last executing test programs: 6m13.413512021s ago: executing program 3 (id=167): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x183f43, 0x8a) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0xc010f508, 0x0) 6m12.146198993s ago: executing program 3 (id=168): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 6m10.528978964s ago: executing program 3 (id=177): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000500)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000580)={r1}) 6m10.277718274s ago: executing program 3 (id=178): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000000)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {}, {@fmask={'fmask', 0x3d, 0x4}}, {@keep_last_dots}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) 6m9.82137345s ago: executing program 3 (id=180): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x0, 0x7fffffff, 0x172}) 6m9.194324891s ago: executing program 3 (id=186): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 6m8.82763651s ago: executing program 32 (id=186): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3m49.334117802s ago: executing program 4 (id=1527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) 3m49.141860817s ago: executing program 4 (id=1529): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) syz_io_uring_setup(0x580e, &(0x7f0000000fc0)={0x0, 0x2271, 0x300, 0x3, 0x287}, &(0x7f0000001040), &(0x7f0000001080)) 3m48.897050717s ago: executing program 4 (id=1531): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000000c0), 0x4) 3m48.48936598s ago: executing program 4 (id=1533): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m47.792911595s ago: executing program 4 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 3m47.060431264s ago: executing program 4 (id=1546): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 3m46.594332862s ago: executing program 33 (id=1546): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2m6.097330214s ago: executing program 5 (id=2523): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x6, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m5.821310756s ago: executing program 5 (id=2527): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m4.844477924s ago: executing program 5 (id=2536): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept(r0, 0x0, 0x0) 2m3.577440877s ago: executing program 5 (id=2547): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m2.990200544s ago: executing program 5 (id=2550): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) 2m2.347939816s ago: executing program 5 (id=2556): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1c0, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 2m1.966535237s ago: executing program 34 (id=2556): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1c0, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 56.029056247s ago: executing program 2 (id=3083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 55.780072397s ago: executing program 2 (id=3087): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) 55.713960632s ago: executing program 1 (id=3089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1e, 0xa}, {0xd, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4000) 55.525940547s ago: executing program 2 (id=3091): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) open(&(0x7f0000000080)='./bus\x00', 0x14507e, 0x0) 55.446277014s ago: executing program 1 (id=3092): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 55.282469057s ago: executing program 1 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) 55.054411345s ago: executing program 1 (id=3099): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 54.946083374s ago: executing program 6 (id=3101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) 54.86459916s ago: executing program 2 (id=3102): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) 54.778300907s ago: executing program 1 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 54.659613227s ago: executing program 6 (id=3104): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 54.625712009s ago: executing program 1 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@intr}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x4450, &(0x7f000000cd80)="$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") 54.553414106s ago: executing program 2 (id=3106): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d2, 0x1000000000000) 54.413550806s ago: executing program 6 (id=3108): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$eJzs3U9sG1kZAPBvJrYTd6Wsd9nuFoTUaCsq2EKbxCwtEhIFIZTDCipx2Wto021UJ1slWZRWiHqBBW5wQj3sYREKhz0hDkiLOCCWGxISEvfeK3HgVnHAaMYzie0kTtzGTSm/nzSeN57355vPb8b2pJUD+L+18GZU25HEwrk3NrPt+1vN1v2t5kpZjojJiEgjKt1VJKsRyccRl6O7xCezJ4vukv3Gef3BR++fvfdhs7tVKZa8fjqs3Y7OkBHaxRIzETFRrEdU2a+/q3v0d3ekrpPtuLOEnSkTB8ets0t7lOaHOG+Bp93diInqHs83Ik5ExFTxOSCKq0P6hMM7ciNd5QAAAODY7fWtPb8HPtTzD+NhbMb0WEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ1TS/c3ApFjSsjwTSfH7/98uquVqteMN9wCfP2D/e9efUCAAAAAAAAAAcPSqO8XTD+NhbMZ0ud1J8r/5v5pvvJQ/PhfvxHosxVqcj81YjI3YiLWYi6hO9/RZ21zc2Fib293yl5G17HQ6d4uW8xHR2NVyfszHDAAAAAAAAADPth/GQkwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriZjorvLlpbLciLQSEVMRUcvqtSP+WJafBo1HbPenI44DAAAAnkL1Yj2d/Kdb6CT5d/6X8+/9U/FOrMZGLMdGtGIpruX3Arrf+tO/t5ut+1vNlWzZ3fHX/jlSHHmPETER7+4z8mxe4+R2i4X4ZnwnzsVMXIm1WI7vxWJsxFLMRD07iFiMJBr17t2LRhlnf7wTRVeX+0K5Mhjb6YHtU3kk9bgey3ls5+NqrewtzWskcapntN/XIgYy9G6WneSrhUPm6FrP6/WL4r5MofP8IfsYj0Z+5NXtjMxmuS+y8cLeuS+NOE8GR5qLdPse1Es7o2SbgyOVOf/uKDk/UayzXP+kP+dHbcRbaYOZmI+0mH0RL/fn/NZn7r3Y3/hz//jzlRvp6s0b19fPjfGQxqpaFgYz0ezJxCvDZ1+RiVaWifZgJqoHD12aesxjOSK1IhvdC9vhrpbfyEuL8WrPFHw7rsVSXIzZmItLMRtfjvlo9s2wk315rTRX+nOSn2vp7utbfUjwZz7bU+mnB1Qeh/3Hy/LyQk9ee690jXxf8czln8dsT5ZeHD77HuVdoPKpopCN8aPtd5ynQV8mimtzGV35BrVPJn7VyR7XW6s3124s3jrkeGeLdXbavtd/bf71Yx/MY8nmS3bFreRbeU7q5XzJ9n1iO9r+fNWKv7h026W79p3c3teI6ViOb+17ptaKz3C7e+rue2XPfc1836mefX2fcuLtaOWfQgbMPJmsAnBoJ147Uas/qP+t/kH9x/Ub9Temvj55afLTtaj+pfKHid+mv0m/krwWH8QPYvq4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfB+u07NxdbraW1MRZqjzhWpAfW2XrucB1GI2L4WElRqI07G7fvZPkYodXPit8rPLow/jU1NBv1GNOx/274UdQee4hk/PM5eyWOpMPyh9PyZzoTB7b664WI7jOV4fOnEutT1X3yPLnzukfj5mLr352+OvXoOWWAZ9yFjZVbF9Zv3/nC8sriW0tvLa3OX7p46WLzS3NfvHB9ubU023087iiBcVi/fWfiuGMAAAAAAAAAAAAARlP86/+NtTQrJKP/L53KAXVqa+t7j3z6SR8qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D9q4c2otiOJudnzs9n2/a1mK1vK8k7NSkSkEZF8PyL5OOJydJdo9HSX7DfO6w8+ev/svQ+bO31VyvrpsHaH0y6WmImIiWJ9sMk9utnd39We/tqPFF6yfYRZws6UiYPj9t8AAAD//ycX7eY=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 54.37233401s ago: executing program 2 (id=3109): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x4472, &(0x7f00000044c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f00000000c0)={0xf352, 0x7e4000, 0x20}) 54.259006149s ago: executing program 0 (id=3110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x3, 0x1, 0xffff]}, 0xa) 54.00236085s ago: executing program 0 (id=3111): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001}) 54.002064859s ago: executing program 6 (id=3112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "62beb8c99fe2"}]}}}}}}}, 0x0) 53.829693813s ago: executing program 0 (id=3113): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 53.645222848s ago: executing program 0 (id=3114): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) 53.541470276s ago: executing program 6 (id=3115): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x4, &(0x7f00000025c0)) 53.233637541s ago: executing program 0 (id=3116): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) 53.019122859s ago: executing program 6 (id=3117): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x11, @empty, 0x4e23, 0x2, 'sh\x00', 0xc, 0x6, 0x22}, 0x2c) 52.487848361s ago: executing program 0 (id=3118): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\'@-\x00', 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x8942, &(0x7f0000000140)) 0s ago: executing program 35 (id=3118): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\'@-\x00', 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x8942, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 0106] loop5: detected capacity change from 0 to 512 [ 277.920462][T10106] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.994442][T10106] EXT4-fs (loop5): 1 orphan inode deleted [ 278.000656][T10106] EXT4-fs (loop5): 1 truncate cleaned up [ 278.019218][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1678'. [ 278.074056][T10106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.104784][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.329368][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.336269][T10156] loop1: detected capacity change from 0 to 256 [ 279.374395][T10161] xt_hashlimit: max too large, truncated to 1048576 [ 279.409374][T10161] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 279.591856][ T5881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 279.791606][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 279.807444][ T5881] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 279.827371][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.842173][ T5881] usb 1-1: Product: syz [ 279.857138][ T5881] usb 1-1: Manufacturer: syz [ 279.868805][ T5881] usb 1-1: SerialNumber: syz [ 279.899429][ T5881] r8152-cfgselector 1-1: config 0 descriptor?? [ 280.054472][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 280.133105][ T5881] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 280.331856][ T8] usb 1-1: USB disconnect, device number 19 [ 280.394334][T10188] Zero length message leads to an empty skb [ 281.400668][T10197] loop1: detected capacity change from 0 to 40427 [ 281.425487][T10197] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 281.444952][T10197] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.480673][T10197] F2FS-fs (loop1): invalid crc value [ 281.558971][T10197] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.711014][T10197] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 281.711046][T10197] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.953805][T10235] loop2: detected capacity change from 0 to 32768 [ 282.970833][T10249] netlink: 'syz.1.1717': attribute type 29 has an invalid length. [ 283.088972][T10235] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 283.321824][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 284.291157][T10286] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 284.380818][T10288] loop2: detected capacity change from 0 to 512 [ 284.403484][T10288] EXT4-fs: Ignoring removed oldalloc option [ 284.463552][T10288] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1740: Parent and EA inode have the same ino 15 [ 284.524186][T10288] EXT4-fs (loop2): 1 orphan inode deleted [ 284.562038][T10288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.770456][T10280] loop5: detected capacity change from 0 to 32768 [ 284.786190][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.829242][T10280] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 285.182717][ T9739] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.272483][T10316] loop2: detected capacity change from 0 to 512 [ 285.322172][T10316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.369526][T10316] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1748: invalid indirect mapped block 4294967295 (level 0) [ 285.398920][T10316] EXT4-fs (loop2): Remounting filesystem read-only [ 285.432715][T10316] EXT4-fs (loop2): 1 orphan inode deleted [ 285.485303][T10316] EXT4-fs (loop2): 1 truncate cleaned up [ 285.526191][T10316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.575449][T10322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1750'. [ 285.592065][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1750'. [ 285.703041][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1749'. [ 285.746581][T10316] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #2: comm syz.2.1748: directory missing '..' [ 285.948944][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.696832][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 287.146248][T10359] loop1: detected capacity change from 0 to 128 [ 287.212069][T10359] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 287.239913][T10359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.285542][T10343] loop2: detected capacity change from 0 to 32768 [ 287.382556][T10359] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 287.412256][T10343] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 287.692033][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.142560][T10386] loop5: detected capacity change from 0 to 512 [ 288.216745][T10386] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 288.268443][T10386] System zones: 0-7 [ 288.308012][T10386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.508593][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.762369][T10380] loop1: detected capacity change from 0 to 40427 [ 288.803128][T10380] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 288.810165][T10380] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.861900][T10380] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 288.914999][T10380] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 288.956473][T10380] F2FS-fs (loop1): invalid crc value [ 288.983701][T10380] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.100636][T10380] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.142048][T10380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.274937][ T28] audit: type=1800 audit(1756465938.194:93): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1769" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 289.464060][T10422] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 289.523613][ T5791] syz-executor: attempt to access beyond end of device [ 289.523613][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.549658][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 289.597152][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1793'. [ 289.839970][T10433] netlink: 'syz.5.1794': attribute type 1 has an invalid length. [ 289.957465][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 290.802228][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 290.865716][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 290.933135][T10467] loop5: detected capacity change from 0 to 256 [ 291.040817][T10467] FAT-fs (loop5): Directory bread(block 64) failed [ 291.078692][T10467] FAT-fs (loop5): Directory bread(block 65) failed [ 291.106857][T10467] FAT-fs (loop5): Directory bread(block 66) failed [ 291.119776][T10467] FAT-fs (loop5): Directory bread(block 67) failed [ 291.136254][T10467] FAT-fs (loop5): Directory bread(block 68) failed [ 291.155890][T10467] FAT-fs (loop5): Directory bread(block 69) failed [ 291.175799][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1810'. [ 291.200913][T10467] FAT-fs (loop5): Directory bread(block 70) failed [ 291.217413][T10467] FAT-fs (loop5): Directory bread(block 71) failed [ 291.232882][T10467] FAT-fs (loop5): Directory bread(block 72) failed [ 291.243654][T10467] FAT-fs (loop5): Directory bread(block 73) failed [ 291.325539][T10452] loop1: detected capacity change from 0 to 32768 [ 291.395470][T10452] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 291.672976][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.953159][T10486] loop5: detected capacity change from 0 to 4096 [ 292.107355][T10497] loop2: detected capacity change from 0 to 512 [ 292.257785][T10486] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 293.381864][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 293.525568][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1831'. [ 293.591871][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 293.599737][ T8] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.630499][ T8] usb 3-1: config 0 has no interface number 0 [ 293.646989][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 293.681969][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.700870][ T8] usb 3-1: Product: syz [ 293.716606][ T8] usb 3-1: Manufacturer: syz [ 293.721637][ T8] usb 3-1: SerialNumber: syz [ 293.751683][ T8] usb 3-1: config 0 descriptor?? [ 293.802647][ T8] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 294.067962][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 294.108873][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.374806][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 294.583231][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 294.584697][ T5862] usb 3-1: USB disconnect, device number 11 [ 294.633149][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 294.693632][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 294.737268][ T5862] quatech2 3-1:0.51: device disconnected [ 295.116736][T10547] loop5: detected capacity change from 0 to 32768 [ 295.129231][T10551] loop1: detected capacity change from 0 to 32768 [ 295.192992][T10551] (syz.1.1836,10551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.210818][T10551] (syz.1.1836,10551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.321439][T10551] JBD2: Ignoring recovery information on journal [ 295.597994][T10551] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 295.919263][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 296.580768][T10598] sp0: Synchronizing with TNC [ 296.627715][T10597] [U] è [ 297.102126][ T54] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 297.295525][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.337120][ T54] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.380866][ T54] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 297.421839][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.444717][ T54] usb 2-1: config 0 descriptor?? [ 297.910808][ T54] input: HID 28bd:0934 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.0017/input/input21 [ 298.033799][ T54] uclogic 0003:28BD:0934.0017: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 298.161995][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 298.210502][ T54] usb 2-1: USB disconnect, device number 13 [ 298.371902][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 298.387449][ T8] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 298.406097][ T8] usb 3-1: config 0 has no interface number 0 [ 298.425545][ T8] usb 3-1: config 0 interface 12 has no altsetting 0 [ 298.454308][ T8] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 298.482173][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.500556][ T8] usb 3-1: Product: syz [ 298.521035][ T8] usb 3-1: Manufacturer: syz [ 298.539352][ T8] usb 3-1: SerialNumber: syz [ 298.556612][ T8] usb 3-1: config 0 descriptor?? [ 299.200167][ T8] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 299.214829][ T8] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 299.224106][ T8] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 299.241441][ T8] f81534: probe of 3-1:0.12 failed with error -71 [ 299.257434][ T8] usb 3-1: USB disconnect, device number 12 [ 299.929212][T10696] sp0: Synchronizing with TNC [ 300.379261][T10713] loop1: detected capacity change from 0 to 16 [ 300.392341][T10713] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.210156][T10734] loop1: detected capacity change from 0 to 4096 [ 301.226658][T10734] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 301.865911][T10726] loop5: detected capacity change from 0 to 32768 [ 301.908100][T10726] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.120090][T10726] XFS (loop5): Ending clean mount [ 302.143182][T10726] XFS (loop5): Quotacheck needed: Please wait. [ 302.145432][T10763] program syz.0.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.261966][T10726] XFS (loop5): Quotacheck: Done. [ 302.459209][ T9739] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.427968][T10776] loop2: detected capacity change from 0 to 32768 [ 303.453135][T10776] XFS: ikeep mount option is deprecated. [ 303.461428][T10776] XFS: noikeep mount option is deprecated. [ 303.517204][T10776] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.788733][T10776] XFS (loop2): Ending clean mount [ 303.945805][T10789] loop1: detected capacity change from 0 to 32768 [ 304.003974][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.049914][T10789] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.230867][T10789] XFS (loop1): Ending clean mount [ 304.425141][T10823] loop5: detected capacity change from 0 to 4096 [ 304.532572][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.569483][T10826] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.847443][T10823] overlayfs: upper fs does not support tmpfile. [ 304.892405][T10823] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 304.911815][T10823] overlayfs: failed to set xattr on upper [ 304.917633][T10823] overlayfs: ...falling back to redirect_dir=nofollow. [ 304.981264][T10823] overlayfs: ...falling back to index=off. [ 305.498855][T10848] loop5: detected capacity change from 0 to 512 [ 305.573351][T10848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.683691][T10858] loop1: detected capacity change from 0 to 512 [ 305.745853][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.762503][T10858] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 305.772775][T10858] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1932: invalid indirect mapped block 8 (level 2) [ 305.865344][T10858] EXT4-fs (loop1): Remounting filesystem read-only [ 305.907105][T10858] EXT4-fs (loop1): 1 truncate cleaned up [ 305.941637][T10858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.085309][T10858] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 306.119644][T10858] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 306.174154][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.307098][T10876] loop2: detected capacity change from 0 to 512 [ 306.351579][T10876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.379752][T10876] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1929: invalid indirect mapped block 4294967295 (level 1) [ 306.401873][T10876] EXT4-fs (loop2): Remounting filesystem read-only [ 306.418829][T10876] EXT4-fs (loop2): 2 truncates cleaned up [ 306.434279][T10876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.492761][T10876] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 306.649614][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.195349][T10903] loop5: detected capacity change from 0 to 1024 [ 307.254828][T10903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 307.299356][T10903] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.367819][T10903] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: comm syz.5.1941: lblock 0 mapped to illegal pblock 0 (length 3) [ 307.381853][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 307.430964][T10903] EXT4-fs (loop5): Remounting filesystem read-only [ 307.549367][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 307.575813][ T9] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 307.592134][ T9] usb 1-1: config 0 has no interface number 0 [ 307.598437][ T9] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.633384][ T9] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.649555][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 307.693068][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.724297][ T9] usb 1-1: config 0 descriptor?? [ 308.013462][T10905] loop2: detected capacity change from 0 to 32768 [ 308.099296][T10905] JBD2: Ignoring recovery information on journal [ 308.183275][T10905] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 308.198811][ T9] logitech-djreceiver 0003:046D:C534.0018: unbalanced collection at end of report description [ 308.242803][ T9] logitech-djreceiver 0003:046D:C534.0018: logi_dj_probe: parse failed [ 308.288887][ T9] logitech-djreceiver: probe of 0003:046D:C534.0018 failed with error -22 [ 308.365667][T10929] loop1: detected capacity change from 0 to 8 [ 308.373110][T10929] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 308.417857][ T5957] udevd[5957]: incorrect cramfs checksum on /dev/loop1 [ 308.438455][T10929] cramfs: Error -3 while decompressing! [ 308.461059][T10929] cramfs: ffffffff96fde298(16)->ffff8880745eb000(4096) [ 308.461528][ T5881] usb 1-1: USB disconnect, device number 20 [ 308.472952][T10929] cramfs: Error -3 while decompressing! [ 308.479879][T10929] cramfs: ffffffff96fde298(16)->ffff8880745eb000(4096) [ 308.510497][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 308.531872][ T28] audit: type=1800 audit(1756465957.444:94): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1953" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 308.571646][T10931] loop5: detected capacity change from 0 to 512 [ 308.619693][T10931] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 308.628714][T10931] UDF-fs: Scanning with blocksize 512 failed [ 308.648248][T10931] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 308.676822][T10931] UDF-fs: Scanning with blocksize 1024 failed [ 308.713356][T10931] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 308.727216][T10931] UDF-fs: Scanning with blocksize 2048 failed [ 308.744478][T10931] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 308.793411][T10931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.556386][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'. [ 309.969144][T10974] loop2: detected capacity change from 0 to 1024 [ 311.758937][T11002] loop1: detected capacity change from 0 to 40427 [ 311.812864][T11002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.969473][T11002] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 312.029673][T11002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 312.175631][ T5791] syz-executor: attempt to access beyond end of device [ 312.175631][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 312.210474][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 312.777310][T11035] loop2: detected capacity change from 0 to 64 [ 314.069273][T11067] program syz.0.2024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.172461][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 315.181281][T11107] sp0: Synchronizing with TNC [ 315.193507][T11107] sp0: Found TNC [ 315.194001][T11106] [U] è` [ 316.008049][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 316.414196][T11139] loop1: detected capacity change from 0 to 512 [ 316.524929][T11139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.609950][T11139] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.749791][ T28] audit: type=1800 audit(1756465965.654:95): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2050" name=0AF301 dev="loop1" ino=18 res=0 errno=0 [ 316.864257][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.384253][T11146] loop5: detected capacity change from 0 to 32768 [ 317.403657][T11146] XFS: ikeep mount option is deprecated. [ 317.476968][T11146] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.556930][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.567040][T11177] gretap0: entered promiscuous mode [ 317.572113][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.709299][T11146] XFS (loop5): Ending clean mount [ 317.892887][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'. [ 317.902141][T11188] netlink: 'syz.1.2067': attribute type 4 has an invalid length. [ 317.973781][ T9739] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 318.711347][T11213] loop1: detected capacity change from 0 to 128 [ 318.734807][T11213] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 318.753374][T11213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.841919][ T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 319.042380][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 319.054164][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.074735][ T54] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 319.093154][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.110890][ T54] usb 3-1: Product: syz [ 319.115983][ T54] usb 3-1: Manufacturer: syz [ 319.120643][ T54] usb 3-1: SerialNumber: syz [ 319.138119][ T54] usb 3-1: config 0 descriptor?? [ 319.156449][ T54] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 319.387803][ T5881] usb 3-1: USB disconnect, device number 13 [ 319.571961][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 319.751937][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 319.759677][ T8] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 319.772984][ T8] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 319.782197][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.790313][ T8] usb 1-1: Product: syz [ 319.794876][ T8] usb 1-1: Manufacturer: syz [ 319.799517][ T8] usb 1-1: SerialNumber: syz [ 319.806677][ T8] usb 1-1: config 0 descriptor?? [ 319.817240][ T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 319.825421][ T8] usb 1-1: setting power ON [ 319.830061][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 319.838833][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.848888][ T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 319.857579][ T8] usb 1-1: media controller created [ 319.881446][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.910727][ T8] usb 1-1: selecting invalid altsetting 6 [ 319.917079][ T8] usb 1-1: digital interface selection failed (-22) [ 319.926092][ T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 319.939694][ T8] usb 1-1: setting power OFF [ 319.952370][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 319.963122][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 319.977228][ T8] (NULL device *): no alternate interface [ 320.038326][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 320.071598][ T8] usb 1-1: USB disconnect, device number 21 [ 320.325233][T11237] loop1: detected capacity change from 0 to 128 [ 320.366845][T11237] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.511341][T11235] loop2: detected capacity change from 0 to 32768 [ 320.569145][T11235] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.656593][T11235] XFS (loop2): Ending clean mount [ 320.665628][T11235] XFS (loop2): Quotacheck needed: Please wait. [ 320.757052][T11235] XFS (loop2): Quotacheck: Done. [ 320.868699][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.097182][T11287] loop2: detected capacity change from 0 to 256 [ 322.114224][T11287] exfat: Deprecated parameter 'utf8' [ 322.179199][T11287] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 322.349180][T11289] loop5: detected capacity change from 0 to 4096 [ 322.579215][T11289] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 323.673053][T11327] loop2: detected capacity change from 0 to 32768 [ 323.685204][T11327] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2138 (11327) [ 323.712025][T11327] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 323.726536][T11327] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 323.737758][T11327] BTRFS info (device loop2): using free space tree [ 323.752006][ T5862] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 323.776068][T11327] BTRFS info (device loop2): enabling ssd optimizations [ 323.783423][T11327] BTRFS info (device loop2): auto enabling async discard [ 323.893075][ T28] audit: type=1326 audit(1756465972.814:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9857d8ebe9 code=0x7fc00000 [ 323.932018][ T5793] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 323.992345][ T5862] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 324.010202][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.040173][ T5862] usb 1-1: Product: syz [ 324.050321][ T5862] usb 1-1: Manufacturer: syz [ 324.067300][ T5862] usb 1-1: SerialNumber: syz [ 324.075177][ T5862] usb 1-1: config 0 descriptor?? [ 324.176984][T11349] loop1: detected capacity change from 0 to 128 [ 324.275875][T11349] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.373717][T11349] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.546769][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.600990][ T5862] mos7840 1-1:0.0: required endpoints missing [ 324.627940][ T5862] usb 1-1: USB disconnect, device number 22 [ 325.108520][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 325.117861][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 325.240678][T11375] loop1: detected capacity change from 0 to 16 [ 325.295669][T11375] erofs: (device loop1): mounted with root inode @ nid 36. [ 325.349759][T11375] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 325.377504][T11375] syz.1.2144: attempt to access beyond end of device [ 325.377504][T11375] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 325.502058][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'. [ 325.875081][T11393] loop2: detected capacity change from 0 to 4096 [ 325.989556][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:1) [ 326.046345][T11393] ntfs3: loop2: failed to convert name for inode 1e. [ 326.986016][T11425] usb usb8: usbfs: process 11425 (syz.5.2171) did not claim interface 0 before use [ 327.199914][T11433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2175'. [ 327.255888][T11432] loop5: detected capacity change from 0 to 2048 [ 327.323262][T11435] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.396455][T11432] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 327.426366][T11432] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 327.459158][T11439] sp0: Synchronizing with TNC [ 327.461814][T11432] Remounting filesystem read-only [ 327.484126][T11432] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 327.510355][T11432] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 327.531951][T11439] sp0: Found TNC [ 327.539211][T11432] NILFS (loop5): error -5 truncating bmap (ino=16) [ 327.609271][ T9739] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 327.618827][ T9739] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 327.627032][ T9739] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.643450][ T9739] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.653656][ T9739] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.663355][ T9739] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 327.752313][T11444] loop5: detected capacity change from 0 to 1024 [ 327.759930][T11444] EXT4-fs: Ignoring removed nobh option [ 327.766938][T11444] EXT4-fs: Ignoring removed bh option [ 327.785124][T11444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.841363][T11444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.862123][ T5881] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 327.894814][T11429] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 327.938034][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.061964][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 328.079004][ T5881] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.097949][ T5881] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.108934][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 328.118881][ T5881] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 328.128836][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.159031][ T5881] usb 2-1: config 0 descriptor?? [ 328.479651][T11451] loop2: detected capacity change from 0 to 32768 [ 328.529294][T11451] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.571519][T11451] XFS (loop2): Ending clean mount [ 328.593479][ T5881] hid-alps 0003:044E:120C.0019: item fetching failed at offset 5/6 [ 328.613938][ T5881] hid-alps 0003:044E:120C.0019: parse failed [ 328.620108][ T5881] hid-alps: probe of 0003:044E:120C.0019 failed with error -22 [ 328.714762][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.819833][ T5862] usb 2-1: USB disconnect, device number 14 [ 329.150536][T11469] loop2: detected capacity change from 0 to 8 [ 329.171300][T11469] SQUASHFS error: lzo decompression failed, data probably corrupt [ 329.189299][T11469] SQUASHFS error: Failed to read block 0x91: -5 [ 329.197126][T11469] SQUASHFS error: Unable to read metadata cache entry [8f] [ 329.210451][T11469] SQUASHFS error: Unable to read inode 0x11f [ 330.562173][T11514] loop2: detected capacity change from 0 to 4096 [ 330.765269][T11520] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2210'. [ 330.793049][T11514] ntfs3: loop2: ino=21, "file1" attr_insert_range [ 331.068809][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 331.321574][T11536] loop1: detected capacity change from 0 to 256 [ 331.330740][T11536] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.351372][T11536] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 331.431150][T11536] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 332.195637][T11554] loop2: detected capacity change from 0 to 4096 [ 332.230417][T11554] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 332.368746][T11538] loop5: detected capacity change from 0 to 40427 [ 332.397564][T11538] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 332.435208][T11538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 332.460665][T11538] F2FS-fs (loop5): invalid crc value [ 332.504020][T11538] F2FS-fs (loop5): Found nat_bits in checkpoint [ 332.684722][T11538] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 332.722353][T11538] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 333.242028][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 333.262016][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 333.461933][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 333.469556][ T5881] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.478704][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 333.492109][ T5881] usb 1-1: config 0 has no interface number 0 [ 333.500760][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.511771][ T8] usb 2-1: config 0 has no interface number 0 [ 333.525348][ T5881] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.547175][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.561838][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.571835][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.579885][ T8] usb 2-1: Product: syz [ 333.594527][ T5881] usb 1-1: Product: syz [ 333.601793][ T5881] usb 1-1: Manufacturer: syz [ 333.609002][ T8] usb 2-1: Manufacturer: syz [ 333.616688][ T5881] usb 1-1: SerialNumber: syz [ 333.626826][ T8] usb 2-1: SerialNumber: syz [ 333.640911][ T5881] usb 1-1: config 0 descriptor?? [ 333.666138][ T5881] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.681991][ T8] usb 2-1: config 0 descriptor?? [ 333.695065][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.917734][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.953264][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.967800][T11575] loop2: detected capacity change from 0 to 32768 [ 334.077556][T11575] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.163507][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 334.215783][T11575] XFS (loop2): Ending clean mount [ 334.228219][T11575] XFS (loop2): Quotacheck needed: Please wait. [ 334.263171][ T5881] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 334.283340][ T5881] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 334.286665][T11575] XFS (loop2): Quotacheck: Done. [ 334.364987][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 334.377500][ T5881] usb 2-1: USB disconnect, device number 15 [ 334.397275][T11575] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0': -40 [ 334.434522][ T5881] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 334.470536][ T5881] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 334.502816][ T5881] quatech2 2-1:0.51: device disconnected [ 334.551790][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 334.572234][ T5861] usb 1-1: USB disconnect, device number 23 [ 334.592520][ T5861] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 334.613615][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.633236][ T5861] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 334.656882][ T5861] quatech2 1-1:0.51: device disconnected [ 335.075080][T11609] loop5: detected capacity change from 0 to 512 [ 335.133516][T11609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.165026][T11609] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.279640][T11609] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.2249: invalid size [ 335.314948][T11609] EXT4-fs (loop5): Remounting filesystem read-only [ 335.361327][T11607] loop1: detected capacity change from 0 to 32768 [ 335.396033][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.405330][T11607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2247 (11607) [ 335.419916][ T2901] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 335.435021][T11614] block nbd0: not configured, cannot reconfigure [ 335.453018][ T2901] Quota error (device loop5): write_blk: dquota write failed [ 335.466917][ T2901] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 335.487506][T11607] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.532208][T11607] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 335.541515][T11607] BTRFS info (device loop1): setting nodatacow, compression disabled [ 335.607595][T11607] BTRFS info (device loop1): max_inline at 0 [ 335.631629][T11616] loop5: detected capacity change from 0 to 1024 [ 335.638204][T11607] BTRFS info (device loop1): enabling disk space caching [ 335.647066][T11607] BTRFS info (device loop1): turning off barriers [ 335.677394][T11607] BTRFS info (device loop1): turning on flush-on-commit [ 335.709238][T11607] BTRFS info (device loop1): doing ref verification [ 335.748094][T11607] BTRFS info (device loop1): force clearing of disk cache [ 335.816500][T11607] BTRFS info (device loop1): enabling ssd optimizations [ 335.824962][T11616] hfsplus: keylen 65060 too large [ 335.836876][T11616] hfsplus: xattr searching failed [ 335.843296][T11607] BTRFS info (device loop1): max_inline at 4096 [ 335.850020][T11607] BTRFS info (device loop1): disk space caching is enabled [ 336.099413][T11607] BTRFS info (device loop1): auto enabling async discard [ 336.157585][T11607] BTRFS info (device loop1): rebuilding free space tree [ 336.216643][T11607] BTRFS info (device loop1): disabling free space tree [ 336.224093][T11607] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 336.234039][T11607] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 336.366079][ T5861] IPVS: starting estimator thread 0... [ 336.482193][T11645] IPVS: using max 16 ests per chain, 38400 per kthread [ 336.575378][T11649] tipc: Invalid UDP bearer configuration [ 336.575436][T11649] tipc: Enabling of bearer rejected, failed to enable media [ 336.666777][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.762138][ T5881] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 337.974685][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.987789][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 337.994665][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 338.003910][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.015389][ T5881] usb 2-1: config 0 descriptor?? [ 338.443224][ T5881] logitech 0003:046D:C29C.001A: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 338.638338][ T5881] logitech 0003:046D:C29C.001A: no inputs found [ 338.650059][ T5881] usb 2-1: USB disconnect, device number 16 [ 339.419223][T11693] loop1: detected capacity change from 0 to 512 [ 339.494694][ T6061] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.658172][T11693] loop1: detected capacity change from 0 to 4096 [ 339.700664][T11693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.777964][T11705] tipc: Started in network mode [ 339.784541][T11705] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 339.793770][T11705] tipc: Enabling of bearer rejected, failed to enable media [ 339.855214][T11693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.921954][T11693] EXT4-fs (loop1): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 340.006599][T11693] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 340.166408][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.370130][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 341.805138][T11745] loop2: detected capacity change from 0 to 32768 [ 341.874021][T11745] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 342.030421][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 342.053923][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 342.901987][ T54] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 343.099410][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 343.113841][ T54] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.126111][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 343.133088][ T54] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 343.142335][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.145075][ T54] usb 3-1: config 0 descriptor?? [ 343.613552][ T54] ryos 0003:1E7D:3138.001B: unknown main item tag 0x0 [ 343.627396][ T54] ryos 0003:1E7D:3138.001B: unknown main item tag 0x0 [ 343.635110][ T54] ryos 0003:1E7D:3138.001B: unknown main item tag 0x0 [ 343.642469][ T54] ryos 0003:1E7D:3138.001B: unknown main item tag 0x0 [ 343.649428][ T54] ryos 0003:1E7D:3138.001B: unknown main item tag 0x0 [ 343.667290][ T54] ryos 0003:1E7D:3138.001B: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 343.802286][ T5862] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 343.845214][ T8] usb 3-1: USB disconnect, device number 14 [ 344.000909][ T5862] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 344.017293][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.025674][ T5862] usb 2-1: Product: syz [ 344.030046][ T5862] usb 2-1: Manufacturer: syz [ 344.035042][ T5862] usb 2-1: SerialNumber: syz [ 344.043956][ T5862] usb 2-1: config 0 descriptor?? [ 344.341504][ T54] usb 2-1: USB disconnect, device number 17 [ 344.804783][T11822] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2337'. [ 344.814441][T11822] netlink: 'syz.0.2337': attribute type 3 has an invalid length. [ 345.333075][T11825] loop2: detected capacity change from 0 to 32768 [ 345.381459][T11825] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 345.427362][T11825] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 345.539114][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 345.732305][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 345.931847][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 345.948641][ T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 345.961579][ T8] usb 2-1: config 0 has no interface number 0 [ 345.973165][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.994859][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.017549][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 346.037671][ T8] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 346.052996][ T8] usb 2-1: Product: syz [ 346.057353][ T8] usb 2-1: SerialNumber: syz [ 346.072070][ T8] usb 2-1: config 0 descriptor?? [ 346.077929][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 346.083700][ T8] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 346.100619][T11858] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.2353'. [ 346.110035][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input25 [ 346.188944][T11860] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 346.201240][T11860] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 346.364982][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.372294][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.379514][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.386740][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.393988][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.401284][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.408584][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.415896][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.423185][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.430334][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.438193][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 346.447297][ T5861] usb 2-1: USB disconnect, device number 18 [ 346.460402][ T5861] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 346.497279][T11862] loop2: detected capacity change from 0 to 4096 [ 346.553200][T11867] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.806875][T11874] loop2: detected capacity change from 0 to 16 [ 346.825174][T11874] erofs: (device loop2): mounted with root inode @ nid 36. [ 346.843058][T11874] erofs: (device loop2): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 346.855113][T11874] erofs: (device loop2): z_erofs_readahead: readahead error at folio 9 @ nid 36 [ 346.864914][T11874] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 346.874622][T11874] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 346.884273][T11874] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 346.896308][T11874] syz.2.2361: attempt to access beyond end of device [ 346.896308][T11874] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 346.911199][T11874] syz.2.2361: attempt to access beyond end of device [ 346.911199][T11874] loop2: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 346.925899][T11874] syz.2.2361: attempt to access beyond end of device [ 346.925899][T11874] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 346.940622][T11874] syz.2.2361: attempt to access beyond end of device [ 346.940622][T11874] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 346.956005][T11874] syz.2.2361: attempt to access beyond end of device [ 346.956005][T11874] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 347.120276][T11880] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2364'. [ 347.129502][T11880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2364'. [ 347.349546][T11886] loop2: detected capacity change from 0 to 512 [ 347.370677][T11886] EXT4-fs: Ignoring removed bh option [ 347.376772][T11886] EXT4-fs: Ignoring removed mblk_io_submit option [ 347.389733][T11886] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 347.404705][T11886] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 347.413620][T11886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.423097][T11886] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 347.442318][T11886] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 347.461559][T11884] loop1: detected capacity change from 0 to 8192 [ 347.477391][T11886] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2366: Failed to acquire dquot type 1 [ 347.490243][T11886] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.2366: Invalid block bitmap block 0 in block_group 0 [ 347.502864][T11884] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.525609][T11886] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.2366: Invalid block bitmap block 0 in block_group 0 [ 347.554993][T11886] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.2366: Invalid block bitmap block 0 in block_group 0 [ 347.607922][T11886] Quota error (device loop2): write_blk: dquota write failed [ 347.633003][T11886] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 347.662796][T11886] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2366: Failed to acquire dquot type 1 [ 347.702892][T11886] Quota error (device loop2): write_blk: dquota write failed [ 347.710567][T11886] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 347.742851][T11886] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2366: Failed to acquire dquot type 1 [ 347.757752][T11886] EXT4-fs (loop2): 1 orphan inode deleted [ 347.766902][T11886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.999494][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.608766][T11889] loop1: detected capacity change from 0 to 32768 [ 348.667730][T11903] loop2: detected capacity change from 0 to 4096 [ 348.704698][T11889] JBD2: Ignoring recovery information on journal [ 348.738694][T11903] ntfs: (device loop2): parse_options(): NLS character set maccenteuroAdmask=0000000000004000 not found. Using previous one default. [ 348.785494][T11904] MPI: mpi too large (113288 bits) [ 348.820377][T11889] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 348.865947][T11903] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 348.920767][T11903] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 348.950585][T11889] (syz.1.2367,11889,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 348.985175][T11903] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 349.009837][T11889] (syz.1.2367,11889,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 262144 from the device. [ 349.093860][T11903] ntfs: volume version 3.1. [ 349.179300][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 349.531481][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 349.639469][T11917] veth3: entered promiscuous mode [ 350.161615][T11938] loop2: detected capacity change from 0 to 2048 [ 350.191374][T11938] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.245077][T11938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.265695][T11979] loop1: detected capacity change from 0 to 256 [ 351.365623][T11979] FAT-fs (loop1): Directory bread(block 64) failed [ 351.373264][T11979] FAT-fs (loop1): Directory bread(block 65) failed [ 351.380119][T11979] FAT-fs (loop1): Directory bread(block 66) failed [ 351.397905][T11979] FAT-fs (loop1): Directory bread(block 67) failed [ 351.411969][T11979] FAT-fs (loop1): Directory bread(block 68) failed [ 351.452045][T11979] FAT-fs (loop1): Directory bread(block 69) failed [ 351.468288][T11979] FAT-fs (loop1): Directory bread(block 70) failed [ 351.481876][T11979] FAT-fs (loop1): Directory bread(block 71) failed [ 351.492742][T11979] FAT-fs (loop1): Directory bread(block 72) failed [ 351.499355][T11979] FAT-fs (loop1): Directory bread(block 73) failed [ 352.001361][T12001] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 352.181360][T12007] loop2: detected capacity change from 0 to 1024 [ 352.310823][T12007] hfsplus: bad catalog entry type [ 352.427235][ T3546] hfsplus: b-tree write err: -5, ino 4 [ 352.799318][T12022] loop2: detected capacity change from 0 to 4096 [ 352.817468][T12022] ntfs3: loop2: ino=3, Correct links count -> 2. [ 352.951215][T12022] ntfs3: loop2: failed to convert "0080" to cp437 [ 352.998561][T12022] ntfs3: loop2: failed to convert name for inode 1e. [ 353.961958][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 354.151895][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 354.160718][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 354.179856][ T8] usb 3-1: config 0 has no interface number 0 [ 354.201569][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 354.230985][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.259769][ T8] usb 3-1: Product: syz [ 354.277964][ T8] usb 3-1: Manufacturer: syz [ 354.301976][ T8] usb 3-1: SerialNumber: syz [ 354.323322][ T8] usb 3-1: config 0 descriptor?? [ 354.347869][ T8] smsc95xx v2.0.0 [ 354.635162][T12042] loop1: detected capacity change from 0 to 40427 [ 354.681829][T12042] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 354.689742][T12042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 354.739590][T12042] F2FS-fs (loop1): invalid crc value [ 354.799051][T12042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 354.990315][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 355.021090][T12042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 355.021125][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 355.044435][T12042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 355.080999][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 355.117803][ T8] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 355.133775][ T8] usb 3-1: USB disconnect, device number 15 [ 355.372935][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2444'. [ 355.577674][T12093] overlayfs: maximum fs stacking depth exceeded [ 355.599504][T12095] loop5: detected capacity change from 0 to 1024 [ 355.642998][T12095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.747073][T12095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.942933][T12107] netlink: 'syz.0.2453': attribute type 281 has an invalid length. [ 356.062688][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.286299][T12120] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 356.302275][T12118] loop1: detected capacity change from 0 to 1024 [ 356.409837][T12118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.477503][T12118] ext4 filesystem being mounted at /633/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.659961][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.982336][T12169] loop1: detected capacity change from 0 to 256 [ 358.015710][T12169] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.482257][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 358.491204][T12185] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2488'. [ 358.790875][T12195] loop1: detected capacity change from 0 to 4096 [ 359.431685][T12216] binder: 12215:12216 ioctl c018620c 200000000240 returned -22 [ 359.852019][ T5862] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 360.042707][ T5862] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 360.056634][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.070024][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.101814][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.109794][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.120256][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.147109][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.162352][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.172085][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.203989][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.221277][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.238495][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.270204][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.290633][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.301230][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.328081][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.357703][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.388119][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.419286][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.429447][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.447141][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.464716][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.474081][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.491898][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.513076][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 360.532727][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 360.542414][ T5862] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 360.551074][ T5862] usb 3-1: Product: syz [ 360.556635][ T5862] usb 3-1: Manufacturer: syz [ 360.561300][ T5862] usb 3-1: SerialNumber: syz [ 360.569931][ T5862] usb 3-1: config 0 descriptor?? [ 360.593769][ T5862] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 360.762913][T12233] loop1: detected capacity change from 0 to 32768 [ 360.790493][T12233] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2510 (12233) [ 360.853967][T12233] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.866855][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 360.866871][ T28] audit: type=1326 audit(1756466009.784:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 360.891846][T12233] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 360.942303][ T28] audit: type=1326 audit(1756466009.784:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 360.975259][T12233] BTRFS info (device loop1): enabling auto defrag [ 360.995210][T12233] BTRFS info (device loop1): max_inline at 0 [ 361.020655][ T28] audit: type=1326 audit(1756466009.794:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.044677][T12233] BTRFS info (device loop1): enabling ssd optimizations [ 361.061822][T12233] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 361.086755][T12233] BTRFS info (device loop1): use lzo compression, level 0 [ 361.100558][ T5862] usb 3-1: USB disconnect, device number 16 [ 361.112248][ T28] audit: type=1326 audit(1756466009.794:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.130761][ T5862] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 361.145233][T12233] BTRFS info (device loop1): using free space tree [ 361.176304][T12254] sock: sock_set_timeout: `syz.5.2519' (pid 12254) tries to set negative timeout [ 361.189058][ T28] audit: type=1326 audit(1756466009.794:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.211987][ T28] audit: type=1326 audit(1756466009.794:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.240687][ T28] audit: type=1326 audit(1756466009.794:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d4f985ba7 code=0x7ffc0000 [ 361.268468][ T28] audit: type=1326 audit(1756466009.794:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4f92ade9 code=0x7ffc0000 [ 361.326772][ T28] audit: type=1326 audit(1756466009.794:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.402155][ T28] audit: type=1326 audit(1756466009.794:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4f98ebe9 code=0x7ffc0000 [ 361.658608][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.289891][T12284] loop5: detected capacity change from 0 to 8192 [ 362.334629][T12284] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 362.352242][T12284] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 362.361610][T12284] REISERFS (device loop5): using ordered data mode [ 362.437677][T12284] reiserfs: using flush barriers [ 362.456801][T12284] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 362.512559][T12284] REISERFS (device loop5): checking transaction log (loop5) [ 362.561216][T12284] REISERFS (device loop5): Using r5 hash to sort names [ 362.585764][T12299] loop1: detected capacity change from 0 to 512 [ 362.593490][T12284] REISERFS (device loop5): using 3.5.x disk format [ 362.600473][T12284] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 362.723459][T12299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 362.775781][T12299] System zones: 1-12 [ 362.806386][T12299] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2533: Directory hole found for htree index block 0 [ 362.819679][T12299] EXT4-fs (loop1): Remounting filesystem read-only [ 362.831797][T12299] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 362.840245][T12299] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 362.850183][T12299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.954708][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.676235][T12305] loop2: detected capacity change from 0 to 32768 [ 364.297623][T12333] loop5: detected capacity change from 0 to 512 [ 364.393647][T12333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.458938][T12333] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.781387][ T9739] VFS: Lookup of 'ÿÿ' in ext4 loop5 would have caused loop [ 364.814463][ T9739] VFS: Lookup of 'ÿÿ' in ext4 loop5 would have caused loop [ 364.855952][T12346] loop1: detected capacity change from 0 to 2048 [ 364.894597][T12346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.245361][ T9739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.369901][ T3546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.582087][ T3546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.706454][ T3546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.848669][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 365.870903][ T3546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.667422][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.681315][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.699385][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.717781][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.727865][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.739912][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.820471][T12379] loop2: detected capacity change from 0 to 4096 [ 366.866991][T12379] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 366.944837][T12379] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 366.978306][T12379] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 367.033023][T12379] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 367.066887][T12379] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 367.100283][T12379] ntfs: volume version 3.1. [ 367.108459][T12379] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 367.141538][T12379] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 367.199183][T12379] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 367.222264][T12379] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 367.259961][T12379] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 368.361261][T12381] chnl_net:caif_netlink_parms(): no params data found [ 368.452521][ T3546] hsr_slave_0: left promiscuous mode [ 368.459573][ T3546] hsr_slave_1: left promiscuous mode [ 368.468240][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.477154][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.486056][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.493880][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.502170][ T3546] bridge_slave_1: left allmulticast mode [ 368.507874][ T3546] bridge_slave_1: left promiscuous mode [ 368.514007][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.524237][ T3546] bridge_slave_0: left allmulticast mode [ 368.529949][ T3546] bridge_slave_0: left promiscuous mode [ 368.536220][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.589791][ T3546] veth1_macvtap: left promiscuous mode [ 368.602268][ T3546] veth0_macvtap: left promiscuous mode [ 368.608004][ T3546] veth1_vlan: left promiscuous mode [ 368.619924][ T3546] veth0_vlan: left promiscuous mode [ 368.831947][ T5800] Bluetooth: hci1: command tx timeout [ 369.518760][ T3546] team0 (unregistering): Port device team_slave_1 removed [ 369.581465][ T3546] team0 (unregistering): Port device team_slave_0 removed [ 369.644596][ T3546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.713535][ T3546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.434728][ T3546] bond0 (unregistering): Released all slaves [ 370.599873][T12381] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.608445][T12381] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.617183][T12381] bridge_slave_0: entered allmulticast mode [ 370.651445][T12381] bridge_slave_0: entered promiscuous mode [ 370.674225][T12381] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.681414][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.689408][T12381] bridge_slave_1: entered allmulticast mode [ 370.696729][T12381] bridge_slave_1: entered promiscuous mode [ 370.784657][T12381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.813364][T12381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.877367][T12381] team0: Port device team_slave_0 added [ 370.886641][T12381] team0: Port device team_slave_1 added [ 370.912411][ T5800] Bluetooth: hci1: command tx timeout [ 370.954326][T12381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.961374][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.987907][T12381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.003135][T12381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.010145][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.038804][T12381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.140514][T12381] hsr_slave_0: entered promiscuous mode [ 371.149195][T12381] hsr_slave_1: entered promiscuous mode [ 371.157528][T12381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.165826][T12381] Cannot create hsr debugfs directory [ 371.423696][T12381] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 371.438249][T12381] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.460524][T12381] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.480314][T12381] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.530459][T12381] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.538130][T12381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.547463][T12381] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.556314][T12381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.571008][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.598392][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.725672][T12381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.767124][T12381] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.800349][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.807630][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.842185][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.849365][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.175933][T12381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.537808][T12381] veth0_vlan: entered promiscuous mode [ 372.553817][T12381] veth1_vlan: entered promiscuous mode [ 372.615485][T12381] veth0_macvtap: entered promiscuous mode [ 372.630330][T12381] veth1_macvtap: entered promiscuous mode [ 372.654317][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.666305][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.680681][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.697156][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.711170][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.722535][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.733747][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.750384][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.767406][T12381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.789053][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.799885][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.816127][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.839516][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.851460][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.870200][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.881886][T12381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.894479][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.907014][T12381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.920103][T12381] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.929668][T12381] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.939947][T12381] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.949350][T12381] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.992039][ T5800] Bluetooth: hci1: command tx timeout [ 373.102565][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.110565][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.170002][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.178752][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.071855][ T5800] Bluetooth: hci1: command tx timeout [ 375.457964][T12585] loop1: detected capacity change from 0 to 512 [ 375.490837][T12585] EXT4-fs: Ignoring removed i_version option [ 375.517820][T12585] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 375.586240][T12585] EXT4-fs (loop1): 1 truncate cleaned up [ 375.594263][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 375.617078][T12585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.750063][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.812815][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 375.834775][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.875135][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.915455][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.967418][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.001822][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.023809][ T8] usb 1-1: config 0 descriptor?? [ 376.061948][T12603] loop6: detected capacity change from 0 to 4096 [ 376.152544][T12603] ntfs3: loop6: ino=3, Correct links count -> 2. [ 376.298496][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 376.298512][ T28] audit: type=1326 audit(1756466025.214:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.393985][ T28] audit: type=1326 audit(1756466025.214:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.498266][T12603] ntfs3: loop6: failed to convert "0080" to macgreek [ 376.502067][ T28] audit: type=1326 audit(1756466025.254:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.526548][T12603] ntfs3: loop6: failed to convert name for inode 1e. [ 376.529874][ T8] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 376.572016][ T8] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 376.606457][ T8] microsoft 0003:045E:07DA.001C: implement() called with n (56) > 32! (kworker/0:0) [ 376.622100][ T28] audit: type=1326 audit(1756466025.254:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.685431][ T8] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 376.713100][ T28] audit: type=1326 audit(1756466025.254:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.759156][ T8] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 376.791350][ T8] microsoft 0003:045E:07DA.001C: no inputs found [ 376.805706][ T28] audit: type=1326 audit(1756466025.254:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.837815][ T8] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 376.865344][T12622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2634'. [ 376.902569][ T8] usb 1-1: USB disconnect, device number 24 [ 376.923293][T12622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2634'. [ 376.959069][ T28] audit: type=1326 audit(1756466025.254:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.2.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4eb8ebe9 code=0x7ffc0000 [ 376.990545][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2634'. [ 377.115668][T12623] fido_id[12623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 378.040190][T12659] loop2: detected capacity change from 0 to 64 [ 378.153294][T12665] loop6: detected capacity change from 0 to 16 [ 378.186347][ T28] audit: type=1800 audit(1756466027.094:114): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2638" name=3F20D8EE449015A7DFF7ACBA1F2BB47AB7DCA7D55C5AABB8F3AE47ABF9AE568570242CD5D69B998F5286A3DD45F3CEDC330BFAA98FAA26E6FF918B6F51893333EBFA687CCD7064D4D6F5DBDAB1F49A455F33DE77B9DD3D5D2E742208C607EE1BA4019F96BDD523DDD4CCE6F3178F0BCD6663C32D3C4C597832BD614249E98D945A67F80B0565D4D1F66E89755E5A7BD02DDB430466FA7D1A57FA6FE7D7C177EAAE1F9D1277FAA455766759A724FA079FBC35390CF7715FA87E56D601393A0BD64A3D560DED3A856364D3B4073D144CE41C108E9A9B779956FEE767F26156E75324F71267CCD3B3934C756D71B993C1754F0567FDEBE44019DC54EF0C2EB1C76B3D72469F735DBC2C5D4A141A65EE310E719E10A6AAAF7AC0F37F dev="loop2" ino=21 res=0 errno=0 [ 378.273428][T12665] erofs: (device loop6): mounted with root inode @ nid 36. [ 378.467141][T12672] overlayfs: workdir and upperdir must be separate subtrees [ 379.003885][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.010374][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.308907][T12702] bond0: entered promiscuous mode [ 379.351826][T12702] bond_slave_0: entered promiscuous mode [ 379.357725][T12702] bond_slave_1: entered promiscuous mode [ 379.396280][T12701] bond0: left promiscuous mode [ 379.413831][T12701] bond_slave_0: left promiscuous mode [ 379.419753][T12701] bond_slave_1: left promiscuous mode [ 380.033045][T12686] loop6: detected capacity change from 0 to 40427 [ 380.089012][T12686] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 380.109433][T12686] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 380.140417][T12686] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x7ffff [ 380.162011][ T5862] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 380.177189][T12686] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 380.191363][T12720] loop2: detected capacity change from 0 to 16 [ 380.205161][T12686] F2FS-fs (loop6): invalid crc value [ 380.222142][T12720] erofs: (device loop2): mounted with root inode @ nid 36. [ 380.257748][T12686] F2FS-fs (loop6): Found nat_bits in checkpoint [ 380.368576][ T5862] usb 1-1: No LPM exit latency info found, disabling LPM. [ 380.394587][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.440258][ T5862] usb 1-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.477743][ T5862] usb 1-1: config 1 interface 0 has no altsetting 0 [ 380.488850][ T5862] usb 1-1: string descriptor 0 read error: -22 [ 380.502317][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.517339][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.536967][ T5862] usb 1-1: bad CDC descriptors [ 380.572147][T12686] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 380.579378][T12686] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 380.712130][ T28] audit: type=1800 audit(1756466029.624:115): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2650" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 380.774299][T12733] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2660'. [ 380.812547][T12733] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 380.873022][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.913056][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.935423][ T5862] usb 1-1: USB disconnect, device number 25 [ 380.953559][T12381] syz-executor: attempt to access beyond end of device [ 380.953559][T12381] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.012394][T12381] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 381.134650][T12737] loop2: detected capacity change from 0 to 4096 [ 381.151992][T12737] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 381.189302][T12740] netlink: 'syz.1.2667': attribute type 4 has an invalid length. [ 381.249313][T12737] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 381.403452][T12737] overlayfs: upper fs does not support tmpfile. [ 381.413589][T12737] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 381.432310][T12737] overlayfs: failed to get uuid (/file0, err=0); falling back to uuid=null. [ 381.441495][T12737] ntfs3: loop2: ino=1b, "file0" failed to parse mft record [ 381.451432][T12737] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 381.458417][T12737] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 381.470690][T12737] overlayfs: failed to verify upper root origin [ 381.552729][ T5793] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 381.929810][T12755] loop6: detected capacity change from 0 to 2048 [ 381.949506][T12755] NILFS (loop6): couldn't find nilfs on the device [ 382.004222][ T6061] udevd[6061]: incorrect nilfs2 checksum on /dev/loop6 [ 382.132941][T12758] program syz.2.2674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.529065][T12772] loop2: detected capacity change from 0 to 1024 [ 382.645399][T12772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 382.662464][T12772] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.743209][ T28] audit: type=1800 audit(1756466031.664:116): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2677" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 382.775831][T12777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 382.815790][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 383.017652][T12781] loop1: detected capacity change from 0 to 512 [ 383.058078][T12781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 383.134123][T12781] EXT4-fs (loop1): 1 orphan inode deleted [ 383.147852][T12781] EXT4-fs (loop1): 1 truncate cleaned up [ 383.168999][T12781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.198954][T12785] sp0: Synchronizing with TNC [ 383.330778][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.667399][T12794] loop2: detected capacity change from 0 to 128 [ 383.785711][T12794] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.808841][T12802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2689'. [ 383.858596][T12794] ext4 filesystem being mounted at /689/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.046366][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.060207][T12837] sp0: Synchronizing with TNC [ 385.172549][T12839] loop2: detected capacity change from 0 to 256 [ 385.303346][T12843] xt_hashlimit: max too large, truncated to 1048576 [ 385.310867][T12843] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 385.766073][T12833] loop1: detected capacity change from 0 to 32768 [ 385.835083][T12833] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 386.076621][T12833] XFS (loop1): Ending clean mount [ 386.415813][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.098907][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2717'. [ 387.633004][ T5861] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 387.822035][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 387.837754][ T5861] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 387.848916][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.850244][T12897] loop6: detected capacity change from 0 to 32768 [ 387.861409][ T5861] usb 2-1: Product: syz [ 387.868300][ T5861] usb 2-1: Manufacturer: syz [ 387.889374][ T5861] usb 2-1: SerialNumber: syz [ 387.897095][ T5861] r8152-cfgselector 2-1: config 0 descriptor?? [ 387.923590][T12897] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.972131][T12897] XFS (loop6): Ending clean mount [ 388.039217][T12381] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.159263][ T5861] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 388.414187][ T54] usb 2-1: USB disconnect, device number 19 [ 388.871571][T12909] loop2: detected capacity change from 0 to 40427 [ 388.880523][T12909] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 388.904275][T12909] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 388.939507][T12909] F2FS-fs (loop2): invalid crc value [ 388.969682][T12909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 389.213821][T12909] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 389.261939][T12909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 390.342096][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2743'. [ 390.818866][T12971] loop6: detected capacity change from 0 to 512 [ 390.889788][T12971] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 390.919452][T12971] System zones: 0-7 [ 390.953438][T12971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.249985][T12381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.522663][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2754'. [ 392.275623][T13024] loop6: detected capacity change from 0 to 128 [ 392.339154][T13024] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 392.395931][T13024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.508458][T13024] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 393.542314][T13064] netlink: 'syz.6.2775': attribute type 1 has an invalid length. [ 395.042362][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'. [ 395.127855][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2800'. [ 395.253399][T13114] netlink: 'syz.0.2789': attribute type 1 has an invalid length. [ 395.259751][T13116] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 395.526390][T13123] loop2: detected capacity change from 0 to 256 [ 395.582343][T13124] loop6: detected capacity change from 0 to 256 [ 395.664410][T13123] FAT-fs (loop2): Directory bread(block 64) failed [ 395.674480][T13123] FAT-fs (loop2): Directory bread(block 65) failed [ 395.714431][T13123] FAT-fs (loop2): Directory bread(block 66) failed [ 395.719599][T13124] FAT-fs (loop6): Directory bread(block 64) failed [ 395.721101][T13123] FAT-fs (loop2): Directory bread(block 67) failed [ 395.751782][T13124] FAT-fs (loop6): Directory bread(block 65) failed [ 395.788961][T13123] FAT-fs (loop2): Directory bread(block 68) failed [ 395.789312][T13124] FAT-fs (loop6): Directory bread(block 66) failed [ 395.814370][T13123] FAT-fs (loop2): Directory bread(block 69) failed [ 395.836254][T13123] FAT-fs (loop2): Directory bread(block 70) failed [ 395.846885][T13123] FAT-fs (loop2): Directory bread(block 71) failed [ 395.847757][T13124] FAT-fs (loop6): Directory bread(block 67) failed [ 395.860135][T13123] FAT-fs (loop2): Directory bread(block 72) failed [ 395.893459][T13124] FAT-fs (loop6): Directory bread(block 68) failed [ 395.910131][T13123] FAT-fs (loop2): Directory bread(block 73) failed [ 395.911804][T13124] FAT-fs (loop6): Directory bread(block 69) failed [ 395.940044][T13124] FAT-fs (loop6): Directory bread(block 70) failed [ 395.977808][T13124] FAT-fs (loop6): Directory bread(block 71) failed [ 395.995311][T13124] FAT-fs (loop6): Directory bread(block 72) failed [ 396.048308][T13124] FAT-fs (loop6): Directory bread(block 73) failed [ 396.503974][T13143] loop1: detected capacity change from 0 to 256 [ 396.550280][T13145] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 396.611575][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2803'. [ 396.695253][T13143] FAT-fs (loop1): Directory bread(block 64) failed [ 396.738316][T13143] FAT-fs (loop1): Directory bread(block 65) failed [ 396.763884][T13143] FAT-fs (loop1): Directory bread(block 66) failed [ 396.770501][T13143] FAT-fs (loop1): Directory bread(block 67) failed [ 396.822205][T13143] FAT-fs (loop1): Directory bread(block 68) failed [ 396.840741][T13143] FAT-fs (loop1): Directory bread(block 69) failed [ 396.864441][T13143] FAT-fs (loop1): Directory bread(block 70) failed [ 396.871041][T13143] FAT-fs (loop1): Directory bread(block 71) failed [ 396.892407][T13143] FAT-fs (loop1): Directory bread(block 72) failed [ 396.901880][T13143] FAT-fs (loop1): Directory bread(block 73) failed [ 396.920604][T13152] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2805'. [ 398.150371][T13184] loop1: detected capacity change from 0 to 512 [ 398.316164][T13184] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2813: corrupted inode contents [ 398.387985][T13184] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.2813: mark_inode_dirty error [ 398.426796][T13184] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2813: corrupted inode contents [ 398.440983][T13193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2826'. [ 398.473961][T13184] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2813: mark_inode_dirty error [ 398.511281][T13184] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2813: corrupted inode contents [ 398.543142][T13184] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 398.578879][T13184] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2813: corrupted inode contents [ 398.632694][T13184] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.2813: mark_inode_dirty error [ 398.666411][T13184] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 398.732963][T13184] EXT4-fs (loop1): 1 truncate cleaned up [ 398.740078][T13184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.753505][ T48] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 398.777726][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 1 [ 398.803350][T13184] ext4 filesystem being mounted at /726/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.934749][T13184] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 399.089068][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.623591][T13222] loop6: detected capacity change from 0 to 4096 [ 399.810851][T13222] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 400.235752][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2831'. [ 400.457015][T13254] loop6: detected capacity change from 0 to 512 [ 400.534914][T13254] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2832: corrupted inode contents [ 400.561088][T13254] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #16: comm syz.6.2832: mark_inode_dirty error [ 400.587646][T13254] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2832: corrupted inode contents [ 400.631037][T13254] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.2832: mark_inode_dirty error [ 400.658254][T13254] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2832: corrupted inode contents [ 400.692454][T13254] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 400.708318][T13254] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2832: corrupted inode contents [ 400.734994][T13254] EXT4-fs error (device loop6): ext4_truncate:4288: inode #16: comm syz.6.2832: mark_inode_dirty error [ 400.773289][T13254] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 400.797965][T13254] EXT4-fs (loop6): 1 truncate cleaned up [ 400.808615][T13254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.848659][T13254] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.858771][ T3546] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 400.882950][ T3546] EXT4-fs error (device loop6): ext4_release_dquot:6976: comm kworker/u4:11: Failed to release dquot type 1 [ 400.923827][T13254] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 400.992441][T12381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.351867][ T5862] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 401.567108][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.583626][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 401.611955][ T5862] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 401.621077][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.653715][ T5862] usb 3-1: config 0 descriptor?? [ 401.862124][T13280] sp0: Synchronizing with TNC [ 401.918261][T13279] [U] è [ 402.154919][ T5862] input: HID 28bd:0934 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.001D/input/input28 [ 402.185650][T13283] loop6: detected capacity change from 0 to 512 [ 402.276039][ T5862] uclogic 0003:28BD:0934.001D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 402.404704][T13283] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2845: corrupted inode contents [ 402.460486][T13283] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #16: comm syz.6.2845: mark_inode_dirty error [ 402.480758][ T5862] usb 3-1: USB disconnect, device number 17 [ 402.505399][T13283] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2845: corrupted inode contents [ 402.548052][T13283] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.2845: mark_inode_dirty error [ 402.575389][T13283] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2845: corrupted inode contents [ 402.626736][T13283] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 402.652658][T13283] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.2845: corrupted inode contents [ 402.686372][T13283] EXT4-fs error (device loop6): ext4_truncate:4288: inode #16: comm syz.6.2845: mark_inode_dirty error [ 402.724642][T13283] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 402.740711][T13283] EXT4-fs (loop6): 1 truncate cleaned up [ 402.749702][T13283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.764882][T13283] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.777589][ T3546] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 402.807551][ T3546] EXT4-fs error (device loop6): ext4_release_dquot:6976: comm kworker/u4:11: Failed to release dquot type 1 [ 402.856476][T13283] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 402.927335][T12381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.570495][T13308] sp0: Synchronizing with TNC [ 403.622469][T13307] [U] è [ 403.800965][T13300] loop6: detected capacity change from 0 to 32768 [ 403.807660][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 403.841871][T13300] (syz.6.2850,13300,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 403.877400][T13300] (syz.6.2850,13300,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 403.975847][T13300] JBD2: Ignoring recovery information on journal [ 404.021779][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 404.029169][ T23] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 404.041739][ T23] usb 2-1: config 0 has no interface number 0 [ 404.058319][ T23] usb 2-1: config 0 interface 12 has no altsetting 0 [ 404.070217][ T23] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 404.081743][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.086078][T13300] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 404.089781][ T23] usb 2-1: Product: syz [ 404.089800][ T23] usb 2-1: Manufacturer: syz [ 404.089817][ T23] usb 2-1: SerialNumber: syz [ 404.151530][ T23] usb 2-1: config 0 descriptor?? [ 404.323119][T12381] ocfs2: Unmounting device (7,6) on (node local) [ 404.422702][T13313] loop2: detected capacity change from 0 to 32768 [ 404.797666][ T23] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 404.825846][ T23] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 404.856092][ T23] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 404.875849][ T23] f81534: probe of 2-1:0.12 failed with error -71 [ 404.911202][ T23] usb 2-1: USB disconnect, device number 20 [ 405.152195][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 405.162002][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 405.361851][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 405.374081][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.393778][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.411902][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.428845][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.441223][ T8] usb 7-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 405.453184][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.466285][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.474525][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.486719][ T8] usb 7-1: config 0 descriptor?? [ 405.492711][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.509866][ T5881] usb 3-1: config 0 descriptor?? [ 405.945827][ T8] input: HID 28bd:0934 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0934.001E/input/input29 [ 405.970369][ T5881] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001F/input/input30 [ 406.086167][ T8] uclogic 0003:28BD:0934.001E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.6-1/input0 [ 406.122343][ T5881] microsoft 0003:045E:07DA.001F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 406.171308][ T5881] usb 3-1: USB disconnect, device number 18 [ 406.216502][ T8] usb 7-1: USB disconnect, device number 2 [ 406.281388][T13325] fido_id[13325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 406.348333][T13326] fido_id[13326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 407.123437][ T54] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 407.231961][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 407.315835][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 407.323147][ T54] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 407.331294][ T54] usb 1-1: config 0 has no interface number 0 [ 407.337996][ T54] usb 1-1: config 0 interface 12 has no altsetting 0 [ 407.347119][ T54] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 407.356287][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.364658][ T54] usb 1-1: Product: syz [ 407.369493][ T54] usb 1-1: Manufacturer: syz [ 407.374289][ T54] usb 1-1: SerialNumber: syz [ 407.381089][ T54] usb 1-1: config 0 descriptor?? [ 407.424467][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.435699][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 407.450029][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 407.459232][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.471374][ T8] usb 2-1: config 0 descriptor?? [ 407.919148][ T8] input: HID 28bd:0934 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.0020/input/input31 [ 407.959040][ T8] uclogic 0003:28BD:0934.0020: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 408.027886][ T54] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 408.052284][ T54] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 408.059808][ T54] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 408.091841][ T54] f81534: probe of 1-1:0.12 failed with error -71 [ 408.151833][ T54] usb 1-1: USB disconnect, device number 26 [ 408.243057][ T8] usb 2-1: USB disconnect, device number 21 [ 408.941968][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 409.044238][T13363] loop1: detected capacity change from 0 to 128 [ 409.059462][T13363] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.078052][T13363] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 409.132463][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 409.138421][T13351] loop2: detected capacity change from 0 to 32768 [ 409.154128][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.188360][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.209684][T13351] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 409.226842][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.242140][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.277004][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.289265][ T8] usb 7-1: config 0 descriptor?? [ 409.336049][T13351] XFS (loop2): Ending clean mount [ 409.356211][T13351] XFS (loop2): Quotacheck needed: Please wait. [ 409.484263][T13351] XFS (loop2): Quotacheck: Done. [ 409.628181][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 409.730605][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0021/input/input32 [ 409.749637][ T8] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 409.950020][ T54] usb 7-1: USB disconnect, device number 3 [ 410.911916][ T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 411.125213][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.138435][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 411.159726][ T54] usb 7-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 411.170157][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.178546][T13391] loop2: detected capacity change from 0 to 4096 [ 411.183284][ T54] usb 7-1: config 0 descriptor?? [ 411.192510][T13391] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 411.636278][ T54] input: HID 28bd:0934 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0934.0022/input/input33 [ 411.723091][ T54] uclogic 0003:28BD:0934.0022: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.6-1/input0 [ 411.866319][ T54] usb 7-1: USB disconnect, device number 4 [ 412.444829][T13401] loop6: detected capacity change from 0 to 128 [ 412.461381][T13401] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 412.482572][T13401] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 413.195306][T13410] loop6: detected capacity change from 0 to 32768 [ 413.271921][T13410] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.313248][T13410] XFS (loop6): Ending clean mount [ 413.325160][T13410] XFS (loop6): Quotacheck needed: Please wait. [ 413.374305][T13410] XFS (loop6): Quotacheck: Done. [ 413.496886][T12381] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.718830][T13439] program syz.1.2901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.152236][T13473] program syz.6.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.490816][T13493] loop2: detected capacity change from 0 to 32768 [ 416.577943][T13493] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.739052][T13493] XFS (loop2): Ending clean mount [ 416.935421][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.104559][T13525] loop1: detected capacity change from 0 to 4096 [ 417.211813][T13529] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.460562][T13537] overlayfs: upper fs does not support tmpfile. [ 417.474929][T13537] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 417.495120][T13537] overlayfs: failed to set xattr on upper [ 417.500948][T13537] overlayfs: ...falling back to redirect_dir=nofollow. [ 417.527279][T13537] overlayfs: ...falling back to index=off. [ 418.470968][T13553] loop6: detected capacity change from 0 to 32768 [ 418.478489][T13553] XFS: ikeep mount option is deprecated. [ 418.484882][T13553] XFS: noikeep mount option is deprecated. [ 418.506009][T13553] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.578146][T13553] XFS (loop6): Ending clean mount [ 418.673189][T12381] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.351082][T13580] loop6: detected capacity change from 0 to 4096 [ 419.388718][T13584] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.464129][T13580] overlayfs: upper fs does not support tmpfile. [ 419.477552][T13580] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.484877][T13580] overlayfs: failed to set xattr on upper [ 419.490643][T13580] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.501816][T13580] overlayfs: ...falling back to index=off. [ 419.756400][T13588] loop2: detected capacity change from 0 to 4096 [ 419.823312][T13591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.934402][T13588] overlayfs: upper fs does not support tmpfile. [ 419.952404][T13588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.973062][T13588] overlayfs: failed to set xattr on upper [ 420.001919][T13588] overlayfs: ...falling back to redirect_dir=nofollow. [ 420.008854][T13588] overlayfs: ...falling back to index=off. [ 420.318678][T13607] loop1: detected capacity change from 0 to 512 [ 420.398182][T13607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.739878][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.687421][T13653] loop6: detected capacity change from 0 to 512 [ 421.712176][T13653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.740114][T13653] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2994: invalid indirect mapped block 4294967295 (level 1) [ 421.825046][T13653] EXT4-fs (loop6): Remounting filesystem read-only [ 421.832309][T13653] EXT4-fs (loop6): 2 truncates cleaned up [ 421.839448][T13653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.917593][T13653] EXT4-fs warning (device loop6): empty_inline_dir:1864: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 422.034735][T12381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.169560][T13666] loop2: detected capacity change from 0 to 512 [ 422.201473][T13666] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 422.222996][T13666] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2999: invalid indirect mapped block 8 (level 2) [ 422.321642][T13666] EXT4-fs (loop2): Remounting filesystem read-only [ 422.329959][T13666] EXT4-fs (loop2): 1 truncate cleaned up [ 422.398425][T13666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.507296][T13666] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 422.553642][T13666] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 422.658007][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.401820][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 423.573104][T13690] loop1: detected capacity change from 0 to 32768 [ 423.594240][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.622936][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.628259][T13690] [ 423.628259][T13690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.628259][T13690] [ 423.657207][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.690926][ T8] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 423.702285][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.717053][T13690] [ 423.717053][T13690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.717053][T13690] [ 423.745514][ T8] usb 1-1: config 0 descriptor?? [ 423.767387][T13690] [ 423.767387][T13690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.767387][T13690] [ 423.793569][T13690] [ 423.793569][T13690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.793569][T13690] [ 423.831865][T13690] [ 423.831865][T13690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.831865][T13690] [ 423.871212][T13709] [ 423.871212][T13709] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.871212][T13709] [ 423.918265][ T111] [ 423.918265][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.918265][ T111] [ 423.955499][T13709] [ 423.955499][T13709] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.955499][T13709] [ 424.078675][ T5791] [ 424.078675][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 424.078675][ T5791] [ 424.102722][ T5791] [ 424.102722][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 424.102722][ T5791] [ 424.141309][T13702] loop6: detected capacity change from 0 to 32768 [ 424.181026][ T8] dragonrise 0003:0079:0011.0023: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 424.240377][T13702] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 424.336621][T13702] XFS (loop6): Ending clean mount [ 424.397248][ T8] usb 1-1: USB disconnect, device number 27 [ 424.478665][T13721] fido_id[13721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 424.497687][T12381] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 425.826109][T13733] loop1: detected capacity change from 0 to 32768 [ 425.996726][T13739] loop2: detected capacity change from 0 to 32768 [ 426.084297][T13739] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.344444][T13739] XFS (loop2): Ending clean mount [ 426.412676][T13739] XFS (loop2): Quotacheck needed: Please wait. [ 426.545154][T13739] XFS (loop2): Quotacheck: Done. [ 426.662128][ T5881] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 426.751358][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.861783][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 426.887117][ T5881] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 426.916805][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 426.952113][ T5881] usb 7-1: Product: syz [ 426.956446][ T5881] usb 7-1: Manufacturer: syz [ 426.961097][ T5881] usb 7-1: SerialNumber: syz [ 427.021431][ T5881] usb 7-1: config 0 descriptor?? [ 427.304494][ T8] usb 7-1: USB disconnect, device number 5 [ 427.484058][T13764] loop1: detected capacity change from 0 to 32768 [ 427.524398][T13764] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 427.552987][T13783] loop2: detected capacity change from 0 to 1024 [ 427.562646][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 427.635944][T13783] hfsplus: bad catalog entry type [ 427.697855][T13764] XFS (loop1): Ending clean mount [ 427.793812][ T2888] hfsplus: b-tree write err: -5, ino 4 [ 428.003492][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 428.734140][T13817] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.866409][T13817] bridge_slave_1 (unregistering): left allmulticast mode [ 428.886995][T13817] bridge_slave_1 (unregistering): left promiscuous mode [ 428.898311][T13817] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.222336][T13825] IPv6: addrconf: prefix option has invalid lifetime [ 429.259608][T13825] IPv6: addrconf: prefix option has invalid lifetime [ 429.665232][T13823] loop2: detected capacity change from 0 to 40427 [ 429.701168][T13823] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 429.738739][T13823] F2FS-fs (loop2): invalid crc value [ 429.817032][T13823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 429.974934][T13823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 430.093867][ T5793] syz-executor: attempt to access beyond end of device [ 430.093867][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 430.148556][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 430.455722][T13837] loop1: detected capacity change from 0 to 32768 [ 430.542719][T13837] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 430.565765][T13849] loop6: detected capacity change from 0 to 8192 [ 430.575622][T13837] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 430.615252][T13849] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.647819][ T12] (kworker/u4:1,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 430.800798][ T28] audit: type=1800 audit(1756466079.714:117): pid=13852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3068" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 430.829805][T13837] syz.1.3068 (13837) used greatest stack depth: 18224 bytes left [ 431.062801][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 431.310180][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 431.331143][T13860] IPVS: ip_vs_edit_dest(): server weight less than zero [ 431.661366][T13867] loop6: detected capacity change from 0 to 1024 [ 431.755244][T13867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.984595][T12381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.307520][T13891] loop2: detected capacity change from 0 to 512 [ 432.356666][T13893] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3093'. [ 432.392668][T13891] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 432.401124][T13891] EXT4-fs (loop2): orphan cleanup on readonly fs [ 432.497175][T13891] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 432.538690][T13891] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 432.577979][T13891] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 432.602050][T13891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3091: bg 0: block 40: padding at end of block bitmap is not set [ 432.640255][T13891] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 432.657002][T13891] EXT4-fs (loop2): 1 truncate cleaned up [ 432.670634][T13891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.765589][T13909] loop1: detected capacity change from 0 to 8 [ 432.857104][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.461076][T13927] loop6: detected capacity change from 0 to 1024 [ 433.558645][T13927] hfsplus: bad catalog entry type [ 433.677640][ T3546] hfsplus: b-tree write err: -5, ino 4 [ 434.375821][T13921] loop1: detected capacity change from 0 to 32768 [ 434.610218][T13921] (syz.1.3105,13921,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 434.610218][T13921] found = 0, set = 0, taken = 0, off = 1280 [ 434.697622][T13921] (syz.1.3105,13921,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 434.758549][T13921] (syz.1.3105,13921,0):ocfs2_check_volume:2462 ERROR: status = -22 [ 434.815359][T13921] (syz.1.3105,13921,0):ocfs2_check_volume:2490 ERROR: status = -22 [ 434.830939][T13929] loop2: detected capacity change from 0 to 32768 [ 434.860125][T13921] (syz.1.3105,13921,0):ocfs2_mount_volume:1822 ERROR: status = -22 [ 434.942372][T13921] (syz.1.3105,13921,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 435.424707][ T5881] IPVS: starting estimator thread 0... [ 438.550960][T13950] IPVS: using max 16 ests per chain, 38400 per kthread [ 440.570528][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.585773][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.538045][T13929] JBD2: Ignoring recovery information on journal [ 504.519563][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.534931][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.532505][T13959] Bluetooth: hci1: command tx timeout [ 564.169429][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.184978][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.404164][ T29] INFO: task kworker/R-ipv6_:3151 blocked for more than 143 seconds. [ 593.422042][ T29] Not tainted syzkaller #0 [ 593.427044][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.121154][ T29] task:kworker/R-ipv6_ state:D stack:29576 pid:3151 ppid:2 flags:0x00004000