963][ T6732] FAT-fs (loop0): Directory bread(block 72) failed [ 152.129959][ T6732] FAT-fs (loop0): Directory bread(block 73) failed [ 152.464571][ T4567] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.666892][ T4567] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 152.701991][ T4567] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 152.731773][ T4567] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 152.744558][ T6749] loop0: detected capacity change from 0 to 128 [ 152.765272][ T4567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.797010][ T4567] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 152.818935][ T6749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.897466][ T6749] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.002518][ T4567] gspca_sn9c2028: read1 error -32 [ 153.021340][ T6749] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0e) [ 153.030609][ T4567] gspca_sn9c2028: read1 error -32 [ 153.123222][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 153.247396][ T7] usb 2-1: USB disconnect, device number 7 [ 153.848492][ T6766] loop0: detected capacity change from 0 to 4096 [ 153.889766][ T6766] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 154.174944][ T6773] loop1: detected capacity change from 0 to 2048 [ 154.248910][ T6773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.427980][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.777'. [ 154.861228][ T6792] loop3: detected capacity change from 0 to 128 [ 155.080389][ T6796] loop1: detected capacity change from 0 to 136 [ 155.092063][ T6775] loop0: detected capacity change from 0 to 40427 [ 155.159968][ T6775] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.168160][ T6775] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.192198][ T6798] loop3: detected capacity change from 0 to 1024 [ 155.211687][ T6796] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 155.217105][ T6775] F2FS-fs (loop0): invalid crc value [ 155.255681][ T6775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.285413][ T6798] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.382277][ T6798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.475275][ T6798] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.509100][ T6775] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.516180][ T6775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.651920][ T6798] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.785: lblock 3 mapped to illegal pblock 3 (length 3) [ 155.736149][ T6798] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 155.774643][ T6798] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.774643][ T6798] [ 155.884472][ T9] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 5) [ 155.931686][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.944536][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 155.965931][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.967759][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.967759][ T9] [ 155.994538][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.998832][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 156.027381][ T6816] net_ratelimit: 3320 callbacks suppressed [ 156.027395][ T6816] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 156.063234][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 156.084918][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.084918][ T9] [ 156.150602][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 156.529576][ T4567] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.590123][ T6830] loop7: detected capacity change from 0 to 524255232 [ 156.747660][ T4567] usb 2-1: Using ep0 maxpacket: 32 [ 156.754644][ T4567] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.766415][ T6833] loop0: detected capacity change from 0 to 24 [ 156.783600][ T4567] usb 2-1: config 0 has no interface number 0 [ 156.807326][ T4567] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 156.816581][ T6833] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 156.839440][ T6833] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 156.846119][ T4567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.866356][ T4567] usb 2-1: Product: syz [ 156.886566][ T4567] usb 2-1: Manufacturer: syz [ 156.895112][ T4567] usb 2-1: SerialNumber: syz [ 156.958610][ T4567] usb 2-1: config 0 descriptor?? [ 157.005467][ T4567] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 157.119907][ T6823] loop4: detected capacity change from 0 to 32768 [ 157.192732][ T4567] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 157.235152][ T6823] XFS (loop4): Mounting V5 Filesystem [ 157.241951][ T4567] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 157.306554][ T6850] block nbd0: Unsupported socket: should be TCP or UNIX. [ 157.394812][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 157.471123][ T6823] XFS (loop4): Ending clean mount [ 157.595261][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 157.604756][ T4567] usb 2-1: USB disconnect, device number 8 [ 157.656341][ T4567] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 157.735573][ T4567] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 157.755871][ T4567] quatech2 2-1:0.51: device disconnected [ 158.224121][ T4275] XFS (loop4): Unmounting Filesystem [ 158.659873][ T6868] input: syz1 as /devices/virtual/input/input10 [ 158.837711][ T6872] program syz.3.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.353065][ T6862] loop1: detected capacity change from 0 to 40427 [ 159.391658][ T6862] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(2560) blocks(0) [ 159.402619][ T6889] loop0: detected capacity change from 0 to 4096 [ 159.421680][ T6862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 159.454512][ T6862] F2FS-fs (loop1): invalid crc value [ 159.470040][ T6892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.514380][ T6862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.640185][ T5507] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.746288][ T6862] F2FS-fs (loop1): Start checkpoint disabled! [ 159.781442][ T6862] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 159.804505][ T6862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 159.836116][ T5507] usb 4-1: Using ep0 maxpacket: 8 [ 159.843509][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 159.843523][ T26] audit: type=1326 audit(1771389957.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 159.877351][ T5507] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.908137][ T6902] loop4: detected capacity change from 0 to 512 [ 159.914637][ T5507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.943404][ T5507] usb 4-1: Product: syz [ 159.950304][ T5507] usb 4-1: Manufacturer: syz [ 159.956194][ T5507] usb 4-1: SerialNumber: syz [ 159.963411][ T6902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.983779][ T5507] usb 4-1: config 0 descriptor?? [ 159.995549][ T26] audit: type=1326 audit(1771389958.031:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 160.133759][ T26] audit: type=1326 audit(1771389958.041:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 160.156419][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.167502][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.175648][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.188458][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.197614][ T6902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.207426][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.214655][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.236034][ T6902] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.238045][ T5507] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.279196][ T26] audit: type=1326 audit(1771389958.041:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 160.337939][ T11] kworker/u4:1: attempt to access beyond end of device [ 160.337939][ T11] loop1: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 160.430688][ T11] kworker/u4:1: attempt to access beyond end of device [ 160.430688][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 160.461693][ T26] audit: type=1326 audit(1771389958.041:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 160.510259][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.551139][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 160.573831][ T26] audit: type=1326 audit(1771389958.041:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc75b39c629 code=0x7ffc0000 [ 160.666802][ T5507] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 160.696237][ T5507] usb 4-1: USB disconnect, device number 7 [ 160.704159][ T26] audit: type=1326 audit(1771389958.041:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc75b39c392 code=0x7ffc0000 [ 160.719715][ T6918] loop4: detected capacity change from 0 to 128 [ 160.728955][ T26] audit: type=1326 audit(1771389958.051:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc75b35cece code=0x7ffc0000 [ 160.782608][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.786633][ T6918] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.813336][ T26] audit: type=1326 audit(1771389958.061:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc75b39c457 code=0x7ffc0000 [ 160.842428][ T6918] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.848346][ T26] audit: type=1326 audit(1771389958.061:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc75b35cece code=0x7ffc0000 [ 161.017673][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.070911][ T4476] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.173808][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.404510][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 161.491766][ T6939] loop4: detected capacity change from 0 to 64 [ 161.516996][ T5507] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.669907][ T6945] loop3: detected capacity change from 0 to 512 [ 161.746730][ T5507] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.764546][ T5507] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.810610][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.819664][ T6945] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.836: dx entry: limit 1024 != root limit 124 [ 161.830428][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.848433][ T6909] device bridge_slave_0 entered promiscuous mode [ 161.852123][ T5507] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.865944][ T6945] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.836: Corrupt directory, running e2fsck is recommended [ 161.871144][ T5507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 161.895412][ T5507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 161.909295][ T5507] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.918606][ T5507] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.927108][ T5507] usb 2-1: Product: syz [ 161.931290][ T5507] usb 2-1: Manufacturer: syz [ 161.947830][ T6945] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 161.958921][ T5507] cdc_wdm 2-1:1.0: skipping garbage [ 161.969796][ T5507] cdc_wdm 2-1:1.0: skipping garbage [ 161.989680][ T6945] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.836: corrupted in-inode xattr [ 162.002321][ T5507] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 162.009346][ T5507] cdc_wdm 2-1:1.0: Unknown control protocol [ 162.025092][ T6945] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.836: couldn't read orphan inode 15 (err -117) [ 162.106281][ T6945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.139514][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.151188][ T6945] EXT4-fs error (device loop3): ext4_xattr_set_entry:1617: inode #2: comm syz.3.836: corrupted xattr entries [ 162.157122][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.247872][ T6909] device bridge_slave_1 entered promiscuous mode [ 162.270351][ T5507] usb 2-1: USB disconnect, device number 9 [ 162.273194][ T6962] loop0: detected capacity change from 0 to 1024 [ 162.303629][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 162.324923][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 162.334448][ T6962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.440083][ T6962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.498223][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.883636][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 162.997922][ T6974] vivid-000: disconnect [ 163.005660][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.018119][ T6970] netem: incorrect gi model size [ 163.023102][ T6970] netem: change failed [ 163.025713][ T6973] vivid-000: reconnect [ 163.047908][ T6976] loop4: detected capacity change from 0 to 128 [ 163.119117][ T6976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.198094][ T6909] team0: Port device team_slave_0 added [ 163.214635][ T6976] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.412801][ T6909] team0: Port device team_slave_1 added [ 163.469910][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 163.644768][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.651745][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.791688][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.904200][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.911177][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.998027][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.121202][ T6909] device hsr_slave_0 entered promiscuous mode [ 164.129209][ T6984] loop3: detected capacity change from 0 to 32768 [ 164.152865][ T6984] (syz.3.847,6984,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.174294][ T6909] device hsr_slave_1 entered promiscuous mode [ 164.201065][ T6909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.213831][ T6909] Cannot create hsr debugfs directory [ 164.254834][ T6984] (syz.3.847,6984,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.354729][ T6984] JBD2: Ignoring recovery information on journal [ 164.403987][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 164.525018][ T6984] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.870407][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 165.180982][ T7030] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 165.262255][ T7030] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 165.273771][ T7031] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 165.312986][ T7030] netlink: 'syz.1.861': attribute type 29 has an invalid length. [ 165.395570][ T40] device hsr_slave_0 left promiscuous mode [ 165.404722][ T40] device hsr_slave_1 left promiscuous mode [ 165.483000][ T40] device veth1_macvtap left promiscuous mode [ 165.502174][ T40] device veth0_macvtap left promiscuous mode [ 165.508854][ T40] device veth1_vlan left promiscuous mode [ 165.514914][ T40] device veth0_vlan left promiscuous mode [ 165.537817][ T7037] loop1: detected capacity change from 0 to 256 [ 165.558791][ T7037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 165.584402][ T4375] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.773076][ T4375] usb 4-1: Using ep0 maxpacket: 16 [ 165.787225][ T4375] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.807578][ T4375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.816592][ T4375] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.04 [ 165.825927][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.842048][ T4375] usb 4-1: config 0 descriptor?? [ 166.278372][ T4375] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 166.491494][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 166.678495][ T32] usb 4-1: USB disconnect, device number 8 [ 166.737153][ T40] bond0 (unregistering): Released all slaves [ 166.880429][ T6909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.940619][ T6909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.995421][ T6909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.028000][ T6909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.387484][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.395362][ T7069] program syz.1.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.427848][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.441583][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.492613][ T7078] syz.0.875 uses obsolete (PF_INET,SOCK_PACKET) [ 167.513751][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.538729][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.592927][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.602685][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.609796][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.673349][ T7081] loop1: detected capacity change from 0 to 256 [ 167.683905][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.703599][ T7085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.878'. [ 167.708732][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.730936][ T7081] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.743656][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.758732][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 167.804861][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.812052][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.822810][ T7081] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.843125][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.862581][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.918201][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.938564][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.972723][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.001073][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.030524][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.049125][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.067433][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.097197][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.132919][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.185664][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.561884][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 168.737429][ T7119] loop1: detected capacity change from 0 to 256 [ 168.841765][ T7119] exfat: Deprecated parameter 'utf8' [ 168.857348][ T7119] exfat: Deprecated parameter 'utf8' [ 168.912964][ T7119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 169.082114][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.094545][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.147286][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.223498][ T7111] loop3: detected capacity change from 0 to 32768 [ 169.250353][ T7111] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.885 (7111) [ 169.317186][ T7111] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 169.361761][ T7111] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 169.394780][ T7111] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.424045][ T7111] BTRFS info (device loop3): use lzo compression, level 0 [ 169.439230][ T7106] loop4: detected capacity change from 0 to 32768 [ 169.446767][ T7111] BTRFS info (device loop3): using free space tree [ 169.497014][ T7106] (syz.4.884,7106,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.551547][ T7106] (syz.4.884,7106,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.645349][ T7106] JBD2: Ignoring recovery information on journal [ 169.684738][ T7154] cifs: Unknown parameter 'f,' [ 169.706032][ T7106] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 169.731722][ T7111] BTRFS info (device loop3): enabling ssd optimizations [ 169.974778][ T7163] Falling back ldisc for ttyS3. [ 169.985925][ T7111] fs-verity: sha256 using implementation "sha256-avx2" [ 170.047423][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 170.056754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.078550][ T7111] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 170.089783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.146856][ T6909] device veth0_vlan entered promiscuous mode [ 170.233253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.299492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.317518][ T4271] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 170.363941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.416142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.506490][ T6909] device veth1_vlan entered promiscuous mode [ 170.697528][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.721757][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.748974][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.779746][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.817573][ T6909] device veth0_macvtap entered promiscuous mode [ 170.851641][ T6909] device veth1_macvtap entered promiscuous mode [ 170.907688][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.943198][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.953761][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.964451][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.974616][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.985318][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.995336][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.006050][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.018106][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.061788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.075175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.098790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.125210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.157010][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.167905][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.177964][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.188618][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.198745][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.209535][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.219871][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.230464][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.241706][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.263716][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.273819][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.288771][ T6909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.299670][ T6909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.325430][ T6909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.334297][ T6909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.369909][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.904'. [ 171.387872][ T7196] netem: invalid attributes len -19 [ 171.393711][ T7196] netem: change failed [ 171.499263][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.550626][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.592437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.654198][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.672663][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.703246][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.920164][ T5168] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.124427][ T7218] loop6: detected capacity change from 0 to 512 [ 172.141520][ T5168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.166742][ T5168] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 172.209359][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.244632][ T7218] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 172.261268][ T7218] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.280502][ T5168] usb 5-1: config 0 descriptor?? [ 172.296570][ T7218] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.325524][ T7200] loop1: detected capacity change from 0 to 32768 [ 172.338920][ T7218] EXT4-fs (loop6): orphan cleanup on readonly fs [ 172.346593][ T7200] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.907 (7200) [ 172.359827][ T7218] __quota_error: 15 callbacks suppressed [ 172.359841][ T7218] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 172.375034][ T7218] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.397155][ T7218] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 172.397771][ T7200] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 172.465516][ T7200] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 172.471291][ T7218] EXT4-fs (loop6): 1 truncate cleaned up [ 172.515579][ T7218] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 172.540020][ T7200] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 172.569458][ T7200] BTRFS info (device loop1): use lzo compression, level 0 [ 172.615669][ T7200] BTRFS info (device loop1): using free space tree [ 172.695087][ T7218] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 172.740300][ T7218] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.875625][ T6909] EXT4-fs (loop6): unmounting filesystem. [ 172.924966][ T5168] razer 0003:1532:010E.0007: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 173.070570][ T7264] loop3: detected capacity change from 0 to 128 [ 173.077711][ T7264] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.089840][ T7200] BTRFS info (device loop1): enabling ssd optimizations [ 173.100192][ T7264] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.105702][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 173.130251][ T4375] usb 5-1: USB disconnect, device number 7 [ 173.195132][ T7263] device gretap0 entered promiscuous mode [ 173.313432][ T7200] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 173.360740][ T4476] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.441890][ T7265] fido_id[7265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 173.503182][ T4266] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 174.008811][ T7256] loop6: detected capacity change from 0 to 32768 [ 174.026455][ T7279] loop0: detected capacity change from 0 to 1024 [ 174.065595][ T7256] XFS: attr2 mount option is deprecated. [ 174.135431][ T7279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 174.144857][ T7279] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.182201][ T7279] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.927: bg 0: block 88: padding at end of block bitmap is not set [ 174.205457][ T7256] XFS (loop6): Mounting V5 Filesystem [ 174.418293][ T7256] XFS (loop6): Ending clean mount [ 174.452298][ T7256] XFS (loop6): Quotacheck needed: Please wait. [ 174.469724][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 174.543280][ T7256] XFS (loop6): Quotacheck: Done. [ 174.654368][ T7256] XFS (loop6): Internal error !xfs_ifork_has_extents(ifp) at line 3881 of file fs/xfs/libxfs/xfs_bmap.c. Caller xfs_bmapi_read+0x7df/0x8f0 [ 174.760480][ T7256] CPU: 1 PID: 7256 Comm: syz.6.919 Not tainted syzkaller #0 [ 174.767817][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.777911][ T7256] Call Trace: [ 174.781215][ T7256] [ 174.784160][ T7256] dump_stack_lvl+0x188/0x24e [ 174.788865][ T7256] ? __xfs_printk+0x90/0x90 [ 174.793392][ T7256] ? show_regs_print_info+0x12/0x12 [ 174.798640][ T7256] xfs_corruption_error+0x11e/0x170 [ 174.803865][ T7256] ? xfs_bmapi_read+0x7df/0x8f0 [ 174.808743][ T7256] xfs_bmapi_read+0x810/0x8f0 [ 174.813445][ T7256] ? xfs_bmapi_read+0x7df/0x8f0 [ 174.818325][ T7256] ? read_lock_is_recursive+0x10/0x10 [ 174.823730][ T7256] ? lockdep_unlock+0x142/0x2e0 [ 174.828604][ T7256] ? xfs_trim_extent+0x260/0x260 [ 174.833570][ T7256] ? down_read_nested+0x1aa/0x2e0 [ 174.838623][ T7256] xfs_read_iomap_begin+0x303/0x6a0 [ 174.843861][ T7256] ? xfs_buffered_write_iomap_end+0x160/0x160 [ 174.849960][ T7256] ? verify_lock_unused+0x140/0x140 [ 174.852630][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 174.855163][ T7256] ? stack_trace_save+0x90/0xf0 [ 174.868792][ T7256] ? xfs_buffered_write_iomap_end+0x160/0x160 [ 174.874889][ T7256] iomap_iter+0x6c6/0x1040 [ 174.879357][ T7256] iomap_fiemap+0x153/0x540 [ 174.883888][ T7256] ? iomap_dio_zero+0x690/0x690 [ 174.888785][ T7256] ? down_read_nested+0x1aa/0x2e0 [ 174.893832][ T7256] ? xfs_ilock+0x1e5/0x3d0 [ 174.898267][ T7256] xfs_vn_fiemap+0xa6/0x100 [ 174.902803][ T7256] do_vfs_ioctl+0x1418/0x1d40 [ 174.907506][ T7256] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 174.913256][ T7256] ? tomoyo_path_number_perm+0x205/0x650 [ 174.918910][ T7256] ? __lock_acquire+0x7d10/0x7d10 [ 174.923938][ T7256] ? slab_free_freelist_hook+0x131/0x1a0 [ 174.929587][ T7256] ? tomoyo_path_number_perm+0x4fb/0x650 [ 174.935217][ T7256] ? __kmem_cache_free+0xb6/0x1f0 [ 174.940235][ T7256] ? tomoyo_path_number_perm+0x205/0x650 [ 174.945860][ T7256] ? tomoyo_path_number_perm+0x5a4/0x650 [ 174.951488][ T7256] ? tomoyo_path_number_perm+0x205/0x650 [ 174.957113][ T7256] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 174.962596][ T7256] ? __fget_files+0x28/0x4b0 [ 174.967185][ T7256] ? __fget_files+0x28/0x4b0 [ 174.971782][ T7256] ? bpf_lsm_file_ioctl+0x5/0x10 [ 174.976715][ T7256] ? security_file_ioctl+0x7c/0xa0 [ 174.981823][ T7256] __se_sys_ioctl+0x83/0x170 [ 174.986411][ T7256] do_syscall_64+0x4c/0xa0 [ 174.990824][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 174.995491][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 175.000163][ T7256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.006046][ T7256] RIP: 0033:0x7f54af59c629 [ 175.010460][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.030056][ T7256] RSP: 002b:00007f54b0518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.038462][ T7256] RAX: ffffffffffffffda RBX: 00007f54af815fa0 RCX: 00007f54af59c629 [ 175.046435][ T7256] RDX: 0000200000000000 RSI: 00000000c020660b RDI: 0000000000000004 [ 175.054396][ T7256] RBP: 00007f54af632b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.062356][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.070317][ T7256] R13: 00007f54af816038 R14: 00007f54af815fa0 R15: 00007ffea0318b18 [ 175.078291][ T7256] [ 175.117833][ T7256] XFS (loop6): Corruption detected. Unmount and run xfs_repair [ 175.287974][ T6909] XFS (loop6): Unmounting Filesystem [ 175.620533][ T7336] loop1: detected capacity change from 0 to 256 [ 175.647675][ T7336] exfat: Deprecated parameter 'namecase' [ 175.682890][ T7338] Falling back ldisc for ttyS3. [ 175.707655][ T7336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 175.803770][ T7336] autofs4:pid:7336:autofs_fill_super: could not open pipe file descriptor [ 175.873544][ T4376] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.068826][ T7349] program syz.1.944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.082872][ T4376] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.108795][ T4376] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.139544][ T4376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.179031][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.220643][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.268887][ T4376] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.307937][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.336257][ T4376] usb 1-1: Product: syz [ 176.361596][ T4376] usb 1-1: Manufacturer: syz [ 176.388605][ T7361] IPVS: nq: FWM 3 0x00000003 - no destination available [ 176.396007][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 176.404725][ T4376] cdc_wdm 1-1:1.0: skipping garbage [ 176.413927][ T4376] cdc_wdm 1-1:1.0: skipping garbage [ 176.439156][ T4376] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 176.465480][ T4376] cdc_wdm 1-1:1.0: Unknown control protocol [ 176.644548][ T7367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 176.651469][ T7367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.717916][ T7367] vhci_hcd vhci_hcd.0: Device attached [ 176.745359][ T7345] loop3: detected capacity change from 0 to 32768 [ 176.977865][ T4376] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 177.007469][ T3910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.121440][ T7384] loop6: detected capacity change from 0 to 8 [ 177.169537][ T7384] SQUASHFS error: zlib decompression failed, data probably corrupt [ 177.199262][ T3910] usb 5-1: config 0 has no interfaces? [ 177.204783][ T3910] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 177.264950][ T3910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.273484][ T7384] SQUASHFS error: Failed to read block 0x9b: -5 [ 177.305697][ T3910] usb 5-1: config 0 descriptor?? [ 177.313893][ T7384] SQUASHFS error: Unable to read metadata cache entry [99] [ 177.364496][ T7384] SQUASHFS error: Unable to read inode 0x127 [ 177.384901][ T6434] usb 1-1: USB disconnect, device number 6 [ 177.579369][ T7] usb 5-1: USB disconnect, device number 8 [ 177.590237][ T7370] vhci_hcd: connection closed [ 177.595324][ T4367] vhci_hcd: stop threads [ 177.676806][ T4367] vhci_hcd: release socket [ 177.699213][ T4367] vhci_hcd: disconnect device [ 177.730073][ T4376] usb 41-1: device descriptor read/64, error -71 [ 177.937005][ T4376] vhci_hcd: vhci_device speed not set [ 178.610243][ T7426] loop6: detected capacity change from 0 to 512 [ 178.638424][ T7426] EXT4-fs: Ignoring removed bh option [ 178.738006][ T7426] EXT4-fs (loop6): 1 truncate cleaned up [ 178.752464][ T7426] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 179.069452][ T6909] EXT4-fs (loop6): unmounting filesystem. [ 179.130616][ T7444] loop1: detected capacity change from 0 to 2048 [ 179.223614][ T7444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.552048][ T7462] loop6: detected capacity change from 0 to 256 [ 179.588267][ T7462] exfat: Deprecated parameter 'utf8' [ 179.673830][ T7457] loop0: detected capacity change from 0 to 4096 [ 179.692253][ T7462] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 179.832389][ T7457] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 180.001113][ T7457] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 180.133264][ T4270] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 180.162078][ T4270] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 180.189043][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 180.922358][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'. [ 181.057965][ T7476] loop6: detected capacity change from 0 to 32768 [ 181.092119][ T7476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.988 (7476) [ 181.159844][ T7507] loop3: detected capacity change from 0 to 512 [ 181.174759][ T7476] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.206568][ T7476] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 181.232588][ T7507] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.246263][ T7476] BTRFS info (device loop6): using free space tree [ 181.310281][ T7507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.526613][ T7476] BTRFS info (device loop6): enabling ssd optimizations [ 181.591979][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 181.727375][ T6909] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.996649][ T7506] loop0: detected capacity change from 0 to 40427 [ 182.028792][ T7506] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 182.045351][ T7506] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 182.056108][ T4565] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.110947][ T7506] F2FS-fs (loop0): invalid crc value [ 182.118639][ T7506] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 182.183544][ T7506] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.244810][ T4565] usb 4-1: Using ep0 maxpacket: 8 [ 182.254517][ T4565] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 182.313899][ T4565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.352621][ T4565] usb 4-1: Product: syz [ 182.379608][ T4565] usb 4-1: Manufacturer: syz [ 182.384251][ T4565] usb 4-1: SerialNumber: syz [ 182.392152][ T7506] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 182.418054][ T7506] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 182.446176][ T4565] usb 4-1: config 0 descriptor?? [ 182.460996][ T4565] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 182.484823][ T4565] pctv452e: pctv452e_power_ctrl: 1 [ 182.484823][ T4565] [ 182.492531][ T4565] usb 4-1: selecting invalid altsetting 3 [ 182.498531][ T7506] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 182.514710][ T7506] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.522317][ T4565] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 182.522317][ T4565] [ 182.536903][ T4565] dvb-usb: bulk message failed: -22 (5/0) [ 182.574104][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.627130][ T4565] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 182.667086][ T7542] dvb-usb: bulk message failed: -22 (7/0) [ 182.674094][ T4565] usb 4-1: media controller created [ 182.714261][ T26] audit: type=1800 audit(1771389980.873:32): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.998" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 182.753044][ T7542] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 182.780598][ T4565] dvb-usb: bulk message failed: -22 (8/0) [ 182.814118][ T4565] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 182.836990][ T4565] dvb-usb: MAC address reading failed. [ 182.838116][ T7506] syz.0.998: attempt to access beyond end of device [ 182.838116][ T7506] loop0: rw=2049, sector=77824, nr_sectors = 968 limit=40427 [ 182.889434][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.954678][ T5168] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 182.974574][ T4375] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.055435][ T4270] syz-executor: attempt to access beyond end of device [ 183.055435][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.157869][ T4565] DVB: Unable to find symbol stb0899_attach() [ 183.174531][ T5168] usb 7-1: Using ep0 maxpacket: 8 [ 183.174587][ T4565] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 183.182218][ T5168] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 183.198069][ T4375] usb 5-1: Using ep0 maxpacket: 16 [ 183.207973][ T4375] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 183.217529][ T4375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.225650][ T5168] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.233824][ T4375] usb 5-1: Product: syz [ 183.238099][ T4375] usb 5-1: Manufacturer: syz [ 183.242773][ T4375] usb 5-1: SerialNumber: syz [ 183.254149][ T5168] pvrusb2: Hardware description: Terratec Grabster AV400 [ 183.262027][ T5168] pvrusb2: ********** [ 183.266211][ T5168] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 183.302989][ T5168] pvrusb2: Important functionality might not be entirely working. [ 183.344543][ T5168] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 183.396699][ T5168] pvrusb2: ********** [ 183.460001][ T2305] pvrusb2: Invalid write control endpoint [ 183.494051][ T4375] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 183.532936][ T7585] loop3: detected capacity change from 0 to 256 [ 183.544204][ T4565] rc_core: IR keymap rc-tt-1500 not found [ 183.549976][ T4565] Registered IR keymap rc-empty [ 183.570222][ T4375] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.587553][ T4565] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 183.633329][ T4375] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 183.646757][ T7585] FAT-fs (loop3): Directory bread(block 64) failed [ 183.650307][ T4565] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 183.668131][ T7563] dvb-usb: bulk message failed: -22 (7/0) [ 183.673892][ T7563] pctv452e: I2C error -22; AA 03 0A 00 00 -> aa 03 31 03 0a 00 00 [ 183.683177][ T7585] FAT-fs (loop3): Directory bread(block 65) failed [ 183.689837][ T4375] usb 5-1: media controller created [ 183.714890][ T7585] FAT-fs (loop3): Directory bread(block 66) failed [ 183.733293][ T7565] dvb-usb: bulk message failed: -22 (8/0) [ 183.742616][ T4565] dvb-usb: schedule remote query interval to 100 msecs. [ 183.752122][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.757145][ T2305] pvrusb2: Invalid write control endpoint [ 183.761032][ T7565] pctv452e: I2C error -22; AA 04 00 01 00 -> aa 04 31 04 00 01 00 [ 183.777115][ T7585] FAT-fs (loop3): Directory bread(block 67) failed [ 183.783847][ T4565] pctv452e: pctv452e_power_ctrl: 0 [ 183.783847][ T4565] [ 183.795148][ T7585] FAT-fs (loop3): Directory bread(block 68) failed [ 183.801706][ T7585] FAT-fs (loop3): Directory bread(block 69) failed [ 183.809111][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.826835][ T4565] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 183.864347][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.871927][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.890319][ T7585] FAT-fs (loop3): Directory bread(block 70) failed [ 183.904444][ T7585] FAT-fs (loop3): Directory bread(block 71) failed [ 183.905603][ T4375] zl10353_read_register: readreg error (reg=127, ret==-71) [ 183.919993][ T4565] usb 4-1: USB disconnect, device number 9 [ 183.926800][ T2305] pvrusb2: Device being rendered inoperable [ 183.934668][ T7585] FAT-fs (loop3): Directory bread(block 72) failed [ 183.945611][ T2305] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 183.952696][ T2305] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.985682][ T7585] FAT-fs (loop3): Directory bread(block 73) failed [ 183.985853][ T5168] usb 7-1: USB disconnect, device number 2 [ 184.029686][ T2305] pvrusb2: Attached sub-driver cx25840 [ 184.045950][ T4375] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 184.062996][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 184.083618][ T4565] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 184.115861][ T4375] usb 5-1: USB disconnect, device number 9 [ 184.153984][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 184.500061][ T26] audit: type=1800 audit(1771389982.664:33): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name=4BBC9980 dev="loop3" ino=1048659 res=0 errno=0 [ 184.937236][ T7620] loop4: detected capacity change from 0 to 128 [ 185.039498][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 185.120307][ T7620] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 185.130514][ T7628] loop1: detected capacity change from 0 to 64 [ 185.221245][ T7620] sysv_count_free_blocks: >flc_size entries in free-list block [ 185.249733][ T7634] loop0: detected capacity change from 0 to 8 [ 185.250570][ T7628] gfs2: path_lookup on c::: returned error -2 [ 185.304754][ T7620] sysv_count_free_inodes: unable to read inode table [ 185.330596][ T7634] SQUASHFS error: Failed to read block 0x4de: -5 [ 185.354756][ T7620] sysv_count_free_blocks: >flc_size entries in free-list block [ 185.394366][ T7620] sysv_count_free_inodes: unable to read inode table [ 185.398003][ T7634] SQUASHFS error: Failed to read block 0x4de: -5 [ 185.441851][ T7634] SQUASHFS error: Failed to read block 0x4de: -5 [ 185.527108][ T4275] sysv_free_block: flc_count > flc_size [ 185.535702][ T7634] SQUASHFS error: Failed to read block 0x4de: -5 [ 185.542132][ T7634] SQUASHFS error: Failed to read block 0x4de: -5 [ 185.575800][ T4275] sysv_free_block: flc_count > flc_size [ 185.581388][ T4275] sysv_free_block: flc_count > flc_size [ 185.612448][ T26] audit: type=1800 audit(1771389983.774:34): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1035" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 185.632186][ T4275] sysv_free_block: flc_count > flc_size [ 185.648723][ T4275] sysv_free_block: flc_count > flc_size [ 185.658832][ T4275] sysv_free_block: flc_count > flc_size [ 185.673257][ T4275] sysv_free_block: flc_count > flc_size [ 185.681470][ T4275] sysv_free_block: flc_count > flc_size [ 185.706406][ T4275] sysv_free_block: flc_count > flc_size [ 185.732546][ T4275] sysv_free_block: flc_count > flc_size [ 185.742285][ T4275] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 185.889051][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 185.898086][ T26] audit: type=1326 audit(1771389984.064:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 185.948970][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1039'. [ 185.958341][ T26] audit: type=1326 audit(1771389984.064:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 185.958375][ T26] audit: type=1326 audit(1771389984.064:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 185.958402][ T26] audit: type=1326 audit(1771389984.064:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 186.181857][ T26] audit: type=1326 audit(1771389984.064:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 186.244168][ T26] audit: type=1326 audit(1771389984.064:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 186.332856][ T26] audit: type=1326 audit(1771389984.064:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b19c629 code=0x7ffc0000 [ 186.357702][ T7640] loop6: detected capacity change from 0 to 32768 [ 186.516928][ T7640] XFS (loop6): Mounting V5 Filesystem [ 186.632872][ T7640] XFS (loop6): Ending clean mount [ 186.730463][ T7640] XFS (loop6): Quotacheck needed: Please wait. [ 186.852581][ T5168] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.964135][ T7640] XFS (loop6): Quotacheck: Done. [ 187.072553][ T5168] usb 5-1: Using ep0 maxpacket: 16 [ 187.084857][ T5168] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 187.104231][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.133267][ T6909] XFS (loop6): Unmounting Filesystem [ 187.159579][ T5168] usb 5-1: Product: syz [ 187.186893][ T5168] usb 5-1: Manufacturer: syz [ 187.205310][ T5168] usb 5-1: SerialNumber: syz [ 187.219890][ T5168] usb 5-1: config 0 descriptor?? [ 187.240276][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 187.245225][ T5168] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 188.053000][ T5168] ssu100: probe of 5-1:0.0 failed with error -71 [ 188.092649][ T5168] usb 5-1: USB disconnect, device number 10 [ 188.107151][ T7726] loop0: detected capacity change from 0 to 512 [ 188.133355][ T7720] loop3: detected capacity change from 0 to 4096 [ 188.167068][ T7726] EXT4-fs: Ignoring removed i_version option [ 188.184630][ T7726] EXT4-fs: Ignoring removed oldalloc option [ 188.216387][ T7720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 188.230357][ T7726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.446745][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 188.586067][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 189.156796][ T7739] loop1: detected capacity change from 0 to 32768 [ 189.170912][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 189.190279][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 189.718706][ T7744] loop6: detected capacity change from 0 to 40427 [ 189.805173][ T7744] F2FS-fs (loop6): invalid crc value [ 189.822144][ T7744] F2FS-fs (loop6): Found nat_bits in checkpoint [ 189.982301][ T7744] F2FS-fs (loop6): Start checkpoint disabled! [ 190.024827][ T7744] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 190.308830][ T7756] loop4: detected capacity change from 0 to 40427 [ 190.358730][ T7756] F2FS-fs (loop4): invalid crc value [ 190.416528][ T7756] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 190.599674][ T7797] loop0: detected capacity change from 0 to 764 [ 190.631825][ T7756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.674020][ T7593] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.702081][ T7797] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.725006][ T7756] syz.4.1073: attempt to access beyond end of device [ 190.725006][ T7756] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 190.757754][ T7797] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 190.945288][ T4275] syz-executor: attempt to access beyond end of device [ 190.945288][ T4275] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 191.126225][ T7813] loop3: detected capacity change from 0 to 128 [ 191.168458][ T7813] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 191.226546][ T7813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.350460][ T6434] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.560218][ T6434] usb 1-1: Using ep0 maxpacket: 8 [ 191.568300][ T6434] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.650160][ T6434] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.660001][ T6434] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.700994][ T6434] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.714782][ T7831] loop6: detected capacity change from 0 to 64 [ 191.751472][ T6434] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.783578][ T6434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.062175][ T6434] usb 1-1: GET_CAPABILITIES returned 0 [ 192.067794][ T6434] usbtmc 1-1:16.0: can't read capabilities [ 192.271447][ T6434] usb 1-1: USB disconnect, device number 7 [ 192.549813][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 192.624509][ T7851] nbd: socks must be embedded in a SOCK_ITEM attr [ 192.639957][ T4635] block nbd64: NBD_DISCONNECT [ 193.005850][ T7868] netlink: 'syz.0.1105': attribute type 11 has an invalid length. [ 193.046557][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 193.088439][ T4635] udevd[4635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 193.378908][ T7880] loop1: detected capacity change from 0 to 256 [ 193.471866][ T7880] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d) [ 193.568159][ T7857] loop4: detected capacity change from 0 to 32768 [ 193.596249][ T7857] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.1102 (7857) [ 193.669400][ T7857] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 193.704082][ T7857] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 193.748361][ T7857] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 193.768175][ T7889] Bluetooth: MGMT ver 1.22 [ 193.778306][ T7857] BTRFS info (device loop4): use lzo compression, level 0 [ 193.785653][ T7889] Bluetooth: hci1: expected 21779 bytes, got 2 bytes [ 193.812889][ T7857] BTRFS info (device loop4): using free space tree [ 193.841393][ T7859] loop3: detected capacity change from 0 to 32768 [ 193.871241][ T7859] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.909479][ T7859] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.965550][ T7859] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 193.986735][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 193.994745][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 194.044303][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 49ms [ 194.052891][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 194.059792][ T7859] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 194.063427][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'. [ 194.082098][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.088444][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.322331][ T7857] BTRFS info (device loop4): enabling ssd optimizations [ 194.456987][ T7857] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 194.586279][ T4275] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 194.743154][ T4635] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 10 /dev/loop4 scanned by udevd (4635) [ 194.964951][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1121'. [ 195.110228][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 195.396115][ T7948] loop4: detected capacity change from 0 to 128 [ 195.462420][ T7948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.495351][ T7948] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.578340][ T4565] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.627764][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 195.775965][ T7962] loop3: detected capacity change from 0 to 128 [ 195.798123][ T4565] usb 1-1: Using ep0 maxpacket: 8 [ 195.805229][ T7962] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.805320][ T4565] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.876216][ T7962] hpfs: filesystem error: improperly stopped [ 195.883376][ T4565] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.898501][ T4565] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 195.908124][ T7962] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.918932][ T4565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.943392][ T7962] hpfs: You really don't want any checks? You are crazy... [ 195.959511][ T4565] usb 1-1: config 0 descriptor?? [ 195.996733][ T7962] hpfs: hpfs_map_sector(): read error [ 196.010721][ T7962] hpfs: code page support is disabled [ 196.016593][ T7962] hpfs: hpfs_map_4sectors(): unaligned read [ 196.028578][ T7969] input: syz1 as /devices/virtual/input/input14 [ 196.053864][ T7962] hpfs: hpfs_map_4sectors(): unaligned read [ 196.077397][ T7962] hpfs: filesystem error: unable to find root dir [ 196.393273][ T7982] loop4: detected capacity change from 0 to 8 [ 196.408763][ T4565] kye 0003:0458:501A.0008: hidraw0: USB HID v0.09 Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 196.419087][ T7975] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 196.453425][ T4565] kye 0003:0458:501A.0008: tablet-enabling feature report not found [ 196.462739][ T7982] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.487941][ T4565] kye 0003:0458:501A.0008: tablet enabling failed [ 196.512457][ T7982] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.550044][ T7982] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.581900][ T7982] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.623922][ T7] usb 1-1: USB disconnect, device number 8 [ 196.662918][ T7982] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.685156][ T26] audit: type=1800 audit(1771389994.850:42): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1140" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 196.750075][ T7985] fido_id[7985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 196.927669][ T4565] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.131184][ T4565] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 197.141559][ T26] audit: type=1326 audit(1771389995.320:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.6.1152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54af59c629 code=0x0 [ 197.145795][ T4565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.202131][ T4565] usb 4-1: Product: syz [ 197.206342][ T4565] usb 4-1: Manufacturer: syz [ 197.222361][ T4565] usb 4-1: SerialNumber: syz [ 197.231108][ T4565] usb 4-1: config 0 descriptor?? [ 197.257453][ T4281] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.278999][ T4565] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 197.298966][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.313748][ T4565] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 197.331050][ T4565] usb 4-1: media controller created [ 197.358254][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.468291][ T4281] usb 5-1: Using ep0 maxpacket: 16 [ 197.482236][ T4281] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 197.491645][ T4565] DVB: Unable to find symbol mt352_attach() [ 197.500608][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.511379][ T4281] usb 5-1: config 0 descriptor?? [ 197.533530][ T4281] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 197.621932][ T4565] DVB: Unable to find symbol nxt6000_attach() [ 197.629795][ T4565] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 197.656733][ T4565] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 197.683471][ T4565] dvb-usb: schedule remote query interval to 1000 msecs. [ 197.699611][ T4565] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 197.710332][ T4565] dvb-usb: bulk message failed: -22 (7/0) [ 197.716170][ T4565] dvb-usb: bulk message failed: -22 (7/0) [ 197.755407][ T4565] usb 4-1: USB disconnect, device number 10 [ 197.838643][ T4565] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 198.344812][ T4281] gspca_sonixj: reg_r err -71 [ 198.349813][ T4281] sonixj: probe of 5-1:0.0 failed with error -71 [ 198.377003][ T4281] usb 5-1: USB disconnect, device number 11 [ 198.526072][ T8050] loop1: detected capacity change from 0 to 1024 [ 198.611477][ T8050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.646530][ T8050] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.693964][ T8060] loop3: detected capacity change from 0 to 256 [ 198.728559][ T8050] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.1167: Freeing blocks not in datazone - block = 0, count = 16 [ 198.745982][ T8060] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.853927][ T40] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 198.924091][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 198.984216][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.984216][ T40] [ 199.026517][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 199.032544][ T40] EXT4-fs (loop1): Free/Dirty block details [ 199.061071][ T40] EXT4-fs (loop1): free_blocks=16 [ 199.077722][ T40] EXT4-fs (loop1): dirty_blocks=16 [ 199.093056][ T40] EXT4-fs (loop1): Block reservation details [ 199.106365][ T40] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 199.128466][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 199.325789][ T8076] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1174'. [ 199.600253][ T8052] loop0: detected capacity change from 0 to 32768 [ 199.656828][ T8052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1168 (8052) [ 199.783738][ T8052] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.840876][ T8052] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 199.902737][ T8052] BTRFS info (device loop0): using free space tree [ 200.136174][ T8086] loop1: detected capacity change from 0 to 8192 [ 200.167230][ T8106] loop6: detected capacity change from 0 to 256 [ 200.170424][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.257040][ T8052] BTRFS info (device loop0): enabling ssd optimizations [ 200.269740][ T8086] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.386453][ T8086] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 200.440895][ T8086] REISERFS (device loop1): using ordered data mode [ 200.505821][ T8086] reiserfs: using flush barriers [ 200.511216][ T7] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 200.525411][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 200.540207][ T8086] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.585378][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.589977][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.646799][ T8086] REISERFS (device loop1): checking transaction log (loop1) [ 200.649147][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 200.710062][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 200.741017][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.785628][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 200.804129][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 200.824138][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.872930][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 200.898904][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 200.961886][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.993456][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 201.020832][ T8086] REISERFS (device loop1): Using tea hash to sort names [ 201.025196][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 201.033399][ T8087] loop3: detected capacity change from 0 to 32768 [ 201.058941][ T8086] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 201.079459][ T8086] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 201.103521][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.111344][ T8087] JBD2: Ignoring recovery information on journal [ 201.165986][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 201.197601][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 201.244487][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.295283][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 201.313190][ T8087] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 201.327698][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 201.376915][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.431803][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 201.466324][ T7] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 201.515170][ T7] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.537415][ T7] usb 5-1: config 64 interface 0 has no altsetting 0 [ 201.554175][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 201.600024][ T7] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 201.625112][ T7] usb 5-1: Product: syz [ 201.629325][ T7] usb 5-1: Manufacturer: syz [ 201.633935][ T7] usb 5-1: SerialNumber: syz [ 201.682160][ T7] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 201.765511][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 202.262616][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 202.301146][ T7] usb 5-1: USB disconnect, device number 12 [ 202.323385][ T7] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 202.496443][ T8133] loop0: detected capacity change from 0 to 40427 [ 202.528406][ T8133] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 202.561529][ T8133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.584701][ T6434] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 202.606975][ T8133] F2FS-fs (loop0): invalid crc value [ 202.692187][ T8133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.776319][ T6434] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.818351][ T6434] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.865137][ T6434] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 202.874219][ T6434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.914152][ T8133] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.943876][ T8133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.005837][ T6434] usb 4-1: config 0 descriptor?? [ 203.011548][ T8145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.278293][ T8149] loop1: detected capacity change from 0 to 131072 [ 203.308030][ T8149] F2FS-fs (loop1): invalid crc value [ 203.336347][ T8149] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.399751][ T8149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 203.434254][ T4375] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 203.458677][ T6434] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 203.488300][ T6434] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 203.517894][ T6434] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 203.535897][ T6434] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 203.543680][ T6434] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 203.597697][ T6434] kye 0003:0458:4018.0009: hidraw0: USB HID vff.ff Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 203.668151][ T4375] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.680255][ T6434] usb 4-1: USB disconnect, device number 11 [ 203.692081][ T4375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.773264][ T4375] usb 7-1: config 0 descriptor?? [ 203.801299][ T4375] cp210x 7-1:0.0: cp210x converter detected [ 204.003037][ T8172] fido_id[8172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 204.199872][ T4375] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 204.217903][ T4375] usb 7-1: cp210x converter now attached to ttyUSB0 [ 204.416849][ T7] usb 7-1: USB disconnect, device number 3 [ 204.438522][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.505997][ T7] cp210x 7-1:0.0: device disconnected [ 204.667936][ T8190] loop0: detected capacity change from 0 to 4096 [ 204.952853][ T4270] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 204.976667][ T4270] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 205.228944][ T8211] loop6: detected capacity change from 0 to 2048 [ 205.358400][ T8211] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 205.384712][ T8211] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.521060][ T8211] fs-verity: sha512 using implementation "sha512-avx2" [ 205.678988][ T8231] loop0: detected capacity change from 0 to 128 [ 205.746684][ T8231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.766294][ T8231] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.885385][ T26] audit: type=1800 audit(1771390004.064:44): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1212" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 205.997950][ T6909] EXT4-fs (loop6): unmounting filesystem. [ 206.079770][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 206.288937][ T8253] o2cb: This node has not been configured. [ 206.296655][ T8253] o2cb: Cluster check failed. Fix errors before retrying. [ 206.308995][ T8253] (syz.6.1217,8253,1):user_dlm_register:674 ERROR: status = -22 [ 206.331350][ T8253] (syz.6.1217,8253,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 206.411886][ T4269] Bluetooth: hci3: link tx timeout [ 206.418118][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.177763][ T8258] loop1: detected capacity change from 0 to 32768 [ 207.273395][ T8267] loop4: detected capacity change from 0 to 40427 [ 207.308574][ T8267] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 207.379223][ T8267] F2FS-fs (loop4): invalid crc value [ 207.483980][ T8267] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.652842][ T8267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.055481][ T4275] syz-executor: attempt to access beyond end of device [ 208.055481][ T4275] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 208.435391][ T4269] Bluetooth: hci3: link tx timeout [ 208.440606][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 208.462536][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 208.515789][ T4269] Bluetooth: hci3: link tx timeout [ 208.521047][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.256223][ T5168] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.452749][ T5168] usb 4-1: Using ep0 maxpacket: 32 [ 209.465263][ T5168] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 209.500901][ T5168] usb 4-1: config 0 has no interface number 0 [ 209.506784][ T8352] loop6: detected capacity change from 0 to 256 [ 209.531340][ T5168] usb 4-1: config 0 interface 196 has no altsetting 0 [ 209.591327][ T5168] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 209.597744][ T8354] loop4: detected capacity change from 0 to 512 [ 209.650027][ T8354] EXT4-fs (loop4): Test dummy encryption mode enabled [ 209.650048][ T8354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.673080][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.673109][ T5168] usb 4-1: Product: syz [ 209.673124][ T5168] usb 4-1: Manufacturer: syz [ 209.673139][ T5168] usb 4-1: SerialNumber: syz [ 209.676720][ T5168] usb 4-1: config 0 descriptor?? [ 209.742080][ T8354] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1250: bad orphan inode 131083 [ 209.762833][ T8354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.903772][ T5168] ipheth 4-1:0.196: Unable to find endpoints [ 209.912146][ T8363] loop6: detected capacity change from 0 to 256 [ 209.943814][ T5168] usb 4-1: USB disconnect, device number 12 [ 210.002656][ T8363] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 210.095681][ T8363] [syz.6.1253/8363] FS: loop6 File: /file1 would truncate fibmap result [ 210.178345][ T8371] loop1: detected capacity change from 0 to 8 [ 210.236981][ T8371] SQUASHFS error: Unable to read directory block [1d0:22] [ 210.287051][ T8371] SQUASHFS error: Unable to read directory block [1d0:22] [ 210.434871][ T4266] SQUASHFS error: Unable to read directory block [1d0:22] [ 210.438091][ T8354] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 210.486504][ T4266] SQUASHFS error: Unable to read directory block [1d0:22] [ 210.528472][ T8354] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.1250: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 210.631061][ T8354] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 210.815415][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 211.048530][ T8394] loop1: detected capacity change from 0 to 4096 [ 211.077986][ T8402] loop0: detected capacity change from 0 to 128 [ 211.102109][ T8394] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 211.143688][ T8402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.247629][ T8406] loop4: detected capacity change from 0 to 512 [ 211.262417][ T8402] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.360453][ T8394] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 211.461431][ T8388] loop6: detected capacity change from 0 to 40427 [ 211.531007][ T8388] F2FS-fs (loop6): invalid crc value [ 211.559546][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 211.586276][ T8388] F2FS-fs (loop6): Found nat_bits in checkpoint [ 211.611064][ T4266] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 211.617367][ T4266] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 211.643632][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 211.666903][ T4266] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 211.735920][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 211.748532][ T4266] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 211.782264][ T4266] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 211.810602][ T8388] F2FS-fs (loop6): Start checkpoint disabled! [ 211.887724][ T8388] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 212.290479][ T9] kworker/u4:0: attempt to access beyond end of device [ 212.290479][ T9] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 212.478822][ T8435] loop3: detected capacity change from 0 to 4096 [ 212.556765][ T8435] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 212.649664][ T6435] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 212.704568][ T8435] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 212.851821][ T6435] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.869517][ T6435] usb 5-1: config 0 has no interface number 0 [ 212.876003][ T6435] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.929470][ T6435] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 212.969449][ T6435] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.003273][ T6435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.047044][ T6435] usb 5-1: config 0 descriptor?? [ 213.060166][ T8439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.094892][ T6435] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 213.150638][ T8428] loop0: detected capacity change from 0 to 32768 [ 213.200654][ T8428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1272 (8428) [ 213.311541][ T8428] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.354248][ T8456] loop6: detected capacity change from 0 to 16 [ 213.371760][ T5168] usb 5-1: USB disconnect, device number 13 [ 213.371820][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 213.379558][ T8428] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 213.469040][ T8456] erofs: (device loop6): mounted with root inode @ nid 36. [ 213.488199][ T8428] BTRFS info (device loop0): using free space tree [ 213.849732][ T8443] loop1: detected capacity change from 0 to 32768 [ 213.859629][ T8428] BTRFS info (device loop0): enabling ssd optimizations [ 213.966347][ T8443] XFS (loop1): Mounting V5 Filesystem [ 214.046357][ T8487] loop3: detected capacity change from 0 to 8192 [ 214.165058][ T8501] loop6: detected capacity change from 0 to 2048 [ 214.210895][ T8443] XFS (loop1): Ending clean mount [ 214.277176][ T8501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.296305][ T4270] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.966643][ T4269] Bluetooth: hci3: link tx timeout [ 214.971868][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.992008][ T4269] Bluetooth: hci3: link tx timeout [ 214.997176][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.013343][ T4266] XFS (loop1): Unmounting Filesystem [ 215.225005][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 215.710813][ T26] audit: type=1326 audit(1771390013.889:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 215.761418][ T8538] mmap: syz.1.1290 (8538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.774724][ T26] audit: type=1326 audit(1771390013.919:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 215.868040][ T26] audit: type=1326 audit(1771390013.919:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 215.957689][ T26] audit: type=1326 audit(1771390013.919:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 215.983188][ T26] audit: type=1326 audit(1771390013.919:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.006519][ T26] audit: type=1326 audit(1771390013.919:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.038254][ T8550] loop1: detected capacity change from 0 to 512 [ 216.081299][ T26] audit: type=1326 audit(1771390013.919:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.146771][ T8554] loop0: detected capacity change from 0 to 512 [ 216.206849][ T26] audit: type=1326 audit(1771390013.919:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.262338][ T26] audit: type=1326 audit(1771390013.919:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.285287][ T26] audit: type=1326 audit(1771390013.939:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0765d9c629 code=0x7ffc0000 [ 216.334229][ T8554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.379174][ T8554] ext4 filesystem being mounted at /274/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.594444][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 216.610068][ T8565] loop6: detected capacity change from 0 to 512 [ 216.656515][ T8565] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 216.688165][ T8565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e003c11c, mo2=0002] [ 216.700502][ T8565] System zones: 1-12 [ 216.718171][ T8565] EXT4-fs error (device loop6): ext4_iget_extra_inode:4756: inode #15: comm syz.6.1310: corrupted in-inode xattr [ 216.731107][ T8565] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1310: couldn't read orphan inode 15 (err -117) [ 216.744108][ T8565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 216.808654][ T6909] EXT4-fs (loop6): unmounting filesystem. [ 216.940295][ T8572] loop6: detected capacity change from 0 to 4096 [ 216.989926][ T8573] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.006486][ T5168] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 217.217448][ T5168] usb 1-1: Using ep0 maxpacket: 16 [ 217.229395][ T5168] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 217.256782][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 217.278578][ T5168] usb 1-1: Product: syz [ 217.284104][ T5168] usb 1-1: Manufacturer: syz [ 217.289266][ T5168] usb 1-1: SerialNumber: syz [ 217.311969][ T5168] usb 1-1: config 0 descriptor?? [ 217.642815][ T6434] usb 1-1: USB disconnect, device number 9 [ 217.868629][ T8594] loop1: detected capacity change from 0 to 64 [ 217.868666][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 218.055477][ T8597] loop3: detected capacity change from 0 to 512 [ 218.083911][ T8597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 218.102669][ T8597] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 218.137136][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.173341][ T8588] loop4: detected capacity change from 0 to 32768 [ 218.176866][ T8597] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 218.238746][ T8588] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 218.238746][ T8588] [ 218.258971][ T8601] loop1: detected capacity change from 0 to 512 [ 218.259199][ T8597] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1325: bg 0: block 67: padding at end of block bitmap is not set [ 218.281313][ T8588] ERROR: (device loop4): remounting filesystem as read-only [ 218.302509][ T8602] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 218.302509][ T8602] [ 218.320871][ T8588] ialloc: diAlloc returned -5! [ 218.326403][ T8604] loop0: detected capacity change from 0 to 1024 [ 218.326405][ T8602] ERROR: (device loop4): dbDiscardAG: -EIO [ 218.326405][ T8602] [ 218.347381][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 218.358203][ T8597] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 218.359342][ T7] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.401943][ T8597] EXT4-fs (loop3): 1 truncate cleaned up [ 218.417617][ T8597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.473600][ T8601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.485097][ T7] usb 7-1: config 179 has no interface number 0 [ 218.507272][ T8601] ext4 filesystem being mounted at /263/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.537010][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.570628][ T8601] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1327: Failed to acquire dquot type 0 [ 218.614501][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 218.646715][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.690731][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 218.720109][ T7] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.741213][ T7] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 218.750579][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.764386][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 218.772422][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 218.794000][ T8592] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 218.987864][ T8609] loop0: detected capacity change from 0 to 256 [ 219.067849][ T8609] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 219.101990][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input16 [ 219.240859][ T8616] tap0: tun_chr_ioctl cmd 2148553947 [ 219.357245][ T6435] usb 7-1: USB disconnect, device number 4 [ 219.358123][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 219.372414][ T6435] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 219.377191][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 219.654221][ T8625] loop4: detected capacity change from 0 to 8192 [ 219.751752][ T8625] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.843230][ T8625] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 219.853235][ T8625] REISERFS (device loop4): using ordered data mode [ 219.860133][ T8625] reiserfs: using flush barriers [ 219.868321][ T8625] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.985185][ T8625] REISERFS (device loop4): checking transaction log (loop4) [ 220.144165][ T8644] loop1: detected capacity change from 0 to 256 [ 220.185033][ T8644] exfat: Deprecated parameter 'namecase' [ 220.228353][ T8644] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 220.262731][ T8625] REISERFS (device loop4): Using tea hash to sort names [ 220.280108][ T8644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 220.316254][ T8625] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 220.330133][ T8625] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 220.802752][ T8655] syz.1.1348 (8655) used greatest stack depth: 20112 bytes left [ 220.915036][ T8661] loop3: detected capacity change from 0 to 1024 [ 220.975123][ T8661] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 221.007577][ T8661] EXT4-fs (loop3): orphan cleanup on readonly fs [ 221.031636][ T8661] __quota_error: 10 callbacks suppressed [ 221.031652][ T8661] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 221.079123][ T8661] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 221.115347][ T8661] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 221.188959][ T8661] EXT4-fs (loop3): 1 truncate cleaned up [ 221.194659][ T8661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.377296][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 221.429313][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.490202][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1360'. [ 221.585162][ T4345] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.646737][ T22] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 221.678476][ T22] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 221.709899][ T22] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 221.725105][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.751515][ T8668] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 221.801536][ T8683] loop0: detected capacity change from 0 to 8192 [ 221.824995][ T4345] usb 2-1: Using ep0 maxpacket: 32 [ 221.831941][ T8683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.846685][ T8683] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 221.856227][ T4345] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 221.863403][ T8683] REISERFS (device loop0): using ordered data mode [ 221.864583][ T4345] usb 2-1: config 0 has no interface number 0 [ 221.872173][ T8683] reiserfs: using flush barriers [ 221.934429][ T4345] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 221.964236][ T8683] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.977232][ T4345] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 221.989611][ T8683] REISERFS (device loop0): checking transaction log (loop0) [ 222.042479][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.109625][ T4345] usb 2-1: Product: syz [ 222.113890][ T4345] usb 2-1: Manufacturer: syz [ 222.174949][ T4345] usb 2-1: SerialNumber: syz [ 222.185574][ T8676] XFS (loop6): Mounting V5 Filesystem [ 222.198580][ T8683] REISERFS (device loop0): Using tea hash to sort names [ 222.198938][ T4345] usb 2-1: config 0 descriptor?? [ 222.213574][ T8683] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 222.247697][ T8683] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 222.257620][ T8674] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.301916][ T8676] XFS (loop6): Ending clean mount [ 222.323305][ T8676] XFS (loop6): Quotacheck needed: Please wait. [ 222.370122][ T8676] XFS (loop6): Quotacheck: Done. [ 222.493569][ T8674] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.538193][ T6909] XFS (loop6): Unmounting Filesystem [ 222.814915][ T22] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 222.827884][ T22] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input17 [ 222.924745][ T22] usb 5-1: USB disconnect, device number 14 [ 222.930877][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 223.120035][ T4345] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 223.143816][ T4345] asix: probe of 2-1:0.188 failed with error -71 [ 223.172745][ T4345] usb 2-1: USB disconnect, device number 10 [ 223.200273][ T8709] set_capacity_and_notify: 2 callbacks suppressed [ 223.200288][ T8709] loop6: detected capacity change from 0 to 1024 [ 223.223398][ T8709] EXT4-fs: Ignoring removed i_version option [ 223.229795][ T8709] EXT4-fs: inline encryption not supported [ 223.270893][ T8709] EXT4-fs (loop6): Test dummy encryption mode enabled [ 223.320566][ T8709] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 223.341582][ T8709] EXT4-fs (loop6): shut down requested (1) [ 223.358072][ T8709] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 223.418920][ T8714] ALSA: mixer_oss: invalid OSS volume 'dev/vbi#' [ 223.485440][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 223.590417][ T6909] EXT4-fs (loop6): unmounting filesystem. [ 223.689182][ T8721] loop4: detected capacity change from 0 to 2048 [ 223.732268][ T8725] loop0: detected capacity change from 0 to 16 [ 223.771169][ T8725] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.814448][ T8721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.862206][ T8733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1376'. [ 223.958037][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 224.087965][ T4269] Bluetooth: hci3: link tx timeout [ 224.093180][ T4269] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.492998][ T8755] loop4: detected capacity change from 0 to 1024 [ 224.614168][ T8759] loop1: detected capacity change from 0 to 4096 [ 224.633489][ T8755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.649546][ T8755] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.721526][ T8768] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.819111][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 224.960359][ T8773] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 225.055242][ T8773] Remounting filesystem read-only [ 225.246185][ T8781] loop3: detected capacity change from 0 to 512 [ 225.342811][ T8781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.509982][ T8781] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.664075][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 225.730575][ T8799] loop6: detected capacity change from 0 to 1764 [ 225.756325][ T8786] loop0: detected capacity change from 0 to 32768 [ 225.825081][ T4345] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.992335][ T8786] XFS (loop0): Mounting V5 Filesystem [ 226.042996][ T4345] usb 2-1: Using ep0 maxpacket: 32 [ 226.050104][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.081790][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.127793][ T4345] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 226.140101][ T8786] XFS (loop0): Ending clean mount [ 226.145226][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.167865][ T4345] usb 2-1: config 0 descriptor?? [ 226.179956][ T8815] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 226.238925][ T8786] XFS (loop0): Quotacheck needed: Please wait. [ 226.351392][ T8786] XFS (loop0): Quotacheck: Done. [ 226.541160][ T4270] XFS (loop0): Unmounting Filesystem [ 226.636260][ T4345] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 226.663754][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.671946][ T4345] ft260 0003:0403:6030.000A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 226.839904][ T4345] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 226.888465][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.909212][ T7] usb 4-1: config 0 has no interfaces? [ 226.925166][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.945506][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.965864][ T7] usb 4-1: config 0 descriptor?? [ 227.044580][ T4345] ft260 0003:0403:6030.000A: failed to retrieve system status [ 227.059484][ T4345] ft260: probe of 0003:0403:6030.000A failed with error -71 [ 227.085022][ T4345] usb 2-1: USB disconnect, device number 11 [ 227.183121][ T22] usb 4-1: USB disconnect, device number 13 [ 227.348963][ T8835] fido_id[8835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 227.538240][ T8851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1421'. [ 227.561004][ T8851] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1421'. [ 227.571176][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.587810][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.622201][ T6435] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.761119][ T8860] loop6: detected capacity change from 0 to 256 [ 227.811305][ T8863] loop4: detected capacity change from 0 to 64 [ 227.842109][ T6435] usb 1-1: Using ep0 maxpacket: 16 [ 227.849006][ T6435] usb 1-1: config 4 has an invalid interface number: 158 but max is 0 [ 227.859325][ T8860] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 227.886298][ T6435] usb 1-1: config 4 has no interface number 0 [ 227.911988][ T6435] usb 1-1: config 4 interface 158 has no altsetting 0 [ 227.954267][ T6435] usb 1-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=90.a0 [ 228.003652][ T6435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.042212][ T6435] usb 1-1: Product: syz [ 228.052190][ T6435] usb 1-1: Manufacturer: syz [ 228.071930][ T6435] usb 1-1: SerialNumber: syz [ 228.239586][ T8871] set_capacity_and_notify: 1 callbacks suppressed [ 228.239602][ T8871] loop1: detected capacity change from 0 to 2048 [ 228.276816][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.296429][ T6434] usb 1-1: USB disconnect, device number 10 [ 228.296434][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.296618][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.328581][ T4635] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.356780][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 228.563572][ T8883] loop1: detected capacity change from 0 to 1024 [ 228.579242][ T8883] EXT4-fs: Ignoring removed bh option [ 228.639723][ T8882] loop3: detected capacity change from 0 to 8192 [ 228.660917][ T8882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.682550][ T8883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.743859][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 228.777970][ T8882] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 228.787633][ T8882] REISERFS (device loop3): using ordered data mode [ 228.807995][ T8882] reiserfs: using flush barriers [ 228.860206][ T8882] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.932027][ T8882] REISERFS (device loop3): checking transaction log (loop3) [ 229.031578][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 229.145640][ T8882] REISERFS (device loop3): Using tea hash to sort names [ 229.171079][ T8882] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 229.215532][ T8882] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 229.263571][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.281649][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.301522][ T7] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 229.320968][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.387470][ T7] usb 7-1: config 0 descriptor?? [ 229.825262][ T7] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 229.843080][ T7] cm6533_jd 0003:0D8C:0022.000B: item fetching failed at offset 4/5 [ 229.868970][ T8902] loop1: detected capacity change from 0 to 32768 [ 229.876197][ T7] cm6533_jd 0003:0D8C:0022.000B: parse failed [ 229.888674][ T7] cm6533_jd: probe of 0003:0D8C:0022.000B failed with error -22 [ 229.988093][ T8902] XFS (loop1): Mounting V5 Filesystem [ 230.058536][ T7] usb 7-1: USB disconnect, device number 5 [ 230.127325][ T8902] XFS (loop1): Ending clean mount serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.