last executing test programs: 3.520699314s ago: executing program 1 (id=833): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$unix(r0, &(0x7f0000001c00)={&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x24000040) 3.358218387s ago: executing program 1 (id=838): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64], 0x0) 3.091938478s ago: executing program 0 (id=843): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, 0x0) 2.877375494s ago: executing program 0 (id=847): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2.566909928s ago: executing program 2 (id=852): mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 2.328079277s ago: executing program 2 (id=855): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) 2.253755173s ago: executing program 2 (id=856): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1c4) fallocate(r0, 0x10, 0x1, 0x7fff) 2.021778082s ago: executing program 3 (id=858): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x890) 2.021439481s ago: executing program 0 (id=859): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891c, &(0x7f0000000100)) 2.007841313s ago: executing program 4 (id=860): r0 = memfd_create(&(0x7f0000001140)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1a3, 0x11, r0, 0x2000) 1.846693835s ago: executing program 4 (id=861): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x1e0a4000) r0 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000d40)="01", 0x1) 1.78794913s ago: executing program 3 (id=862): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000e00), 0x12) 1.753483493s ago: executing program 0 (id=863): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000004}) 1.611514173s ago: executing program 1 (id=864): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000700)="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"/310, 0x136}, {&(0x7f0000000180)="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", 0x512}], 0x3, 0x0, 0x0, 0x2c}, 0x40804) 1.548046649s ago: executing program 0 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 1.5325338s ago: executing program 3 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000000)) 1.418154429s ago: executing program 0 (id=867): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x3, 0xd431, 0xb0, &(0x7f00000003c0)="8f9a6c635b44a017d91ce151f23118a56d66a0d19ead2f98fcda5fed5dd996160844c25443a02bccd5ce47d7f90a2c9624581280e52b70c206d6c42d43c04758a2df26cd185c62e8530429e0f88822e3f74a5606a053584862eae473a66b6a94a9c64009d02ef3deb3e679455de16cdecf582a88b0b499f34b8025f0d4e7574d90125d12f81be75a3fe23f92cd8def124aad48a8167527e4e00aa58aedcac2bc7d7787a457f05cdb806e259e85b26fe6"}], 0x1}) 1.359997793s ago: executing program 1 (id=868): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@nodioread_nolock}, {}, {@nombcache}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nojournal_checksum}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x572, &(0x7f0000001b40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) 1.27676791s ago: executing program 3 (id=869): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@sysvgroups}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@resgid}, {@grpjquota}, {@init_itable}, {@jqfmt_vfsold}]}, 0x1, 0x793, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xdc79058c513c3ca0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x20, 0x0}) 1.093532574s ago: executing program 2 (id=870): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c) 991.916112ms ago: executing program 4 (id=871): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 942.556526ms ago: executing program 3 (id=872): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 925.510777ms ago: executing program 4 (id=873): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) 855.986023ms ago: executing program 1 (id=874): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x4181b}) 539.363528ms ago: executing program 4 (id=875): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 473.640703ms ago: executing program 1 (id=876): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000004500)="$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") open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@random={'user.', '@\x1c\x00'}, 0x0, 0xffffffffffffffaa) 212.072563ms ago: executing program 2 (id=877): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)) 163.848157ms ago: executing program 3 (id=878): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x38}}, 0x0) 74.703774ms ago: executing program 4 (id=879): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 0s ago: executing program 2 (id=880): r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): y recommended to keep mac addresses unique to avoid problems! [ 64.492899][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.510220][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.522427][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.536183][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.553715][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.565304][ T4269] device veth0_macvtap entered promiscuous mode [ 64.576384][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.598473][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.611695][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.623600][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.639243][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.646640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.655070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.666028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.673275][ T4383] loop1: detected capacity change from 0 to 32768 [ 64.675871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.690242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.707941][ T4383] ======================================================= [ 64.707941][ T4383] WARNING: The mand mount option has been deprecated and [ 64.707941][ T4383] and is ignored by this kernel. Remove the mand [ 64.707941][ T4383] option from the mount to silence this warning. [ 64.707941][ T4383] ======================================================= [ 64.715833][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.756348][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.766405][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.783167][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.794007][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.805148][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.823409][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.833844][ T4269] device veth1_macvtap entered promiscuous mode [ 64.857372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.865365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.888784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.902310][ T4383] JBD2: Ignoring recovery information on journal [ 64.918382][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931284][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.940279][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.949015][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987391][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.998386][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.008889][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.018045][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.024700][ T4383] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 65.073780][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.088027][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.098257][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.109091][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.119239][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.130361][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.143833][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.161357][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.180258][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.206486][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.219209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.228352][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 65.261469][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.290165][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.314587][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.357357][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.377129][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.397124][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.407489][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.428833][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.458629][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.495826][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.520460][ T4394] loop1: detected capacity change from 0 to 4096 [ 65.520621][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.544407][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554379][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.564156][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.573231][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.584633][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.600042][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.610235][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.765217][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.781024][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.807322][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.826373][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.847767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.857944][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.872910][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 65.884534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.898745][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.912689][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.914668][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.929862][ T4265] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 65.931666][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.964452][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.994095][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.027534][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 66.033583][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.068351][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.098283][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.106322][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.117723][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.125705][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.153895][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.187150][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 66.191470][ T4401] loop1: detected capacity change from 0 to 2048 [ 66.193198][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 66.220495][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.277132][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 66.277869][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 66.338827][ T4406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.452838][ T4409] loop3: detected capacity change from 0 to 512 [ 66.453476][ T4411] loop2: detected capacity change from 0 to 256 [ 66.521486][ T4401] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 66.530779][ T4411] exfat: Deprecated parameter 'utf8' [ 66.614783][ T4401] Remounting filesystem read-only [ 66.638533][ T4401] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 66.687488][ T4411] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 66.690504][ T4409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.730761][ T4419] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 66.730832][ T4419] netlink: 'syz.0.15': attribute type 8 has an invalid length. [ 66.730909][ T4419] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.15'. [ 66.858491][ T4409] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.892291][ T4409] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.4: corrupted inode contents [ 66.928346][ T4409] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.4: mark_inode_dirty error [ 66.938018][ T4409] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.4: corrupted inode contents [ 66.958831][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.4: corrupted inode contents [ 66.960646][ T4423] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.4: mark_inode_dirty error [ 66.961178][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.4: corrupted inode contents [ 66.961542][ T4423] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4: mark_inode_dirty error [ 66.962104][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.4: corrupted inode contents [ 66.962392][ T4423] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.4: mark_inode_dirty error [ 66.990924][ T4265] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 67.102113][ T4425] loop2: detected capacity change from 0 to 256 [ 67.135562][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 67.181444][ T4429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18'. [ 67.391136][ T4429] unsupported nlmsg_type 40 [ 67.400545][ T4431] loop0: detected capacity change from 0 to 1024 [ 67.509750][ T4431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.705395][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 67.794873][ T4443] loop4: detected capacity change from 0 to 2048 [ 67.858648][ T4446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.009187][ T4455] loop1: detected capacity change from 0 to 512 [ 68.049848][ T4455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.119261][ T4455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.215517][ T4455] EXT4-fs (loop1): 1 orphan inode deleted [ 68.232881][ T4455] EXT4-fs (loop1): 1 truncate cleaned up [ 68.241305][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.255641][ T4455] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 68.339485][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 68.503748][ T4467] loop3: detected capacity change from 0 to 256 [ 68.963558][ T4481] Bluetooth: MGMT ver 1.22 [ 69.436859][ T4502] [U] ¹ [ 69.459906][ T4505] loop0: detected capacity change from 0 to 16 [ 69.496169][ T4259] udevd[4259]: incorrect erofs checksum on /dev/loop0 [ 69.505087][ T4505] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 69.544164][ T4505] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.646707][ T4505] CIFS mount error: No usable UNC path provided in device string! [ 69.646707][ T4505] [ 69.662385][ T4505] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.845346][ T4491] loop3: detected capacity change from 0 to 32768 [ 69.891249][ T4491] JBD2: Ignoring recovery information on journal [ 69.953847][ T4491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 70.064890][ T951] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 70.083444][ T951] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 70.092573][ T951] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 70.136057][ T951] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.01 Device [syz1] on syz0 [ 70.208795][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 70.316521][ T4522] loop2: detected capacity change from 0 to 2048 [ 70.438160][ T4531] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.522901][ T4522] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 70.539999][ T4521] fido_id[4521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.591050][ T4522] Remounting filesystem read-only [ 70.636879][ T4522] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 70.823057][ T4269] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 70.836769][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.881220][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.927692][ T4536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'. [ 71.285980][ T4558] loop2: detected capacity change from 0 to 2048 [ 71.319744][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.326355][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.352127][ T4558] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 71.375630][ T4558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.567180][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.765989][ T4574] loop2: detected capacity change from 0 to 1024 [ 71.772593][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 71.790434][ T22] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 71.822507][ T22] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 71.840005][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.903755][ T22] usb 5-1: Product: syz [ 71.912127][ T22] usb 5-1: Manufacturer: syz [ 71.916855][ T22] usb 5-1: SerialNumber: syz [ 71.958021][ T4574] hfsplus: bad catalog entry type [ 72.048094][ T36] hfsplus: b-tree write err: -5, ino 4 [ 72.177316][ T4591] loop2: detected capacity change from 0 to 512 [ 72.198877][ T22] usb 5-1: selecting invalid altsetting 1 [ 72.215996][ T4591] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.243924][ T4591] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 72.274193][ T4591] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.87: attempt to clear invalid blocks 2 len 1 [ 72.297920][ T4595] loop0: detected capacity change from 0 to 1024 [ 72.305003][ T4591] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 72.321169][ T951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.323305][ T4595] EXT4-fs: Ignoring removed orlov option [ 72.337282][ T4591] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.87: invalid indirect mapped block 1819239214 (level 0) [ 72.355882][ T4591] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.87: invalid indirect mapped block 1819239214 (level 1) [ 72.370256][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.377569][ T4591] EXT4-fs (loop2): 1 truncate cleaned up [ 72.383790][ T4591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.416788][ T22] LME2510(C): Firmware Status: 06 03 dc 7b 91 0d [ 72.416966][ T22] dvb_usb_lmedm04: probe of 5-1:2.0 failed with error -22 [ 72.433991][ T4595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.465887][ T4591] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 72.507392][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 72.522512][ T951] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.529271][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 72.533197][ T951] usb 4-1: config 179 has no interface number 0 [ 72.543583][ T951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 72.565378][ T951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 72.569282][ T126] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 72.591692][ T126] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 72.607108][ T951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.607139][ T951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 72.607163][ T951] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.607199][ T951] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 72.607220][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.616021][ T4584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.680681][ T126] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 72.691514][ T126] usb 2-1: config 220 has no interface number 2 [ 72.718397][ T951] usb 5-1: USB disconnect, device number 2 [ 72.721007][ T126] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 72.750319][ T126] usb 2-1: config 220 interface 0 has no altsetting 0 [ 72.757558][ T126] usb 2-1: config 220 interface 76 has no altsetting 0 [ 72.765285][ T126] usb 2-1: config 220 interface 1 has no altsetting 0 [ 72.785203][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 72.810907][ T126] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 72.847338][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.855390][ T126] usb 2-1: Product: syz [ 72.874942][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.884580][ T126] usb 2-1: Manufacturer: syz [ 72.894190][ T126] usb 2-1: SerialNumber: syz [ 72.899450][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.940056][ T4601] loop2: detected capacity change from 0 to 256 [ 72.959621][ T4601] exfat: Deprecated parameter 'namecase' [ 73.027056][ T4601] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 73.165860][ T126] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 73.188249][ T126] usb 2-1: No valid video chain found. [ 73.195234][ T126] usb 2-1: selecting invalid altsetting 0 [ 73.244748][ T4331] usb 4-1: USB disconnect, device number 2 [ 73.246740][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 73.259933][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 73.298153][ T126] usb 2-1: selecting invalid altsetting 0 [ 73.303941][ T126] usbtest: probe of 2-1:220.1 failed with error -22 [ 73.345733][ T126] usb 2-1: USB disconnect, device number 2 [ 73.912624][ T4629] loop0: detected capacity change from 0 to 512 [ 73.983378][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 74.017315][ T4609] loop2: detected capacity change from 0 to 32768 [ 74.044631][ T4609] (syz.2.95,4609,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.078456][ T4609] (syz.2.95,4609,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.136453][ T4609] JBD2: Ignoring recovery information on journal [ 74.252267][ T4609] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 74.295805][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 74.452646][ T4609] (syz.2.95,4609,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 74.481311][ T4609] (syz.2.95,4609,1):update_backups:188 ERROR: status = -12 [ 74.497483][ T4609] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 74.619610][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 74.727109][ T4331] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.801595][ T4660] sg_read: process 70 (syz.1.119) changed security contexts after opening file descriptor, this is not allowed. [ 74.927105][ T4331] usb 1-1: Using ep0 maxpacket: 8 [ 74.934328][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.970919][ T4331] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 74.992679][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.020211][ T4331] usb 1-1: config 0 descriptor?? [ 75.096159][ T4670] loop2: detected capacity change from 0 to 512 [ 75.170276][ T4670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.205476][ T4670] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.245861][ T4676] netlink: 332 bytes leftover after parsing attributes in process `syz.1.125'. [ 75.255912][ T4676] netlink: 196 bytes leftover after parsing attributes in process `syz.1.125'. [ 75.333494][ T4670] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.123: invalid size [ 75.357637][ T4670] EXT4-fs (loop2): Remounting filesystem read-only [ 75.386473][ T4680] loop1: detected capacity change from 0 to 256 [ 75.399564][ T4680] exfat: Deprecated parameter 'utf8' [ 75.400672][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 75.419298][ T4680] exfat: Deprecated parameter 'utf8' [ 75.460051][ T4331] arvo 0003:1E7D:30D4.0002: unexpected long global item [ 75.476059][ T4680] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 75.480431][ T4331] arvo 0003:1E7D:30D4.0002: parse failed [ 75.501859][ T4331] arvo: probe of 0003:1E7D:30D4.0002 failed with error -22 [ 75.567130][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.663413][ T4331] usb 1-1: USB disconnect, device number 2 [ 75.757155][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 75.764143][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.782843][ T4321] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 75.796837][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.809919][ T4321] usb 5-1: config 0 descriptor?? [ 76.049739][ T4691] loop1: detected capacity change from 0 to 32768 [ 76.069778][ T4691] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.132 (4691) [ 76.106048][ T4691] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 76.116846][ T4691] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 76.131576][ T4691] BTRFS info (device loop1): using free space tree [ 76.225923][ T4321] pantherlord 0003:0E8F:0003.0003: unknown main item tag 0x5 [ 76.235672][ T4321] pantherlord 0003:0E8F:0003.0003: item fetching failed at offset 3/5 [ 76.246457][ T4321] pantherlord 0003:0E8F:0003.0003: parse failed [ 76.253106][ T4321] pantherlord: probe of 0003:0E8F:0003.0003 failed with error -22 [ 76.322725][ T4691] BTRFS info (device loop1): enabling ssd optimizations [ 76.421034][ T4713] loop2: detected capacity change from 0 to 256 [ 76.428349][ T4321] usb 5-1: USB disconnect, device number 3 [ 76.459549][ T14] cfg80211: failed to load regulatory.db [ 76.557071][ T4713] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 76.763020][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 76.776033][ T4265] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 77.026175][ T4587] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop1 scanned by udevd (4587) [ 77.386059][ T4739] loop0: detected capacity change from 0 to 1764 [ 77.750936][ T4752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 77.812691][ T4755] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 78.251121][ T4773] loop3: detected capacity change from 0 to 256 [ 78.256910][ T4776] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 78.267446][ T4331] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.346409][ T4773] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 78.463978][ T4331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 78.498545][ T4331] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 78.518706][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.548978][ T4783] loop0: detected capacity change from 0 to 512 [ 78.558216][ T4331] usb 5-1: config 0 descriptor?? [ 78.596086][ T4783] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.639729][ T4783] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.663120][ T4783] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 78.769069][ T4783] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.817576][ T4783] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 78.830254][ T4783] EXT4-fs (loop0): 1 truncate cleaned up [ 78.850542][ T4783] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.916848][ T4783] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 79.019892][ T4331] elecom 0003:056E:00FC.0004: hidraw0: USB HID v1.01 Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 79.092910][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 79.120675][ T4798] loop1: detected capacity change from 0 to 512 [ 79.202084][ T7] usb 5-1: USB disconnect, device number 4 [ 79.258318][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.277407][ T4798] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.308798][ T4790] loop2: detected capacity change from 0 to 40427 [ 79.340703][ T4790] F2FS-fs (loop2): Invalid segment/section count (458776 != 24 * 1) [ 79.351884][ T4798] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.166: corrupted inode contents [ 79.367275][ T4790] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.387066][ T4798] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.166: mark_inode_dirty error [ 79.406454][ T4790] F2FS-fs (loop2): invalid crc value [ 79.409286][ T4799] fido_id[4799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 79.454821][ T4798] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.166: corrupted inode contents [ 79.487560][ T4790] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.503745][ T4805] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.166: corrupted inode contents [ 79.524999][ T4805] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.166: mark_inode_dirty error [ 79.550158][ T4805] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.166: corrupted inode contents [ 79.566609][ T4805] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.166: mark_inode_dirty error [ 79.581842][ T4805] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.166: corrupted inode contents [ 79.602094][ T4805] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.166: mark_inode_dirty error [ 79.623259][ T4790] F2FS-fs (loop2): recover fsync data on readonly fs [ 79.656747][ T4790] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 79.702990][ T4790] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 79.861693][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 80.088189][ T4820] loop1: detected capacity change from 0 to 256 [ 80.095256][ T4820] exfat: Deprecated parameter 'utf8' [ 80.134191][ T4820] exfat: Deprecated parameter 'namecase' [ 80.193845][ T4820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 80.307292][ T27] audit: type=1800 audit(1753823476.238:2): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.175" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 80.646490][ T4834] loop4: detected capacity change from 0 to 1024 [ 80.724345][ T4834] hfsplus: bad catalog entry type [ 80.816418][ T4818] loop3: detected capacity change from 0 to 32768 [ 80.830471][ T4361] hfsplus: b-tree write err: -5, ino 4 [ 80.901893][ T4818] JBD2: Ignoring recovery information on journal [ 81.018036][ T4824] loop0: detected capacity change from 0 to 40427 [ 81.040988][ T4824] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 81.066114][ T4824] F2FS-fs (loop0): invalid crc value [ 81.111127][ T4824] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.133068][ T4818] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.267288][ T4847] loop4: detected capacity change from 0 to 512 [ 81.290349][ T4824] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.374897][ T4847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.432104][ T4847] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.437657][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 81.452380][ T4271] syz-executor: attempt to access beyond end of device [ 81.452380][ T4271] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.535904][ T4847] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 81.626303][ T4847] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.186: mark_inode_dirty error [ 81.696871][ T4847] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 81.755009][ T4830] loop2: detected capacity change from 0 to 32768 [ 81.776442][ T4853] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 81.854351][ T4853] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.186: mark_inode_dirty error [ 81.889819][ T4830] XFS (loop2): Mounting V5 Filesystem [ 81.896349][ T4853] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 81.981318][ T4853] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.186: mark_inode_dirty error [ 82.004542][ T4830] XFS (loop2): Ending clean mount [ 82.023708][ T4853] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 82.048984][ T4830] XFS (loop2): Quotacheck needed: Please wait. [ 82.087496][ T4853] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.186: mark_inode_dirty error [ 82.196693][ T4830] XFS (loop2): Quotacheck: Done. [ 82.197989][ T4852] loop1: detected capacity change from 0 to 40427 [ 82.209571][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 82.238212][ T4852] F2FS-fs (loop1): invalid crc value [ 82.277222][ T4852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.448318][ T4852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.474711][ T4269] XFS (loop2): Unmounting Filesystem [ 82.682564][ T4855] loop3: detected capacity change from 0 to 32768 [ 82.721274][ T4265] syz-executor: attempt to access beyond end of device [ 82.721274][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.242998][ T4879] loop0: detected capacity change from 0 to 4096 [ 83.298978][ T4879] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 83.367314][ T4879] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 83.370298][ T4877] loop3: detected capacity change from 0 to 4096 [ 83.392300][ T4881] loop2: detected capacity change from 0 to 1024 [ 83.399987][ T4879] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 83.426366][ T4877] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 83.470829][ T4879] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.530518][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.577080][ T4879] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 83.597215][ T4879] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.605934][ T4879] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 83.626482][ T4879] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 83.648431][ T4879] ntfs: volume version 3.1. [ 83.760214][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 83.783146][ T4879] __ntfs_error: 12 callbacks suppressed [ 83.783160][ T4879] ntfs: (device loop0): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 84.090333][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 84.161638][ T4731] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.344696][ T4894] loop4: detected capacity change from 0 to 32768 [ 84.361306][ T4731] usb 3-1: Using ep0 maxpacket: 8 [ 84.382448][ T4731] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.397127][ T4731] usb 3-1: config 179 has no interface number 0 [ 84.403531][ T4731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.405405][ T4894] JBD2: Ignoring recovery information on journal [ 84.423232][ T4731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.456032][ T4731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.502665][ T4731] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.544920][ T4731] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.576746][ T4894] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 84.607192][ T4731] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.636666][ T4731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.657409][ T4890] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.845670][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 84.958102][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.966855][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.230806][ T7] usb 3-1: USB disconnect, device number 2 [ 85.230858][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.245274][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.445114][ T4909] loop0: detected capacity change from 0 to 32768 [ 85.727234][ T4909] XFS (loop0): Mounting V5 Filesystem [ 85.855001][ T4924] loop1: detected capacity change from 0 to 32768 [ 85.878202][ T4932] loop4: detected capacity change from 0 to 32768 [ 85.900183][ T4932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.909713][ T4932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.937189][ T4932] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 85.937189][ T4932] inode = 1 19 [ 85.937189][ T4932] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 85.955890][ T4932] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 85.964924][ T4932] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 85.974510][ T4932] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 85.983195][ T4932] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.990758][ T4932] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 85.999701][ T4932] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 86.006279][ T4932] gfs2: fsid=syz:syz.0: File system withdrawn [ 86.011465][ T4909] XFS (loop0): Ending clean mount [ 86.013222][ T4932] CPU: 1 PID: 4932 Comm: syz.4.215 Not tainted 6.1.147-syzkaller #0 [ 86.025375][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.035726][ T4932] Call Trace: [ 86.039005][ T4932] [ 86.041944][ T4932] dump_stack_lvl+0x168/0x22e [ 86.046628][ T4932] ? kobject_uevent_env+0x35f/0x8a0 [ 86.051846][ T4932] ? show_regs_print_info+0x12/0x12 [ 86.057148][ T4932] ? load_image+0x3b0/0x3b0 [ 86.061688][ T4932] ? kobject_uevent_env+0x35f/0x8a0 [ 86.066923][ T4932] gfs2_withdraw+0x143f/0x1780 [ 86.071704][ T4932] ? gfs2_lm+0x220/0x220 [ 86.076046][ T4932] ? gfs2_glock_nq+0xcf0/0x14e0 [ 86.080904][ T4932] ? gfs2_consist_inode_i+0xf1/0x110 [ 86.086280][ T4932] gfs2_jdesc_check+0x137/0x290 [ 86.091126][ T4932] init_journal+0xcad/0x2300 [ 86.095728][ T4932] ? format_decode+0xb3b/0x1330 [ 86.100665][ T4932] ? init_inodes+0xdb/0x320 [ 86.105280][ T4932] ? _compound_head+0x120/0x120 [ 86.110305][ T4932] ? vsnprintf+0x1905/0x1a00 [ 86.114899][ T4932] ? snprintf+0xd7/0x120 [ 86.119139][ T4932] ? init_inodes+0xdb/0x320 [ 86.123812][ T4932] ? vscnprintf+0x80/0x80 [ 86.128147][ T4932] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 86.133258][ T4932] init_inodes+0xdb/0x320 [ 86.137760][ T4932] gfs2_fill_super+0x1718/0x1f80 [ 86.142697][ T4932] ? gfs2_reconfigure+0xcd0/0xcd0 [ 86.147717][ T4932] ? init_locking+0xb8/0x200 [ 86.152307][ T4932] ? sb_set_blocksize+0xa5/0xe0 [ 86.157246][ T4932] get_tree_bdev+0x3f1/0x610 [ 86.161842][ T4932] ? gfs2_reconfigure+0xcd0/0xcd0 [ 86.166861][ T4932] gfs2_get_tree+0x4d/0x1e0 [ 86.171371][ T4932] vfs_get_tree+0x88/0x270 [ 86.175865][ T4932] do_new_mount+0x24a/0xa40 [ 86.180361][ T4932] __se_sys_mount+0x2d6/0x3c0 [ 86.185032][ T4932] ? __x64_sys_mount+0xc0/0xc0 [ 86.189795][ T4932] ? lockdep_hardirqs_on+0x94/0x140 [ 86.195073][ T4932] ? __x64_sys_mount+0x1c/0xc0 [ 86.199827][ T4932] do_syscall_64+0x4c/0xa0 [ 86.204233][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 86.208902][ T4932] ? clear_bhb_loop+0x60/0xb0 [ 86.213656][ T4932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.219546][ T4932] RIP: 0033:0x7f5ab099014a [ 86.223961][ T4932] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.243644][ T4932] RSP: 002b:00007f5ab176fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.252049][ T4932] RAX: ffffffffffffffda RBX: 00007f5ab176fef0 RCX: 00007f5ab099014a [ 86.260012][ T4932] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f5ab176feb0 [ 86.267976][ T4932] RBP: 0000200000000400 R08: 00007f5ab176fef0 R09: 0000000000200001 [ 86.275953][ T4932] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 86.284004][ T4932] R13: 00007f5ab176feb0 R14: 00000000000125bb R15: 0000200000000480 [ 86.292067][ T4932] [ 86.297660][ T4932] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 86.351306][ T4909] XFS (loop0): Quotacheck needed: Please wait. [ 86.361725][ T4924] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 86.437064][ T4909] XFS (loop0): Quotacheck: Done. [ 86.455817][ T4924] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.698190][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 86.753331][ T4271] XFS (loop0): Unmounting Filesystem [ 87.088743][ T4732] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.290711][ T4732] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.309869][ T4732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.318946][ T4732] usb 5-1: Product: syz [ 87.323270][ T4732] usb 5-1: Manufacturer: syz [ 87.328244][ T4732] usb 5-1: SerialNumber: syz [ 87.358690][ T4732] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.460766][ T4732] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.558119][ T4972] capability: warning: `syz.1.229' uses deprecated v2 capabilities in a way that may be insecure [ 87.584872][ T4973] loop0: detected capacity change from 0 to 512 [ 87.672286][ T4969] loop2: detected capacity change from 0 to 4096 [ 87.743139][ T4973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.757791][ T4973] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.888238][ T4973] EXT4-fs error (device loop0): ext4_xattr_block_find:1837: inode #15: comm syz.0.228: corrupted xattr block 19 [ 87.980749][ T4973] EXT4-fs (loop0): Remounting filesystem read-only [ 88.061618][ T4269] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 88.116070][ T7] usb 5-1: USB disconnect, device number 5 [ 88.125693][ T4269] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.145007][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 88.668032][ T27] audit: type=1326 audit(1753823484.598:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae2d8e9a9 code=0x7ffc0000 [ 88.747279][ T4732] usb 5-1: Service connection timeout for: 256 [ 88.754334][ T4732] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 88.800803][ T27] audit: type=1326 audit(1753823484.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffae2d8e9a9 code=0x7ffc0000 [ 88.818537][ T4732] ath9k_htc: Failed to initialize the device [ 88.891235][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 88.913453][ T27] audit: type=1326 audit(1753823484.648:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae2d8e9a9 code=0x7ffc0000 [ 88.953088][ T5021] capability: warning: `syz.2.248' uses 32-bit capabilities (legacy support in use) [ 89.015013][ T27] audit: type=1326 audit(1753823484.648:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ffae2d8e9a9 code=0x7ffc0000 [ 89.082271][ T27] audit: type=1326 audit(1753823484.648:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffae2d8e9a9 code=0x7ffc0000 [ 89.197120][ T4731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.387169][ T4731] usb 4-1: Using ep0 maxpacket: 16 [ 89.406246][ T4731] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 89.436019][ T4731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.464774][ T4731] usb 4-1: Product: syz [ 89.477076][ T4731] usb 4-1: Manufacturer: syz [ 89.487255][ T4731] usb 4-1: SerialNumber: syz [ 89.507673][ T4731] usb 4-1: config 0 descriptor?? [ 89.535314][ T4731] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 89.681544][ T5042] loop1: detected capacity change from 0 to 2048 [ 89.724991][ T4732] usb 4-1: USB disconnect, device number 3 [ 89.731561][ T5042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.919969][ T5024] loop0: detected capacity change from 0 to 40427 [ 89.930570][ T5027] loop4: detected capacity change from 0 to 32768 [ 89.994548][ T5024] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.072935][ T5027] XFS (loop4): Mounting V5 Filesystem [ 90.208323][ T5024] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.345714][ T5027] XFS (loop4): Ending clean mount [ 90.375273][ T5027] XFS (loop4): Quotacheck needed: Please wait. [ 90.402330][ T5024] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.540779][ T5027] XFS (loop4): Quotacheck: Done. [ 90.551980][ T5024] F2FS-fs (loop0): Found FS corruption, run fsck to fix. [ 90.734236][ T4278] XFS (loop4): Unmounting Filesystem [ 90.807513][ T4731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.963260][ T5087] tipc: Started in network mode [ 90.995303][ T5087] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.007620][ T4731] usb 2-1: Using ep0 maxpacket: 32 [ 91.015850][ T4731] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 91.055319][ T5087] tipc: Enabled bearer , priority 10 [ 91.056318][ T4731] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 91.090938][ T4731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 91.136017][ T4731] usb 2-1: config 1 has no interface number 0 [ 91.171568][ T4731] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.208808][ T4731] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 91.280670][ T4731] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 91.298565][ T4731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.372903][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 91.533964][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 91.556321][ T5101] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.628389][ T5105] loop3: detected capacity change from 0 to 512 [ 91.651515][ T5105] EXT4-fs: Ignoring removed i_version option [ 91.775193][ T5105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.820011][ T5105] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.896450][ T27] audit: type=1326 audit(1753823487.828:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa518e9a9 code=0x7ffc0000 [ 91.955680][ T4731] usb 2-1: USB disconnect, device number 3 [ 91.965334][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 91.966571][ T5113] loop4: detected capacity change from 0 to 2048 [ 92.019866][ T5118] loop2: detected capacity change from 0 to 4096 [ 92.037275][ T27] audit: type=1326 audit(1753823487.828:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7feaa518e9a9 code=0x7ffc0000 [ 92.090034][ T5113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.112546][ T5121] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.127956][ T27] audit: type=1326 audit(1753823487.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa518e9a9 code=0x7ffc0000 [ 92.135399][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 92.150127][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.169382][ T7] tipc: Node number set to 2886997162 [ 92.174100][ T27] audit: type=1800 audit(1753823488.108:11): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.275" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 92.381890][ T4331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.589280][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.612267][ T4331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 92.666200][ T4331] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 92.697494][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.721061][ T4331] usb 1-1: config 0 descriptor?? [ 92.975616][ T5145] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 93.010089][ T5145] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 93.030560][ T5149] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 93.125895][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.150651][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.163521][ T4331] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 93.175647][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.230271][ T5151] device bridge_slave_0 left promiscuous mode [ 93.238443][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.308690][ T5151] device bridge_slave_1 left promiscuous mode [ 93.317701][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.362253][ T4331] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 93.375271][ T4331] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 93.407230][ T5151] bond0: (slave bond_slave_0): Releasing backup interface [ 93.422116][ T4331] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -71 [ 93.440474][ T4331] usb 1-1: USB disconnect, device number 3 [ 93.488071][ T5151] bond0: (slave bond_slave_1): Releasing backup interface [ 93.590700][ T5151] team0: Port device team_slave_0 removed [ 93.642938][ T5151] team0: Port device team_slave_1 removed [ 93.658372][ T5160] fido_id[5160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.663884][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.723700][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.744891][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.774246][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.054761][ T5157] loop2: detected capacity change from 0 to 32768 [ 94.135724][ T5156] loop4: detected capacity change from 0 to 40427 [ 94.157457][ T5156] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 94.166110][ T5156] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.199646][ T5156] F2FS-fs (loop4): invalid crc value [ 94.230819][ T5157] XFS (loop2): Mounting V5 Filesystem [ 94.283526][ T5156] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.338654][ T5157] XFS (loop2): Ending clean mount [ 94.414191][ T5157] XFS (loop2): Quotacheck needed: Please wait. [ 94.494727][ T5157] XFS (loop2): Quotacheck: Done. [ 94.516901][ T5159] loop3: detected capacity change from 0 to 40427 [ 94.540054][ T5156] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.557111][ T5156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.579760][ T5159] F2FS-fs (loop3): Invalid log sectorsize (129) [ 94.591058][ T5156] syz.4.292: attempt to access beyond end of device [ 94.591058][ T5156] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.647203][ T5159] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.661297][ T5159] F2FS-fs (loop3): invalid crc value [ 94.723191][ T5159] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.725958][ T4269] XFS (loop2): Unmounting Filesystem [ 94.748974][ T5188] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.931237][ T5159] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.952619][ T5159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.005924][ T5183] f2fs_ckpt-7:3: attempt to access beyond end of device [ 95.005924][ T5183] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.138182][ T5177] loop1: detected capacity change from 0 to 32768 [ 95.157784][ T5177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.297 (5177) [ 95.251429][ T5177] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.276603][ T5177] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.304905][ T5177] BTRFS info (device loop1): force clearing of disk cache [ 95.325291][ T5177] BTRFS info (device loop1): enabling auto defrag [ 95.345520][ T5177] BTRFS info (device loop1): max_inline at 0 [ 95.361270][ T5177] BTRFS info (device loop1): enabling disk space caching [ 95.384976][ T5177] BTRFS info (device loop1): disk space caching is enabled [ 95.664771][ T5177] BTRFS info (device loop1): enabling ssd optimizations [ 95.689860][ T5177] BTRFS info (device loop1): rebuilding free space tree [ 95.864306][ T5177] BTRFS info (device loop1): disabling free space tree [ 95.877719][ T5177] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.919759][ T5177] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.386487][ T4265] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.420548][ T5235] program syz.0.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.833706][ T5228] loop3: detected capacity change from 0 to 32768 [ 97.051394][ T5228] XFS (loop3): Mounting V5 Filesystem [ 97.131778][ T5228] XFS (loop3): Ending clean mount [ 97.159511][ T27] audit: type=1800 audit(1753823493.098:12): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.302" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 97.210110][ T4270] XFS (loop3): Unmounting Filesystem [ 97.317850][ T5266] [U] ¦ [ 97.715098][ T5279] device bridge0 entered promiscuous mode [ 97.733742][ T5279] device macvlan2 entered promiscuous mode [ 97.900513][ T5276] loop1: detected capacity change from 0 to 32768 [ 97.924205][ T5258] loop4: detected capacity change from 0 to 32768 [ 97.933466][ T5258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.316 (5258) [ 97.954124][ T5276] XFS (loop1): Mounting V5 Filesystem [ 97.977626][ T5258] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.082723][ T5243] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 98.087429][ T5258] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 98.104726][ T5258] BTRFS info (device loop4): setting nodatacow, compression disabled [ 98.113433][ T5258] BTRFS info (device loop4): max_inline at 0 [ 98.119680][ T5258] BTRFS info (device loop4): enabling disk space caching [ 98.126831][ T5258] BTRFS info (device loop4): turning off barriers [ 98.135353][ T5258] BTRFS info (device loop4): turning on flush-on-commit [ 98.149173][ T5258] BTRFS info (device loop4): doing ref verification [ 98.164466][ T5243] XFS (loop1): Unmount and run xfs_repair [ 98.174678][ T5258] BTRFS info (device loop4): force clearing of disk cache [ 98.176368][ T5243] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 98.200941][ T5243] 00000000: 49 41 42 33 00 00 00 02 ff ff ff ff ff ff ff ff IAB3............ [ 98.212201][ T5243] 00000010: 00 00 00 00 00 00 00 18 00 00 00 01 00 00 00 10 ................ [ 98.221568][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 98.231411][ T5243] 00000030: 00 00 00 00 80 e5 f6 6c 00 00 04 20 00 00 00 37 .......l... ...7 [ 98.240996][ T5243] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 98.250521][ T5258] BTRFS info (device loop4): enabling ssd optimizations [ 98.258474][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.268012][ T5258] BTRFS info (device loop4): max_inline at 4096 [ 98.305643][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.322947][ T5258] BTRFS info (device loop4): disk space caching is enabled [ 98.336589][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.356503][ T5276] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74 [ 98.367943][ T5276] XFS (loop1): Failed to read root inode 0x420, error 117 [ 98.500922][ T5307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.329'. [ 98.607218][ T5307] tipc: Invalid UDP bearer configuration [ 98.607263][ T5307] tipc: Enabling of bearer rejected, failed to enable media [ 98.688393][ T5296] loop3: detected capacity change from 0 to 8192 [ 98.739279][ T5296] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.818518][ T5296] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 98.846090][ T5320] mmap: syz.0.331 (5320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.863950][ T5296] REISERFS (device loop3): using ordered data mode [ 98.878004][ T5258] BTRFS info (device loop4): rebuilding free space tree [ 98.879314][ T5296] reiserfs: using flush barriers [ 98.903930][ T5296] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.928722][ T5296] REISERFS (device loop3): checking transaction log (loop3) [ 98.929742][ T5258] BTRFS info (device loop4): disabling free space tree [ 98.941877][ T5296] REISERFS (device loop3): Using r5 hash to sort names [ 98.955495][ T5258] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.966195][ T5296] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 98.989732][ T5258] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.011861][ T5296] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.135565][ T5296] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 99.172323][ T5296] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 99.212107][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.223754][ T5296] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 100.198559][ T5361] loop2: detected capacity change from 0 to 1024 [ 100.283151][ T5361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.360412][ T5346] loop4: detected capacity change from 0 to 40427 [ 100.377730][ T5346] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 100.386239][ T5346] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 100.404651][ T5361] EXT4-fs: Ignoring sb option on remount [ 100.410990][ T5346] F2FS-fs (loop4): invalid crc value [ 100.420348][ T5361] EXT4-fs: Ignoring removed orlov option [ 100.426057][ T5361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.443079][ T5361] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 100.454243][ T5361] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 100.462160][ T5346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.478860][ T5361] EXT4-fs: can't change dax mount option while remounting [ 100.542932][ T5346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.583608][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 100.735366][ T4278] syz-executor: attempt to access beyond end of device [ 100.735366][ T4278] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 100.848297][ T5388] loop2: detected capacity change from 0 to 128 [ 100.881913][ T5389] loop0: detected capacity change from 0 to 2048 [ 100.911623][ T5389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.940311][ T5393] loop3: detected capacity change from 0 to 128 [ 100.966104][ T5388] process 'syz.2.361' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.976792][ T5388] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/70/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.977948][ T5393] EXT4-fs: Ignoring removed nobh option [ 101.412690][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 101.426430][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 101.466212][ T5408] loop1: detected capacity change from 0 to 512 [ 101.522061][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.541727][ T5408] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.591632][ T5393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.615948][ T5393] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.718842][ T5425] netlink: 364 bytes leftover after parsing attributes in process `syz.4.376'. [ 101.741487][ T5425] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 101.786269][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 101.877243][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 101.902031][ T5431] loop4: detected capacity change from 0 to 64 [ 101.942958][ T5430] device bridge0 entered promiscuous mode [ 101.951832][ T5433] loop0: detected capacity change from 0 to 256 [ 101.969609][ T5433] exfat: Deprecated parameter 'utf8' [ 101.975118][ T5433] exfat: Deprecated parameter 'namecase' [ 101.984818][ T5430] device macvlan2 entered promiscuous mode [ 101.996155][ T5436] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 101.997795][ T5433] exfat: Deprecated parameter 'namecase' [ 102.022960][ T5433] exfat: Deprecated parameter 'utf8' [ 102.035618][ T5437] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 102.080356][ T5433] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 102.119493][ T5437] team0: Port device netdevsim0 added [ 102.167272][ T5438] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 102.239713][ T5438] team0: Port device netdevsim0 removed [ 102.270840][ T5438] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 102.485540][ T5457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 102.581855][ T5461] loop2: detected capacity change from 0 to 8192 [ 102.603024][ T5461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.641582][ T5461] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 102.685694][ T5461] REISERFS (device loop2): using ordered data mode [ 102.693684][ T5461] reiserfs: using flush barriers [ 102.696440][ T5470] loop0: detected capacity change from 0 to 512 [ 102.710493][ T5461] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.735801][ T5461] REISERFS (device loop2): checking transaction log (loop2) [ 102.745012][ T5470] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 102.753464][ T4723] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.773911][ T5470] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 102.790911][ T5470] EXT4-fs (loop0): 1 truncate cleaned up [ 102.799338][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.845728][ T5470] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 4: comm syz.0.398: lblock 0 mapped to illegal pblock 4 (length 1) [ 102.877326][ T5470] EXT4-fs (loop0): Remounting filesystem read-only [ 102.886656][ T5461] REISERFS (device loop2): Using tea hash to sort names [ 102.900867][ T5461] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.915040][ T27] audit: type=1326 audit(1753823498.858:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab098e9a9 code=0x7ffc0000 [ 102.965669][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 102.967987][ T27] audit: type=1326 audit(1753823498.878:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5ab098e9a9 code=0x7ffc0000 [ 102.994224][ T4723] usb 2-1: Using ep0 maxpacket: 16 [ 103.020155][ T4723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.048409][ T4723] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 103.062632][ T4723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.071676][ T27] audit: type=1326 audit(1753823498.878:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab098e9a9 code=0x7ffc0000 [ 103.094917][ T5479] vivid-000: disconnect [ 103.111704][ T4723] usb 2-1: config 0 descriptor?? [ 103.121814][ T27] audit: type=1326 audit(1753823498.888:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5ab098e9a9 code=0x7ffc0000 [ 103.126028][ T5478] vivid-000: reconnect [ 103.145316][ T27] audit: type=1326 audit(1753823498.888:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab098e9a9 code=0x7ffc0000 [ 103.190556][ T5483] loop3: detected capacity change from 0 to 1024 [ 103.493610][ T5495] can0: slcan on ptm0. [ 103.533093][ T4723] vrc2 0003:07C0:1125.0006: fixing up VRC-2 report descriptor [ 103.564700][ T4723] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0006/input/input5 [ 103.602945][ T5493] can0 (unregistered): slcan off ptm0. [ 103.608408][ T4723] vrc2 0003:07C0:1125.0006: input,hidraw0: USB HID v0.05 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 103.792859][ T7] usb 2-1: USB disconnect, device number 4 [ 104.676867][ T5541] Cannot find add_set index 1 as target [ 105.183841][ T5561] program syz.2.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.257399][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.447495][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 105.463477][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.497105][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 105.506299][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.543116][ T7] usb 1-1: config 0 descriptor?? [ 105.568103][ T4723] kernel write not supported for file /media0 (pid: 4723 comm: kworker/1:9) [ 105.978857][ T7] vrc2 0003:07C0:1125.0007: fixing up VRC-2 report descriptor [ 105.995194][ T5567] loop1: detected capacity change from 0 to 40427 [ 106.019327][ T7] input: HID 07c0:1125 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:07C0:1125.0007/input/input6 [ 106.045222][ T5567] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.064871][ T5567] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.085988][ T5567] F2FS-fs (loop1): invalid crc value [ 106.123503][ T5567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.136461][ T7] vrc2 0003:07C0:1125.0007: input,hidraw0: USB HID v0.05 Joystick [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 106.200186][ T7] usb 1-1: USB disconnect, device number 4 [ 106.261265][ T5590] loop3: detected capacity change from 0 to 4096 [ 106.270277][ T5567] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.282780][ T5567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.298985][ T5590] ntfs3: loop3: ino=3, Correct links count -> 2. [ 106.363301][ T5590] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.422241][ T5590] ntfs3: loop3: failed to convert "0000" to iso8859-9 [ 106.477771][ T5590] ntfs3: loop3: failed to convert name for inode 1e. [ 106.970001][ T5609] loop0: detected capacity change from 0 to 2048 [ 107.004681][ T4279] Bluetooth: hci0: hardware error 0x00 [ 107.028872][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.156498][ T5600] loop4: detected capacity change from 0 to 32768 [ 107.204498][ T5600] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 107.383544][ T5607] loop2: detected capacity change from 0 to 40427 [ 107.400041][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 107.441459][ T5607] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.453213][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 107.514548][ T5607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 107.537309][ T5607] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.650658][ T4269] syz-executor: attempt to access beyond end of device [ 107.650658][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.697721][ T4331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.846696][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 107.887753][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 107.894700][ T4331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.921433][ T4331] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 107.947805][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.965945][ T4331] usb 2-1: config 0 descriptor?? [ 108.000329][ T5645] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 108.123214][ T5649] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 108.406162][ T4331] semitek 0003:1EA7:0907.0008: item fetching failed at offset 0/2 [ 108.435542][ T4331] semitek: probe of 0003:1EA7:0907.0008 failed with error -22 [ 108.606048][ T4723] usb 2-1: USB disconnect, device number 5 [ 108.710400][ T5653] loop3: detected capacity change from 0 to 32768 [ 108.730369][ T5653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.478 (5653) [ 108.765834][ T5653] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.796864][ T5653] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 108.827335][ T5653] BTRFS info (device loop3): enabling auto defrag [ 108.833817][ T5653] BTRFS info (device loop3): doing ref verification [ 108.847072][ T5653] BTRFS info (device loop3): max_inline at 0 [ 108.867039][ T5653] BTRFS info (device loop3): force clearing of disk cache [ 108.877295][ T5653] BTRFS info (device loop3): turning on sync discard [ 108.884031][ T5653] BTRFS info (device loop3): using free space tree [ 109.048585][ T5653] BTRFS info (device loop3): enabling ssd optimizations [ 109.076291][ T4279] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 109.086890][ T5670] loop0: detected capacity change from 0 to 32768 [ 109.096016][ T5653] BTRFS info (device loop3): rebuilding free space tree [ 109.250325][ T5670] XFS (loop0): Mounting V5 Filesystem [ 109.319365][ T4270] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.404102][ T5670] XFS (loop0): Ending clean mount [ 109.490338][ T5672] loop4: detected capacity change from 0 to 40427 [ 109.520079][ T5672] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 109.528014][ T5672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.569720][ T5672] F2FS-fs (loop4): invalid crc value [ 109.660571][ T5707] loop2: detected capacity change from 0 to 764 [ 109.667611][ T5672] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.715724][ T5670] XFS (loop0): Quotacheck needed: Please wait. [ 109.722878][ T5707] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 109.733474][ T5672] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.748972][ T5672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.783929][ T5670] XFS (loop0): Quotacheck: Done. [ 109.929468][ T4271] XFS (loop0): Unmounting Filesystem [ 110.106698][ T5715] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 110.935591][ T5717] loop4: detected capacity change from 0 to 32768 [ 110.963685][ T5717] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.493 (5717) [ 111.004560][ T5717] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 111.035303][ T5717] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 111.060450][ T5717] BTRFS info (device loop4): using free space tree [ 111.212343][ T5730] loop0: detected capacity change from 0 to 32768 [ 111.219733][ T5730] XFS: noikeep mount option is deprecated. [ 111.281396][ T5730] XFS (loop0): Mounting V5 Filesystem [ 111.297215][ T5717] BTRFS info (device loop4): enabling ssd optimizations [ 111.448508][ T5730] XFS (loop0): Ending clean mount [ 111.484059][ T5730] XFS (loop0): Quotacheck needed: Please wait. [ 111.556217][ T5730] XFS (loop0): Quotacheck: Done. [ 111.559067][ T4278] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 111.678884][ T5764] loop3: detected capacity change from 0 to 256 [ 111.816023][ T4271] XFS (loop0): Unmounting Filesystem [ 111.900589][ T5764] FAT-fs (loop3): Directory bread(block 64) failed [ 111.909070][ T5764] FAT-fs (loop3): Directory bread(block 65) failed [ 111.915862][ T5764] FAT-fs (loop3): Directory bread(block 66) failed [ 111.934926][ T5764] FAT-fs (loop3): Directory bread(block 67) failed [ 111.977217][ T5764] FAT-fs (loop3): Directory bread(block 68) failed [ 111.993140][ T5764] FAT-fs (loop3): Directory bread(block 69) failed [ 112.009511][ T5764] FAT-fs (loop3): Directory bread(block 70) failed [ 112.016113][ T5764] FAT-fs (loop3): Directory bread(block 71) failed [ 112.038169][ T5762] loop2: detected capacity change from 0 to 40427 [ 112.045877][ T5764] FAT-fs (loop3): Directory bread(block 72) failed [ 112.053123][ T5764] FAT-fs (loop3): Directory bread(block 73) failed [ 112.077207][ T5762] F2FS-fs (loop2): Invalid log sectorsize (129) [ 112.083570][ T5762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.124141][ T5762] F2FS-fs (loop2): invalid crc value [ 112.162462][ T5762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.249469][ T5762] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.266223][ T5762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.391901][ T5769] f2fs_ckpt-7:2: attempt to access beyond end of device [ 112.391901][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.685978][ T5773] loop0: detected capacity change from 0 to 40427 [ 112.700481][ T5773] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 112.712434][ T5773] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 112.724815][ T5773] F2FS-fs (loop0): invalid crc value [ 112.755385][ T5773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.822883][ T5773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.852976][ T5766] loop1: detected capacity change from 0 to 40427 [ 112.867357][ T5766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.881814][ T5766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.898437][ T5766] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 112.932193][ T5766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.969328][ T4271] syz-executor: attempt to access beyond end of device [ 112.969328][ T4271] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 113.037946][ T5766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.049134][ T5766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.101739][ T5766] F2FS-fs (loop1): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 113.261359][ T5802] sp0: Synchronizing with TNC [ 113.688247][ T5813] loop1: detected capacity change from 0 to 16 [ 113.746186][ T5813] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.941941][ T5805] loop3: detected capacity change from 0 to 32768 [ 114.009895][ T5805] read_mapping_page failed! [ 114.033321][ T5803] loop2: detected capacity change from 0 to 40427 [ 114.040335][ T5805] ERROR: (device loop3): txCommit: [ 114.040335][ T5805] [ 114.057059][ T5805] ERROR: (device loop3): remounting filesystem as read-only [ 114.068483][ T5803] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 114.086946][ T5803] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.127140][ T5803] F2FS-fs (loop2): invalid crc value [ 114.142243][ T5819] loop1: detected capacity change from 0 to 8192 [ 114.166265][ T5803] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.206119][ T5819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.262741][ T5819] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 114.328224][ T5819] REISERFS (device loop1): using ordered data mode [ 114.334791][ T5819] reiserfs: using flush barriers [ 114.367618][ T5803] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.382148][ T5803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.411520][ T5819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.477373][ T5819] REISERFS (device loop1): checking transaction log (loop1) [ 114.493651][ T5819] REISERFS (device loop1): Using r5 hash to sort names [ 114.501624][ T5803] syz.2.519: attempt to access beyond end of device [ 114.501624][ T5803] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.517408][ T5819] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.547138][ T5819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 115.116879][ T5833] loop4: detected capacity change from 0 to 32768 [ 115.183833][ T5833] JBD2: Ignoring recovery information on journal [ 115.229022][ T5856] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 115.238504][ T5854] futex_wake_op: syz.2.533 tries to shift op by -1; fix this program [ 115.264353][ T5858] loop1: detected capacity change from 0 to 256 [ 115.282098][ T5833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.355349][ T5861] loop3: detected capacity change from 0 to 512 [ 115.386316][ T5858] FAT-fs (loop1): Directory bread(block 64) failed [ 115.406931][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 115.419087][ T5858] FAT-fs (loop1): Directory bread(block 65) failed [ 115.454730][ T5870] loop2: detected capacity change from 0 to 256 [ 115.458672][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.463398][ T5858] FAT-fs (loop1): Directory bread(block 66) failed [ 115.478597][ T5858] FAT-fs (loop1): Directory bread(block 67) failed [ 115.485209][ T5858] FAT-fs (loop1): Directory bread(block 68) failed [ 115.492424][ T5858] FAT-fs (loop1): Directory bread(block 69) failed [ 115.499555][ T5858] FAT-fs (loop1): Directory bread(block 70) failed [ 115.506895][ T5858] FAT-fs (loop1): Directory bread(block 71) failed [ 115.513841][ T5861] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.525508][ T5858] FAT-fs (loop1): Directory bread(block 72) failed [ 115.532538][ T5858] FAT-fs (loop1): Directory bread(block 73) failed [ 115.668380][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 116.007504][ T4331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.111647][ T5866] loop0: detected capacity change from 0 to 40427 [ 116.137647][ T5866] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 116.166012][ T5866] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.190453][ T5866] F2FS-fs (loop0): invalid crc value [ 116.197701][ T4331] usb 3-1: Using ep0 maxpacket: 16 [ 116.204619][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.232681][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.244188][ T5866] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.277480][ T4331] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 116.295417][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.333132][ T4331] usb 3-1: config 0 descriptor?? [ 116.360653][ T5866] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.378584][ T5866] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.472839][ T5866] syz.0.544: attempt to access beyond end of device [ 116.472839][ T5866] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.764721][ T4331] nzxt-kraken2 0003:1E71:170E.0009: unbalanced delimiter at end of report description [ 116.789712][ T4331] nzxt-kraken2 0003:1E71:170E.0009: hid parse failed with -22 [ 116.817269][ T4331] nzxt-kraken2: probe of 0003:1E71:170E.0009 failed with error -22 [ 116.854677][ T5898] loop1: detected capacity change from 0 to 32768 [ 116.885267][ T5898] XFS (loop1): Mounting V5 Filesystem [ 116.936466][ T5898] XFS (loop1): Ending clean mount [ 116.964863][ T4331] usb 3-1: USB disconnect, device number 3 [ 116.990941][ T27] audit: type=1800 audit(1753823512.928:18): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.558" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 117.071560][ T4265] XFS (loop1): Unmounting Filesystem [ 117.192902][ T5905] loop3: detected capacity change from 0 to 32768 [ 117.292380][ T5905] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.345031][ T5905] (syz.3.563,5905,1):ocfs2_get_suballoc_slot_bit:2716 ERROR: invalid inode 139 requested [ 117.401942][ T5905] (syz.3.563,5905,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -22 [ 117.425340][ T5905] (syz.3.563,5905,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -22 [ 117.468452][ T5905] (syz.3.563,5905,1):ocfs2_test_inode_bit:2864 ERROR: status = -22 [ 117.583688][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 117.776919][ T5923] loop1: detected capacity change from 0 to 32768 [ 117.820437][ T5923] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 117.875314][ T5933] loop4: detected capacity change from 0 to 4096 [ 117.890127][ T5923] (syz.1.564,5923,0):ocfs2_clear_journal_error:1114 ERROR: File system error -318767104 recorded in journal 0. [ 117.908573][ T5923] (syz.1.564,5923,1):ocfs2_clear_journal_error:1116 ERROR: File system on device loop1 needs checking. [ 117.924870][ T5933] ntfs3: loop4: ino=3, Correct links count -> 2. [ 117.934989][ T5923] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 118.025310][ T5933] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 118.052154][ T5923] (syz.1.564,5923,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 118.070154][ T5923] (syz.1.564,5923,1):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 118.109963][ T5933] ntfs3: loop4: failed to convert "0000" to iso8859-9 [ 118.115668][ T5941] loop3: detected capacity change from 0 to 4096 [ 118.134258][ T5933] ntfs3: loop4: failed to convert name for inode 1e. [ 118.181337][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 118.381450][ T5948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.577'. [ 118.839086][ T5975] loop1: detected capacity change from 0 to 4096 [ 118.861522][ T5975] ntfs3: loop1: ino=3, Correct links count -> 2. [ 118.893953][ T5973] loop0: detected capacity change from 0 to 4096 [ 118.912822][ T5973] ntfs3: loop0: ino=3, Correct links count -> 2. [ 118.922237][ T5975] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 118.959067][ T5975] ntfs3: loop1: failed to convert "0080" to cp932 [ 118.969286][ T5975] ntfs3: loop1: failed to convert name for inode 1e. [ 118.976430][ T5973] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.035435][ T5973] ntfs3: loop0: failed to convert "0000" to iso8859-9 [ 119.055690][ T5973] ntfs3: loop0: failed to convert name for inode 1e. [ 119.169902][ T5985] loop1: detected capacity change from 0 to 256 [ 119.212726][ T5985] exFAT-fs (loop1): failed to load upcase table (idx : 0x000102ea, chksum : 0x657c5c7e, utbl_chksum : 0xe619d30d) [ 119.243145][ T5990] mkiss: ax0: crc mode is auto. [ 119.272583][ T5985] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 119.291672][ T5985] exFAT-fs (loop1): Filesystem has been set read-only [ 119.403581][ T5994] loop3: detected capacity change from 0 to 256 [ 119.434169][ T5994] exfat: Deprecated parameter 'utf8' [ 119.439957][ T5994] exfat: Deprecated parameter 'namecase' [ 119.445636][ T5994] exfat: Deprecated parameter 'namecase' [ 119.482785][ T5994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 119.599217][ T6001] loop1: detected capacity change from 0 to 512 [ 119.620783][ T6001] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.600: bad orphan inode 13 [ 119.639823][ T6001] ext4_test_bit(bit=12, block=4) = 1 [ 119.645261][ T6001] is_bad_inode(inode)=0 [ 119.655086][ T6001] NEXT_ORPHAN(inode)=0 [ 119.660459][ T6001] max_ino=32 [ 119.664634][ T6001] i_nlink=1 [ 119.674629][ T6001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.688394][ T6001] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.600: Unrecognised inode hash code 20 [ 119.693166][ T6004] tipc: Started in network mode [ 119.700766][ T6001] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.600: Corrupt directory, running e2fsck is recommended [ 119.719402][ T6001] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.600: Unrecognised inode hash code 20 [ 119.733059][ T6001] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.600: Corrupt directory, running e2fsck is recommended [ 119.747737][ T6004] tipc: Node identity 030000000000000003, cluster identity 4711 [ 119.850170][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 119.885658][ T6013] sp0: Synchronizing with TNC [ 120.002134][ T6015] loop1: detected capacity change from 0 to 4096 [ 120.013362][ T6015] ntfs3: loop1: ino=3, Correct links count -> 2. [ 120.040992][ T6018] loop4: detected capacity change from 0 to 2048 [ 120.046720][ T6015] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.067260][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.102246][ T6022] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.118668][ T6015] ntfs3: loop1: failed to convert "0000" to iso8859-9 [ 120.137581][ T6015] ntfs3: loop1: failed to convert name for inode 1e. [ 120.269787][ T4323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.302564][ T4323] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.312489][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.323481][ T4323] usb 1-1: Product: syz [ 120.328051][ T4323] usb 1-1: Manufacturer: syz [ 120.332675][ T4323] usb 1-1: SerialNumber: syz [ 120.346255][ T4323] usb 1-1: config 0 descriptor?? [ 120.347694][ T4331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.421126][ T4323] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 120.548794][ T4331] usb 3-1: Using ep0 maxpacket: 16 [ 120.558165][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.564221][ T4322] usb 1-1: USB disconnect, device number 5 [ 120.577720][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.593319][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.600153][ T4323] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.605413][ T4331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.629215][ T4331] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.674153][ T4331] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.688275][ T4331] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.708719][ T4331] usb 3-1: Manufacturer: syz [ 120.720073][ T4331] usb 3-1: config 0 descriptor?? [ 120.747315][ T4279] Bluetooth: hci4: command 0x0405 tx timeout [ 120.789140][ T4323] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.800372][ T4323] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.811992][ T4323] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.827546][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.839426][ T6031] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 121.039613][ T4331] rc_core: IR keymap rc-hauppauge not found [ 121.045808][ T4331] Registered IR keymap rc-empty [ 121.081993][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.115133][ T4323] usb 2-1: USB disconnect, device number 6 [ 121.117818][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.169367][ T4331] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.184847][ T4331] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 121.201952][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.237989][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.267865][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.297805][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.328436][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.357428][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.388503][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.417449][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.448845][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.477362][ T4331] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 121.508498][ T4331] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 121.516507][ T4331] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 121.528860][ T4331] usb 3-1: USB disconnect, device number 4 [ 122.031196][ T6058] hpfs: bad mount options. [ 122.189852][ T6065] loop2: detected capacity change from 0 to 4096 [ 122.211766][ T6072] loop1: detected capacity change from 0 to 512 [ 122.223521][ T6065] ntfs3: loop2: ino=3, Correct links count -> 2. [ 122.238103][ T6072] EXT4-fs: Invalid uid value -1 [ 122.273870][ T6065] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 122.336546][ T6065] ntfs3: loop2: failed to convert "0000" to iso8859-9 [ 122.378459][ T6065] ntfs3: loop2: failed to convert name for inode 1e. [ 122.745128][ T6089] loop2: detected capacity change from 0 to 512 [ 122.776612][ T6089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.803817][ T6089] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 122.822243][ T6089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 122.831575][ T6089] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 122.842087][ T6089] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 122.851064][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.983599][ T6073] loop3: detected capacity change from 0 to 32768 [ 123.024346][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 123.036781][ T6073] XFS (loop3): Mounting V5 Filesystem [ 123.071017][ T6106] loop4: detected capacity change from 0 to 2048 [ 123.081978][ T6102] loop1: detected capacity change from 0 to 1024 [ 123.091563][ T6106] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.145091][ T6112] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.168017][ T27] audit: type=1800 audit(1753823519.108:19): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.644" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 123.180547][ T6073] XFS (loop3): Ending clean mount [ 123.323323][ T4270] XFS (loop3): Unmounting Filesystem [ 123.436455][ T6119] loop4: detected capacity change from 0 to 4096 [ 123.463197][ T6119] ntfs3: loop4: ino=3, Correct links count -> 2. [ 123.522757][ T6119] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 123.573815][ T6119] ntfs3: loop4: failed to convert "0000" to iso8859-9 [ 123.587747][ T6119] ntfs3: loop4: failed to convert name for inode 1e. [ 123.687201][ T4323] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.703323][ T6129] loop3: detected capacity change from 0 to 8 [ 123.710548][ T4724] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.728194][ T6129] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 123.908095][ T4724] usb 3-1: Using ep0 maxpacket: 8 [ 123.914470][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.936697][ T4323] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.953890][ T4724] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 123.970212][ T4724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.979111][ T4323] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.989488][ T4724] usb 3-1: Product: syz [ 123.993666][ T4724] usb 3-1: Manufacturer: syz [ 123.998485][ T4724] usb 3-1: SerialNumber: syz [ 124.004356][ T4323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.018162][ T4724] usb 3-1: config 0 descriptor?? [ 124.023295][ T4323] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 124.046952][ T4724] gspca_main: se401-2.14.0 probing 047d:5003 [ 124.053200][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.071265][ T4323] usb 2-1: config 0 descriptor?? [ 124.112664][ T6144] loop4: detected capacity change from 0 to 512 [ 124.181924][ T6144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.201503][ T6144] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.278410][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 124.443877][ T4724] gspca_se401: Wrong descriptor type [ 124.496735][ T4323] kye 0003:0458:5015.000A: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 124.529324][ T4323] kye 0003:0458:5015.000A: tablet-enabling feature report not found [ 124.542269][ T4323] kye 0003:0458:5015.000A: tablet enabling failed [ 124.633252][ T6163] use of bytesused == 0 is deprecated and will be removed in the future, [ 124.650454][ T4323] usb 3-1: USB disconnect, device number 5 [ 124.664961][ T6165] loop3: detected capacity change from 0 to 512 [ 124.684200][ T6163] use the actual size instead. [ 124.690242][ T6165] EXT4-fs: Ignoring removed oldalloc option [ 124.696220][ T4331] usb 2-1: USB disconnect, device number 7 [ 124.703857][ T6165] EXT4-fs: Ignoring removed bh option [ 124.743228][ T6165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 124.756620][ T6165] System zones: 1-12 [ 124.771651][ T6165] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.669: corrupted in-inode xattr [ 124.784844][ T6165] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.669: couldn't read orphan inode 15 (err -117) [ 124.806920][ T6165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.902933][ T6159] loop0: detected capacity change from 0 to 32768 [ 124.964551][ T6159] XFS (loop0): Mounting V5 Filesystem [ 124.989317][ T6178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.672'. [ 125.035961][ T6159] XFS (loop0): Ending clean mount [ 125.046193][ T6159] XFS (loop0): Quotacheck needed: Please wait. [ 125.116785][ T6159] XFS (loop0): Quotacheck: Done. [ 125.206615][ T4271] XFS (loop0): Unmounting Filesystem [ 125.429040][ T6184] loop2: detected capacity change from 0 to 4096 [ 125.447065][ T6184] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 125.582127][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 126.017314][ T6207] loop3: detected capacity change from 0 to 4096 [ 126.085249][ T6207] ntfs: volume version 3.1. [ 126.114073][ T6207] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 126.129645][ T6216] loop4: detected capacity change from 0 to 512 [ 126.152499][ T6207] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 126.158614][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.189494][ T6216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.235242][ T6216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.278976][ T6216] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.369598][ T6216] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 126.421363][ T6214] loop0: detected capacity change from 0 to 32768 [ 126.439285][ T6214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.689 (6214) [ 126.479548][ T6214] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.494170][ T6199] loop2: detected capacity change from 0 to 32768 [ 126.495175][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 126.506636][ T6214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.524537][ T6214] BTRFS info (device loop0): metadata ratio 2 [ 126.554132][ T6214] BTRFS info (device loop0): allowing degraded mounts [ 126.587217][ T6214] BTRFS info (device loop0): force zlib compression, level 3 [ 126.625159][ T6214] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.633106][ T6199] XFS (loop2): Mounting V5 Filesystem [ 126.643137][ T6214] BTRFS info (device loop0): use zstd compression, level 3 [ 126.650788][ T6214] BTRFS info (device loop0): force clearing of disk cache [ 126.658246][ T6214] BTRFS info (device loop0): allowing degraded mounts [ 126.666447][ T6214] BTRFS info (device loop0): max_inline at 0 [ 126.672877][ T6214] BTRFS info (device loop0): using free space tree [ 126.720813][ T6248] loop3: detected capacity change from 0 to 128 [ 126.722577][ T6199] XFS (loop2): Ending clean mount [ 126.754248][ T6248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.781950][ T6199] XFS (loop2): Quotacheck needed: Please wait. [ 126.803526][ T6248] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.871930][ T6199] XFS (loop2): Quotacheck: Done. [ 126.891601][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 126.922449][ T6214] BTRFS info (device loop0): enabling ssd optimizations [ 126.963533][ T6214] BTRFS info (device loop0): rebuilding free space tree [ 126.979594][ T6270] loop1: detected capacity change from 0 to 128 [ 127.043215][ T6272] loop4: detected capacity change from 0 to 8192 [ 127.063159][ T4269] XFS (loop2): Unmounting Filesystem [ 127.068072][ T6270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.075568][ T6272] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.099365][ T6272] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 127.102295][ T6270] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.109685][ T6272] REISERFS (device loop4): using ordered data mode [ 127.126352][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.138491][ T6272] reiserfs: using flush barriers [ 127.166538][ T6272] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.185099][ T6272] REISERFS (device loop4): checking transaction log (loop4) [ 127.223864][ T6272] REISERFS (device loop4): Using r5 hash to sort names [ 127.231927][ T6272] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 127.258544][ T6272] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 127.415926][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 127.504787][ T6278] loop3: detected capacity change from 0 to 8192 [ 127.532532][ T6278] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.554404][ T6278] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 127.568474][ T6278] REISERFS (device loop3): using ordered data mode [ 127.575222][ T6278] reiserfs: using flush barriers [ 127.637548][ T6278] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.717808][ T6278] REISERFS (device loop3): checking transaction log (loop3) [ 127.731792][ T6278] REISERFS (device loop3): Using r5 hash to sort names [ 127.748723][ T6278] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 127.780581][ T6289] program syz.1.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.798449][ T6278] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 127.816631][ T6293] loop0: detected capacity change from 0 to 64 [ 127.857519][ T6293] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 128.412170][ T6314] loop2: detected capacity change from 0 to 8192 [ 128.426733][ T6314] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.467683][ T6314] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 128.477946][ T6314] REISERFS (device loop2): using ordered data mode [ 128.484878][ T6314] reiserfs: using flush barriers [ 128.496652][ T6314] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.579547][ T6314] REISERFS (device loop2): checking transaction log (loop2) [ 128.637815][ T6314] REISERFS (device loop2): Using r5 hash to sort names [ 128.672480][ T6314] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 128.702366][ T6314] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 128.807477][ T4331] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.009527][ T4331] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.027520][ T4331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.063731][ T6348] loop2: detected capacity change from 0 to 256 [ 129.069659][ T4331] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.092527][ T6348] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 129.118828][ T6350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.736'. [ 129.122142][ T4331] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.162602][ T4331] usb 5-1: Manufacturer: syz [ 129.181371][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 129.191595][ T4331] usb 5-1: config 0 descriptor?? [ 129.360841][ T6337] loop3: detected capacity change from 0 to 40427 [ 129.370913][ T4331] rc_core: IR keymap rc-hauppauge not found [ 129.376876][ T4331] Registered IR keymap rc-empty [ 129.388211][ T4331] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 129.416535][ T4331] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 129.445185][ T6337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.468558][ T6366] loop1: detected capacity change from 0 to 512 [ 129.482615][ T6366] EXT4-fs: Ignoring removed i_version option [ 129.513007][ T6366] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.742: corrupted in-inode xattr [ 129.516035][ T6337] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 129.541927][ T6366] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.742: couldn't read orphan inode 15 (err -117) [ 129.555049][ T6337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.572218][ T6366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.613483][ T4270] syz-executor: attempt to access beyond end of device [ 129.613483][ T4270] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.630949][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 129.700831][ T6375] loop2: detected capacity change from 0 to 256 [ 129.722887][ T6375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 129.867906][ T4328] usb 5-1: USB disconnect, device number 6 [ 130.011244][ T6385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 130.525135][ T6387] loop2: detected capacity change from 0 to 32768 [ 130.577803][ T6387] XFS (loop2): Mounting V5 Filesystem [ 130.585585][ T6419] loop4: detected capacity change from 0 to 64 [ 130.601853][ T6419] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 130.663016][ T6387] XFS (loop2): Ending clean mount [ 130.672587][ T6387] XFS (loop2): Quotacheck needed: Please wait. [ 130.737753][ T6387] XFS (loop2): Quotacheck: Done. [ 130.754558][ T27] audit: type=1800 audit(1753823526.688:20): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.751" name="bus" dev="loop2" ino=9290 res=0 errno=0 [ 130.766585][ T6428] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 130.824900][ T4269] XFS (loop2): Unmounting Filesystem [ 131.306562][ T6448] loop3: detected capacity change from 0 to 256 [ 131.496597][ T6456] loop3: detected capacity change from 0 to 164 [ 131.645477][ T6464] loop0: detected capacity change from 0 to 256 [ 131.704690][ T6464] FAT-fs (loop0): Directory bread(block 64) failed [ 131.725315][ T6464] FAT-fs (loop0): Directory bread(block 65) failed [ 131.740049][ T6464] FAT-fs (loop0): Directory bread(block 66) failed [ 131.757604][ T6464] FAT-fs (loop0): Directory bread(block 67) failed [ 131.764359][ T6464] FAT-fs (loop0): Directory bread(block 68) failed [ 131.776612][ T6464] FAT-fs (loop0): Directory bread(block 69) failed [ 131.785150][ T6464] FAT-fs (loop0): Directory bread(block 70) failed [ 131.793750][ T6464] FAT-fs (loop0): Directory bread(block 71) failed [ 131.802408][ T6464] FAT-fs (loop0): Directory bread(block 72) failed [ 131.810517][ T6464] FAT-fs (loop0): Directory bread(block 73) failed [ 131.883549][ T6472] tipc: Started in network mode [ 131.890969][ T6472] tipc: Node identity 000040e, cluster identity 4711 [ 131.897099][ T4323] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.898439][ T6472] tipc: Enabling of bearer rejected, failed to enable media [ 131.994462][ T6446] loop2: detected capacity change from 0 to 40427 [ 132.004352][ T6446] F2FS-fs (loop2): build fault injection attr: rate: 693, type: 0x3ffff [ 132.021580][ T6446] F2FS-fs (loop2): invalid crc value [ 132.034738][ T6446] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.069705][ T6476] loop0: detected capacity change from 0 to 4096 [ 132.077256][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 132.086817][ T4323] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 132.091349][ T6446] F2FS-fs (loop2): Start checkpoint disabled! [ 132.097484][ T6476] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 132.111604][ T4323] usb 5-1: config 0 has no interface number 0 [ 132.119415][ T4323] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 132.130878][ T4323] usb 5-1: config 0 interface 196 has no altsetting 0 [ 132.131454][ T6446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 132.157221][ T6476] ntfs3: loop0: Inode r=19 is not in use! [ 132.163763][ T6476] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 132.177464][ T4323] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 132.186859][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.197192][ T4323] usb 5-1: Product: syz [ 132.201552][ T4323] usb 5-1: Manufacturer: syz [ 132.206362][ T4323] usb 5-1: SerialNumber: syz [ 132.219306][ T6476] ntfs3: loop0: ino=1d, "file1" attr_set_size [ 132.231413][ T4323] usb 5-1: config 0 descriptor?? [ 132.243759][ T6462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.275214][ T4361] kworker/u4:6: attempt to access beyond end of device [ 132.275214][ T4361] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.626435][ T6486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.791'. [ 132.662388][ T6486] netlink: 43 bytes leftover after parsing attributes in process `syz.2.791'. [ 132.688146][ T6486] netlink: 'syz.2.791': attribute type 6 has an invalid length. [ 132.705362][ T4323] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 132.706609][ T6486] netlink: 'syz.2.791': attribute type 5 has an invalid length. [ 132.735128][ T6482] loop1: detected capacity change from 0 to 32768 [ 132.743141][ T6482] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.792 (6482) [ 132.750951][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759126][ T6486] netlink: 43 bytes leftover after parsing attributes in process `syz.2.791'. [ 132.761881][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.800294][ T6482] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 132.821392][ T6482] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 132.865226][ T6482] BTRFS info (device loop1): using free space tree [ 132.876859][ T4308] usb 5-1: USB disconnect, device number 7 [ 132.940814][ T4308] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 133.012304][ T6503] loop3: detected capacity change from 0 to 512 [ 133.013439][ T6484] loop0: detected capacity change from 0 to 32768 [ 133.038838][ T6503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.050725][ T6503] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.074481][ T6484] XFS (loop0): Mounting V5 Filesystem [ 133.102659][ T6482] BTRFS info (device loop1): enabling ssd optimizations [ 133.128783][ T27] audit: type=1800 audit(1753823529.058:21): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.792" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 133.130513][ T6503] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.795: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.210671][ T6484] XFS (loop0): Ending clean mount [ 133.226880][ T6503] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.795: directory missing '.' [ 133.242937][ T6484] XFS (loop0): Quotacheck needed: Please wait. [ 133.266521][ T4265] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 133.289954][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 133.321322][ T6484] XFS (loop0): Quotacheck: Done. [ 133.605560][ T4271] XFS (loop0): Unmounting Filesystem [ 133.740447][ T6533] loop4: detected capacity change from 0 to 4096 [ 133.753674][ T6540] loop3: detected capacity change from 0 to 512 [ 133.781187][ T6540] EXT4-fs: Ignoring removed orlov option [ 133.797829][ T6540] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 133.853640][ T6542] binfmt_misc: register: failed to install interpreter file ./file0 [ 133.858998][ T6540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 133.965287][ T6540] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.804: corrupted in-inode xattr [ 134.112667][ T6540] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.804: couldn't read orphan inode 15 (err -117) [ 134.160874][ T6540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.162764][ T6551] loop4: detected capacity change from 0 to 2048 [ 134.255148][ T6551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.283036][ T6551] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 134.330907][ T6562] loop1: detected capacity change from 0 to 1024 [ 134.355709][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 134.468476][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 134.962155][ T6594] ALSA: mixer_oss: invalid OSS volume '^' [ 135.031817][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 135.095366][ T6600] loop4: detected capacity change from 0 to 8 [ 135.199605][ T6600] SQUASHFS error: Unable to read directory block [1d0:62] [ 135.544186][ T6621] ptrace attach of "./syz-executor exec"[4269] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 135.777350][ T4323] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.021350][ T6580] loop3: detected capacity change from 0 to 32768 [ 136.141951][ T27] audit: type=1800 audit(1753823532.078:22): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.816" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 136.234750][ T6647] loop4: detected capacity change from 0 to 64 [ 136.272984][ T4323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.293587][ T4323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.328302][ T4323] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.362193][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.393072][ T4323] usb 2-1: SerialNumber: syz [ 136.614038][ T4323] usb 2-1: 0:2 : does not exist [ 136.632642][ T4323] usb 2-1: unit 255 not found! [ 136.667448][ T4323] usb 2-1: USB disconnect, device number 8 [ 137.392240][ T6657] loop2: detected capacity change from 0 to 40427 [ 137.424820][ T6657] F2FS-fs (loop2): invalid crc value [ 137.469024][ T6657] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.475840][ T6688] loop1: detected capacity change from 0 to 1024 [ 137.491653][ T6688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.533639][ T6688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c019, mo2=0002] [ 137.542928][ T6688] System zones: 0-1, 3-12 [ 137.568155][ T6657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.568879][ T6688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.609923][ T6694] loop3: detected capacity change from 0 to 2048 [ 137.648758][ T6688] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #13: comm syz.1.868: corrupted in-inode xattr [ 137.666353][ T6694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.698328][ T6694] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.699531][ T6688] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2748: inode #13: comm syz.1.868: corrupted in-inode xattr [ 137.727061][ T4308] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.735049][ T4269] syz-executor: attempt to access beyond end of device [ 137.735049][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.756249][ T6688] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 137.855248][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 137.904226][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 137.937102][ T4308] usb 1-1: Using ep0 maxpacket: 8 [ 137.943940][ T4308] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 137.962258][ T4308] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.972388][ T4308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.980709][ T4308] usb 1-1: Product: syz [ 137.984975][ T4308] usb 1-1: Manufacturer: syz [ 137.989976][ T4308] usb 1-1: SerialNumber: syz [ 137.996458][ T4308] usb 1-1: config 0 descriptor?? [ 138.029726][ T4308] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 138.046764][ T6700] loop4: detected capacity change from 0 to 1024 [ 138.053376][ T4308] usb 1-1: setting power ON [ 138.059018][ T4308] dvb-usb: bulk message failed: -22 (2/0) [ 138.082900][ T4308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.092804][ T6700] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 138.117587][ T4308] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 138.129367][ T6700] EXT4-fs (loop4): invalid journal inode [ 138.135948][ T6700] EXT4-fs (loop4): can't get journal size [ 138.143021][ T6702] program syz.1.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.147068][ T4308] usb 1-1: media controller created [ 138.184220][ T6700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.209525][ T4308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.235994][ T6685] dvb-usb: bulk message failed: -22 (3/0) [ 138.253941][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 138.273354][ T6685] cxusb: i2c rd: len=143 is too big! [ 138.273354][ T6685] [ 138.304709][ T4308] usb 1-1: selecting invalid altsetting 6 [ 138.328171][ T4308] usb 1-1: digital interface selection failed (-22) [ 138.351804][ T4308] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 138.396270][ T6709] loop4: detected capacity change from 0 to 512 [ 138.407655][ T4308] usb 1-1: setting power OFF [ 138.429518][ T4308] dvb-usb: bulk message failed: -22 (2/0) [ 138.449133][ T6709] EXT4-fs: Ignoring removed i_version option [ 138.464088][ T4308] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.475937][ T6709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.493008][ T4308] (NULL device *): no alternate interface [ 138.523325][ T6709] EXT4-fs (loop4): 1 truncate cleaned up [ 138.544244][ T4308] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 138.556767][ T6709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.576531][ T4308] usb 1-1: USB disconnect, device number 6 [ 138.734810][ T4278] EXT4-fs warning (device loop4): ext4_xattr_inode_create:1437: refuse to create EA inode when umounting [ 138.792256][ T4278] ------------[ cut here ]------------ [ 138.798030][ T4278] WARNING: CPU: 1 PID: 4278 at fs/ext4/xattr.c:1438 ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 138.808629][ T4278] Modules linked in: [ 138.812560][ T4278] CPU: 1 PID: 4278 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 138.820957][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.831375][ T4278] RIP: 0010:ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 138.838410][ T4278] Code: 4c 8b 7c 24 20 e9 5d 04 00 00 e8 e4 c7 4d ff 48 89 df 48 c7 c6 55 40 3e 8c ba 9d 05 00 00 48 c7 c1 40 9d a0 8a e8 09 49 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 18 43 80 3c 2c 00 74 08 48 [ 138.859028][ T4278] RSP: 0018:ffffc900041a73e0 EFLAGS: 00010246 [ 138.865408][ T4278] RAX: cb190fd20a78ef00 RBX: ffff888073e8c000 RCX: cb190fd20a78ef00 [ 138.873462][ T4278] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 138.881491][ T4278] RBP: ffffc900041a75b0 R08: dffffc0000000000 R09: fffff52000834df5 [ 138.889619][ T4278] R10: fffff52000834df5 R11: 1ffff92000834df4 R12: 1ffff1100ad5305b [ 138.897650][ T4278] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888056a982b0 [ 138.905823][ T4278] FS: 0000555564e38500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 138.914911][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.921571][ T4278] CR2: 0000555564e535c8 CR3: 000000005c61a000 CR4: 00000000003506e0 [ 138.929708][ T4278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.937750][ T4278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.945837][ T4278] Call Trace: [ 138.949201][ T4278] [ 138.952189][ T4278] ? ext4_xattr_ibody_set+0x690/0x690 [ 138.957650][ T4278] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.963679][ T4278] ? lock_chain_count+0x20/0x20 [ 138.968632][ T4278] ext4_xattr_block_set+0x23a/0x32a0 [ 138.974302][ T4278] ? __might_sleep+0xd0/0xd0 [ 138.978998][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 138.984246][ T4278] ? __getblk_gfp+0x4f/0xb20 [ 138.988920][ T4278] ? xattr_find_entry+0x12b/0x2f0 [ 138.993989][ T4278] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 138.999551][ T4278] ? ext4_xattr_block_find+0x241/0x2b0 [ 139.005052][ T4278] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 139.011400][ T4278] __ext4_expand_extra_isize+0x301/0x3e0 [ 139.017205][ T4278] __ext4_mark_inode_dirty+0x47f/0x770 [ 139.022884][ T4278] ext4_dirty_inode+0xbf/0x100 [ 139.027738][ T4278] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 139.034300][ T4278] __mark_inode_dirty+0x322/0xf40 [ 139.039437][ T4278] iput+0x1e1/0x980 [ 139.043416][ T4278] __dentry_kill+0x431/0x650 [ 139.048186][ T4278] shrink_dentry_list+0x39b/0x6a0 [ 139.053250][ T4278] shrink_dcache_parent+0xa8/0x3c0 [ 139.058452][ T4278] ? write_sequnlock+0x30/0x30 [ 139.063251][ T4278] ? preempt_count_add+0x8d/0x190 [ 139.068363][ T4278] ? __lock_acquire+0x7c50/0x7c50 [ 139.073508][ T4278] ? __init_rwsem+0x160/0x160 [ 139.078279][ T4278] ? preempt_count_add+0x8d/0x190 [ 139.083420][ T4278] ? delete_node+0x3c9/0xa50 [ 139.088090][ T4278] do_one_tree+0x23/0xe0 [ 139.092378][ T4278] shrink_dcache_for_umount+0x65/0x110 [ 139.097952][ T4278] generic_shutdown_super+0x63/0x340 [ 139.103265][ T4278] kill_block_super+0x7c/0xe0 [ 139.108055][ T4278] deactivate_locked_super+0x93/0xf0 [ 139.113448][ T4278] cleanup_mnt+0x463/0x4f0 [ 139.117953][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 139.123183][ T4278] task_work_run+0x1ca/0x250 [ 139.127856][ T4278] ? task_work_cancel+0x230/0x230 [ 139.132911][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 139.138465][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 139.143778][ T4278] exit_to_user_mode_prepare+0xb1/0x140 [ 139.149685][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 139.155190][ T4278] do_syscall_64+0x58/0xa0 [ 139.159694][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 139.164389][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 139.169145][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.175160][ T4278] RIP: 0033:0x7f5ab098fcd7 [ 139.179665][ T4278] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.199340][ T4278] RSP: 002b:00007fffd8c2cf28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.207932][ T4278] RAX: 0000000000000000 RBX: 00007f5ab0a10b55 RCX: 00007f5ab098fcd7 [ 139.215928][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd8c2cfe0 [ 139.224077][ T4278] RBP: 00007fffd8c2cfe0 R08: 0000000000000000 R09: 0000000000000000 [ 139.232109][ T4278] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd8c2e070 [ 139.240156][ T4278] R13: 00007f5ab0a10b55 R14: 0000000000021d68 R15: 00007fffd8c2e0b0 [ 139.241120][ T6707] loop1: detected capacity change from 0 to 32768 [ 139.248179][ T4278] [ 139.248313][ T4278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.248323][ T4278] CPU: 1 PID: 4278 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 139.248341][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.248350][ T4278] Call Trace: [ 139.248356][ T4278] [ 139.248363][ T4278] dump_stack_lvl+0x168/0x22e [ 139.248385][ T4278] ? memcpy+0x3c/0x60 [ 139.248406][ T4278] ? show_regs_print_info+0x12/0x12 [ 139.248423][ T4278] ? load_image+0x3b0/0x3b0 [ 139.248455][ T4278] panic+0x2c9/0x710 [ 139.248476][ T4278] ? bpf_jit_dump+0xd0/0xd0 [ 139.248508][ T4278] __warn+0x2f8/0x4f0 [ 139.248524][ T4278] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 139.248546][ T4278] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 139.248564][ T4278] report_bug+0x2ba/0x4f0 [ 139.248579][ T4278] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 139.248600][ T4278] handle_bug+0x3a/0x70 [ 139.248615][ T4278] exc_invalid_op+0x16/0x40 [ 139.248630][ T4278] asm_exc_invalid_op+0x16/0x20 [ 139.248651][ T4278] RIP: 0010:ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 139.248669][ T4278] Code: 4c 8b 7c 24 20 e9 5d 04 00 00 e8 e4 c7 4d ff 48 89 df 48 c7 c6 55 40 3e 8c ba 9d 05 00 00 48 c7 c1 40 9d a0 8a e8 09 49 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 18 43 80 3c 2c 00 74 08 48 [ 139.248682][ T4278] RSP: 0018:ffffc900041a73e0 EFLAGS: 00010246 [ 139.248696][ T4278] RAX: cb190fd20a78ef00 RBX: ffff888073e8c000 RCX: cb190fd20a78ef00 [ 139.248707][ T4278] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 139.248722][ T4278] RBP: ffffc900041a75b0 R08: dffffc0000000000 R09: fffff52000834df5 [ 139.248733][ T4278] R10: fffff52000834df5 R11: 1ffff92000834df4 R12: 1ffff1100ad5305b [ 139.248745][ T4278] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888056a982b0 [ 139.248783][ T4278] ? ext4_xattr_ibody_set+0x690/0x690 [ 139.248800][ T4278] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 139.248823][ T4278] ? lock_chain_count+0x20/0x20 [ 139.248857][ T4278] ext4_xattr_block_set+0x23a/0x32a0 [ 139.248875][ T4278] ? __might_sleep+0xd0/0xd0 [ 139.248905][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 139.248929][ T4278] ? __getblk_gfp+0x4f/0xb20 [ 139.248945][ T4278] ? xattr_find_entry+0x12b/0x2f0 [ 139.248971][ T4278] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 139.248992][ T4278] ? ext4_xattr_block_find+0x241/0x2b0 [ 139.249013][ T4278] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 139.249057][ T4278] __ext4_expand_extra_isize+0x301/0x3e0 [ 139.249087][ T4278] __ext4_mark_inode_dirty+0x47f/0x770 [ 139.249116][ T4278] ext4_dirty_inode+0xbf/0x100 [ 139.249137][ T4278] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 139.249157][ T4278] __mark_inode_dirty+0x322/0xf40 [ 139.249179][ T4278] iput+0x1e1/0x980 [ 139.249201][ T4278] __dentry_kill+0x431/0x650 [ 139.249225][ T4278] shrink_dentry_list+0x39b/0x6a0 [ 139.249251][ T4278] shrink_dcache_parent+0xa8/0x3c0 [ 139.249274][ T4278] ? write_sequnlock+0x30/0x30 [ 139.249292][ T4278] ? preempt_count_add+0x8d/0x190 [ 139.249311][ T4278] ? __lock_acquire+0x7c50/0x7c50 [ 139.249330][ T4278] ? __init_rwsem+0x160/0x160 [ 139.249345][ T4278] ? preempt_count_add+0x8d/0x190 [ 139.249360][ T4278] ? delete_node+0x3c9/0xa50 [ 139.249378][ T4278] do_one_tree+0x23/0xe0 [ 139.249399][ T4278] shrink_dcache_for_umount+0x65/0x110 [ 139.249423][ T4278] generic_shutdown_super+0x63/0x340 [ 139.249441][ T4278] kill_block_super+0x7c/0xe0 [ 139.249459][ T4278] deactivate_locked_super+0x93/0xf0 [ 139.249475][ T4278] cleanup_mnt+0x463/0x4f0 [ 139.249491][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 139.249511][ T4278] task_work_run+0x1ca/0x250 [ 139.249532][ T4278] ? task_work_cancel+0x230/0x230 [ 139.249554][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 139.249577][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 139.249597][ T4278] exit_to_user_mode_prepare+0xb1/0x140 [ 139.249617][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 139.249635][ T4278] do_syscall_64+0x58/0xa0 [ 139.249650][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 139.249664][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 139.249680][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.249700][ T4278] RIP: 0033:0x7f5ab098fcd7 [ 139.249719][ T4278] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.249731][ T4278] RSP: 002b:00007fffd8c2cf28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.249748][ T4278] RAX: 0000000000000000 RBX: 00007f5ab0a10b55 RCX: 00007f5ab098fcd7 [ 139.249758][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd8c2cfe0 [ 139.249768][ T4278] RBP: 00007fffd8c2cfe0 R08: 0000000000000000 R09: 0000000000000000 [ 139.249778][ T4278] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd8c2e070 [ 139.249789][ T4278] R13: 00007f5ab0a10b55 R14: 0000000000021d68 R15: 00007fffd8c2e0b0 [ 139.249812][ T4278] [ 139.255428][ T4278] Kernel Offset: disabled [ 139.728295][ T4278] Rebooting in 86400 seconds..