last executing test programs: 2.930520132s ago: executing program 0 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) 2.514654881s ago: executing program 0 (id=1350): r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x6}, 0x1c) 2.325710954s ago: executing program 0 (id=1345): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.117408208s ago: executing program 0 (id=1349): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendfile(r0, r1, &(0x7f00000002c0)=0xffffffffffffff01, 0x0) 1.99054381s ago: executing program 1 (id=1351): unshare(0x24020400) r0 = socket$inet6(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x6) 1.915300862s ago: executing program 0 (id=1352): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 1.739264896s ago: executing program 1 (id=1354): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x3, 0x0, 0xfffffffc, 0x4}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f0000002500)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 1.52929539s ago: executing program 1 (id=1357): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d6d61636761656c69632c009fe7a64148646d78b2352fb82c3564f8d2296b6f8512835d329176768472a65dd4d0804d842d71bb377c"], 0x25, 0x34c, &(0x7f0000001740)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x3f3) 1.226518745s ago: executing program 2 (id=1360): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.106232108s ago: executing program 3 (id=1361): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@rand_addr=' \x01\x00', 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20}, {0x1, 0x10000010000, 0x6, 0xfffffffffffffffe, 0x9, 0x7cc, 0x10000000000000}, {0x0, 0x1000000000000009, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@multicast2, 0x3, 0x3c}, 0x0, @in=@local, 0xfffffffc, 0x0, 0x3, 0x6, 0xfffffffb}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 858.278573ms ago: executing program 2 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) 858.096343ms ago: executing program 3 (id=1363): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=0x0) 789.722104ms ago: executing program 1 (id=1364): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 696.867586ms ago: executing program 3 (id=1365): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadab}, 0x4000000) 694.381246ms ago: executing program 2 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 529.096369ms ago: executing program 3 (id=1367): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) 453.658151ms ago: executing program 1 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x7c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x60}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) 445.659201ms ago: executing program 2 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 315.944314ms ago: executing program 3 (id=1370): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) creat(&(0x7f0000000100)='./file0\x00', 0x11) 205.564535ms ago: executing program 0 (id=1371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3d012bdc7000fddbdf251000000005000f00800000000800010091"], 0x2c}, 0x1, 0x0, 0x0, 0x44845}, 0x40850) 205.389376ms ago: executing program 1 (id=1372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 205.265936ms ago: executing program 2 (id=1373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 78.544668ms ago: executing program 3 (id=1374): pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)}], 0x1, 0x7, 0x190b) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0xc, 0x42000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000580)=""/86) 0s ago: executing program 2 (id=1375): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$eJzs3b1PHGcaAPB3BnwGfx32ufBJJ91KZ+k+hcDV3WHpMMbGYHOOnNhFmvUCa5tkYS1YohQuSGcpVaQUUQorkdJRWUhp0jh/QpqUTm0pKdJEimSFaHdnMTPsmg3ZhWD9fsXOzvv5wLMzvGNp/caJyr355dz8cq6wmCvP3lk+l3unXFpZKIZ4jzSd/9DezU97uvE5edmYn3cscpq5fvHy67fOhfDl3NfPNjY2NkJVb2hqeMv7H75/MLv12BBn+lTHbTLUoeYz7MabIYTT2+Kq6gkh9IUQohDChaRsLDn2hxCOJ3W3Hrx/O9ehaB4/LZ7PP59+uD5ydmrt0Xqzn70uCuHj0h//dXfh27/0jHzzj9YjfnG0Q6EBAAAAAAAAAAAAAAAAAHAATNy4fvO1oeHwJAq9a9H27+tOJMcW34/t3eiYP78szL+f6NyPDAAAAAAAAAAAAAAAAAAAAL85L77/n4tONfn+/3hyHG3Rf+N/3Y+R7pn8//XxS0PDyf7v0bb6fydF313oCSeb7Pue3f/9QqZ/8/3ft8+zW434GvMOhCgeTJ3H8eBgCJ8mG7+fiY7EpfJy5Z93yiuLcx0L48BK57++e38qO8mG/m3mPx7LjN9i//8O+sO2T1P1/HbnPmKvtHT+e1q2++y9qK3r/2Km317kn91L57+3Vta/tcFo/QZQzf8HvTvnfzwzfrfyfyKEkIuqseZSd4DqGqZa3mq9Qlo6/4dqZalbZ/KLbHX9/5jJ/6XM+Pt1/1/N/iGiqXT+f1cr60u1OFx7reU/3vn6v5wZfz/yX41/tV640d25D750/uu5Dr2pJrXfZLv3/4nM+C3zf/jXxX0zTuI8EaU+AWtRvbzF/1dHRjr/fdvqXzz/xW2t/65k+u/V819j3sbzX+P2/7eo/vxHc+n897ds1+71P5np1+37/2ht/cdupfN/pFaWXjsP1F7bzf9UZvxu5b/2VNLXyP+L+8lPh+vln1j/tSWd/6P1wnhri9Xaa239F+28/r+aGX8/1n/V+Ffj7s76qkjn/1jLdtX8f9XG3/9rmX7dz38IQ/6tb9fS+T/esl3t+u/bOf/Tm+/qY3U7/3/t5uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BYchwIUTyYOo/jwcEQLibnZ8KRaKYwl58plWffXg5hPCnPhVPR3VJ5plDKzy+W54r5QqlUng3hUlJ/OvRFy6VyJb9QuH95c6z+6F6xsFSZKRYqIYSJpPxP4XhjrJn5ykLhfgjhymbd7+Py0v17hcX83PzSf4eGhobC5GYMJ6Piu5XiYqU+e702hKnNvgPRluBq1Vc3YzkWvVVeWVoslGrl17b0KZVnC6UtfaaTug/DyaiytLI4W6gU86Xy3cZ8+2k0OY5P3njjxrXhbfW3o/pxbG/DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXejLyn49CCL31sziEMNp4EzVr//hp8Xz++fTD9ZGzU2uP1p+1agcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DM7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVj1ASCKAzAbyZFki7HSLUkXdoNgZAU2SB4Aj2Gh9GjeAnvYGFhayGC7KKuu7CNVt/XPJifmfdgHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw3yPqvH/23tEiqf9Y8Ryulqf5791nX9233+4w4zczs9f9XX6w3SVf9RHmzIf0912NomO2li09qS9T5d9nnvn6tu3vvmavi+RchERZZ2/ppyLYthbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BUAAP//hkEdVg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) kernel console output (not intermixed with test programs): 0. [ 139.910478][ T966] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.973983][ T7116] loop0: detected capacity change from 0 to 2048 [ 140.065006][ T7117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.115632][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 140.132781][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.156842][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.180147][ T966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.230280][ T966] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.248201][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.305467][ T966] usb 3-1: config 0 descriptor?? [ 140.359325][ T7121] loop1: detected capacity change from 0 to 512 [ 140.383010][ T7121] EXT4-fs: inline encryption not supported [ 140.388990][ T7121] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.648012][ T7127] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.685427][ T7121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.708348][ T7121] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.746641][ T7121] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.771363][ T7121] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.502: inode #13: comm syz.1.502: iget: illegal inode # [ 140.788975][ T7121] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.502: couldn't read orphan inode 13 (err -117) [ 140.789677][ T966] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.811687][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.850258][ T7121] EXT4-fs: inline encryption not supported [ 140.856280][ T7121] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.863571][ T7121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.875451][ T7121] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 140.886470][ T966] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.887349][ T7121] EXT4-fs error (device loop1): __ext4_remount:6743: comm syz.1.502: Abort forced by user [ 140.919591][ T966] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 140.922015][ T7121] EXT4-fs (loop1): Remounting filesystem read-only [ 140.940571][ T966] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 140.941660][ T7121] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 140.967865][ T966] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 141.027144][ T966] microsoft 0003:045E:07DA.0007: no inputs found [ 141.039210][ T966] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 141.063567][ T966] usb 3-1: USB disconnect, device number 7 [ 141.136739][ T7121] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 141.187596][ T7136] fido_id[7136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 141.200256][ T7138] trusted_key: encrypted_key: key trusted:syz not found [ 141.289357][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.427655][ T7143] loop0: detected capacity change from 0 to 1024 [ 141.484024][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.548800][ T7143] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.606075][ T7151] Bluetooth: MGMT ver 1.22 [ 141.781447][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.024486][ T7157] loop0: detected capacity change from 0 to 1024 [ 142.051137][ T7157] EXT4-fs: Ignoring removed orlov option [ 142.114945][ T7157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.241494][ T7152] loop1: detected capacity change from 0 to 32768 [ 142.276901][ T7152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.508 (7152) [ 142.328106][ T7152] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.348176][ T7155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.367354][ T7152] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 142.394782][ T7152] BTRFS info (device loop1): turning off barriers [ 142.416626][ T7152] BTRFS info (device loop1): setting nodatasum [ 142.450041][ T7152] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.459520][ T7152] BTRFS info (device loop1): use zstd compression, level 3 [ 142.529960][ T7152] BTRFS info (device loop1): using free space tree [ 142.545473][ T7165] loop2: detected capacity change from 0 to 512 [ 142.572498][ T7165] EXT4-fs: Ignoring removed nobh option [ 142.599641][ T7165] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.688331][ T7165] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.518: corrupted inode contents [ 142.760517][ T7165] EXT4-fs (loop2): Remounting filesystem read-only [ 142.831035][ T7165] __quota_error: 4 callbacks suppressed [ 142.831051][ T7165] Quota error (device loop2): write_blk: dquota write failed [ 142.870476][ T7165] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 142.942569][ T7165] EXT4-fs (loop2): 1 truncate cleaned up [ 142.971912][ T7165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.002255][ T28] audit: type=1800 audit(1758651358.107:46): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.508" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 143.040958][ T7191] veth0_to_bond: entered allmulticast mode [ 143.047876][ T7165] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.062189][ T5803] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.229981][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.383349][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.450669][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 143.498240][ T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 143.532936][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.559950][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.620001][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.687727][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.707184][ T28] audit: type=1326 audit(1758651358.847:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 143.729998][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.738094][ T27] usb 1-1: Product: syz [ 143.749958][ T27] usb 1-1: Manufacturer: syz [ 143.759983][ T27] usb 1-1: SerialNumber: syz [ 143.765001][ T28] audit: type=1326 audit(1758651358.847:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 143.850019][ T28] audit: type=1326 audit(1758651358.857:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 143.932355][ T28] audit: type=1326 audit(1758651358.857:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 143.998343][ T7202] loop1: detected capacity change from 0 to 4096 [ 144.009501][ T28] audit: type=1326 audit(1758651358.857:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 144.031956][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.081219][ T27] usb 1-1: 0:2 : does not exist [ 144.101398][ T28] audit: type=1326 audit(1758651358.857:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 144.173545][ T27] usb 1-1: USB disconnect, device number 5 [ 144.204845][ T28] audit: type=1326 audit(1758651358.857:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 144.302777][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.545550][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.600420][ T7214] loop3: detected capacity change from 0 to 4096 [ 144.689836][ T7217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.703872][ T7214] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 144.749129][ T7214] NILFS (loop3): mounting fs with errors [ 144.780026][ T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.798397][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.832061][ T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.851004][ T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.889943][ T23] usb 3-1: Manufacturer: syz [ 144.921266][ T23] usb 3-1: config 0 descriptor?? [ 145.142658][ T23] rc_core: IR keymap rc-hauppauge not found [ 145.189691][ T23] Registered IR keymap rc-empty [ 145.202274][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 145.238625][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 145.418763][ T7229] loop3: detected capacity change from 0 to 2048 [ 145.499718][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.532578][ T7227] rc rc0: two consecutive events of type space [ 145.704251][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.768216][ T7244] loop1: detected capacity change from 0 to 128 [ 145.797814][ T7244] EXT4-fs: Ignoring removed nobh option [ 145.849502][ T7244] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.861326][ T42] usb 3-1: USB disconnect, device number 8 [ 145.885733][ T7244] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.996890][ T7249] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 146.014981][ T5803] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.591419][ T7264] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 146.918429][ T7278] capability: warning: `syz.0.558' uses 32-bit capabilities (legacy support in use) [ 147.731015][ T7295] comedi: No check for data length of config insn id 1003 is implemented [ 147.750076][ T7282] loop0: detected capacity change from 0 to 32768 [ 147.758170][ T7295] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 147.770324][ T7295] comedi: Assuming n=15 is correct [ 147.837011][ T7282] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.156399][ T7282] XFS (loop0): Ending clean mount [ 148.241685][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.408610][ T7321] loop1: detected capacity change from 0 to 16 [ 148.482323][ T7321] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.625642][ T7321] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 148.687466][ T7321] syz.1.575: attempt to access beyond end of device [ 148.687466][ T7321] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 149.388778][ T7318] loop2: detected capacity change from 0 to 32768 [ 149.489499][ T7318] syz.2.573: attempt to access beyond end of device [ 149.489499][ T7318] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 149.550742][ T7318] metapage_write_end_io: I/O error [ 149.577349][ T7318] blkno = 8ed2c, nblocks = 1 [ 149.587905][ T7326] loop3: detected capacity change from 0 to 32768 [ 149.589973][ T7318] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 149.589973][ T7318] [ 149.696909][ T7318] ERROR: (device loop2): remounting filesystem as read-only [ 149.700644][ T7326] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.715395][ T7318] UFO tlock:0xffffc9000280a168 [ 149.836107][ T7318] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 149.836107][ T7318] [ 149.885090][ T7318] jfs_lookup: dtSearch returned -5 [ 150.019465][ T111] blkno = 8ed2c, nblocks = 4 [ 150.025118][ T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 150.025118][ T111] [ 150.045967][ T5798] syz-executor: attempt to access beyond end of device [ 150.045967][ T5798] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 150.071719][ T7326] XFS (loop3): Ending clean mount [ 150.080330][ T5798] metapage_write_end_io: I/O error [ 150.090910][ T5798] JFS: metapage_get_blocks failed [ 150.091830][ T7326] XFS (loop3): Quotacheck needed: Please wait. [ 150.106315][ T5798] JFS: metapage_get_blocks failed [ 150.111809][ T5798] JFS: metapage_get_blocks failed [ 150.128272][ T5798] JFS: metapage_get_blocks failed [ 150.185053][ T7326] XFS (loop3): Quotacheck: Done. [ 150.375636][ T7343] loop1: detected capacity change from 0 to 32768 [ 150.386462][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.451951][ T7343] read_mapping_page failed! [ 150.467270][ T7343] ERROR: (device loop1): txCommit: [ 150.467270][ T7343] [ 150.498651][ T7343] jfs_mkdir: dtSearch returned -17 [ 150.536275][ T7330] loop0: detected capacity change from 0 to 65536 [ 150.670522][ T7330] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 150.831593][ T7330] XFS (loop0): Ending clean mount [ 151.041276][ T5790] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.252297][ T7362] loop3: detected capacity change from 0 to 4096 [ 151.295564][ T7362] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 151.460303][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.492780][ T7362] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.550039][ T7362] ntfs3: loop3: Failed to load $Extend (-22). [ 151.570497][ T7362] ntfs3: loop3: Failed to initialize $Extend. [ 151.692209][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.692266][ T28] audit: type=1800 audit(1758651366.837:54): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.588" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=33 res=0 errno=0 [ 151.710155][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.743167][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.868551][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.888214][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.909536][ T9] usb 2-1: Manufacturer: syz [ 151.942230][ T9] usb 2-1: config 0 descriptor?? [ 152.077683][ T7360] loop2: detected capacity change from 0 to 32768 [ 152.123927][ T7360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.585 (7360) [ 152.142900][ T9] rc_core: IR keymap rc-hauppauge not found [ 152.173375][ T9] Registered IR keymap rc-empty [ 152.179495][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 152.213462][ T7360] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.235210][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 152.252031][ T7360] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.254683][ T7373] loop3: detected capacity change from 0 to 1024 [ 152.287390][ T7360] BTRFS info (device loop2): enabling auto defrag [ 152.315002][ T7360] BTRFS info (device loop2): max_inline at 0 [ 152.339835][ T7360] BTRFS info (device loop2): force clearing of disk cache [ 152.348359][ T7360] BTRFS info (device loop2): turning on sync discard [ 152.362458][ T7360] BTRFS info (device loop2): using free space tree [ 152.386431][ T7373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.639440][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.695851][ T7360] BTRFS info (device loop2): enabling ssd optimizations [ 152.731183][ T7360] BTRFS info (device loop2): rebuilding free space tree [ 152.767764][ T9] usb 2-1: USB disconnect, device number 2 [ 152.948261][ T5798] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.670355][ T7411] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 153.695375][ T7398] loop3: detected capacity change from 0 to 32768 [ 153.729974][ T7398] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.592 (7398) [ 153.756944][ T966] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.785730][ T7398] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.807981][ T7398] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.870474][ T7398] BTRFS info (device loop3): turning off barriers [ 153.877265][ T7398] BTRFS info (device loop3): setting nodatasum [ 153.890404][ T7398] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.912763][ T7398] BTRFS info (device loop3): use zstd compression, level 3 [ 153.931133][ T7398] BTRFS info (device loop3): using free space tree [ 153.950272][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 153.953813][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.953849][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.953869][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.953910][ T966] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.953935][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.959158][ T966] usb 1-1: config 0 descriptor?? [ 154.144371][ T7433] loop1: detected capacity change from 0 to 1024 [ 154.242361][ T7433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.260735][ T28] audit: type=1800 audit(1758651369.407:55): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.592" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 154.443725][ T966] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 154.446460][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.451855][ T5794] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.480618][ T966] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 154.488108][ T966] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 154.534232][ T966] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 154.559387][ T7439] loop2: detected capacity change from 0 to 1024 [ 154.560476][ T966] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 154.621439][ T7439] EXT4-fs: Ignoring removed orlov option [ 154.631612][ T966] microsoft 0003:045E:07DA.0008: no inputs found [ 154.638118][ T966] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 154.680326][ T7439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.772911][ T6118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (6118) [ 154.802619][ T7439] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.840106][ T966] usb 1-1: USB disconnect, device number 6 [ 154.959822][ T7440] fido_id[7440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 155.233821][ T7450] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 156.169046][ T7454] loop3: detected capacity change from 0 to 32768 [ 156.216423][ T7454] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.340128][ T7468] loop2: detected capacity change from 0 to 32768 [ 156.349338][ T7454] XFS (loop3): Ending clean mount [ 156.353300][ T7468] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 156.549386][ T7482] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 156.554664][ T5801] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 156.575911][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.642754][ T7484] loop2: detected capacity change from 0 to 128 [ 156.686802][ T7484] EXT4-fs: Ignoring removed nobh option [ 156.759030][ T7484] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.788308][ T7484] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.078709][ T5798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.126646][ T7514] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 158.180238][ T7516] loop3: detected capacity change from 0 to 128 [ 158.187686][ T7516] EXT4-fs: Ignoring removed nobh option [ 158.231943][ T7516] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.250377][ T7516] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.251913][ T7511] loop2: detected capacity change from 0 to 32768 [ 158.377338][ T7511] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.467256][ T7529] loop0: detected capacity change from 0 to 2048 [ 158.501271][ T5794] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.613279][ T7529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.724278][ T7511] XFS (loop2): Ending clean mount [ 158.794623][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.968183][ T5798] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.157892][ T7541] loop1: detected capacity change from 0 to 4096 [ 159.268884][ T7546] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.287115][ T7541] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 159.311716][ T7541] NILFS (loop1): mounting fs with errors [ 159.751790][ T7557] loop1: detected capacity change from 0 to 2048 [ 159.802333][ T7557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.004509][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.150174][ T28] audit: type=1326 audit(1758651375.277:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.196973][ T28] audit: type=1326 audit(1758651375.277:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.221679][ T28] audit: type=1326 audit(1758651375.287:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.275588][ T28] audit: type=1326 audit(1758651375.287:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.320127][ T28] audit: type=1326 audit(1758651375.287:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.370847][ T28] audit: type=1326 audit(1758651375.287:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.446807][ T28] audit: type=1326 audit(1758651375.287:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cd78eec9 code=0x7ffc0000 [ 160.645056][ T7579] loop2: detected capacity change from 0 to 4096 [ 161.015496][ T7586] loop0: detected capacity change from 0 to 4096 [ 161.112696][ T7589] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.113351][ T7586] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 161.176032][ T7586] NILFS (loop0): mounting fs with errors [ 161.502060][ T7600] veth0_to_bond: entered allmulticast mode [ 161.516786][ T28] audit: type=1326 audit(1758651376.647:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 161.598578][ T28] audit: type=1326 audit(1758651376.647:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 161.680278][ T28] audit: type=1326 audit(1758651376.687:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 161.913028][ T7611] veth0_to_bond: entered allmulticast mode [ 161.976103][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.172297][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 162.226189][ T27] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.235713][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.264760][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.280045][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.293307][ T7622] loop1: detected capacity change from 0 to 512 [ 162.304039][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.320645][ T7622] EXT4-fs: Ignoring removed nobh option [ 162.331999][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.339723][ T7618] loop0: detected capacity change from 0 to 4096 [ 162.342990][ T27] usb 4-1: Product: syz [ 162.351251][ T27] usb 4-1: Manufacturer: syz [ 162.356077][ T27] usb 4-1: SerialNumber: syz [ 162.379474][ T7622] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.680: corrupted inode contents [ 162.455399][ T7622] EXT4-fs (loop1): Remounting filesystem read-only [ 162.499157][ T7627] loop2: detected capacity change from 0 to 1024 [ 162.519027][ T7622] EXT4-fs (loop1): 1 truncate cleaned up [ 162.541456][ T7622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.561070][ T7622] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.583401][ T7627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.603417][ T27] usb 4-1: 0:2 : does not exist [ 162.650200][ T7627] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.658507][ T27] usb 4-1: USB disconnect, device number 6 [ 162.866788][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.958654][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.961450][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.185518][ T7637] trusted_key: encrypted_key: key trusted:syz not found [ 163.371204][ T7641] veth0_to_bond: entered allmulticast mode [ 163.521657][ T7646] loop0: detected capacity change from 0 to 512 [ 163.536092][ T7646] EXT4-fs: inline encryption not supported [ 163.547884][ T7646] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.601886][ T7646] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.636678][ T7646] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.667435][ T7646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.719966][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.699: inode #13: comm syz.0.699: iget: illegal inode # [ 163.773948][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.699: couldn't read orphan inode 13 (err -117) [ 163.825753][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.871565][ T7646] EXT4-fs: inline encryption not supported [ 163.877483][ T7646] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.884809][ T7646] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.913678][ T7646] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 163.927987][ T7646] EXT4-fs error (device loop0): __ext4_remount:6743: comm syz.0.699: Abort forced by user [ 163.960360][ T7646] EXT4-fs (loop0): Remounting filesystem read-only [ 163.970298][ T7646] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 164.009663][ T7646] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 164.017051][ T7658] loop3: detected capacity change from 0 to 512 [ 164.027469][ T7658] EXT4-fs: Ignoring removed nobh option [ 164.073571][ T7658] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.694: corrupted inode contents [ 164.133355][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.156782][ T7658] EXT4-fs (loop3): Remounting filesystem read-only [ 164.184315][ T7658] EXT4-fs (loop3): 1 truncate cleaned up [ 164.211734][ T7658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.249033][ T7665] trusted_key: encrypted_key: key trusted:syz not found [ 164.250867][ T7658] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.258332][ T7664] loop1: detected capacity change from 0 to 1024 [ 164.368578][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.422794][ T7664] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.541655][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.704891][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.940979][ T7680] loop2: detected capacity change from 0 to 2048 [ 164.985601][ T7681] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.089976][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 165.222432][ T7686] loop3: detected capacity change from 0 to 2048 [ 165.290923][ T7689] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.322314][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 165.360587][ T5873] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 165.382444][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.399523][ T5873] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.423610][ T5873] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.437996][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.453804][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.489946][ T5873] usb 2-1: Product: syz [ 165.500496][ T5873] usb 2-1: Manufacturer: syz [ 165.505159][ T5873] usb 2-1: SerialNumber: syz [ 165.586921][ T7695] loop2: detected capacity change from 0 to 512 [ 165.622134][ T7695] EXT4-fs: inline encryption not supported [ 165.628160][ T7695] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.667358][ T7695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.707972][ T7695] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.747169][ T7695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.753953][ T7695] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.708: inode #13: comm syz.2.708: iget: illegal inode # [ 165.775943][ T7695] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.708: couldn't read orphan inode 13 (err -117) [ 165.796228][ T7699] loop0: detected capacity change from 0 to 512 [ 165.804205][ T7699] EXT4-fs: Ignoring removed nobh option [ 165.815939][ T7695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.835131][ T5873] usb 2-1: 0:2 : does not exist [ 165.849089][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 165.879059][ T7699] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.710: corrupted inode contents [ 165.879327][ T7695] EXT4-fs: inline encryption not supported [ 165.910578][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 165.913267][ T7695] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.926884][ T5873] usb 2-1: USB disconnect, device number 3 [ 165.926910][ T7695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.949762][ T7699] EXT4-fs (loop0): Remounting filesystem read-only [ 165.963823][ T7695] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 165.983535][ T7695] EXT4-fs error (device loop2): __ext4_remount:6743: comm syz.2.708: Abort forced by user [ 166.011884][ T7699] __quota_error: 8 callbacks suppressed [ 166.011899][ T7699] Quota error (device loop0): write_blk: dquota write failed [ 166.025430][ T7695] EXT4-fs (loop2): Remounting filesystem read-only [ 166.036406][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.045718][ T7695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 166.070273][ T7699] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 166.092538][ T7699] EXT4-fs (loop0): 1 truncate cleaned up [ 166.120564][ T7699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.148650][ T7699] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.166873][ T7695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.310868][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.324499][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.696177][ T7716] loop1: detected capacity change from 0 to 2048 [ 166.757627][ T7720] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.014698][ T7723] loop1: detected capacity change from 0 to 2048 [ 167.054571][ T7727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.067741][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 167.092918][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 167.443987][ T7736] loop3: detected capacity change from 0 to 512 [ 167.462702][ T7736] EXT4-fs: Ignoring removed nobh option [ 167.532474][ T7736] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.726: corrupted inode contents [ 167.570094][ T7736] EXT4-fs (loop3): Remounting filesystem read-only [ 167.605984][ T7736] Quota error (device loop3): write_blk: dquota write failed [ 167.632526][ T7736] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 167.643277][ T7736] EXT4-fs (loop3): 1 truncate cleaned up [ 167.650879][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.657424][ T7745] loop2: detected capacity change from 0 to 512 [ 167.664483][ T7736] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.698627][ T7745] EXT4-fs: Ignoring removed oldalloc option [ 167.737447][ T7745] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.750943][ T7745] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 167.770053][ T7745] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 167.798443][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.800654][ T7745] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.728: attempt to clear invalid blocks 2 len 1 [ 167.828355][ T7745] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.728: invalid indirect mapped block 1819239214 (level 0) [ 167.847369][ T7745] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.728: invalid indirect mapped block 1819239214 (level 1) [ 167.870972][ T7745] EXT4-fs (loop2): 1 truncate cleaned up [ 167.878129][ T7745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.937885][ T7745] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 167.948265][ T7745] EXT4-fs error (device loop2): __ext4_remount:6743: comm syz.2.728: Abort forced by user [ 167.960714][ T7745] EXT4-fs (loop2): Remounting filesystem read-only [ 167.967370][ T7745] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 168.000328][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.132693][ T7752] loop1: detected capacity change from 0 to 512 [ 168.155045][ T7752] EXT4-fs: Ignoring removed oldalloc option [ 168.206995][ T7752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.229739][ T7752] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 168.245053][ T7752] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.270941][ T7752] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.743: attempt to clear invalid blocks 2 len 1 [ 168.291420][ T7752] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.743: invalid indirect mapped block 1819239214 (level 0) [ 168.319994][ T7752] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.743: invalid indirect mapped block 1819239214 (level 1) [ 168.336063][ T7752] EXT4-fs (loop1): 1 truncate cleaned up [ 168.345276][ T7752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.394715][ T7752] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 168.408565][ T7752] EXT4-fs error (device loop1): __ext4_remount:6743: comm syz.1.743: Abort forced by user [ 168.425614][ T966] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.462643][ T7752] EXT4-fs (loop1): Remounting filesystem read-only [ 168.473747][ T7752] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 168.557545][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.631699][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 168.639581][ T966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.655958][ T966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.685979][ T966] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.739492][ T966] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.760103][ T7767] program syz.3.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.779561][ T966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.794497][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.810260][ T966] usb 3-1: Product: syz [ 168.814594][ T966] usb 3-1: Manufacturer: syz [ 168.819244][ T966] usb 3-1: SerialNumber: syz [ 169.075393][ T966] usb 3-1: 0:2 : does not exist [ 169.127151][ T966] usb 3-1: USB disconnect, device number 9 [ 169.226289][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.325477][ T28] audit: type=1326 audit(1758651384.467:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 169.348413][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.419180][ T28] audit: type=1326 audit(1758651384.467:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 169.483795][ T28] audit: type=1326 audit(1758651384.467:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 169.515008][ T7780] loop0: detected capacity change from 0 to 8192 [ 169.536565][ T7782] loop3: detected capacity change from 0 to 512 [ 169.539945][ T28] audit: type=1326 audit(1758651384.467:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f127d78ef03 code=0x7ffc0000 [ 169.565284][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.607302][ T7782] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.748: iget: bad extended attribute block 1 [ 169.607959][ T28] audit: type=1326 audit(1758651384.537:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f127d78d97f code=0x7ffc0000 [ 169.644241][ T28] audit: type=1326 audit(1758651384.647:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f127d78ef57 code=0x7ffc0000 [ 169.666767][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.674208][ T7782] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.748: couldn't read orphan inode 15 (err -117) [ 169.691786][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.744615][ T7765] loop1: detected capacity change from 0 to 32768 [ 169.853346][ T7765] jfs_lookup: dtSearch returned -5 [ 169.942813][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.660249][ T7803] tipc: Started in network mode [ 170.675486][ T7803] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 170.719680][ T7803] tipc: Enabled bearer , priority 10 [ 170.818254][ T7805] loop2: detected capacity change from 0 to 4096 [ 170.867560][ T7805] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 170.922670][ T7807] loop3: detected capacity change from 0 to 1024 [ 171.031527][ T7805] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 171.141096][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 171.141114][ T28] audit: type=1800 audit(1758651386.287:91): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.761" name="bus" dev="loop2" ino=24 res=0 errno=0 [ 171.167983][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.264043][ T7793] loop0: detected capacity change from 0 to 32768 [ 171.299707][ T7793] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 171.381354][ T7793] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 171.398840][ T5798] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 171.711637][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 171.835927][ T966] tipc: Node number set to 8432298 [ 171.917659][ T7827] loop0: detected capacity change from 0 to 512 [ 171.933558][ T7829] loop3: detected capacity change from 0 to 512 [ 171.965763][ T7829] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.770: casefold flag without casefold feature [ 171.978443][ T7831] loop1: detected capacity change from 0 to 1024 [ 171.997797][ T7827] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.769: inode #15: comm syz.0.769: iget: illegal inode # [ 172.017192][ T7829] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.770: couldn't read orphan inode 15 (err -117) [ 172.077891][ T7827] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.769: couldn't read orphan inode 15 (err -117) [ 172.097281][ T7831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.101229][ T7829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.185846][ T7827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.280339][ T7827] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.769: inode #15: comm syz.0.769: iget: illegal inode # [ 172.344844][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.512196][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.801096][ T28] audit: type=1800 audit(1758651387.947:92): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.771" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 172.880754][ T7844] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 172.930849][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.148387][ T7852] loop3: detected capacity change from 0 to 4096 [ 173.161656][ T7852] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 173.171025][ T966] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 173.226416][ T7852] ntfs3: loop3: Failed to load $Extend (-22). [ 173.243604][ T7852] ntfs3: loop3: Failed to initialize $Extend. [ 173.372986][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.397212][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 173.433495][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.472737][ T966] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 173.525752][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.557404][ T966] usb 1-1: config 0 descriptor?? [ 173.575964][ T7846] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.034063][ T966] uclogic 0003:5543:0004.0009: No inputs registered, leaving [ 174.063043][ T966] uclogic 0003:5543:0004.0009: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 174.236709][ T966] usb 1-1: USB disconnect, device number 7 [ 174.297989][ T7876] fido_id[7876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 174.479545][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 174.789991][ T966] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.951921][ T7902] devtmpfs: Too few inodes for current use [ 174.990401][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 175.007056][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.039270][ T966] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00 [ 175.059434][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.083985][ T966] usb 3-1: config 0 descriptor?? [ 175.410739][ T7896] loop1: detected capacity change from 0 to 32768 [ 175.565255][ T966] apple 0003:05AC:030A.000A: invalid report_count 435021003 [ 175.594377][ T966] apple 0003:05AC:030A.000A: item 0 4 1 9 parsing failed [ 175.617548][ T966] apple 0003:05AC:030A.000A: parse failed [ 175.638881][ T966] apple: probe of 0003:05AC:030A.000A failed with error -22 [ 175.739502][ T23] usb 3-1: USB disconnect, device number 10 [ 175.803400][ T7920] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 176.504852][ T7942] loop1: detected capacity change from 0 to 136 [ 176.624593][ T7942] Symlink component flag not implemented [ 176.660030][ T7942] Symlink component flag not implemented (108) [ 176.763818][ T28] audit: type=1326 audit(1758651391.907:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 176.835342][ T28] audit: type=1326 audit(1758651391.907:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 176.919942][ T28] audit: type=1326 audit(1758651391.907:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 176.974928][ T28] audit: type=1326 audit(1758651391.907:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 177.004971][ T28] audit: type=1326 audit(1758651391.907:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 177.058591][ T28] audit: type=1326 audit(1758651391.907:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 177.114556][ T28] audit: type=1326 audit(1758651391.907:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2abd8eec9 code=0x7ffc0000 [ 177.223168][ T7956] loop2: detected capacity change from 0 to 4096 [ 177.389995][ T7956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.760387][ T42] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 177.914066][ T7971] loop3: detected capacity change from 0 to 136 [ 177.949810][ T7973] loop2: detected capacity change from 0 to 1024 [ 177.990981][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.039766][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.061542][ T7973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.080173][ T7971] Symlink component flag not implemented [ 178.108668][ T7971] Symlink component flag not implemented (108) [ 178.121550][ T42] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 178.131132][ T7960] loop0: detected capacity change from 0 to 40427 [ 178.138627][ T7960] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 178.184411][ T7960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.204920][ T7960] F2FS-fs (loop0): invalid crc value [ 178.214595][ T7973] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.837: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 178.223462][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.256656][ T7973] EXT4-fs (loop2): Remounting filesystem read-only [ 178.272213][ T7960] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.291288][ T42] usb 2-1: config 0 descriptor?? [ 178.420328][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.474131][ T7960] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.502440][ T7960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.713820][ T42] isku 0003:1E7D:319C.000B: item fetching failed at offset 5/7 [ 178.736769][ T42] isku 0003:1E7D:319C.000B: parse failed [ 178.749982][ T42] isku: probe of 0003:1E7D:319C.000B failed with error -22 [ 178.932093][ T23] usb 2-1: USB disconnect, device number 4 [ 179.178659][ T7991] tipc: Enabling of bearer rejected, media not registered [ 179.302555][ T7981] loop3: detected capacity change from 0 to 32768 [ 179.321375][ T7981] (syz.3.838,7981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.353969][ T7981] (syz.3.838,7981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.400195][ T7981] JBD2: Ignoring recovery information on journal [ 179.542566][ T7981] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.846394][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 179.863505][ T8007] loop0: detected capacity change from 0 to 128 [ 179.922189][ T8007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 180.003070][ T8007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.285586][ T8012] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 180.320632][ T42] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.552130][ T7993] loop2: detected capacity change from 0 to 32768 [ 180.680182][ T5873] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.950749][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 181.043027][ T8027] loop3: detected capacity change from 0 to 64 [ 181.913534][ T8051] loop1: detected capacity change from 0 to 64 [ 181.978411][ T8029] loop0: detected capacity change from 0 to 32768 [ 182.035965][ T8029] (syz.0.856,8029,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.073996][ T8029] (syz.0.856,8029,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.296081][ T8029] JBD2: Ignoring recovery information on journal [ 182.439406][ T8057] loop1: detected capacity change from 0 to 4096 [ 182.456948][ T8029] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 182.555303][ T8062] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.617460][ T8052] loop2: detected capacity change from 0 to 32768 [ 182.646260][ T8052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.865 (8052) [ 182.708254][ T8052] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.736682][ T8052] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 182.746423][ T8052] BTRFS info (device loop2): using free space tree [ 182.833775][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 182.960021][ T8052] BTRFS info (device loop2): enabling ssd optimizations [ 182.977973][ T8052] BTRFS info (device loop2): auto enabling async discard [ 183.219051][ T8083] loop1: detected capacity change from 0 to 4096 [ 183.281600][ T8083] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.335843][ T8083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 183.401778][ T8083] System zones: 0-5 [ 183.445973][ T8083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.493022][ T8065] loop3: detected capacity change from 0 to 32768 [ 183.555962][ T5798] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.749598][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.975544][ T8094] loop1: detected capacity change from 0 to 16 [ 184.004451][ T8094] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.279718][ T8097] netlink: 'syz.0.887': attribute type 49 has an invalid length. [ 184.302370][ T8097] netlink: 'syz.0.887': attribute type 49 has an invalid length. [ 184.315851][ T8097] netlink: 'syz.0.887': attribute type 49 has an invalid length. [ 184.483052][ T8102] loop3: detected capacity change from 0 to 128 [ 184.504172][ T8102] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 184.529758][ T8102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.767926][ T8107] loop3: detected capacity change from 0 to 2048 [ 184.839671][ T8107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.465787][ T8103] loop0: detected capacity change from 0 to 32768 [ 185.492805][ T8123] loop3: detected capacity change from 0 to 1024 [ 185.537927][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.632464][ T8130] loop1: detected capacity change from 0 to 128 [ 185.671942][ T8130] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.682579][ T8123] EXT4-fs: Ignoring sb option on remount [ 185.702550][ T8123] EXT4-fs: Ignoring removed orlov option [ 185.708584][ T8123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.719040][ T8130] hpfs: filesystem error: improperly stopped [ 185.726456][ T8130] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.730014][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.744610][ T8130] hpfs: You really don't want any checks? You are crazy... [ 185.770328][ T8123] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 185.784122][ T8130] hpfs: hpfs_map_sector(): read error [ 185.800117][ T8123] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 185.802376][ T8130] hpfs: code page support is disabled [ 185.808153][ T8123] EXT4-fs: can't change dax mount option while remounting [ 185.854750][ T8130] hpfs: hpfs_map_4sectors(): unaligned read [ 185.871400][ T8130] hpfs: hpfs_map_4sectors(): unaligned read [ 185.877570][ T8130] hpfs: filesystem error: unable to find root dir [ 185.893014][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.972026][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.987544][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.060470][ T5873] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.079968][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.104109][ T5873] usb 3-1: SerialNumber: syz [ 186.323984][ T5873] usb 3-1: 0:2 : does not exist [ 186.342598][ T8140] loop1: detected capacity change from 0 to 64 [ 186.397037][ T5873] usb 3-1: USB disconnect, device number 11 [ 186.431852][ T28] audit: type=1800 audit(1758651401.557:100): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.897" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 186.581949][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.070823][ T8156] loop0: detected capacity change from 0 to 512 [ 187.112387][ T8156] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.163923][ T8156] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 187.175735][ T8158] loop2: detected capacity change from 0 to 1024 [ 187.210497][ T8156] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 187.268304][ T8156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 187.331600][ T8156] System zones: 0-2, 18-18, 34-34 [ 187.387329][ T8156] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.905: iget: bad i_size value: 360287970189639680 [ 187.441658][ T8156] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.905: couldn't read orphan inode 15 (err -117) [ 187.484593][ T8145] loop3: detected capacity change from 0 to 32768 [ 187.497967][ T8156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.732183][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.745297][ T8173] loop2: detected capacity change from 0 to 128 [ 188.032666][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 188.295680][ T8186] loop2: detected capacity change from 0 to 256 [ 188.328492][ T8186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 188.736235][ T8197] loop1: detected capacity change from 0 to 4096 [ 188.753362][ T8197] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 188.854362][ T8197] ntfs3: loop1: ino=5, "/" directory corrupted [ 189.307626][ T8192] loop3: detected capacity change from 0 to 32768 [ 189.352468][ T8204] loop0: detected capacity change from 0 to 1024 [ 189.369811][ T8192] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.642430][ T8192] XFS (loop3): Ending clean mount [ 189.663662][ T8192] XFS (loop3): Quotacheck needed: Please wait. [ 189.721726][ T8214] loop1: detected capacity change from 0 to 256 [ 189.770506][ T8192] XFS (loop3): Quotacheck: Done. [ 189.798977][ T8214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 189.944143][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.150441][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.352285][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.380232][ T27] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 190.410082][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.442051][ T27] usb 1-1: config 0 descriptor?? [ 190.525796][ T8199] loop2: detected capacity change from 0 to 65536 [ 190.586199][ T8199] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 190.619261][ T8231] loop3: detected capacity change from 0 to 256 [ 190.731255][ T8199] XFS (loop2): Ending clean mount [ 190.745666][ T8231] FAT-fs (loop3): Directory bread(block 64) failed [ 190.766607][ T8231] FAT-fs (loop3): Directory bread(block 65) failed [ 190.780783][ T8199] XFS (loop2): Quotacheck needed: Please wait. [ 190.828126][ T8231] FAT-fs (loop3): Directory bread(block 66) failed [ 190.856119][ T8231] FAT-fs (loop3): Directory bread(block 67) failed [ 190.889396][ T27] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 190.894491][ T8231] FAT-fs (loop3): Directory bread(block 68) failed [ 190.908332][ T8231] FAT-fs (loop3): Directory bread(block 69) failed [ 190.913577][ T8199] XFS (loop2): Quotacheck: Done. [ 190.915520][ T8231] FAT-fs (loop3): Directory bread(block 70) failed [ 190.927430][ T8231] FAT-fs (loop3): Directory bread(block 71) failed [ 190.935620][ T8231] FAT-fs (loop3): Directory bread(block 72) failed [ 190.944538][ T8231] FAT-fs (loop3): Directory bread(block 73) failed [ 190.974950][ T27] hid_mf 0003:0079:1846.000C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 191.082719][ T27] usb 1-1: USB disconnect, device number 8 [ 191.211181][ T8238] fido_id[8238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.249313][ T5798] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 191.685976][ T8251] team0: Device ip6tnl2 is of different type [ 191.829966][ T42] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.029151][ T42] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.070267][ T42] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.111269][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.118089][ T42] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 192.146775][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.162954][ T42] usb 4-1: config 0 descriptor?? [ 192.224464][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 192.235419][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 192.636402][ T42] itetech 0003:06CB:73F6.000D: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.3-1/input0 [ 192.825412][ T5873] usb 4-1: USB disconnect, device number 7 [ 193.100488][ T8287] loop0: detected capacity change from 0 to 16 [ 193.108846][ T8287] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.119958][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 193.311830][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 193.320571][ T8292] tipc: Enabling not permitted [ 193.326206][ T8292] tipc: Enabling of bearer rejected, failed to enable media [ 193.356826][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.376371][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.397239][ T27] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 193.420631][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.480026][ T27] usb 2-1: config 0 descriptor?? [ 193.716677][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 193.730025][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 193.749405][ T27] usb 2-1: USB disconnect, device number 5 [ 193.830039][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.880511][ T8304] loop3: detected capacity change from 0 to 2048 [ 193.944102][ T8305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.003545][ T8304] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 194.022489][ T42] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 194.033125][ T8304] Remounting filesystem read-only [ 194.035768][ T42] usb 1-1: config 0 has no interface number 0 [ 194.038488][ T8304] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 194.055083][ T42] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 194.057467][ T42] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 194.077712][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.083562][ T8294] loop2: detected capacity change from 0 to 40427 [ 194.092602][ T42] usb 1-1: Product: syz [ 194.097287][ T8294] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 194.105966][ T42] usb 1-1: Manufacturer: syz [ 194.106320][ T8294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.125665][ T42] usb 1-1: SerialNumber: syz [ 194.139781][ T42] usb 1-1: config 0 descriptor?? [ 194.159625][ T8298] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 194.203519][ T8294] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.289482][ T8294] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.312524][ T8294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 194.320392][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 194.386411][ T42] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 194.410161][ T42] usb 1-1: MIDIStreaming interface descriptor not found [ 194.466908][ T5798] syz-executor: attempt to access beyond end of device [ 194.466908][ T5798] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.492994][ T5798] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 194.508581][ T8311] loop3: detected capacity change from 0 to 512 [ 194.531582][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 194.538798][ T42] usb 1-1: USB disconnect, device number 9 [ 194.547158][ T8311] EXT4-fs: Ignoring removed nobh option [ 194.570642][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.606917][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.642214][ T8311] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.645649][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.678125][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.703515][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 194.705504][ T8311] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1: comm syz.3.966: invalid block [ 194.716525][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.749224][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.756711][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.769987][ T27] usb 2-1: SerialNumber: syz [ 194.781444][ T27] usb 2-1: config 0 descriptor?? [ 194.791534][ T27] hso 2-1:0.0: Can't find BULK IN endpoint [ 194.803135][ T8311] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.966: couldn't read orphan inode 11 (err -117) [ 194.820791][ T8311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.909004][ T8311] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #2: comm syz.3.966: Directory hole found for htree leaf block 0 [ 194.958226][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.035498][ T5873] usb 2-1: USB disconnect, device number 6 [ 195.165465][ T8316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.513959][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 195.723914][ T8338] loop1: detected capacity change from 0 to 128 [ 195.745749][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 196.116367][ T8351] loop2: detected capacity change from 0 to 256 [ 196.150388][ T8351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 196.279653][ T8348] loop0: detected capacity change from 0 to 4096 [ 196.357203][ T8348] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 196.410997][ T8348] ntfs3: loop0: failed to convert "0080" to cp936 [ 196.422732][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 196.437604][ T8348] ntfs3: loop0: failed to convert name for inode 1e. [ 196.451377][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 196.752786][ T8366] loop1: detected capacity change from 0 to 512 [ 196.815856][ T8366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.872173][ T8366] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.984413][ T8373] loop0: detected capacity change from 0 to 4096 [ 197.016854][ T8366] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 197.036252][ T8366] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 197.047703][ T8366] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.987: Failed to acquire dquot type 0 [ 197.102103][ T8375] loop3: detected capacity change from 0 to 2048 [ 197.115902][ T8375] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.175124][ T8375] NILFS (loop3): mounting unchecked fs [ 197.205752][ T6118] udevd[6118]: incorrect nilfs2 checksum on /dev/loop3 [ 197.233112][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.275130][ T8375] NILFS (loop3): recovery complete [ 197.302614][ T8376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.227643][ T8404] loop2: detected capacity change from 0 to 2048 [ 198.315031][ T8408] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.410264][ T8404] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 198.469447][ T8404] Remounting filesystem read-only [ 198.593084][ T5798] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 198.621714][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 198.655632][ T5798] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 198.673447][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.684480][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.698896][ T8412] loop1: detected capacity change from 0 to 16 [ 198.709943][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.726659][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 198.727338][ T8412] erofs: (device loop1): mounted with root inode @ nid 36. [ 198.739949][ T5798] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 198.772406][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.795310][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.826514][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.856829][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 198.882461][ T5798] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 198.899949][ T5798] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 198.915665][ T5798] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 198.932237][ T5798] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 198.948993][ T5798] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 198.956221][ T5798] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 198.969781][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.006806][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.030242][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.057371][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 199.090109][ T5798] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 199.097733][ T5798] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 199.133705][ T5798] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 199.143746][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.158845][ T5798] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 199.194707][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.214873][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.235675][ T5798] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 199.249236][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 199.606140][ T8434] netlink: set zone limit has 8 unknown bytes [ 200.679362][ T8473] loop1: detected capacity change from 0 to 1024 [ 200.880292][ T2946] hfsplus: b-tree write err: -5, ino 4 [ 201.215372][ T8490] loop3: detected capacity change from 0 to 8 [ 201.243551][ T8492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.682936][ T28] audit: type=1326 audit(1758651416.817:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 201.717807][ T28] audit: type=1326 audit(1758651416.817:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 201.810190][ T28] audit: type=1326 audit(1758651416.817:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 201.832489][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.879925][ T28] audit: type=1326 audit(1758651416.817:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 201.949200][ T8445] Bluetooth: hci2: command 0x0406 tx timeout [ 201.951096][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.957355][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 201.980310][ T28] audit: type=1326 audit(1758651416.817:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 202.032896][ T28] audit: type=1326 audit(1758651416.857:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 202.073502][ T8488] loop2: detected capacity change from 0 to 32768 [ 202.124310][ T8488] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1042 (8488) [ 202.141377][ T28] audit: type=1326 audit(1758651416.857:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 202.150905][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 202.192300][ T28] audit: type=1326 audit(1758651416.857:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127d78eec9 code=0x7ffc0000 [ 202.214848][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.230687][ T8488] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 202.274058][ T8488] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 202.296562][ T8488] BTRFS info (device loop2): using free space tree [ 202.492868][ T8488] BTRFS info (device loop2): enabling ssd optimizations [ 202.524932][ T8488] BTRFS info (device loop2): auto enabling async discard [ 202.648333][ T28] audit: type=1800 audit(1758651417.787:109): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1042" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 202.721808][ T5798] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 203.069678][ T6118] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (6118) [ 203.193456][ T8510] loop1: detected capacity change from 0 to 32768 [ 203.292749][ T8510] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.460700][ T8534] loop0: detected capacity change from 0 to 32768 [ 203.498775][ T8534] [ 203.498775][ T8534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.498775][ T8534] [ 203.683838][ T8510] XFS (loop1): Ending clean mount [ 203.716549][ T8510] XFS (loop1): Quotacheck needed: Please wait. [ 203.725801][ T59] ERROR: (device loop0): diWrite: ixpxd invalid [ 203.725801][ T59] [ 203.778545][ T59] ERROR: (device loop0): txCommit: [ 203.778545][ T59] [ 203.823362][ T59] jfs_write_inode: jfs_commit_inode failed! [ 203.859086][ T8510] XFS (loop1): Quotacheck: Done. [ 203.860482][ T5790] [ 203.860482][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.860482][ T5790] [ 203.968833][ T5790] [ 203.968833][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.968833][ T5790] [ 204.143181][ T8558] loop3: detected capacity change from 0 to 128 [ 204.242299][ T5803] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.770806][ T8562] loop2: detected capacity change from 0 to 32768 [ 205.772852][ T8582] loop0: detected capacity change from 0 to 2048 [ 205.788041][ T8562] XFS: attr2 mount option is deprecated. [ 205.834396][ T8582] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.877382][ T8562] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.888024][ T8582] NILFS (loop0): mounting unchecked fs [ 205.890924][ T8564] loop3: detected capacity change from 0 to 40427 [ 205.925837][ T8564] F2FS-fs (loop3): invalid crc value [ 205.972728][ T8582] NILFS (loop0): recovery complete [ 205.977965][ T8564] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.014496][ T8562] XFS (loop2): Ending clean mount [ 206.032089][ T8592] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.040329][ T8562] XFS (loop2): Quotacheck needed: Please wait. [ 206.168769][ T8564] F2FS-fs (loop3): Start checkpoint disabled! [ 206.184880][ T8562] XFS (loop2): Quotacheck: Done. [ 206.197186][ T8564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 206.494485][ T5798] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.672240][ T1113] kworker/u4:6: attempt to access beyond end of device [ 206.672240][ T1113] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 206.719151][ T1113] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 206.786740][ T1113] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 207.259526][ T8608] netlink: set zone limit has 8 unknown bytes [ 207.277598][ T5873] IPVS: starting estimator thread 0... [ 207.316735][ T8612] team0: Device ip6tnl1 is of different type [ 207.370340][ T8613] IPVS: using max 17 ests per chain, 40800 per kthread [ 207.469547][ T8615] loop0: detected capacity change from 0 to 512 [ 207.571941][ T8615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.660189][ T8615] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.768408][ T8627] loop3: detected capacity change from 0 to 128 [ 207.784497][ T8615] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 207.803204][ T8615] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 207.810992][ T8625] loop2: detected capacity change from 0 to 2048 [ 207.815699][ T8615] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1093: Failed to acquire dquot type 0 [ 207.840936][ T8625] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.853942][ T8627] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 207.863773][ T8625] NILFS (loop2): mounting unchecked fs [ 207.884180][ T8625] NILFS (loop2): recovery complete [ 207.904092][ T8628] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.981395][ T8627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.060331][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.580708][ T8640] netlink: set zone limit has 8 unknown bytes [ 208.990506][ T8654] loop0: detected capacity change from 0 to 2048 [ 209.032379][ T8654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.177235][ T8668] loop1: detected capacity change from 0 to 512 [ 209.263809][ T8668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.316402][ T8668] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.522999][ T8668] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1103: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 209.596251][ T8668] EXT4-fs (loop1): Remounting filesystem read-only [ 209.619540][ T8682] loop2: detected capacity change from 0 to 512 [ 209.696599][ T8682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.703720][ T8680] can0: slcan on ptm0. [ 209.733880][ T8682] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.741497][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.921677][ T8679] can0 (unregistered): slcan off ptm0. [ 209.995202][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.296965][ T28] audit: type=1326 audit(1758651425.437:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 210.324292][ T8695] loop1: detected capacity change from 0 to 4096 [ 210.372716][ T8695] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 210.392595][ T28] audit: type=1326 audit(1758651425.437:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 210.440981][ T28] audit: type=1326 audit(1758651425.447:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 210.491529][ T28] audit: type=1326 audit(1758651425.447:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff60b78ef03 code=0x7ffc0000 [ 210.520784][ T28] audit: type=1326 audit(1758651425.547:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff60b78d97f code=0x7ffc0000 [ 210.623591][ T8695] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 210.730701][ T28] audit: type=1800 audit(1758651425.867:115): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1111" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 210.764945][ T8700] loop3: detected capacity change from 0 to 8192 [ 210.856131][ T28] audit: type=1326 audit(1758651425.877:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff60b78ef57 code=0x7ffc0000 [ 210.960225][ T28] audit: type=1326 audit(1758651425.907:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff60b78d710 code=0x7ffc0000 [ 211.016339][ T8709] loop0: detected capacity change from 0 to 4096 [ 211.041480][ T5803] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 211.060043][ T8709] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 211.196560][ T8709] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 211.242115][ T8709] ntfs3: loop0: Failed to load $Extend (-22). [ 211.248451][ T8709] ntfs3: loop0: Failed to initialize $Extend. [ 211.846487][ T8741] sg_write: data in/out 852092/1 bytes for SCSI command 0x1c-- guessing data in; [ 211.846487][ T8741] program syz.1.1126 not setting count and/or reply_len properly [ 211.890516][ T8742] tmpfs: Cannot change global quota limit on remount [ 212.277008][ T8754] loop2: detected capacity change from 0 to 1024 [ 212.370848][ T8754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.406609][ T8754] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.448235][ T8763] loop0: detected capacity change from 0 to 512 [ 212.523838][ T8763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.537024][ T8763] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.613415][ T8754] EXT4-fs: Ignoring removed orlov option [ 212.650568][ T8754] EXT4-fs: can't change dax mount option while remounting [ 212.731910][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.921782][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.028340][ T8779] loop1: detected capacity change from 0 to 512 [ 213.056651][ T8783] program syz.0.1137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.185718][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 213.197099][ T8779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.220255][ T8779] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.428993][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.880811][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 214.060013][ T966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.255796][ T966] usb 2-1: Using ep0 maxpacket: 8 [ 214.278816][ T966] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 214.297249][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.306011][ T966] usb 2-1: Product: syz [ 214.311265][ T966] usb 2-1: Manufacturer: syz [ 214.319802][ T966] usb 2-1: SerialNumber: syz [ 214.347926][ T966] usb 2-1: config 0 descriptor?? [ 214.372137][ T966] gspca_main: sq930x-2.14.0 probing 2770:930c [ 214.465226][ T8833] loop2: detected capacity change from 0 to 16 [ 214.542960][ T5801] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.983374][ T8847] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1171'. [ 215.005174][ T8847] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 215.076204][ T966] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 215.087026][ T966] sq930x: probe of 2-1:0.0 failed with error -71 [ 215.124207][ T966] usb 2-1: USB disconnect, device number 7 [ 215.263769][ T8857] loop3: detected capacity change from 0 to 256 [ 215.301335][ T8857] exfat: Deprecated parameter 'utf8' [ 215.307266][ T8857] exfat: Deprecated parameter 'utf8' [ 215.388483][ T8857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 216.237858][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 216.237877][ T28] audit: type=1326 audit(1758651431.377:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 216.267802][ T5105] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 216.276668][ T8891] loop1: detected capacity change from 0 to 256 [ 216.337644][ T8891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 216.347888][ T28] audit: type=1326 audit(1758651431.417:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 216.410599][ T28] audit: type=1326 audit(1758651431.417:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b78eec9 code=0x7ffc0000 [ 216.468750][ T8891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 216.500054][ T8891] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 216.507954][ T8891] UDF-fs: Scanning with blocksize 512 failed [ 216.528239][ T8891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 216.589911][ T8891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.723605][ T8879] loop0: detected capacity change from 0 to 32768 [ 216.840252][ T8879] JBD2: Ignoring recovery information on journal [ 216.951781][ T8879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 217.108879][ T8879] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 217.148795][ T8879] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 217.177328][ T8879] OCFS2: File system is now read-only. [ 217.199569][ T8879] (syz.0.1173,8879,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 217.226909][ T8879] (syz.0.1173,8879,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 217.251151][ T8879] (syz.0.1173,8879,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 217.271327][ T8879] (syz.0.1173,8879,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 217.291110][ T8879] (syz.0.1173,8879,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 217.309894][ T8879] (syz.0.1173,8879,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 217.327771][ T8879] (syz.0.1173,8879,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 217.346313][ T8879] (syz.0.1173,8879,1):ocfs2_symlink:1944 ERROR: status = -30 [ 217.363023][ T8879] (syz.0.1173,8879,1):ocfs2_symlink:2068 ERROR: status = -30 [ 217.616914][ T8906] loop1: detected capacity change from 0 to 32768 [ 218.062579][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 218.207812][ T8931] loop2: detected capacity change from 0 to 4096 [ 218.626265][ T8939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1192'. [ 218.840541][ T8947] ptrace attach of "./syz-executor exec"[5790] was attempted by "\x22"[8947] [ 220.125186][ T8994] loop0: detected capacity change from 0 to 512 [ 220.765353][ T9002] loop2: detected capacity change from 0 to 8192 [ 220.790260][ T9002] REISERFS warning (device loop2): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 [ 221.288252][ T9000] loop0: detected capacity change from 0 to 32768 [ 221.401413][ T9000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 221.590048][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.610733][ T9011] loop3: detected capacity change from 0 to 32768 [ 221.658379][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 221.820016][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 221.826092][ T9023] »»»»»»×[SRëåW: renamed from lo (while UP) [ 221.837927][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.869746][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.891896][ T42] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 221.914398][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.961834][ T42] usb 2-1: config 0 descriptor?? [ 222.029784][ T9022] loop2: detected capacity change from 0 to 8192 [ 222.053790][ T9025] hpfs: Bad magic ... probably not HPFS [ 222.074319][ T9025] omfs: Invalid superblock (0) [ 222.101224][ T9022] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.137470][ T9022] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 222.149269][ T9022] REISERFS (device loop2): using ordered data mode [ 222.156475][ T9022] reiserfs: using flush barriers [ 222.180239][ T9022] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 222.225092][ T9022] REISERFS (device loop2): checking transaction log (loop2) [ 222.273028][ T9022] REISERFS (device loop2): Using r5 hash to sort names [ 222.312142][ T9022] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 222.363841][ T9022] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 222.433048][ T9028] loop0: detected capacity change from 0 to 128 [ 222.444529][ T42] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 222.461771][ T42] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x0 [ 222.473859][ T42] hid-multitouch 0003:1FD2:6007.000E: item fetching failed at offset 3/5 [ 222.487090][ T42] hid-multitouch: probe of 0003:1FD2:6007.000E failed with error -22 [ 222.523926][ T9028] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.560191][ T9028] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.662365][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.677902][ T5782] usb 2-1: USB disconnect, device number 8 [ 222.740012][ T5856] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 222.940234][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 222.949005][ T5856] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 222.958314][ T5856] usb 4-1: config 0 has no interface number 0 [ 222.974554][ T5856] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 222.985302][ T5856] usb 4-1: config 0 interface 196 has no altsetting 0 [ 223.002660][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 223.018714][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.037377][ T5856] usb 4-1: Product: syz [ 223.042950][ T5856] usb 4-1: Manufacturer: syz [ 223.047751][ T5856] usb 4-1: SerialNumber: syz [ 223.056251][ T5856] usb 4-1: config 0 descriptor?? [ 223.073029][ T9030] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 223.225622][ T9044] loop0: detected capacity change from 0 to 4096 [ 223.243174][ T9044] ntfs3: loop0: It is recommened to use chkdsk. [ 223.256729][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 223.267627][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 223.303104][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 223.333524][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 223.362424][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 223.372121][ T9046] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 223.384057][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 223.420306][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 223.428118][ T9048] loop1: detected capacity change from 0 to 2048 [ 223.428334][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 223.456715][ T9048] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.483544][ T9048] NILFS (loop1): mounting unchecked fs [ 223.486942][ T9044] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 223.515231][ T9048] NILFS (loop1): recovery complete [ 223.544120][ T9049] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.549539][ T6205] udevd[6205]: incorrect nilfs2 checksum on /dev/loop1 [ 223.562336][ T5856] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 223.582414][ T5856] ipheth: probe of 4-1:0.196 failed with error -22 [ 223.879714][ T5873] usb 4-1: USB disconnect, device number 8 [ 224.042763][ T9059] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 224.059998][ T9059] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1246'. [ 224.100298][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.206992][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1248'. [ 224.299963][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 224.317225][ T42] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.339947][ T42] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.376415][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.383978][ T42] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 224.431582][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.448719][ T9070] loop2: detected capacity change from 0 to 1024 [ 224.467965][ T42] usb 2-1: config 0 descriptor?? [ 224.509532][ T9070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.878060][ T9083] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 224.900303][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.921844][ T9081] loop3: detected capacity change from 0 to 4096 [ 224.951758][ T42] redragon 0003:0C45:760B.000F: item fetching failed at offset 0/4 [ 224.961510][ T42] redragon: probe of 0003:0C45:760B.000F failed with error -22 [ 225.006141][ T9084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.199211][ T42] usb 2-1: USB disconnect, device number 9 [ 225.460444][ T28] audit: type=1800 audit(1758651440.607:159): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1252" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 225.466728][ T9092] loop3: detected capacity change from 0 to 128 [ 225.506122][ T9092] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.521374][ T9092] hpfs: filesystem error: improperly stopped [ 225.527540][ T9092] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.541667][ T9092] hpfs: You really don't want any checks? You are crazy... [ 225.549705][ T9092] hpfs: hpfs_map_sector(): read error [ 225.579901][ T9092] hpfs: code page support is disabled [ 225.587354][ T9092] hpfs: hpfs_map_4sectors(): unaligned read [ 225.626235][ T9092] hpfs: hpfs_map_4sectors(): unaligned read [ 225.652820][ T9092] hpfs: filesystem error: unable to find root dir [ 225.666698][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.850364][ T42] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.276377][ T9112] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 226.360946][ T42] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 226.573116][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.605961][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 226.634573][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.650313][ T42] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 226.659628][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.678095][ T42] usb 4-1: config 0 descriptor?? [ 226.689235][ T9121] loop1: detected capacity change from 0 to 128 [ 226.689655][ T9108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.773003][ T9123] loop0: detected capacity change from 0 to 1024 [ 226.905746][ T9106] loop2: detected capacity change from 0 to 32768 [ 227.197255][ T42] uclogic 0003:5543:0004.0010: No inputs registered, leaving [ 227.228193][ T42] uclogic 0003:5543:0004.0010: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 227.492036][ T42] usb 4-1: USB disconnect, device number 9 [ 227.720055][ T5782] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.808102][ T9132] loop1: detected capacity change from 0 to 32768 [ 227.827126][ T9132] (syz.1.1279,9132,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.845199][ T9132] (syz.1.1279,9132,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.873336][ T9132] JBD2: Ignoring recovery information on journal [ 227.912456][ T5782] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 227.929103][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.955458][ T5782] usb 1-1: Product: syz [ 227.963661][ T9132] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.978135][ T5782] usb 1-1: Manufacturer: syz [ 227.983409][ T5782] usb 1-1: SerialNumber: syz [ 228.007179][ T5782] usb 1-1: config 0 descriptor?? [ 228.052926][ T5782] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 228.095911][ T5782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.135343][ T5782] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 228.163578][ T5782] usb 1-1: media controller created [ 228.265416][ T9131] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 228.278312][ T5782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.309320][ T9131] dvb-usb: bulk message failed: -22 (7/0) [ 228.335897][ T9140] loop3: detected capacity change from 0 to 4096 [ 228.478290][ T5782] DVB: Unable to find symbol mt352_attach() [ 228.488440][ T9140] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 228.658555][ T5782] DVB: Unable to find symbol nxt6000_attach() [ 228.685892][ T5782] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 228.733601][ T5782] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 228.780407][ T5782] dvb-usb: schedule remote query interval to 1000 msecs. [ 228.787688][ T5782] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 228.861076][ T5782] dvb-usb: bulk message failed: -22 (7/0) [ 228.892216][ T5782] dvb-usb: bulk message failed: -22 (7/0) [ 228.935960][ T5782] usb 1-1: USB disconnect, device number 10 [ 229.158789][ T5803] ocfs2: Unmounting device (7,1) on (node local) [ 229.203050][ T5782] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 229.945575][ T9161] loop1: detected capacity change from 0 to 256 [ 230.317397][ T9146] loop3: detected capacity change from 0 to 40427 [ 230.362939][ T9146] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 230.389000][ T9146] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 230.421110][ T9146] F2FS-fs (loop3): invalid crc value [ 230.472831][ T9146] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.570611][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.673806][ T9146] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 230.704544][ T9146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.013638][ T9185] usb usb8: usbfs: process 9185 (syz.2.1302) did not claim interface 0 before use [ 231.062285][ T9165] loop0: detected capacity change from 0 to 32768 [ 231.091258][ T9165] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1294 (9165) [ 231.177033][ T9165] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 231.232698][ T9165] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 231.263585][ T9165] BTRFS info (device loop0): using free space tree [ 231.450059][ T9165] BTRFS info (device loop0): enabling ssd optimizations [ 231.457090][ T9165] BTRFS info (device loop0): auto enabling async discard [ 231.471023][ T9209] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1307'. [ 231.528922][ T9209] tipc: Started in network mode [ 231.567330][ T9209] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 231.604530][ T9165] fs-verity (loop0, inode 261): Unknown hash algorithm number: 0 [ 231.610039][ T9209] tipc: Enabling of bearer rejected, failed to enable media [ 231.815121][ T5790] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 232.866402][ T9211] loop1: detected capacity change from 0 to 32768 [ 232.892830][ T9211] XFS: ikeep mount option is deprecated. [ 232.950643][ T9237] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 232.958411][ T9237] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 232.989642][ T9211] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.010258][ T9237] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 233.016934][ T9237] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 233.069352][ T9237] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 233.090554][ T9237] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 233.126329][ T9237] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 233.152679][ T9237] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 233.166120][ T9211] XFS (loop1): Ending clean mount [ 233.171091][ T9237] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 233.180817][ T9211] XFS (loop1): Quotacheck needed: Please wait. [ 233.188110][ T9237] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 233.222904][ T9237] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 233.242585][ T9237] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 233.272406][ T9237] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 233.292632][ T5105] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 233.294696][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 233.320130][ T9237] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 233.354607][ T9237] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 233.362839][ T9211] XFS (loop1): Quotacheck: Done. [ 233.404151][ T9237] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 233.440042][ T9237] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 233.467193][ T9237] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 233.497659][ T9237] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 233.547067][ T5803] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.748367][ T9233] loop0: detected capacity change from 0 to 40427 [ 233.775962][ T9251] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1323'. [ 233.819386][ T9233] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 233.861943][ T9233] F2FS-fs (loop0): invalid crc value [ 233.917828][ T9233] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.100280][ T9233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.299739][ T5790] syz-executor: attempt to access beyond end of device [ 234.299739][ T5790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.346017][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 234.419149][ T9269] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 234.481147][ T9265] loop3: detected capacity change from 0 to 8192 [ 234.534956][ T9265] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.571569][ T9265] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 234.588632][ T9265] REISERFS (device loop3): using ordered data mode [ 234.596439][ T9265] reiserfs: using flush barriers [ 234.632451][ T9265] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.672467][ T9265] REISERFS (device loop3): checking transaction log (loop3) [ 234.819529][ T9275] loop2: detected capacity change from 0 to 2048 [ 234.916688][ T9278] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.982378][ T9275] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 235.025609][ T9275] Remounting filesystem read-only [ 235.051599][ T9265] REISERFS (device loop3): Using tea hash to sort names [ 235.059206][ T9265] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 235.129583][ T9280] loop1: detected capacity change from 0 to 512 [ 235.191135][ T9280] EXT4-fs: Ignoring removed bh option [ 235.196787][ T9280] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.230154][ T5798] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 235.230233][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 235.230253][ T5798] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 235.230270][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230286][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230303][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230595][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 235.230615][ T5798] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 235.230631][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230648][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230665][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.230981][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 235.231000][ T5798] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 235.231017][ T5798] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 235.231034][ T5798] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 235.231050][ T5798] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 235.231136][ T5798] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 235.231152][ T5798] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 235.231168][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.231185][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.231201][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.233140][ T5798] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 235.233162][ T5798] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 235.233180][ T5798] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 235.233196][ T5798] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 235.233213][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.233235][ T5798] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 235.233252][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.233267][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.233285][ T5798] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 235.233301][ T5798] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.277769][ T9280] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 235.282750][ T9280] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 235.562442][ T9287] loop2: detected capacity change from 0 to 64 [ 235.573515][ T9280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 235.586535][ T9280] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 235.642068][ T9280] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 235.660266][ T9280] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1334: Failed to acquire dquot type 1 [ 235.693902][ T9280] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1334: Invalid block bitmap block 0 in block_group 0 [ 235.713717][ T9287] syz.2.1337: attempt to access beyond end of device [ 235.713717][ T9287] loop2: rw=2049, sector=78, nr_sectors = 88 limit=64 [ 235.779356][ T9280] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1334: Invalid block bitmap block 0 in block_group 0 [ 235.794496][ T9289] loop0: detected capacity change from 0 to 64 [ 235.819413][ T9280] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1334: Invalid block bitmap block 0 in block_group 0 [ 235.847370][ T28] audit: type=1800 audit(1758651450.987:160): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1338" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 235.871735][ T2957] kworker/u4:11: attempt to access beyond end of device [ 235.871735][ T2957] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 235.895225][ T2957] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 235.905187][ T9280] Quota error (device loop1): write_blk: dquota write failed [ 235.914345][ T9280] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 235.925514][ T9280] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1334: Failed to acquire dquot type 1 [ 235.934487][ T2957] kworker/u4:11: attempt to access beyond end of device [ 235.934487][ T2957] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 235.973057][ T9280] Quota error (device loop1): write_blk: dquota write failed [ 236.000754][ T9280] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 236.019905][ T2957] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 236.028701][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.028701][ T2957] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 236.050744][ T9280] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1334: Failed to acquire dquot type 1 [ 236.082680][ T2957] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 236.101822][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.101822][ T2957] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 236.105992][ T9280] EXT4-fs (loop1): 1 orphan inode deleted [ 236.134011][ T9280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.168107][ T2957] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 236.200106][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.200106][ T2957] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 236.228169][ T2957] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 236.241123][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.265178][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.265178][ T2957] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 236.284337][ T2957] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 236.293227][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.293227][ T2957] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 236.312429][ T2957] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 236.355337][ T2957] kworker/u4:11: attempt to access beyond end of device [ 236.355337][ T2957] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 236.397114][ T2957] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 236.905305][ T9310] loop1: detected capacity change from 0 to 64 [ 237.043327][ T9310] hfs: bad catalog entry type 65535 [ 237.084081][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 237.105039][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 237.116997][ T9312] IPVS: persistence engine module ip_vs_pe_s not found [ 237.127257][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 237.193784][ T9] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 237.430254][ T9318] fido_id[9318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.714776][ T9332] loop1: detected capacity change from 0 to 256 [ 237.738779][ T9334] loop3: detected capacity change from 0 to 256 [ 237.762755][ T9334] exfat: Deprecated parameter 'namecase' [ 237.786562][ T9332] FAT-fs (loop1): Directory bread(block 64) failed [ 237.804179][ T9332] FAT-fs (loop1): Directory bread(block 65) failed [ 237.818450][ T9334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 237.831381][ T9332] FAT-fs (loop1): Directory bread(block 66) failed [ 237.838176][ T9332] FAT-fs (loop1): Directory bread(block 67) failed [ 237.861599][ T9332] FAT-fs (loop1): Directory bread(block 68) failed [ 237.888269][ T9332] FAT-fs (loop1): Directory bread(block 69) failed [ 237.907539][ T9332] FAT-fs (loop1): Directory bread(block 70) failed [ 237.927959][ T28] audit: type=1804 audit(1758651453.047:161): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1358" name="/newroot/356/file0/bus" dev="loop3" ino=1048661 res=1 errno=0 [ 237.929577][ T9332] FAT-fs (loop1): Directory bread(block 71) failed [ 238.001392][ T9332] FAT-fs (loop1): Directory bread(block 72) failed [ 238.008398][ T9332] FAT-fs (loop1): Directory bread(block 73) failed [ 238.197470][ T28] audit: type=1800 audit(1758651453.337:162): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1357" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048662 res=0 errno=0 [ 238.617082][ T9323] loop0: detected capacity change from 0 to 32768 [ 238.911297][ T5790] non-latin1 character 0x2e66 found in JFS file name [ 238.923821][ T5790] mount with iocharset=utf8 to access [ 239.134168][ T111] ------------[ cut here ]------------ [ 239.140485][ T111] WARNING: CPU: 0 PID: 111 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 239.149514][ T111] Modules linked in: [ 239.153656][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 239.160963][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.171252][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 239.176341][ T111] Code: e8 cd a5 df fe e9 5a ff ff ff e8 03 5b 88 fe eb 05 e8 fc 5a 88 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e8 5a 88 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 239.196175][ T111] RSP: 0018:ffffc900025e7648 EFLAGS: 00010293 [ 239.202792][ T111] RAX: ffffffff82fd3cb8 RBX: ffff88807632d010 RCX: ffff888018fabc00 [ 239.212222][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 239.220481][ T111] RBP: 0000000000020056 R08: ffffea0001d8cb47 R09: 1ffffd40003b1968 [ 239.228520][ T111] R10: dffffc0000000000 R11: fffff940003b1969 R12: ffff88807632d018 [ 239.236690][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 239.244756][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 239.253835][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.260684][ T111] CR2: 00007f43e6c01000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 239.268801][ T111] Call Trace: [ 239.272206][ T111] [ 239.275170][ T111] ? lock_page+0x2a0/0x2a0 [ 239.279638][ T111] dbJoin+0x238/0x300 [ 239.283887][ T111] dbFreeBits+0x4e2/0xdb0 [ 239.288283][ T111] dbFree+0x332/0x650 [ 239.292812][ T111] txFreeMap+0x9e6/0xde0 [ 239.297134][ T111] ? do_raw_spin_unlock+0x121/0x230 [ 239.302549][ T111] xtTruncate+0xcce/0x2dc0 [ 239.307064][ T111] ? xtInitRoot+0x170/0x170 [ 239.312821][ T111] ? __lock_acquire+0x7c80/0x7c80 [ 239.317949][ T111] ? do_raw_spin_lock+0x121/0x2c0 [ 239.323256][ T111] ? __asan_memset+0x22/0x40 [ 239.327888][ T111] ? __dquot_initialize+0x215/0xcb0 [ 239.333197][ T111] jfs_free_zero_link+0x33b/0x490 [ 239.338483][ T111] ? jfs_write_failed+0x190/0x190 [ 239.343698][ T111] ? sb_clear_inode_writeback+0x360/0x360 [ 239.349479][ T111] ? do_raw_spin_lock+0x121/0x2c0 [ 239.354765][ T111] ? bit_waitqueue+0x30/0x30 [ 239.359428][ T111] jfs_evict_inode+0x35d/0x440 [ 239.364411][ T111] ? evict+0x480/0x870 [ 239.368636][ T111] ? jfs_write_inode+0x220/0x220 [ 239.374246][ T111] evict+0x486/0x870 [ 239.378300][ T111] ? __lock_acquire+0x7c80/0x7c80 [ 239.383521][ T111] ? proc_nr_inodes+0x230/0x230 [ 239.388619][ T111] ? do_raw_spin_unlock+0x121/0x230 [ 239.394203][ T111] ? _raw_spin_unlock+0x28/0x40 [ 239.399270][ T111] ? iput+0x70a/0x920 [ 239.403747][ T111] jfs_lazycommit+0x42b/0xa60 [ 239.408574][ T111] ? txFreelock+0x5a0/0x5a0 [ 239.414491][ T111] ? do_task_dead+0xd0/0xd0 [ 239.419571][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 239.424762][ T111] kthread+0x2fa/0x390 [ 239.428977][ T111] ? txFreelock+0x5a0/0x5a0 [ 239.433925][ T111] ? kthread_blkcg+0xd0/0xd0 [ 239.438585][ T111] ret_from_fork+0x48/0x80 [ 239.443105][ T111] ? kthread_blkcg+0xd0/0xd0 [ 239.447845][ T111] ret_from_fork_asm+0x11/0x20 [ 239.452761][ T111] [ 239.455928][ T111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.457148][ T9369] loop1: detected capacity change from 0 to 1024 [ 239.469771][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 239.477003][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.487197][ T111] Call Trace: [ 239.490540][ T111] [ 239.493492][ T111] dump_stack_lvl+0x16c/0x230 [ 239.498393][ T111] ? show_regs_print_info+0x20/0x20 [ 239.503613][ T111] ? load_image+0x3b0/0x3b0 [ 239.508490][ T111] panic+0x2c0/0x710 [ 239.512600][ T111] ? bpf_jit_dump+0xd0/0xd0 [ 239.517129][ T111] ? ret_from_fork_asm+0x11/0x20 [ 239.522276][ T111] __warn+0x2e0/0x470 [ 239.526370][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.530841][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.535444][ T111] report_bug+0x2be/0x4f0 [ 239.539803][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.544332][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.548883][ T111] ? dbAdjTree+0x44a/0x4d0 [ 239.553577][ T111] handle_bug+0xcf/0x120 [ 239.557919][ T111] exc_invalid_op+0x1a/0x50 [ 239.562542][ T111] asm_exc_invalid_op+0x1a/0x20 [ 239.567423][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 239.572466][ T111] Code: e8 cd a5 df fe e9 5a ff ff ff e8 03 5b 88 fe eb 05 e8 fc 5a 88 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e8 5a 88 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 239.592259][ T111] RSP: 0018:ffffc900025e7648 EFLAGS: 00010293 [ 239.598357][ T111] RAX: ffffffff82fd3cb8 RBX: ffff88807632d010 RCX: ffff888018fabc00 [ 239.606514][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 239.614515][ T111] RBP: 0000000000020056 R08: ffffea0001d8cb47 R09: 1ffffd40003b1968 [ 239.622598][ T111] R10: dffffc0000000000 R11: fffff940003b1969 R12: ffff88807632d018 [ 239.630958][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 239.638945][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.643476][ T111] ? dbAdjTree+0x448/0x4d0 [ 239.647995][ T111] ? lock_page+0x2a0/0x2a0 [ 239.652424][ T111] dbJoin+0x238/0x300 [ 239.656425][ T111] dbFreeBits+0x4e2/0xdb0 [ 239.660781][ T111] dbFree+0x332/0x650 [ 239.664800][ T111] txFreeMap+0x9e6/0xde0 [ 239.669078][ T111] ? do_raw_spin_unlock+0x121/0x230 [ 239.674558][ T111] xtTruncate+0xcce/0x2dc0 [ 239.679030][ T111] ? xtInitRoot+0x170/0x170 [ 239.683656][ T111] ? __lock_acquire+0x7c80/0x7c80 [ 239.688682][ T111] ? do_raw_spin_lock+0x121/0x2c0 [ 239.693807][ T111] ? __asan_memset+0x22/0x40 [ 239.698405][ T111] ? __dquot_initialize+0x215/0xcb0 [ 239.703620][ T111] jfs_free_zero_link+0x33b/0x490 [ 239.708659][ T111] ? jfs_write_failed+0x190/0x190 [ 239.713699][ T111] ? sb_clear_inode_writeback+0x360/0x360 [ 239.719431][ T111] ? do_raw_spin_lock+0x121/0x2c0 [ 239.724469][ T111] ? bit_waitqueue+0x30/0x30 [ 239.729075][ T111] jfs_evict_inode+0x35d/0x440 [ 239.733854][ T111] ? evict+0x480/0x870 [ 239.738102][ T111] ? jfs_write_inode+0x220/0x220 [ 239.743248][ T111] evict+0x486/0x870 [ 239.747355][ T111] ? __lock_acquire+0x7c80/0x7c80 [ 239.752575][ T111] ? proc_nr_inodes+0x230/0x230 [ 239.757530][ T111] ? do_raw_spin_unlock+0x121/0x230 [ 239.762940][ T111] ? _raw_spin_unlock+0x28/0x40 [ 239.767829][ T111] ? iput+0x70a/0x920 [ 239.771832][ T111] jfs_lazycommit+0x42b/0xa60 [ 239.776536][ T111] ? txFreelock+0x5a0/0x5a0 [ 239.781223][ T111] ? do_task_dead+0xd0/0xd0 [ 239.785827][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 239.791062][ T111] kthread+0x2fa/0x390 [ 239.795258][ T111] ? txFreelock+0x5a0/0x5a0 [ 239.799806][ T111] ? kthread_blkcg+0xd0/0xd0 [ 239.804619][ T111] ret_from_fork+0x48/0x80 [ 239.809074][ T111] ? kthread_blkcg+0xd0/0xd0 [ 239.813937][ T111] ret_from_fork_asm+0x11/0x20 [ 239.818829][ T111] [ 239.822249][ T111] Kernel Offset: disabled [ 239.826664][ T111] Rebooting in 86400 seconds..