last executing test programs: 6m17.157885826s ago: executing program 3 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 6m16.881054822s ago: executing program 3 (id=1205): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m16.480220906s ago: executing program 3 (id=1209): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6d9d50d26e73f7291615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e71292e1e3a8c4610a5fa5132e3"], 0x1, 0x5517, &(0x7f0000005840)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O3eSoDcNxAP0nIQX6oaKq+16FHRyjR+iyy4oD9BIcgV6hF+AMdNcjVFARZ9AwYkYzikNmRu9JYByFn21EFrYlAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnP/Vm+evHl59dc/aHbvKMBgAAALhkV2+WzYdZqr9rr39oL31q60VElBFxae5exZuzzKrNqe+5v77Th98RTcKxjXH7ehsR8ypiHhH/Pvb9KwAAAMDrtV2tF2m2nt5mQ3eIjqZPuTkt2pTvv2ZqvIiIevY3U1p5zPucKaz5f4/ie6a0ZgFrkiksLbmNcqU9SvO4n1btJreKIhXlw9/PNnYAAOCKqrPiurMQAAAArunb0B1gGEXcbGWetgLHqWi396ZnNQAAAOAFKobuAAAAANC7Zv7/rM//C+f/AQAAQFfp/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKs3y+1qveiasz90k2c0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5f9dIqjgA4G9mdjbeqbhG2SIiChbaeLm9887rxEIJFv4JQsjtnfFWxTOFdxxCGjtJfY1oKSIosbv/4eoE0sQuxRYRLKxWZnYmmfwA118zm+znA2/ed4dh3vfNQsh33ksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKw7cP4yQ7dMZxXJzb2n+wkvXbx/rMo42dhaxlcVRn0mfDi9UPUbe5RAAAAJgdSVnfhxB2082lrI87ef2fltdkNf+3T4/jsp4/XveXfVn7Z+2Xn/eePxioMx4nu+mt1UH/8slUWv/fLKfbM395RSt/8vm7lyT/QuL31p8bpvnzjL5+/Piddh7O1ZEtAPBPXCr7Iih/H8r6XpOJATAzWpXCu6z/k06zOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYbgenizjKISw0DqMM9v7D1ZO6x9t7CyU7frDhxvVe2a3SEMIt1YH/cs1zmXafX7v/p3lwaB/t/7gpRBCU6O/VUz/zgcTXBzCfzh6KzT2wGc1iIsve1ryORtBgz+UAAA4l9KiZXX9brq5lJ2L5kMYfXe0/n+1EocJ6/+9D69vVceq1v+92mbYoLnJLltc+2M0Gt27//rqx8u3+7f7n7xxpfdm7+qNa9duLObvSha9MQEAAODfaRetWv/H8yfX/y9W4jBh/f/ZN70vq2Mls1b/T+hw0a/pTAAAAGbbsy///lt0yvmo3Q5fLK+t3e2Njwefr4yPDaT6t80VrVr/J/NNZwUAAADUYbgeHVn/v1mJw4Tr/099/8KP1XsmIYQLxfr/pZVPBzfrm85Uq+PPiZueIwAAAM26ULTq+n+a7/+PD7Y8xCGE114Zx8W/AZyo/k/e/eqH6ljV/f9X65viVIq74+eR990QWt2mMwIAAOA8e6JoWbH/a7q59NFPF99v2/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULc/AwAA//8JBUHY") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 6m14.8759985s ago: executing program 3 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 6m14.463648794s ago: executing program 3 (id=1225): timer_create(0x8, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x47, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x91, 0x82, 0x40, 0x6f8, 0x300c, 0x3964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'ic'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1ff, 0x7f, 0xd}, {0x6, 0x24, 0x1a, 0x401, 0x24}, [@acm={0x4, 0x24, 0x2, 0x8}]}]}}]}}]}}, 0x0) 6m13.819536552s ago: executing program 3 (id=1231): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x22, 0x0, 0x7f}, 0x2c) 6m13.441614844s ago: executing program 32 (id=1231): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x22, 0x0, 0x7f}, 0x2c) 4m15.122504291s ago: executing program 5 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80006e0a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 4m14.784209641s ago: executing program 5 (id=2488): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0x17}, 0x0) close(r1) 4m14.425283222s ago: executing program 5 (id=2492): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4m12.530306123s ago: executing program 5 (id=2515): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16], 0x6, 0x2ae, &(0x7f0000001180)="$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") mkdir(&(0x7f0000001940)='./file0\x00', 0x40) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 4m12.226189731s ago: executing program 5 (id=2521): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd, 0x6, {}, 0x5, 0x15}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4m11.756259799s ago: executing program 5 (id=2525): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 4m11.23371628s ago: executing program 33 (id=2525): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 3m43.565222036s ago: executing program 1 (id=2771): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 3m43.343525429s ago: executing program 1 (id=2773): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) 3m43.223622586s ago: executing program 1 (id=2775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x71, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000540), 0xffff800016adffff}, 0x20) 3m43.022860828s ago: executing program 1 (id=2777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrquota}, {@nodiscard}, {@noinit_itable}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m42.457341012s ago: executing program 1 (id=2782): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYBLOB="00000000000000000300000000000000400000000000000001000000000000000100000001"], 0xb8) 3m41.687317367s ago: executing program 1 (id=2789): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m41.388216934s ago: executing program 34 (id=2789): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m40.296988316s ago: executing program 4 (id=3398): io_setup(0x202, &(0x7f0000000480)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x7fff, r1, 0x0, 0x0, 0x1a5, 0x0, 0x2}]) 2m39.961357595s ago: executing program 4 (id=3400): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 2m39.760576148s ago: executing program 4 (id=3403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m39.603250817s ago: executing program 4 (id=3405): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m38.502960651s ago: executing program 4 (id=3415): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) splice(r1, &(0x7f0000000040)=0x7fffffffffffffff, r0, 0x0, 0x9, 0x1) 2m36.733763466s ago: executing program 4 (id=3426): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 2m36.206049807s ago: executing program 35 (id=3426): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 27.286188946s ago: executing program 7 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.019458422s ago: executing program 7 (id=4706): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) 26.872697561s ago: executing program 7 (id=4709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 26.594990857s ago: executing program 7 (id=4712): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 25.979463653s ago: executing program 7 (id=4718): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000080)='./file2\x00', 0x204818, &(0x7f00000003c0)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303035302c00b0570355e075296bf2c6df1973f50f5a2a41ae81f27b91550c69e05e86fac6ce0319d020daa5e0f7c42048dd9f4833b771127e4fffde0004e4ab70682c3c50130d93c52b30c384d775149e2cee67d2407eff42723d18fd16c62429d428e54cab4f510f6c095d44ee7931bf6a4107ae268da0fbd7"], 0xff, 0x5b2, &(0x7f0000000480)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000010000"], 0x0) 24.421408755s ago: executing program 7 (id=4734): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) unshare(0x40600) fadvise64(r0, 0x18, 0x0, 0x4) 23.875014637s ago: executing program 36 (id=4734): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) unshare(0x40600) fadvise64(r0, 0x18, 0x0, 0x4) 4.548455693s ago: executing program 6 (id=4911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 4.26450241s ago: executing program 6 (id=4914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, ')'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x74}}, 0x10) 3.941581309s ago: executing program 6 (id=4919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000200)={0xdb, 0x0, 0x6}) 3.687638334s ago: executing program 8 (id=4923): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3.535877753s ago: executing program 6 (id=4925): r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) 3.310470256s ago: executing program 8 (id=4928): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 3.217253501s ago: executing program 6 (id=4929): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306d33f93b257a90da1f3afe093d127ea5e5285c21812f2a7204626427de85471df667ae98f9ca945e3edb4970e9f9b6af3bca2643d729986312ebae048358739c6f4e3e7be89033d"], 0x0}, 0x0) 2.683125423s ago: executing program 8 (id=4934): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2208054, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ac7b4efdd021fbb1d8ee6b170048105967759c5affb8c9a311dd24fa1fec64c3a032d17a1e12f67c0871188469a7b76eb91f0780a9be55bb0927c1e8a8cb84156181c4a8f7d14bcc78240dd07a852a874996853e837a5dfa02670ac7445b12c5577d7553127077bacf4d511e7163a93892b8a6ef9777456cc642cb6abccee8121783945547a8b4a6d257cf9fc5043c781271c9f6179c145b15fa52", @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0xf5c, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 2.065826149s ago: executing program 8 (id=4942): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast1}}}, 0x90) 1.783541746s ago: executing program 9 (id=4944): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)={0x20, r1, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 1.783183776s ago: executing program 0 (id=4945): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd2, &(0x7f0000000040), &(0x7f0000000240)=0x4) 1.755898567s ago: executing program 8 (id=4946): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f86, 0x3, 0x9, 0x1, 0x8, 0x8, 0x722, 0x5, 0xb, 0x8, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) 1.567752098s ago: executing program 9 (id=4948): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_setup(0x1, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 1.463408425s ago: executing program 8 (id=4949): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697", @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 1.463200965s ago: executing program 0 (id=4950): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, 0x0], 0x2}) 1.299456694s ago: executing program 0 (id=4951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000c0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.299298124s ago: executing program 2 (id=4952): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x28, &(0x7f00000000c0)={[{@inode32}, {@size={'size', 0x3d, [0x34]}}]}) 1.215423739s ago: executing program 9 (id=4953): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.087575366s ago: executing program 2 (id=4954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.054899339s ago: executing program 0 (id=4955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 965.702024ms ago: executing program 2 (id=4956): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3f}) 835.520941ms ago: executing program 0 (id=4957): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 754.592506ms ago: executing program 9 (id=4958): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SPORT={0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) 518.04341ms ago: executing program 9 (id=4959): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x1, 0x1cc, &(0x7f00000006c0)="$eJzsmD/v0kAYx793LeVPjImLg4smkogJlLaocXHAV2AC/tskUglawEAHIHEgLi6+DN+CA5ODm5urDmpi4iCjk8OZa4/25J8yEIm/55Pw9Nu7567PPTTfoSAI4sTy5fOPTy9vXm+WAZxCEVk1/s1Ic7iW/zGnxIdXb/unn81X92N7Pt8E8KZuIFT3QgihzxfVtQme6NvguKz0XTDYSj8Axx2lfTDcV/qxpgd5JQLffjgI2o+6ge/I4MrgyVBbrW8xY2gDkEcXxu/1jybTJ60g8IerIiOWz1mb2lf8oX/mos5xQ+uf/L/uvXg+k/fL3jha/1xwuErXwNBY9gRZ2LadtkQ7/zkz3d/4m/MfgzhT2ZVT3r3857+p2VKNPZYe/oeCaSN5KaRpJSNnF/N366u+HrKwC4c9MpRnr029LxzwXU39U9rLJc2fTJiJf1TD3tPqaDKtdHutjt/x+55Xu+ZccZyrXjUyojju8L9c5E8Fbf/MllyLWRi3wnDojoFw6Cb3Xhw1x228HnyP1vDI/zhKF+M95KtixVa5EaZ+PLpKVTK2Fk8QBEEQBEEQBEEQBEEQBLEX58Gir6BCCKY+iG7CuxVl/woAAP//vphcsA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x31) 475.523803ms ago: executing program 2 (id=4960): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000026"], 0xc) 412.244056ms ago: executing program 0 (id=4961): syz_open_dev$dri(0x0, 0x4, 0x2081) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000e80)='./file0\x00', 0x4018, &(0x7f00000002c0)=ANY=[], 0x4, 0xb22, &(0x7f0000001b00)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x3) 321.241272ms ago: executing program 2 (id=4962): unshare(0x22020600) r0 = socket$unix(0x1, 0x5, 0x0) flock(r0, 0x8) 43.511138ms ago: executing program 9 (id=4963): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002600"], 0x114}], 0x1}, 0x4000040) 43.359528ms ago: executing program 6 (id=4964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e24, 0x89a8, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 0s ago: executing program 2 (id=4965): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): kauditd_printk_skb: 6 callbacks suppressed [ 448.415859][ T27] audit: type=1800 audit(1770916186.986:279): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3826" name="/" dev="loop7" ino=8 res=0 errno=0 [ 448.476401][T14665] loop0: detected capacity change from 0 to 64 [ 448.486211][T14664] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 448.942867][T14673] loop0: detected capacity change from 0 to 128 [ 449.047777][T14678] loop2: detected capacity change from 0 to 512 [ 449.164178][T14678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 449.270222][T14678] ext4 filesystem being mounted at /831/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.290419][T14678] EXT4-fs warning (device loop2): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 449.350951][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 449.407398][T14688] program syz.0.3851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.629686][ T27] audit: type=1326 audit(1770916188.196:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 449.701811][ T27] audit: type=1326 audit(1770916188.196:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 449.729608][ T22] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 449.784927][ T27] audit: type=1326 audit(1770916188.196:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 449.807567][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.883160][ T27] audit: type=1326 audit(1770916188.196:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 449.905981][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.957906][ T22] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 449.976430][ T22] usb 9-1: config 0 has no interface number 0 [ 449.998517][ T22] usb 9-1: config 0 interface 29 has no altsetting 0 [ 450.018703][ T27] audit: type=1326 audit(1770916188.196:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 450.034337][ T22] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 450.041579][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.079921][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.098297][ T22] usb 9-1: Product: syz [ 450.108586][ T27] audit: type=1326 audit(1770916188.196:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 450.115469][ T22] usb 9-1: Manufacturer: syz [ 450.179889][ T27] audit: type=1326 audit(1770916188.196:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 450.188519][ T22] usb 9-1: SerialNumber: syz [ 450.202497][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.279988][ T27] audit: type=1326 audit(1770916188.196:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 450.281554][ T22] usb 9-1: config 0 descriptor?? [ 450.303038][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.351962][ T27] audit: type=1326 audit(1770916188.196:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.6.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ff00000 [ 450.431878][T14697] loop7: detected capacity change from 0 to 32768 [ 450.529664][ T22] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 450.730304][ T22] peak_usb 9-1:0.29 can0: sending command failure: -8 [ 450.737191][ T22] peak_usb 9-1:0.29 can0: sending command failure: -8 [ 450.787965][T14720] loop0: detected capacity change from 0 to 2048 [ 450.799610][ T22] peak_usb 9-1:0.29 can0: sending command failure: -8 [ 450.886443][T14720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.040657][ T22] peak_usb: probe of 9-1:0.29 failed with error -8 [ 451.102043][ T22] usb 9-1: USB disconnect, device number 2 [ 451.402764][T14738] loop7: detected capacity change from 0 to 4096 [ 451.434024][T14738] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 451.536017][ T4260] udevd[4260]: symlink '../../loop2' '/dev/disk/by-diskseq/1272.tmp-b7:2' failed: Read-only file system [ 451.564708][T14738] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 451.609201][ T4261] udevd[4261]: symlink '../../loop0' '/dev/disk/by-diskseq/1276.tmp-b7:0' failed: Read-only file system [ 451.690295][T14750] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 451.761978][ T4261] udevd[4261]: symlink '../../loop8' '/dev/disk/by-diskseq/1264.tmp-b7:8' failed: Read-only file system [ 451.762291][ T4259] udevd[4259]: symlink '../../loop6' '/dev/disk/by-diskseq/1266.tmp-b7:6' failed: Read-only file system [ 451.798290][ T4260] udevd[4260]: symlink '../../loop2' '/dev/disk/by-diskseq/1278.tmp-b7:2' failed: Read-only file system [ 451.866712][T14755] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 451.914237][ T4260] udevd[4260]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 451.927196][ T9444] udevd[9444]: symlink '../../loop7' '/dev/disk/by-diskseq/1273.tmp-b7:7' failed: Read-only file system [ 451.947778][ T33] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 451.964172][ T9445] udevd[9445]: symlink '../../loop0' '/dev/disk/by-diskseq/1279.tmp-b7:0' failed: Read-only file system [ 451.981614][ T4261] udevd[4261]: symlink '../../loop8' '/dev/disk/by-diskseq/1264.tmp-b7:8' failed: Read-only file system [ 452.001225][T11761] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 452.018119][T11761] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 452.027826][ T4260] udevd[4260]: symlink '../../loop2' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:2' failed: Read-only file system [ 452.056237][T11761] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 452.075478][ T4349] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 452.104400][T11761] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 452.288717][T14766] netem: change failed [ 452.389971][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 452.450705][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3879'. [ 453.128126][T14798] set_capacity_and_notify: 2 callbacks suppressed [ 453.128144][T14798] loop2: detected capacity change from 0 to 256 [ 453.181488][T14801] loop7: detected capacity change from 0 to 256 [ 453.721412][T14817] 9pnet: Could not find request transport: uni^ek}¨útoرÞ—½Òò)ê&KªpñJwÍs ¶A²ßÌ4}(3‰…†ëÝ’Ù [ 453.968248][T14823] loop8: detected capacity change from 0 to 256 [ 454.014166][T14826] tipc: Enabled bearer , priority 10 [ 454.055148][T14823] FAT-fs (loop8): Directory bread(block 64) failed [ 454.083863][T14823] FAT-fs (loop8): Directory bread(block 65) failed [ 454.113984][T14823] FAT-fs (loop8): Directory bread(block 66) failed [ 454.152943][T14823] FAT-fs (loop8): Directory bread(block 67) failed [ 454.182713][T14823] FAT-fs (loop8): Directory bread(block 68) failed [ 454.206926][T14823] FAT-fs (loop8): Directory bread(block 69) failed [ 454.241280][T14823] FAT-fs (loop8): Directory bread(block 70) failed [ 454.262864][T14823] FAT-fs (loop8): Directory bread(block 71) failed [ 454.298440][T14823] FAT-fs (loop8): Directory bread(block 72) failed [ 454.322062][T14823] FAT-fs (loop8): Directory bread(block 73) failed [ 454.337669][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.349008][T14839] device veth0_to_team entered promiscuous mode [ 454.535795][T14844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3912'. [ 454.675848][T14848] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3914'. [ 454.707368][T14848] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3914'. [ 454.952276][T14860] device vlan2 entered promiscuous mode [ 454.958325][T14860] device bridge0 entered promiscuous mode [ 454.969956][T14859] loop0: detected capacity change from 0 to 1024 [ 454.984850][T14859] EXT4-fs: Ignoring removed oldalloc option [ 455.041481][T14859] EXT4-fs: Ignoring removed bh option [ 455.078705][T14859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 455.187582][T14859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 455.443201][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 456.058172][T14879] loop7: detected capacity change from 0 to 32768 [ 456.128665][T14885] loop0: detected capacity change from 0 to 32768 [ 456.186100][T14879] XFS (loop7): Mounting V5 Filesystem [ 456.208964][T14885] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 456.277387][T14885] JBD2: Ignoring recovery information on journal [ 456.346899][T14885] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 456.421229][T14879] XFS (loop7): Ending clean mount [ 456.468680][T14879] syz.7.3928: attempt to access beyond end of device [ 456.468680][T14879] loop7: rw=4096, sector=3546894483, nr_sectors = 1 limit=32768 [ 456.469869][ T6915] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 456.559300][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1285.tmp-b7:2' failed: Read-only file system [ 456.574085][T14885] (syz.0.3930,14885,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 456.591382][T14885] (syz.0.3930,14885,0):update_backups:188 ERROR: status = -12 [ 456.603716][T11761] XFS (loop7): Unmounting Filesystem [ 456.630948][ T4260] udevd[4260]: symlink '../../loop0' '/dev/disk/by-diskseq/1292.tmp-b7:0' failed: Read-only file system [ 456.661214][T14885] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 456.672108][ T4260] udevd[4260]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 456.755001][ T6915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 456.796994][ T6915] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 456.833509][ T6915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.866217][ T6915] usb 7-1: config 0 descriptor?? [ 456.869283][ T4260] udevd[4260]: symlink '../../loop8' '/dev/disk/by-diskseq/1288.tmp-b7:8' failed: Read-only file system [ 456.946799][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 456.969833][ T4261] udevd[4261]: symlink '../../loop2' '/dev/disk/by-diskseq/1285.tmp-b7:2' failed: Read-only file system [ 456.986966][ T9444] udevd[9444]: symlink '../../loop0' '/dev/disk/by-diskseq/1292.tmp-b7:0' failed: Read-only file system [ 457.000083][ T5061] kernel write not supported for file /140/net/rt_cache (pid: 5061 comm: kworker/0:9) [ 457.057866][ T4259] udevd[4259]: symlink '../../loop7' '/dev/disk/by-diskseq/1291.tmp-b7:7' failed: Read-only file system [ 457.091387][ T9444] udevd[9444]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 457.142190][ T4261] udevd[4261]: symlink '../../loop7' '/dev/disk/by-diskseq/1291.tmp-b7:7' failed: Read-only file system [ 457.157237][ T4259] udevd[4259]: symlink '../../loop8' '/dev/disk/by-diskseq/1288.tmp-b7:8' failed: Read-only file system [ 457.520126][ T22] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 457.528249][ T6915] usb 7-1: string descriptor 0 read error: -71 [ 457.576724][ T6915] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 457.589551][ T6915] letsketch: probe of 0003:6161:4D15.002D failed with error -32 [ 457.620864][ T6915] usb 7-1: USB disconnect, device number 6 [ 457.725656][T14928] netlink: 'syz.7.3947': attribute type 1 has an invalid length. [ 457.741970][ T22] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 457.776280][ T22] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.809627][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 457.816501][ T22] usb 9-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 457.849998][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.873714][ T22] usb 9-1: config 0 descriptor?? [ 457.888165][T14916] loop0: detected capacity change from 0 to 32768 [ 457.895216][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3948'. [ 457.932769][T14916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3940 (14916) [ 457.978220][T14916] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.998887][T14916] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 458.020923][T14916] BTRFS info (device loop0): enabling auto defrag [ 458.039899][T14916] BTRFS info (device loop0): use no compression [ 458.056706][T14916] BTRFS info (device loop0): force clearing of disk cache [ 458.089764][T14916] BTRFS info (device loop0): max_inline at 4096 [ 458.113246][T14916] BTRFS info (device loop0): disabling free space tree [ 458.155869][T14924] loop2: detected capacity change from 0 to 32768 [ 458.270675][T14924] XFS (loop2): Mounting V5 Filesystem [ 458.315773][ T22] kye 0003:0458:0153.002E: unknown main item tag 0x0 [ 458.346662][ T22] kye 0003:0458:0153.002E: unknown main item tag 0x0 [ 458.420470][ T22] kye 0003:0458:0153.002E: unknown main item tag 0x0 [ 458.429991][ T22] kye 0003:0458:0153.002E: unknown main item tag 0x0 [ 458.436752][ T22] kye 0003:0458:0153.002E: unknown main item tag 0x0 [ 458.448766][ T22] kye 0003:0458:0153.002E: hidraw0: USB HID v40.03 Device [HID 0458:0153] on usb-dummy_hcd.8-1/input0 [ 458.468198][T14924] XFS (loop2): Ending clean mount [ 458.509425][T14916] BTRFS info (device loop0): enabling ssd optimizations [ 458.529377][T14916] BTRFS info (device loop0): rebuilding free space tree [ 458.542164][ T22] usb 9-1: USB disconnect, device number 3 [ 458.570567][T14916] BTRFS info (device loop0): disabling free space tree [ 458.577975][T14916] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 458.641961][T14916] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 458.698445][ T4272] XFS (loop2): Unmounting Filesystem [ 458.755926][T14968] fido_id[14968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 458.762503][ T4274] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 458.859443][T14971] program syz.6.3956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.977084][T14973] loop6: detected capacity change from 0 to 256 [ 459.017901][T14973] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 459.128445][ T9444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (9444) [ 459.519576][ T5714] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 459.709804][ T5714] usb 9-1: Using ep0 maxpacket: 16 [ 459.721036][ T5714] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 459.748445][ T5714] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.821140][ T5714] usb 9-1: Product: syz [ 459.825359][ T5714] usb 9-1: Manufacturer: syz [ 459.839227][T14986] loop0: detected capacity change from 0 to 1764 [ 459.851473][ T5714] usb 9-1: SerialNumber: syz [ 459.873631][ T5714] usb 9-1: config 0 descriptor?? [ 459.897694][ T5714] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 460.094091][T14978] loop7: detected capacity change from 0 to 32768 [ 460.209788][ T22] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 460.224241][T14978] XFS (loop7): Mounting V5 Filesystem [ 460.318296][T14978] XFS (loop7): Ending clean mount [ 460.407147][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 460.428489][ T22] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 460.449184][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.481063][T11761] XFS (loop7): Unmounting Filesystem [ 460.490894][ T22] usb 7-1: config 0 descriptor?? [ 460.496451][ T5714] ssu100: probe of 9-1:0.0 failed with error -71 [ 460.512961][ T5714] usb 9-1: USB disconnect, device number 4 [ 460.553492][T14988] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 461.045604][ T22] sony 0003:1345:3008.002F: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.6-1/input0 [ 461.093988][T15007] loop0: detected capacity change from 0 to 32768 [ 461.100709][ T22] sony 0003:1345:3008.002F: failed to claim input [ 461.131837][T15007] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3967 (15007) [ 461.227087][T15007] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 461.244084][ T22] usb 7-1: USB disconnect, device number 7 [ 461.266704][T15007] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 461.296912][T15007] BTRFS info (device loop0): using free space tree [ 461.416683][T15014] fido_id[15014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 461.497859][T15033] loop8: detected capacity change from 0 to 64 [ 461.516317][T15033] hfs: small file entry [ 461.583590][ T4261] udevd[4261]: symlink '../../loop0' '/dev/disk/by-diskseq/1305.tmp-b7:0' failed: Read-only file system [ 461.595240][ T4260] udevd[4260]: symlink '../../loop8' '/dev/disk/by-diskseq/1306.tmp-b7:8' failed: Read-only file system [ 461.596458][ T4261] udevd[4261]: symlink '../../loop0' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:0' failed: Read-only file system [ 461.608322][T15007] BTRFS info (device loop0): enabling ssd optimizations [ 461.704974][ T4259] udevd[4259]: symlink '../../loop2' '/dev/disk/by-diskseq/1303.tmp-b7:2' failed: Read-only file system [ 461.733356][T15007] BTRFS warning (device loop0): can't clear the free_space_tree,verity,compat_ro:4,compat_ro:6,compat_ro:10,compat_ro:12,compat_ro:14,compat_ro:19,compat_ro:20,compat_ro:23,compat_ro:24,compat_ro:25,compat_ro:26,compat_ro:28,compat_ro:29,compat_ro:32,compat_ro:33,compat_ro:35,compat_ro:37,compat_ro:38,compat_ro:39,compat_ro:41,compat_ro:42,compat_ro:43,compat_ro:44,compat_ro:45,compat_ro:46,compat_ro:52,compat_ro:55,compat_ro:57,compat_ro:61,compat_ro:63 feature bits while mounted [ 461.741836][ T4260] udevd[4260]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 461.900171][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1299.tmp-b7:6' failed: Read-only file system [ 461.935987][ T4274] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 461.967738][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1303.tmp-b7:2' failed: Read-only file system [ 462.124528][T15049] sp0: Synchronizing with TNC [ 462.132142][ T4259] udevd[4259]: symlink '../../loop6' '/dev/disk/by-diskseq/1299.tmp-b7:6' failed: Read-only file system [ 462.134348][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1306.tmp-b7:8' failed: Read-only file system [ 462.264505][T15054] loop6: detected capacity change from 0 to 64 [ 462.321532][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1306.tmp-b7:8' failed: Read-only file system [ 462.619914][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 463.304144][T15082] loop7: detected capacity change from 0 to 64 [ 463.738408][T15094] loop7: detected capacity change from 0 to 256 [ 463.747609][T15092] loop2: detected capacity change from 0 to 512 [ 463.785006][T15094] FAT-fs (loop7): Directory bread(block 64) failed [ 463.794757][ T4308] kernel write not supported for file /dsp1 (pid: 4308 comm: kworker/0:4) [ 463.796336][T15094] FAT-fs (loop7): Directory bread(block 65) failed [ 463.854063][T15094] FAT-fs (loop7): Directory bread(block 66) failed [ 463.878386][T15094] FAT-fs (loop7): Directory bread(block 67) failed [ 463.891082][T15092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 463.918162][T15094] FAT-fs (loop7): Directory bread(block 68) failed [ 463.930518][T15094] FAT-fs (loop7): Directory bread(block 69) failed [ 463.938900][T15094] FAT-fs (loop7): Directory bread(block 70) failed [ 463.946612][T15092] ext4 filesystem being mounted at /865/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.992949][T15094] FAT-fs (loop7): Directory bread(block 71) failed [ 464.052513][T15094] FAT-fs (loop7): Directory bread(block 72) failed [ 464.082880][T15092] ext4: Unexpected value for 'quota' [ 464.096246][T15094] FAT-fs (loop7): Directory bread(block 73) failed [ 464.253817][T15101] device ipvlan1 entered promiscuous mode [ 464.261153][T15100] device ipvlan1 left promiscuous mode [ 464.261772][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 464.276992][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3998'. [ 464.587951][T15105] ptrace attach of "./syz-executor exec"[4274] was attempted by "\x22"[15105] [ 464.621246][T15111] loop6: detected capacity change from 0 to 256 [ 464.645576][T15108] loop2: detected capacity change from 0 to 2048 [ 464.706818][T15108] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 464.746298][T15111] FAT-fs (loop6): Directory bread(block 64) failed [ 464.764515][T15111] FAT-fs (loop6): Directory bread(block 65) failed [ 464.779786][T15111] FAT-fs (loop6): Directory bread(block 66) failed [ 464.824221][T15108] cifs: Unknown parameter 'anchor' [ 464.834462][T15111] FAT-fs (loop6): Directory bread(block 67) failed [ 464.871141][T15111] FAT-fs (loop6): Directory bread(block 68) failed [ 464.912058][T15111] FAT-fs (loop6): Directory bread(block 69) failed [ 464.934552][T15111] FAT-fs (loop6): Directory bread(block 70) failed [ 464.979700][T15111] FAT-fs (loop6): Directory bread(block 71) failed [ 464.995033][T15111] FAT-fs (loop6): Directory bread(block 72) failed [ 465.007043][T15113] overlayfs: failed to set xattr on upper [ 465.038864][T15111] FAT-fs (loop6): Directory bread(block 73) failed [ 465.067908][T15113] overlayfs: ...falling back to index=off,metacopy=off. [ 465.090869][T15113] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 465.383937][T15121] loop7: detected capacity change from 0 to 256 [ 465.455902][T15121] FAT-fs (loop7): Directory bread(block 64) failed [ 465.475637][T15121] FAT-fs (loop7): Directory bread(block 65) failed [ 465.489382][T15121] FAT-fs (loop7): Directory bread(block 66) failed [ 465.556205][T15121] FAT-fs (loop7): Directory bread(block 67) failed [ 465.568389][T15121] FAT-fs (loop7): Directory bread(block 68) failed [ 465.586997][T15121] FAT-fs (loop7): Directory bread(block 69) failed [ 465.598661][T15121] FAT-fs (loop7): Directory bread(block 70) failed [ 465.612859][T15121] FAT-fs (loop7): Directory bread(block 71) failed [ 465.625484][T15121] FAT-fs (loop7): Directory bread(block 72) failed [ 465.639001][T15121] FAT-fs (loop7): Directory bread(block 73) failed [ 465.809870][ T4373] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 466.016219][ T4373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.038667][ T4373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.058116][ T4373] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 466.074584][T15117] loop2: detected capacity change from 0 to 32768 [ 466.087038][ T4373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.117140][ T4373] usb 7-1: config 0 descriptor?? [ 466.232166][T15117] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 466.512346][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 466.554469][ T4373] steelseries_srws1 0003:1038:1410.0030: not enough fields in HID_OUTPUT_REPORT 0 [ 466.605793][ T4261] udevd[4261]: symlink '../../loop7' '/dev/disk/by-diskseq/1322.tmp-b7:7' failed: Read-only file system [ 466.757665][ T22] usb 7-1: USB disconnect, device number 8 [ 466.821229][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1322.tmp-b7:7' failed: Read-only file system [ 466.872282][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1323.tmp-b7:2' failed: Read-only file system [ 466.928506][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1323.tmp-b7:2' failed: Read-only file system [ 466.934038][T15154] loop7: detected capacity change from 0 to 1024 [ 466.963571][T15154] EXT4-fs: inline encryption not supported [ 467.012665][ T9444] udevd[9444]: symlink '../../loop0' '/dev/disk/by-diskseq/1309.tmp-b7:0' failed: Read-only file system [ 467.049136][T15154] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.060826][ T4261] udevd[4261]: symlink '../../loop2' '/dev/disk/by-diskseq/1324.tmp-b7:2' failed: Read-only file system [ 467.127307][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1325.tmp-b7:7' failed: Read-only file system [ 467.152504][T15154] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 467.170969][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1324.tmp-b7:2' failed: Read-only file system [ 467.185506][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 467.226005][T15154] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.4022: Allocating blocks 497-513 which overlap fs metadata [ 467.246154][ T9444] udevd[9444]: symlink '../../loop0' '/dev/disk/by-diskseq/1309.tmp-b7:0' failed: Read-only file system [ 467.289670][T15154] EXT4-fs (loop7): Remounting filesystem read-only [ 467.304105][T15153] EXT4-fs (loop7): pa ffff8880757e0540: logic 16, phys. 145, len 23 [ 467.313294][T15153] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 467.399851][T15153] EXT4-fs (loop7): Remounting filesystem read-only [ 467.425664][T15170] loop2: detected capacity change from 0 to 512 [ 467.556236][T15170] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4027: invalid indirect mapped block 10 (level 1) [ 467.563058][T15167] loop0: detected capacity change from 0 to 4096 [ 467.596718][T11761] EXT4-fs (loop7): unmounting filesystem. [ 467.669002][T15174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.670469][T15167] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 467.700904][T15170] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4027: invalid indirect mapped block 8 (level 1) [ 467.721971][T15170] EXT4-fs (loop2): 1 truncate cleaned up [ 467.767697][T15170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 467.842597][T15167] NILFS (loop0): mounting fs with errors [ 467.985849][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 468.251105][T15185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.879713][T15197] set_capacity_and_notify: 1 callbacks suppressed [ 468.879729][T15197] loop2: detected capacity change from 0 to 4096 [ 469.074962][T15191] loop0: detected capacity change from 0 to 32768 [ 469.312632][T15203] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 469.655461][T15201] loop6: detected capacity change from 0 to 32768 [ 469.673760][T15201] XFS: attr2 mount option is deprecated. [ 469.774823][T15201] XFS (loop6): Mounting V5 Filesystem [ 469.895089][T15201] XFS (loop6): Ending clean mount [ 469.920620][T15201] XFS (loop6): Quotacheck needed: Please wait. [ 470.129703][T15201] XFS (loop6): Quotacheck: Done. [ 470.237717][T10976] XFS (loop6): Unmounting Filesystem [ 470.451145][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.896894][T15237] loop6: detected capacity change from 0 to 2048 [ 470.943585][T15237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.667715][ T9444] udevd[9444]: symlink '../../loop7' '/dev/disk/by-diskseq/1328.tmp-b7:7' failed: Read-only file system [ 471.691437][T15238] loop2: detected capacity change from 0 to 32768 [ 471.773049][ T4260] udevd[4260]: symlink '../../loop6' '/dev/disk/by-diskseq/1340.tmp-b7:6' failed: Read-only file system [ 471.893452][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1328.tmp-b7:7' failed: Read-only file system [ 472.011148][ T4260] udevd[4260]: symlink '../../loop6' '/dev/disk/by-diskseq/1340.tmp-b7:6' failed: Read-only file system [ 472.196452][ T4260] udevd[4260]: symlink '../../loop6' '/dev/disk/by-diskseq/1340.tmp-b7:6' failed: Read-only file system [ 472.222940][T15247] loop0: detected capacity change from 0 to 32768 [ 472.231598][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1341.tmp-b7:2' failed: Read-only file system [ 472.265187][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1328.tmp-b7:7' failed: Read-only file system [ 472.277593][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 472.359677][ T5461] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 472.465723][T15268] loop7: detected capacity change from 0 to 2048 [ 472.479837][ T4260] udevd[4260]: symlink '../../loop6' '/dev/disk/by-diskseq/1340.tmp-b7:6' failed: Read-only file system [ 472.532880][T15268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.559913][ T5461] usb 3-1: Using ep0 maxpacket: 32 [ 472.567156][ T5461] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 472.585981][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4071'. [ 472.601289][ T5461] usb 3-1: config 0 has no interface number 0 [ 472.618559][ T5461] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 472.635149][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1341.tmp-b7:2' failed: Read-only file system [ 472.656076][ T5461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.674815][ T5461] usb 3-1: Product: syz [ 472.684971][ T5461] usb 3-1: Manufacturer: syz [ 472.733207][ T5461] usb 3-1: SerialNumber: syz [ 472.751391][ T5461] usb 3-1: config 0 descriptor?? [ 472.770308][ T5461] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 472.778207][ T5461] dvb-usb: bulk message failed: -22 (2/0) [ 472.802990][ T5461] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.855375][ T5461] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 472.892554][ T5461] usb 3-1: media controller created [ 473.008456][ T5461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.091579][ T5461] cxusb: set interface failed [ 473.106827][ T5461] dvb-usb: bulk message failed: -22 (1/0) [ 473.276137][ T5461] DVB: Unable to find symbol lgdt330x_attach() [ 473.283762][ T5461] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 473.521172][ T5461] rc_core: IR keymap rc-dvico-portable not found [ 473.527695][ T5461] Registered IR keymap rc-empty [ 473.556240][ T5461] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 473.612501][ T5461] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28 [ 473.654318][ T5461] dvb-usb: schedule remote query interval to 100 msecs. [ 473.665951][ T5461] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 473.666084][T15287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4077'. [ 473.687113][ T5461] usb 3-1: USB disconnect, device number 23 [ 474.020580][ T5461] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 474.030341][T15291] loop7: detected capacity change from 0 to 2048 [ 474.068851][T15291] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 474.129337][T15293] loop6: detected capacity change from 0 to 2048 [ 474.159559][T15291] cifs: Unknown parameter 'anchor' [ 474.214341][T15293] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 474.291693][T15293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.911551][T15315] loop0: detected capacity change from 0 to 1024 [ 475.177338][T15321] loop6: detected capacity change from 0 to 2048 [ 475.232554][T15321] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 475.288834][T15321] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 475.334943][T15321] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 475.397996][T15321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.813474][T15339] delete_channel: no stack [ 475.829039][T15337] delete_channel: no stack [ 475.829105][T15340] loop6: detected capacity change from 0 to 16 [ 475.892410][T15340] erofs: (device loop6): mounted with root inode @ nid 36. [ 476.214791][T15346] mkiss: ax0: crc mode is auto. [ 476.561299][T15364] loop8: detected capacity change from 0 to 256 [ 476.627592][T15364] exfat: Deprecated parameter 'utf8' [ 476.645409][T15364] exfat: Deprecated parameter 'utf8' [ 476.659909][T15364] exfat: Deprecated parameter 'utf8' [ 476.708435][T15364] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 476.723348][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1307.tmp-b7:8' failed: Read-only file system [ 476.734091][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:8' failed: Read-only file system [ 476.807326][ T4260] udevd[4260]: symlink '../../loop0' '/dev/disk/by-diskseq/1352.tmp-b7:0' failed: Read-only file system [ 476.859786][ T5061] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 476.933335][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1357.tmp-b7:8' failed: Read-only file system [ 476.972134][ T4260] udevd[4260]: symlink '../../loop0' '/dev/disk/by-diskseq/1352.tmp-b7:0' failed: Read-only file system [ 476.978166][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:8' failed: Read-only file system [ 477.061515][ T5061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 477.093151][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1357.tmp-b7:8' failed: Read-only file system [ 477.105143][ T5061] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 477.139574][ T5061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.163919][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1357.tmp-b7:8' failed: Read-only file system [ 477.202008][ T5061] usb 3-1: config 0 descriptor?? [ 477.208403][T15366] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 477.221535][ T4261] udevd[4261]: symlink '../../loop0' '/dev/disk/by-diskseq/1352.tmp-b7:0' failed: Read-only file system [ 477.407358][ T9444] udevd[9444]: symlink '../../loop0' '/dev/disk/by-diskseq/1352.tmp-b7:0' failed: Read-only file system [ 477.425860][T15362] loop6: detected capacity change from 0 to 32768 [ 477.472311][T15362] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 477.500490][T15362] JBD2: Ignoring recovery information on journal [ 477.589588][ T4373] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 477.656716][T15362] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 477.673247][ T5061] sony 0003:1345:3008.0031: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 477.789588][ T4373] usb 9-1: Using ep0 maxpacket: 8 [ 477.799348][ T5061] sony 0003:1345:3008.0031: failed to claim input [ 477.801021][ T4373] usb 9-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.865130][T15362] (syz.6.4105,15362,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 477.907845][ T5061] usb 3-1: USB disconnect, device number 24 [ 477.911689][T15362] (syz.6.4105,15362,1):update_backups:188 ERROR: status = -12 [ 477.977776][ T4373] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.018461][T15362] ocfs2: Failed to update super blocks on 7,6 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 478.039291][ T4373] usb 9-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 478.093324][ T4373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.132939][ T4373] usb 9-1: config 0 descriptor?? [ 478.182145][T15397] fido_id[15397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 478.235149][T10976] ocfs2: Unmounting device (7,6) on (node local) [ 478.465643][T15410] loop6: detected capacity change from 0 to 512 [ 478.490991][T15410] EXT4-fs: Ignoring removed nobh option [ 478.521244][T15410] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 478.582250][ T4373] wacom 0003:056A:00D4.0032: unknown main item tag 0x0 [ 478.605968][ T4373] wacom 0003:056A:00D4.0032: unknown main item tag 0x0 [ 478.624751][ T4373] wacom 0003:056A:00D4.0032: unknown main item tag 0x0 [ 478.632598][ T4373] wacom 0003:056A:00D4.0032: unknown main item tag 0x0 [ 478.645876][ T4373] wacom 0003:056A:00D4.0032: unknown main item tag 0x0 [ 478.661418][ T4373] wacom 0003:056A:00D4.0032: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 478.680195][ T4373] wacom 0003:056A:00D4.0032: hidraw0: USB HID v0.09 Device [HID 056a:00d4] on usb-dummy_hcd.8-1/input0 [ 478.693171][ T4373] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00D4.0032/input/input29 [ 478.724144][T15410] EXT4-fs (loop6): 1 truncate cleaned up [ 478.748996][T15410] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 478.802941][ T4373] usb 9-1: USB disconnect, device number 5 [ 478.965222][T15424] loop0: detected capacity change from 0 to 2048 [ 479.024435][T15424] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 479.104787][T15424] cifs: Unknown parameter 'anchor' [ 479.204947][T15425] fido_id[15425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 479.238050][T10976] EXT4-fs (loop6): unmounting filesystem. [ 480.235323][T15441] loop7: detected capacity change from 0 to 32768 [ 480.282709][T15441] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 480.310744][T15441] JBD2: Ignoring recovery information on journal [ 480.416213][T15441] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 480.544618][T15441] (syz.7.4133,15441,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 480.564859][T15441] (syz.7.4133,15441,0):update_backups:188 ERROR: status = -12 [ 480.587572][T15441] ocfs2: Failed to update super blocks on 7,7 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 480.689979][T11761] ocfs2: Unmounting device (7,7) on (node local) [ 481.179255][T15484] loop8: detected capacity change from 0 to 256 [ 481.239053][T15484] FAT-fs (loop8): Directory bread(block 64) failed [ 481.289960][T15484] FAT-fs (loop8): Directory bread(block 65) failed [ 481.321569][T15484] FAT-fs (loop8): Directory bread(block 66) failed [ 481.355139][T15484] FAT-fs (loop8): Directory bread(block 67) failed [ 481.380714][T15484] FAT-fs (loop8): Directory bread(block 68) failed [ 481.405828][T15484] FAT-fs (loop8): Directory bread(block 69) failed [ 481.428851][T15492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4167'. [ 481.449245][T15484] FAT-fs (loop8): Directory bread(block 70) failed [ 481.456952][T15484] FAT-fs (loop8): Directory bread(block 71) failed [ 481.493077][T15484] FAT-fs (loop8): Directory bread(block 72) failed [ 481.509866][T15484] FAT-fs (loop8): Directory bread(block 73) failed [ 481.743086][T15499] loop7: detected capacity change from 0 to 64 [ 481.754555][ T9444] udevd[9444]: symlink '../../loop8' '/dev/disk/by-diskseq/1367.tmp-b7:8' failed: Read-only file system [ 481.808294][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1369.tmp-b7:7' failed: Read-only file system [ 481.828836][T15499] hfs: small file entry [ 481.871105][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 481.893482][ T9444] udevd[9444]: symlink '../../loop2' '/dev/disk/by-diskseq/1343.tmp-b7:2' failed: Read-only file system [ 481.924128][ T4261] udevd[4261]: symlink '../../loop0' '/dev/disk/by-diskseq/1363.tmp-b7:0' failed: Read-only file system [ 481.986544][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-diskseq/1369.tmp-b7:7' failed: Read-only file system [ 482.050986][ T4260] udevd[4260]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 482.125836][ T9444] udevd[9444]: symlink '../../loop7' '/dev/disk/by-diskseq/1369.tmp-b7:7' failed: Read-only file system [ 482.167665][ T4260] udevd[4260]: symlink '../../loop2' '/dev/disk/by-diskseq/1343.tmp-b7:2' failed: Read-only file system [ 482.204560][ T9444] udevd[9444]: symlink '../../loop7' '/dev/disk/by-diskseq/1369.tmp-b7:7' failed: Read-only file system [ 482.266034][T15494] loop6: detected capacity change from 0 to 32768 [ 482.305660][T15494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.4157 (15494) [ 482.379127][T15494] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 482.416706][T15514] sctp: [Deprecated]: syz.7.4165 (pid 15514) Use of int in maxseg socket option. [ 482.416706][T15514] Use struct sctp_assoc_value instead [ 482.441111][T15494] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 482.478394][T15494] BTRFS info (device loop6): enabling auto defrag [ 482.504389][T15494] BTRFS info (device loop6): use no compression [ 482.539640][T15494] BTRFS info (device loop6): force clearing of disk cache [ 482.559853][T15494] BTRFS info (device loop6): max_inline at 4096 [ 482.586086][T15494] BTRFS info (device loop6): disabling free space tree [ 482.735358][T15503] loop8: detected capacity change from 0 to 32768 [ 482.786362][T15503] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 482.816791][T15503] JBD2: Ignoring recovery information on journal [ 482.956047][T15503] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 482.993435][T15494] BTRFS info (device loop6): enabling ssd optimizations [ 483.005232][T15494] BTRFS info (device loop6): rebuilding free space tree [ 483.055865][T15494] BTRFS info (device loop6): disabling free space tree [ 483.073847][T15494] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 483.094221][T15494] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 483.173754][T15503] (syz.8.4159,15503,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 483.239815][T15503] (syz.8.4159,15503,0):update_backups:188 ERROR: status = -12 [ 483.276909][T15503] ocfs2: Failed to update super blocks on 7,8 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 483.446337][T10976] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.497768][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 483.497784][ T27] audit: type=1326 audit(1770916222.066:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15548 comm="syz.0.4174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c2f9bf79 code=0x0 [ 483.530892][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.560474][T13477] ocfs2: Unmounting device (7,8) on (node local) [ 483.574416][T15552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4177'. [ 483.605976][T15552] IPVS: Error connecting to the multicast addr [ 483.697864][ T9444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop6 scanned by udevd (9444) [ 484.076193][T15561] netlink: 'syz.8.4179': attribute type 2 has an invalid length. [ 484.085916][T15539] loop2: detected capacity change from 0 to 32768 [ 484.587649][T15572] loop6: detected capacity change from 0 to 64 [ 484.608766][T15572] hfs: unable to locate alternate MDB [ 484.614903][T15572] hfs: continuing without an alternate MDB [ 484.635840][T15572] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 484.661649][T15572] hfs: bad catalog entry type 0 [ 484.669594][ T5062] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 484.866943][ T5062] usb 9-1: config 0 interface 0 has no altsetting 0 [ 484.874681][ T5062] usb 9-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 484.902757][ T5062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.951375][ T5062] usb 9-1: config 0 descriptor?? [ 485.152787][T15587] loop0: detected capacity change from 0 to 1024 [ 485.213111][T15589] netlink: 'syz.6.4191': attribute type 5 has an invalid length. [ 485.247456][T15587] hfsplus: bad catalog entry type [ 485.406477][ T5062] wacom 0003:056A:0028.0033: unknown main item tag 0x0 [ 485.445826][ T5062] wacom 0003:056A:0028.0033: unknown main item tag 0x0 [ 485.468212][ T5062] wacom 0003:056A:0028.0033: unknown main item tag 0x0 [ 485.486686][ T5062] wacom 0003:056A:0028.0033: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 485.536683][ T5062] wacom 0003:056A:0028.0033: hidraw0: USB HID v0.02 Device [HID 056a:0028] on usb-dummy_hcd.8-1/input0 [ 485.586224][ T5062] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0028.0033/input/input32 [ 485.670366][ T5062] usb 9-1: USB disconnect, device number 6 [ 485.685962][T15601] loop2: detected capacity change from 0 to 128 [ 485.786913][T15601] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 485.819968][T15601] hpfs: filesystem error: improperly stopped [ 485.855895][T15601] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 485.864605][T15581] loop7: detected capacity change from 0 to 32768 [ 485.894782][T15581] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 485.906163][T15601] hpfs: You really don't want any checks? You are crazy... [ 485.922533][T15602] fido_id[15602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 485.956291][T15601] hpfs: hpfs_map_sector(): read error [ 485.965267][T15601] hpfs: code page support is disabled [ 485.985611][T15601] hpfs: hpfs_map_4sectors(): unaligned read [ 485.995852][T15604] loop6: detected capacity change from 0 to 4096 [ 486.017299][T15601] hpfs: hpfs_map_4sectors(): unaligned read [ 486.034036][T15601] hpfs: filesystem error: unable to find root dir [ 486.328148][ T9445] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 486.771214][ T9444] udevd[9444]: symlink '../../loop7' '/dev/disk/by-diskseq/1385.tmp-b7:7' failed: Read-only file system [ 486.776792][ T4260] udevd[4260]: symlink '../../loop6' '/dev/disk/by-diskseq/1383.tmp-b7:6' failed: Read-only file system [ 486.865506][T15624] loop6: detected capacity change from 0 to 1024 [ 486.970100][ T56] hfsplus: b-tree write err: -5, ino 4 [ 486.971896][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1387.tmp-b7:6' failed: Read-only file system [ 487.028625][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 487.061785][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:6' failed: Read-only file system [ 487.084834][T15610] loop2: detected capacity change from 0 to 32768 [ 487.139243][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1387.tmp-b7:6' failed: Read-only file system [ 487.163688][T15610] XFS (loop2): Mounting V5 Filesystem [ 487.168906][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1387.tmp-b7:6' failed: Read-only file system [ 487.217861][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1387.tmp-b7:6' failed: Read-only file system [ 487.342764][ T9444] udevd[9444]: symlink '../../loop6' '/dev/disk/by-diskseq/1389.tmp-b7:6' failed: Read-only file system [ 487.397651][T15610] XFS (loop2): Ending clean mount [ 487.420269][ T4261] udevd[4261]: symlink '../../loop8' '/dev/disk/by-diskseq/1373.tmp-b7:8' failed: Read-only file system [ 487.519906][T15610] syz.2.4200: attempt to access beyond end of device [ 487.519906][T15610] loop2: rw=4096, sector=3546894483, nr_sectors = 1 limit=32768 [ 487.589331][T15642] loop6: detected capacity change from 0 to 1024 [ 487.614920][T15642] EXT4-fs: inline encryption not supported [ 487.645099][T15642] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.659698][ T4272] XFS (loop2): Unmounting Filesystem [ 487.776473][T15642] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 487.858750][T15643] loop8: detected capacity change from 0 to 32768 [ 487.875505][T15643] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 12 [ 488.073458][T10976] EXT4-fs (loop6): unmounting filesystem. [ 488.208498][ T4260] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 12 [ 488.494204][T15655] loop2: detected capacity change from 0 to 2048 [ 488.541198][T15655] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 488.579982][T15655] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 488.642265][T15655] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 488.687978][T15655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.970813][T15650] loop8: detected capacity change from 0 to 32768 [ 488.995990][T15650] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 11 [ 489.242393][T15672] loop0: detected capacity change from 0 to 512 [ 489.254349][T15672] EXT4-fs: Ignoring removed nobh option [ 489.263563][ T9444] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 11 [ 489.284498][T15672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 489.322918][T15672] EXT4-fs (loop0): 1 truncate cleaned up [ 489.333941][T15672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 489.453389][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 489.937355][T15689] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2362, location=2362 [ 490.010785][T15689] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 490.077227][T15689] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 490.143255][T15689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.460988][T15703] EXT4-fs: Ignoring removed nobh option [ 490.477493][T15703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 490.512949][T15703] EXT4-fs (loop2): 1 truncate cleaned up [ 490.589760][T15703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 490.738637][T15709] set_capacity_and_notify: 3 callbacks suppressed [ 490.738656][T15709] loop0: detected capacity change from 0 to 4096 [ 490.995291][T15714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.030320][T15687] loop8: detected capacity change from 0 to 32768 [ 491.031357][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 491.065890][T15709] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 491.171025][T15709] Remounting filesystem read-only [ 491.256483][T15687] XFS (loop8): Mounting V5 Filesystem [ 491.341865][T15732] loop0: detected capacity change from 0 to 64 [ 491.371965][T15687] XFS (loop8): Ending clean mount [ 491.620967][T15739] loop6: detected capacity change from 0 to 16 [ 491.678801][T13477] XFS (loop8): Unmounting Filesystem [ 491.700710][T15739] erofs: (device loop6): mounted with root inode @ nid 36. [ 491.943680][ T27] audit: type=1800 audit(1770916230.516:353): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4246" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 492.546421][T15717] loop7: detected capacity change from 0 to 65536 [ 492.611186][T15717] XFS (loop7): Mounting V5 Filesystem [ 492.613332][T15752] loop8: detected capacity change from 0 to 32768 [ 492.647949][T15752] XFS: attr2 mount option is deprecated. [ 492.686790][T15717] XFS (loop7): Ending clean mount [ 492.711567][T15752] XFS (loop8): Mounting V5 Filesystem [ 492.718295][T15717] XFS (loop7): Quotacheck needed: Please wait. [ 492.837277][T15717] XFS (loop7): Quotacheck: Done. [ 492.860795][T15752] XFS (loop8): Ending clean mount [ 492.875317][T15752] XFS (loop8): Quotacheck needed: Please wait. [ 492.973029][T11761] XFS (loop7): Unmounting Filesystem [ 493.046366][T15752] XFS (loop8): Quotacheck: Done. [ 493.160301][T15779] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4256'. [ 493.246289][T13477] XFS (loop8): Unmounting Filesystem [ 493.345040][T15781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4257'. [ 493.590740][ T5712] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 493.799417][T15791] loop0: detected capacity change from 0 to 512 [ 493.836952][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.869857][ T5712] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 493.882706][T15791] FAT-fs (loop0): Directory bread(block 199916) failed [ 493.889574][ T5712] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 493.889604][ T5712] usb 3-1: Manufacturer: syz [ 493.903743][ T5712] usb 3-1: config 0 descriptor?? [ 493.970171][T15791] FAT-fs (loop0): Directory bread(block 199917) failed [ 493.978112][T15791] FAT-fs (loop0): Directory bread(block 199918) failed [ 494.070974][T15791] FAT-fs (loop0): Directory bread(block 199919) failed [ 494.078143][T15791] FAT-fs (loop0): Directory bread(block 199920) failed [ 494.101963][T15797] loop7: detected capacity change from 0 to 512 [ 494.134130][ T5712] usb 3-1: USB disconnect, device number 25 [ 494.166753][T15791] FAT-fs (loop0): Directory bread(block 199921) failed [ 494.174825][T15797] EXT4-fs: Ignoring removed nobh option [ 494.193672][T15791] FAT-fs (loop0): Directory bread(block 199922) failed [ 494.214881][T15797] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 494.231788][T15791] FAT-fs (loop0): Directory bread(block 199923) failed [ 494.305681][T15797] EXT4-fs (loop7): 1 truncate cleaned up [ 494.312446][T15797] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 494.560458][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4271'. [ 494.580108][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4271'. [ 494.589124][T15811] netlink: 'syz.8.4271': attribute type 14 has an invalid length. [ 494.642510][T15813] loop0: detected capacity change from 0 to 512 [ 494.701275][T15813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 494.743592][T11761] EXT4-fs (loop7): unmounting filesystem. [ 494.751051][T15813] EXT4-fs (loop0): 1 truncate cleaned up [ 494.756818][T15813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 495.072966][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 495.248077][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 495.294591][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 495.902248][T15853] loop8: detected capacity change from 0 to 4096 [ 495.928070][T15860] loop6: detected capacity change from 0 to 256 [ 495.980956][T15861] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.102949][T15860] FAT-fs (loop6): Directory bread(block 64) failed [ 496.121969][T15860] FAT-fs (loop6): Directory bread(block 65) failed [ 496.169977][T15860] FAT-fs (loop6): Directory bread(block 66) failed [ 496.209563][T15860] FAT-fs (loop6): Directory bread(block 67) failed [ 496.216343][T15860] FAT-fs (loop6): Directory bread(block 68) failed [ 496.256164][T15860] FAT-fs (loop6): Directory bread(block 69) failed [ 496.290542][T15860] FAT-fs (loop6): Directory bread(block 70) failed [ 496.326690][T15860] FAT-fs (loop6): Directory bread(block 71) failed [ 496.350016][T15860] FAT-fs (loop6): Directory bread(block 72) failed [ 496.390903][T15860] FAT-fs (loop6): Directory bread(block 73) failed [ 497.093829][T15890] loop6: detected capacity change from 0 to 256 [ 497.211772][T15890] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 497.534440][T15898] loop6: detected capacity change from 0 to 256 [ 497.568116][T15898] exfat: Deprecated parameter 'utf8' [ 497.587422][T15898] exfat: Deprecated parameter 'namecase' [ 497.608362][T15902] loop2: detected capacity change from 0 to 256 [ 497.643007][T15898] exfat: Deprecated parameter 'namecase' [ 497.649095][T15898] exfat: Deprecated parameter 'utf8' [ 497.703494][T15902] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 497.725574][T15898] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 498.111373][T15906] loop0: detected capacity change from 0 to 4096 [ 498.170591][T15906] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 498.236691][T15906] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 498.282679][T15906] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is not in use! [ 498.309771][T15906] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 498.367525][T15913] loop7: detected capacity change from 0 to 2048 [ 498.395568][T15906] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 498.432343][T15906] ntfs: (device loop0): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 498.475825][T15916] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.492564][T15906] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 498.737806][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 498.797772][T15925] netlink: 'syz.0.4323': attribute type 21 has an invalid length. [ 498.857249][T15904] loop8: detected capacity change from 0 to 32768 [ 498.869719][T15925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4323'. [ 499.026115][T15904] XFS (loop8): Mounting V5 Filesystem [ 499.242719][T15904] XFS (loop8): Starting recovery (logdev: internal) [ 499.353534][T15904] XFS (loop8): Ending recovery (logdev: internal) [ 499.602573][T13477] XFS (loop8): Unmounting Filesystem [ 500.209775][ T5712] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 500.442525][ T5712] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 500.471299][ T5712] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 500.528135][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.558474][ T5712] usb 7-1: Product: syz [ 500.564219][ T5712] usb 7-1: Manufacturer: syz [ 500.588445][ T5712] usb 7-1: SerialNumber: syz [ 500.605954][ T5712] usb 7-1: config 0 descriptor?? [ 500.618239][T15988] loop2: detected capacity change from 0 to 1024 [ 500.619997][ T5712] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 500.658907][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.682978][T15988] hfsplus: bad catalog entry type [ 500.703201][ T5712] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 500.727443][ T5712] usb 7-1: media controller created [ 500.773968][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.823971][T15963] dvb-usb: bulk message failed: -22 (7/0) [ 500.865529][ T4349] hfsplus: b-tree write err: -5, ino 4 [ 501.121015][ T5712] DVB: Unable to find symbol mt352_attach() [ 501.332896][ T5712] DVB: Unable to find symbol nxt6000_attach() [ 501.341781][ T5712] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 501.369031][ T5712] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 501.402306][ T5712] dvb-usb: schedule remote query interval to 1000 msecs. [ 501.414752][ T5712] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 501.425613][ T5712] dvb-usb: bulk message failed: -22 (7/0) [ 501.435915][ T5712] dvb-usb: bulk message failed: -22 (7/0) [ 501.481946][ T5712] usb 7-1: USB disconnect, device number 9 [ 501.525574][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.532537][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.621105][ T5712] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 502.234016][T16034] loop2: detected capacity change from 0 to 128 [ 502.550007][T16041] loop6: detected capacity change from 0 to 512 [ 502.629815][T16041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 502.726507][T16041] EXT4-fs (loop6): 1 truncate cleaned up [ 502.739693][T16041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 502.969240][T10976] EXT4-fs (loop6): unmounting filesystem. [ 503.186956][T16064] loop7: detected capacity change from 0 to 524255232 [ 503.349392][T16039] loop8: detected capacity change from 0 to 32768 [ 503.485466][T16070] loop6: detected capacity change from 0 to 256 [ 503.535115][T16039] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 503.596202][T16077] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 503.982437][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4384'. [ 504.139612][T13477] ocfs2: Unmounting device (7,8) on (node local) [ 504.203905][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.946634][T16089] loop6: detected capacity change from 0 to 32768 [ 505.037193][T16089] XFS (loop6): Mounting V5 Filesystem [ 505.102021][T16089] XFS (loop6): Ending clean mount [ 505.208545][T10976] XFS (loop6): Unmounting Filesystem [ 506.080416][T16157] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4405'. [ 506.317505][T16145] loop8: detected capacity change from 0 to 32768 [ 506.348703][T16145] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 11 [ 506.605099][ T9444] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 11 [ 506.685397][T16174] loop8: detected capacity change from 0 to 128 [ 506.757176][T16174] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 506.825455][T16174] hpfs: filesystem error: improperly stopped [ 506.838693][T16174] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 506.858727][T16174] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 506.879315][T16174] hpfs: You really don't want any checks? You are crazy... [ 506.915873][T16174] hpfs: hpfs_map_sector(): read error [ 506.966349][T16174] hpfs: code page support is disabled [ 507.003163][T16174] hpfs: hpfs_map_4sectors(): unaligned read [ 507.053806][T16174] hpfs: hpfs_map_4sectors(): unaligned read [ 507.091583][T16174] hpfs: filesystem error: unable to find root dir [ 507.292054][T16183] loop7: detected capacity change from 0 to 256 [ 507.359106][T16183] exfat: Deprecated parameter 'utf8' [ 507.427604][T16183] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 507.989054][T16200] loop0: detected capacity change from 0 to 256 [ 508.101329][T16200] FAT-fs (loop0): Directory bread(block 64) failed [ 508.108198][T16200] FAT-fs (loop0): Directory bread(block 65) failed [ 508.150507][T16200] FAT-fs (loop0): Directory bread(block 66) failed [ 508.192155][T16200] FAT-fs (loop0): Directory bread(block 67) failed [ 508.195256][T16204] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4425'. [ 508.226564][T16200] FAT-fs (loop0): Directory bread(block 68) failed [ 508.269754][T16200] FAT-fs (loop0): Directory bread(block 69) failed [ 508.308041][T16200] FAT-fs (loop0): Directory bread(block 70) failed [ 508.366895][T16200] FAT-fs (loop0): Directory bread(block 71) failed [ 508.401840][T16200] FAT-fs (loop0): Directory bread(block 72) failed [ 508.414406][T16200] FAT-fs (loop0): Directory bread(block 73) failed [ 508.651020][T16179] loop6: detected capacity change from 0 to 40427 [ 508.675851][T16179] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 508.736982][T16179] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 508.783319][T16179] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 508.835642][T16179] F2FS-fs (loop6): Found nat_bits in checkpoint [ 508.867050][T16215] loop8: detected capacity change from 0 to 4096 [ 508.956344][T16215] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 508.992637][ T27] audit: type=1800 audit(1770916247.566:354): pid=16215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4431" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 509.040933][T16179] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 509.062882][T16179] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 509.143399][ T11] ntfs3: loop8: ntfs3_write_inode r=3 failed, -22. [ 509.189066][T13477] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 509.211833][T13477] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 509.243968][T13477] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 509.278691][ T5090] ntfs3: loop8: ntfs3_write_inode r=3 failed, -22. [ 509.312514][T13477] ntfs3: loop8: ntfs_evict_inode r=3 failed, -22. [ 509.706472][T16237] loop7: detected capacity change from 0 to 1024 [ 509.852349][T16240] tipc: Started in network mode [ 509.857892][T16240] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 509.921489][ T5090] hfsplus: b-tree write err: -5, ino 4 [ 509.940746][T16240] tipc: Enabled bearer , priority 10 [ 510.060993][T16243] loop2: detected capacity change from 0 to 128 [ 510.148741][T16245] usb usb8: usbfs: process 16245 (syz.6.4435) did not claim interface 5 before use [ 510.176072][T16243] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 510.247231][T16251] loop8: detected capacity change from 0 to 512 [ 510.278044][T16243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 510.334723][T16251] EXT4-fs (loop8): 1 truncate cleaned up [ 510.359220][T16251] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 510.399996][T16243] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4442: checksumming directory block 0 [ 510.524669][T16261] sch_fq: defrate 0 ignored. [ 510.574424][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 510.618425][T13477] EXT4-fs (loop8): unmounting filesystem. [ 511.069810][T16276] loop8: detected capacity change from 0 to 256 [ 511.145448][T16276] exfat: Deprecated parameter 'utf8' [ 511.219624][T16276] exfat: Deprecated parameter 'namecase' [ 511.227025][ T4308] tipc: Node number set to 10005162 [ 511.283542][T16276] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 511.316955][T16282] loop6: detected capacity change from 0 to 4096 [ 511.368865][T16282] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 511.410375][T16282] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 511.441271][ T27] audit: type=1326 audit(1770916250.016:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16285 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe63f9bf79 code=0x7ffc0000 [ 511.471669][T16282] ntfs: (device loop6): ntfs_read_locked_inode(): Inode is not in use! [ 511.529378][T16282] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 511.547634][ T27] audit: type=1326 audit(1770916250.016:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16285 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe63f9bf79 code=0x7ffc0000 [ 511.649209][T16282] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 511.700250][ T27] audit: type=1326 audit(1770916250.016:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16285 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbe63f9bf79 code=0x7ffc0000 [ 511.727200][T16282] ntfs: (device loop6): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 511.891514][T16294] loop0: detected capacity change from 0 to 2048 [ 511.998829][T16294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.355445][T16311] set_capacity_and_notify: 1 callbacks suppressed [ 512.355463][T16311] loop8: detected capacity change from 0 to 1024 [ 512.455747][T16311] EXT4-fs: inline encryption not supported [ 512.515469][T16314] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4472'. [ 512.550015][T16311] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm syz.8.4470: lblock 2 mapped to illegal pblock 2 (length 1) [ 512.695714][T16311] EXT4-fs (loop8): Remounting filesystem read-only [ 512.803822][T16311] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm syz.8.4470: lblock 0 mapped to illegal pblock 48 (length 1) [ 512.861306][T16311] EXT4-fs (loop8): Remounting filesystem read-only [ 512.883008][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.893103][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.921535][T16311] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.4470: Failed to acquire dquot type 0 [ 512.942976][T16311] EXT4-fs (loop8): Remounting filesystem read-only [ 512.958046][T16311] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 513.023202][T16311] EXT4-fs (loop8): Remounting filesystem read-only [ 513.067014][T16311] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm syz.8.4470: mark_inode_dirty error [ 513.127492][T16311] EXT4-fs (loop8): Remounting filesystem read-only [ 513.147839][T16311] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 513.165273][T16311] EXT4-fs (loop8): 1 orphan inode deleted [ 513.175873][T16311] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 513.194961][ T5090] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 513.276108][ T5090] EXT4-fs (loop8): Remounting filesystem read-only [ 513.288724][ T5090] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 513.308703][ T5090] EXT4-fs (loop8): Remounting filesystem read-only [ 513.317967][ T22] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 513.329402][T13477] EXT4-fs (loop8): unmounting filesystem. [ 513.342985][T13477] EXT4-fs error (device loop8): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 513.366154][T13477] EXT4-fs (loop8): Remounting filesystem read-only [ 513.384379][T13477] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 513.395315][T16328] loop6: detected capacity change from 0 to 32768 [ 513.413085][T16328] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop6 scanned by syz.6.4475 (16328) [ 513.426822][T13477] EXT4-fs (loop8): Remounting filesystem read-only [ 513.437770][T16328] BTRFS info (device loop6): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 513.447175][T13477] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 513.448918][T16328] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 513.471729][T16328] BTRFS info (device loop6): using free space tree [ 513.488594][T13477] EXT4-fs (loop8): Remounting filesystem read-only [ 513.499979][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 513.528948][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.552152][ T22] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 513.563209][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.582195][ T22] usb 3-1: config 0 descriptor?? [ 513.709570][T16328] BTRFS info (device loop6): enabling ssd optimizations [ 513.852654][T10976] BTRFS info (device loop6): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 513.879879][ T5061] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 514.002332][ T22] hkems 0003:2006:0118.0034: unbalanced delimiter at end of report description [ 514.040062][ T22] hkems 0003:2006:0118.0034: parse failed [ 514.069407][ T22] hkems: probe of 0003:2006:0118.0034 failed with error -22 [ 514.106742][ T5061] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 514.140274][ T5061] usb 9-1: config 0 has no interface number 0 [ 514.146695][ T5061] usb 9-1: config 0 interface 29 has no altsetting 0 [ 514.201598][ T5061] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 514.214245][ T22] usb 3-1: USB disconnect, device number 26 [ 514.222684][ T5061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.267169][ T9444] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop6 scanned by udevd (9444) [ 514.280480][ T5061] usb 9-1: Product: syz [ 514.285635][ T5061] usb 9-1: Manufacturer: syz [ 514.291835][ T5061] usb 9-1: SerialNumber: syz [ 514.329695][ T5061] usb 9-1: config 0 descriptor?? [ 514.550107][ T5061] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 514.766039][ T5061] peak_usb 9-1:0.29 can0: sending command failure: -22 [ 514.775415][ T5061] peak_usb 9-1:0.29 can0: sending command failure: -22 [ 514.785169][ T5061] peak_usb 9-1:0.29 can0: sending command failure: -22 [ 514.857380][ T5061] peak_usb: probe of 9-1:0.29 failed with error -22 [ 514.989894][ T4337] usb 9-1: USB disconnect, device number 7 [ 515.204955][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4491'. [ 515.637720][T16381] loop2: detected capacity change from 0 to 32768 [ 515.653953][T16381] XFS: noikeep mount option is deprecated. [ 515.784976][T16381] XFS (loop2): Mounting V5 Filesystem [ 515.861618][T16381] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 515.908104][T16381] XFS (loop2): Starting recovery (logdev: internal) [ 515.947909][T16381] XFS (loop2): Ending recovery (logdev: internal) [ 516.039050][T16409] netlink: 'syz.6.4511': attribute type 10 has an invalid length. [ 516.045129][T16411] loop8: detected capacity change from 0 to 256 [ 516.072435][ T4272] XFS (loop2): Unmounting Filesystem [ 516.118546][T16411] FAT-fs (loop8): Directory bread(block 64) failed [ 516.137573][T16411] FAT-fs (loop8): Directory bread(block 65) failed [ 516.189729][T16411] FAT-fs (loop8): Directory bread(block 66) failed [ 516.219074][T16411] FAT-fs (loop8): Directory bread(block 67) failed [ 516.252640][T16411] FAT-fs (loop8): Directory bread(block 68) failed [ 516.267645][T16411] FAT-fs (loop8): Directory bread(block 69) failed [ 516.291168][T16411] FAT-fs (loop8): Directory bread(block 70) failed [ 516.312371][T16411] FAT-fs (loop8): Directory bread(block 71) failed [ 516.326309][T16411] FAT-fs (loop8): Directory bread(block 72) failed [ 516.347015][T16411] FAT-fs (loop8): Directory bread(block 73) failed [ 517.059232][T16432] device netdevsim0 entered promiscuous mode [ 517.406578][T16446] loop0: detected capacity change from 0 to 128 [ 517.447565][T16446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 517.462555][T16446] ext4 filesystem being mounted at /886/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.507890][T16450] loop8: detected capacity change from 0 to 256 [ 517.608942][T16450] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 517.648301][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 517.740750][T16450] exFAT-fs (loop8): hint_cluster is invalid (17) [ 518.291670][T16476] device syz_tun entered promiscuous mode [ 518.297674][T16476] device macsec2 entered promiscuous mode [ 518.307118][T16476] device syz_tun left promiscuous mode [ 518.688248][T16492] netlink: 192 bytes leftover after parsing attributes in process `syz.7.4538'. [ 518.734746][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4538'. [ 519.025530][T16500] loop2: detected capacity change from 0 to 4096 [ 519.123201][T16507] syz.8.4544 (16507): drop_caches: 4 [ 519.131663][T16500] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 519.435472][T16511] loop2: detected capacity change from 0 to 1024 [ 519.436728][T16509] loop8: detected capacity change from 0 to 4096 [ 519.472407][T16509] __ntfs_warning: 6 callbacks suppressed [ 519.472425][T16509] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 519.485153][T16498] loop6: detected capacity change from 0 to 32768 [ 519.525761][T16511] hfsplus: bad catalog entry type [ 519.605589][ T11] hfsplus: b-tree write err: -5, ino 4 [ 519.669055][T16498] XFS (loop6): Mounting V5 Filesystem [ 519.715910][T16509] ntfs: volume version 3.1. [ 519.787398][T16509] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251. You might want to try to use the mount option nls=utf8. [ 519.806679][T16509] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 519.892474][T16525] loop2: detected capacity change from 0 to 128 [ 519.898500][T16498] XFS (loop6): Ending clean mount [ 519.956532][T16525] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 520.011217][T16525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.107135][T10976] XFS (loop6): Unmounting Filesystem [ 520.730638][ T4337] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 520.945492][ T4337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.945528][ T4337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.945560][ T4337] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 520.945584][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.947407][ T4337] usb 3-1: config 0 descriptor?? [ 521.361078][ T4337] itetech 0003:048D:8595.0035: unknown main item tag 0x0 [ 521.370461][ T4337] itetech 0003:048D:8595.0035: unknown main item tag 0x0 [ 521.380768][ T4337] itetech 0003:048D:8595.0035: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.2-1/input0 [ 521.572184][ T4337] usb 3-1: USB disconnect, device number 27 [ 522.099429][T16598] loop8: detected capacity change from 0 to 512 [ 522.159390][T16598] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 522.169709][T16598] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.263775][T16604] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4587'. [ 522.276263][T13477] EXT4-fs (loop8): unmounting filesystem. [ 522.738216][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4596'. [ 523.059217][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 523.549081][T16648] loop2: detected capacity change from 0 to 32768 [ 523.557563][T16648] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 523.613682][ T4337] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 523.712538][ T9444] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 523.813241][ T4337] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 523.829714][ T4337] usb 9-1: config 0 has no interface number 0 [ 523.846217][ T4337] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 523.887743][ T4337] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 523.927504][ T4337] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 523.945733][ T4337] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.962313][ T4337] usb 9-1: Product: syz [ 523.969903][ T4337] usb 9-1: Manufacturer: syz [ 523.987091][ T4337] usb 9-1: SerialNumber: syz [ 523.996001][ T4337] usb 9-1: config 0 descriptor?? [ 524.092531][T16661] mkiss: ax0: crc mode is auto. [ 524.437470][ T4337] asix 9-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 524.457882][ T4337] asix: probe of 9-1:0.239 failed with error -71 [ 524.467467][ T4337] usb 9-1: USB disconnect, device number 8 [ 524.768161][T16684] loop6: detected capacity change from 0 to 164 [ 524.838234][T16684] Unsupported NM flag settings (240) [ 524.998553][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4629'. [ 525.468470][T16712] loop0: detected capacity change from 0 to 256 [ 525.514002][T16712] exfat: Deprecated parameter 'utf8' [ 525.519422][T16712] exfat: Deprecated parameter 'namecase' [ 525.627638][T16712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 525.740142][T16720] mkiss: ax0: crc mode is auto. [ 525.798637][T16717] loop6: detected capacity change from 0 to 4096 [ 525.944496][ T27] audit: type=1800 audit(1770916264.516:360): pid=16717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4652" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 526.689176][ T27] audit: type=1400 audit(1770916265.256:361): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=16751 comm="syz.7.4660" [ 526.757811][ T5061] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 526.965456][ T5061] usb 9-1: Using ep0 maxpacket: 32 [ 526.973961][ T5061] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 527.002881][ T5061] usb 9-1: config 0 has no interface number 0 [ 527.020320][ T5061] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.059611][ T5061] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.109419][ T5061] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 527.139279][ T5061] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.172793][ T5061] usb 9-1: config 0 descriptor?? [ 527.255704][T16747] loop6: detected capacity change from 0 to 32768 [ 527.413851][T16747] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 527.721868][T10976] ocfs2: Unmounting device (7,6) on (node local) [ 527.827950][ T4337] usb 9-1: USB disconnect, device number 9 [ 528.132800][T16794] loop6: detected capacity change from 0 to 64 [ 528.341959][T16798] loop7: detected capacity change from 0 to 8 [ 528.455517][T16798] SQUASHFS error: xz decompression failed, data probably corrupt [ 528.519578][T16798] SQUASHFS error: Failed to read block 0x108: -5 [ 528.525962][T16798] SQUASHFS error: Unable to read metadata cache entry [106] [ 528.565323][T16798] SQUASHFS error: Unable to read inode 0x11f [ 529.121746][T16818] [U] ùÿ [ 529.135554][T16823] netlink: 194188 bytes leftover after parsing attributes in process `syz.6.4691'. [ 529.155765][T16823] net_ratelimit: 3660 callbacks suppressed [ 529.155785][T16823] netlink: zone id is out of range [ 529.176697][T16791] loop2: detected capacity change from 0 to 40427 [ 529.194750][T16823] netlink: zone id is out of range [ 529.225413][T16791] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 529.234811][T16823] netlink: zone id is out of range [ 529.260164][T16823] netlink: zone id is out of range [ 529.279695][T16823] netlink: zone id is out of range [ 529.290500][T16791] F2FS-fs (loop2): invalid crc value [ 529.294993][T16823] netlink: zone id is out of range [ 529.311198][T16823] netlink: zone id is out of range [ 529.328344][T16791] F2FS-fs (loop2): Found nat_bits in checkpoint [ 529.351162][T16823] netlink: zone id is out of range [ 529.370999][T16823] netlink: zone id is out of range [ 529.386612][T16823] netlink: zone id is out of range [ 529.562957][T16791] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 529.603561][T16806] loop0: detected capacity change from 0 to 32768 [ 529.673626][T16806] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 529.730300][ T4272] syz-executor: attempt to access beyond end of device [ 529.730300][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 529.744544][T16842] loop7: detected capacity change from 0 to 136 [ 529.752661][T16842] Attempt to read inode for relocated directory [ 529.977325][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 530.437860][T16862] loop6: detected capacity change from 0 to 2048 [ 530.449742][ T5061] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 530.496251][T16862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.661305][ T5061] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.681659][ T5061] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 530.716027][ T5061] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.753579][ T5061] usb 9-1: config 0 descriptor?? [ 530.853808][T16871] loop7: detected capacity change from 0 to 512 [ 530.883784][T16873] netlink: 'syz.6.4711': attribute type 3 has an invalid length. [ 530.899224][T16871] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 530.915672][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4713'. [ 530.967991][T16871] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.4712: inode has both inline data and extents flags [ 531.016996][T16871] EXT4-fs (loop7): Remounting filesystem read-only [ 531.075812][T16871] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4712: couldn't read orphan inode 15 (err -117) [ 531.097628][T16871] EXT4-fs (loop7): Remounting filesystem read-only [ 531.106052][T16871] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 531.186408][ T5061] hid (null): invalid report_size 721292191 [ 531.202585][T16882] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 531.220454][ T5061] lg-g15 0003:046D:C222.0037: invalid report_size 721292191 [ 531.235847][ T5061] lg-g15 0003:046D:C222.0037: item 0 4 1 7 parsing failed [ 531.251119][ T5061] lg-g15: probe of 0003:046D:C222.0037 failed with error -22 [ 531.328799][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 531.381343][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.390686][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 531.396480][ T4308] usb 9-1: USB disconnect, device number 10 [ 531.445524][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.463387][T11761] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 531.488592][ T27] audit: type=1326 audit(1770916270.056:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.528085][ T27] audit: type=1326 audit(1770916270.056:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.558535][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.565524][ T27] audit: type=1326 audit(1770916270.096:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.565563][ T27] audit: type=1326 audit(1770916270.096:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.565591][ T27] audit: type=1326 audit(1770916270.096:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.565617][ T27] audit: type=1326 audit(1770916270.096:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.618237][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 531.676898][ T27] audit: type=1326 audit(1770916270.096:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.727298][ T27] audit: type=1326 audit(1770916270.096:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16888 comm="syz.6.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 531.769718][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.776427][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 531.848170][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.864648][T11761] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 531.886288][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.894186][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 531.935985][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.943352][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /341/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 531.965446][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 531.979213][T11761] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 532.054481][T11761] EXT4-fs (loop7): Remounting filesystem read-only [ 532.067061][T11761] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /341/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 532.838406][T16910] loop2: detected capacity change from 0 to 32768 [ 532.927099][T16910] jfs_lookup: dtSearch returned -5 [ 533.048752][ T5090] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.095851][T16921] loop8: detected capacity change from 0 to 1024 [ 533.172637][T16921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.312728][ T5090] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.328300][T16921] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 533.369150][T16921] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.4735: missing EA_INODE flag [ 533.422780][T16921] EXT4-fs (loop8): Remounting filesystem read-only [ 533.434498][T16921] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.4735: error while reading EA inode 11 err=-117 [ 533.459918][T16921] EXT4-fs (loop8): Remounting filesystem read-only [ 533.472518][ T5090] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.547557][T13477] EXT4-fs (loop8): unmounting filesystem. [ 533.685924][ T5090] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.912660][T16933] loop6: detected capacity change from 0 to 128 [ 533.983096][T16933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 534.016624][T16933] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.146467][T16933] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 534.246095][T16944] loop0: detected capacity change from 0 to 256 [ 534.290787][T16944] exfat: Deprecated parameter 'utf8' [ 534.300118][T16944] exfat: Deprecated parameter 'namecase' [ 534.305963][T16944] exfat: Deprecated parameter 'namecase' [ 534.339619][T16944] exfat: Deprecated parameter 'utf8' [ 534.415478][T16944] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 534.444661][ T5090] tipc: Disabling bearer [ 534.467159][ T5090] tipc: Disabling bearer [ 534.510838][ T5090] tipc: Left network mode [ 534.550757][T10976] EXT4-fs (loop6): unmounting filesystem. [ 534.586974][T16947] loop2: detected capacity change from 0 to 4096 [ 534.648156][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.687899][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.698823][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.710285][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.723198][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.731221][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.801323][T16957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.822038][T16956] loop0: detected capacity change from 0 to 64 [ 535.380736][ T27] audit: type=1326 audit(1770916273.956:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.6.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 535.485790][ T27] audit: type=1326 audit(1770916273.976:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.6.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7539bf79 code=0x7ffc0000 [ 535.531190][T16980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4756'. [ 535.672252][T16970] loop0: detected capacity change from 0 to 8192 [ 535.794796][T16991] loop2: detected capacity change from 0 to 128 [ 535.876539][T16991] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 535.940221][T16991] hpfs: filesystem error: improperly stopped [ 535.983978][T16991] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 536.037139][T16991] hpfs: You really don't want any checks? You are crazy... [ 536.054868][T16991] hpfs: hpfs_map_sector(): read error [ 536.071958][T16991] hpfs: code page support is disabled [ 536.079801][T16991] hpfs: hpfs_map_4sectors(): unaligned read [ 536.135997][T16991] hpfs: hpfs_map_4sectors(): unaligned read [ 536.156190][T16991] hpfs: filesystem error: unable to find root dir [ 536.515032][T17008] Bluetooth: MGMT ver 1.22 [ 536.639110][T16951] chnl_net:caif_netlink_parms(): no params data found [ 536.683602][T17011] loop2: detected capacity change from 0 to 4096 [ 536.733205][T17011] __ntfs_error: 3 callbacks suppressed [ 536.733227][T17011] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 536.756764][T17011] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 536.785585][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 536.842340][T17011] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 536.884422][T17011] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 537.010674][T17011] ntfs: volume version 3.1. [ 537.051471][T17011] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 537.070299][T16951] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.077759][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.134731][T16951] device bridge_slave_0 entered promiscuous mode [ 537.147703][T17011] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 537.166334][T17011] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 537.208442][T17011] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 537.227746][T17028] [U] [ 537.231511][T17028] [U] [ 537.234246][T17028] [U] [ 537.237617][T17028] [U] [ 537.240353][T17028] [U] [ 537.243250][T17028] [U] [ 537.245969][T17028] [U] [ 537.248697][T17028] [U] [ 537.310056][T17028] [U] [ 537.312815][T17028] [U] [ 537.315619][T17028] [U] [ 537.338755][T17027] [U] [ 537.583900][T16951] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.599969][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.611799][T16951] device bridge_slave_1 entered promiscuous mode [ 538.037578][T17053] loop2: detected capacity change from 0 to 256 [ 538.066949][T16951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.083782][T17053] FAT-fs (loop2): bogus logical sector size 128 [ 538.092036][T17058] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4783'. [ 538.112468][T17053] FAT-fs (loop2): Can't find a valid FAT filesystem [ 538.183810][ T5090] device hsr_slave_0 left promiscuous mode [ 538.266823][ T5090] device hsr_slave_1 left promiscuous mode [ 538.316601][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.345903][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.375858][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.394346][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.415261][ T5090] device bridge_slave_1 left promiscuous mode [ 538.450041][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.488981][ T5090] device bridge_slave_0 left promiscuous mode [ 538.519194][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.635412][ T5090] device veth1_macvtap left promiscuous mode [ 538.666456][ T5090] device veth0_macvtap left promiscuous mode [ 538.670479][T17073] program syz.8.4790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.695260][ T5090] device veth1_vlan left promiscuous mode [ 538.713809][ T5090] device veth0_vlan left promiscuous mode [ 538.859894][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 539.049701][T17087] loop8: detected capacity change from 0 to 128 [ 540.529401][ T5090] team0 (unregistering): Port device team_slave_1 removed [ 540.608509][ T5090] team0 (unregistering): Port device team_slave_0 removed [ 540.682904][ T5090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.764550][ T5090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.939747][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 541.378578][ T5090] smc: removing net device bond0 with user defined pnetid SYZ2 [ 541.387317][ T5090] bond0 (unregistering): Released all slaves [ 541.534917][T16951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.560570][T17079] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4793'. [ 541.576712][T17085] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4795'. [ 541.605686][T17093] device netdevsim0 entered promiscuous mode [ 541.650390][T16951] team0: Port device team_slave_0 added [ 541.809835][T16951] team0: Port device team_slave_1 added [ 541.836977][T17100] loop8: detected capacity change from 0 to 64 [ 541.863359][T16951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.873660][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.901363][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4802'. [ 542.016375][T17103] loop6: detected capacity change from 0 to 4096 [ 542.040219][T16951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.055969][T17103] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 542.085361][T16951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.138929][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.232508][T16951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.275504][T17103] ntfs: volume version 3.1. [ 542.347391][T17115] binder: BINDER_SET_CONTEXT_MGR already set [ 542.373630][T17103] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251. You might want to try to use the mount option nls=utf8. [ 542.379752][T17115] binder: 17113:17115 ioctl 40046207 0 returned -16 [ 542.410942][T16951] device hsr_slave_0 entered promiscuous mode [ 542.422613][T17103] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 542.458060][T16951] device hsr_slave_1 entered promiscuous mode [ 542.516206][T16951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.528779][T16951] Cannot create hsr debugfs directory [ 543.019685][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 543.074256][T17129] loop2: detected capacity change from 0 to 4096 [ 543.161800][T16951] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 543.182706][T17129] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 543.222727][T16951] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 543.279817][ T27] audit: type=1800 audit(1770916281.856:375): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4812" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 543.362843][T16951] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 543.472175][T16951] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 543.496623][T15264] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 543.508216][ T4272] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 543.556493][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 543.574087][ T4272] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 543.599999][ T8337] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 543.628175][ T4272] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 543.818657][T16951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.881901][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.904197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.941995][T16951] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.963976][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.990272][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.054962][T15244] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.062154][T15244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.128010][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.187988][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.210851][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.245507][T15244] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.252720][T15244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.292723][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.345907][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.357813][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.374670][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.391916][T17174] loop6: detected capacity change from 0 to 1024 [ 544.421082][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.454124][T17174] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 544.465722][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.477495][T17174] syz.6.4827: attempt to access beyond end of device [ 544.477495][T17174] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 544.502021][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.520350][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.528802][T17174] buffer_io_error: 70 callbacks suppressed [ 544.528819][T17174] Buffer I/O error on dev loop6, logical block 458752, async page read [ 544.550286][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.569814][T17174] syz.6.4827: attempt to access beyond end of device [ 544.569814][T17174] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 544.584633][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.603349][T16951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.624893][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.635472][T17174] Buffer I/O error on dev loop6, logical block 458752, async page read [ 544.857930][T17162] loop2: detected capacity change from 0 to 40427 [ 544.946027][T17162] F2FS-fs (loop2): invalid crc value [ 544.990555][T17162] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 545.259703][T17162] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 545.299959][T17162] F2FS-fs (loop2): Start checkpoint disabled! [ 545.356055][T17162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 545.460906][T15264] kworker/u4:10: attempt to access beyond end of device [ 545.460906][T15264] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 545.730369][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.738251][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.823572][T16951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.114162][T17232] loop0: detected capacity change from 0 to 512 [ 546.151475][T17232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.174183][T17235] loop8: detected capacity change from 0 to 1024 [ 546.219761][ T5064] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 546.261678][T17232] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 546.303116][T17232] ext4 filesystem being mounted at /954/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.389039][ T33] hfsplus: b-tree write err: -5, ino 4 [ 546.454514][ T5064] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 546.479120][ T5064] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.523695][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 546.531820][ T5064] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.538564][ T5064] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 546.606611][T17245] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 546.613522][ T5064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.638770][T17245] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 546.705119][T17245] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 546.735643][ T5064] usb 3-1: config 0 descriptor?? [ 546.738926][T17245] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 546.770164][T17245] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 546.780401][T17226] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.798435][T17245] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 546.809871][T17245] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 546.839952][T17245] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 546.877074][T17245] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 546.898016][T17245] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 546.933943][T17245] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 546.949747][T17245] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 546.956484][T17245] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 547.003348][T17245] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 547.063225][T17245] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 547.096985][T17245] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 547.115435][T17259] loop6: detected capacity change from 0 to 2048 [ 547.122991][T17245] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 547.196920][T17259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.211083][ T5064] uclogic 0003:28BD:0094.0038: interface is invalid, ignoring [ 547.346228][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.389126][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.410867][T16365] usb 3-1: USB disconnect, device number 28 [ 547.462053][T17268] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 547.522243][T16951] device veth0_vlan entered promiscuous mode [ 547.565793][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.579897][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.613612][T16951] device veth1_vlan entered promiscuous mode [ 547.627881][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.637112][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.639862][ T4308] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 547.671305][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.713698][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.729224][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.751468][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.769035][T16951] device veth0_macvtap entered promiscuous mode [ 547.794431][T16951] device veth1_macvtap entered promiscuous mode [ 547.831587][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.839551][ T4308] usb 9-1: Using ep0 maxpacket: 32 [ 547.847815][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.851043][ T4308] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.859055][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.904684][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.914760][ T4308] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.924943][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.939815][T17281] loop6: detected capacity change from 0 to 256 [ 547.946321][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.967648][ T4308] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 547.985513][ T4308] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 548.004272][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.039635][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.047053][ T4308] usb 9-1: Product: syz [ 548.069394][T17281] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 548.079488][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.098586][ T4308] usb 9-1: Manufacturer: syz [ 548.142805][ T4308] hub 9-1:4.0: USB hub found [ 548.143922][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.204185][T16951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.236499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.243685][T17281] exFAT-fs (loop6): hint_cluster is invalid (17) [ 548.247102][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.260273][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.277567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.305665][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.347113][ T4308] hub 9-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 548.360273][T17292] loop2: detected capacity change from 0 to 256 [ 548.381552][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.408074][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.432585][T17292] FAT-fs (loop2): Directory bread(block 64) failed [ 548.447373][T17292] FAT-fs (loop2): Directory bread(block 65) failed [ 548.459027][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.477476][T17292] FAT-fs (loop2): Directory bread(block 66) failed [ 548.487959][T17292] FAT-fs (loop2): Directory bread(block 67) failed [ 548.500115][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.511814][T17292] FAT-fs (loop2): Directory bread(block 68) failed [ 548.518639][T17292] FAT-fs (loop2): Directory bread(block 69) failed [ 548.525619][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.554722][T17292] FAT-fs (loop2): Directory bread(block 70) failed [ 548.563568][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.581500][T17292] FAT-fs (loop2): Directory bread(block 71) failed [ 548.588182][T17292] FAT-fs (loop2): Directory bread(block 72) failed [ 548.604869][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.616056][T17292] FAT-fs (loop2): Directory bread(block 73) failed [ 548.629065][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.650949][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.700097][ T22] usb 9-1: USB disconnect, device number 11 [ 548.731885][T16951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.740217][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.768289][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.833719][T16951] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.853183][T16951] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.886101][T16951] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.918805][T16951] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.165454][T17312] net_ratelimit: 12 callbacks suppressed [ 549.165471][T17312] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 549.212677][T15264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.229675][T15264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.261431][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.348684][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.380608][T17315] device syz_tun entered promiscuous mode [ 549.390332][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.419911][T17315] device macvtap1 entered promiscuous mode [ 549.458033][T17315] device syz_tun left promiscuous mode [ 549.568406][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.833366][T17310] loop2: detected capacity change from 0 to 32768 [ 549.867224][T17310] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 549.926944][T17330] loop9: detected capacity change from 0 to 256 [ 550.024361][T17332] loop8: detected capacity change from 0 to 1024 [ 550.040837][T17330] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 550.171224][T17330] exFAT-fs (loop9): hint_cluster is invalid (17) [ 550.243574][ T4349] hfsplus: b-tree write err: -5, ino 4 [ 550.258795][ T9444] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 550.669893][T17349] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 551.210261][T17365] loop2: detected capacity change from 0 to 8192 [ 551.862633][T17393] UHID_CREATE from different security context by process 2210 (syz.2.4900), this is not allowed. [ 551.916415][T17397] loop6: detected capacity change from 0 to 16 [ 551.921601][T17395] loop8: detected capacity change from 0 to 512 [ 552.009288][T17397] erofs: (device loop6): mounted with root inode @ nid 36. [ 552.026087][T17395] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 552.044751][T17355] loop9: detected capacity change from 0 to 32768 [ 552.087096][T17395] FAT-fs (loop8): Directory bread(block 1056) failed [ 552.087534][T17397] syz.6.4902: attempt to access beyond end of device [ 552.087534][T17397] loop6: rw=0, sector=36, nr_sectors = 1 limit=16 [ 552.101963][T17395] FAT-fs (loop8): Directory bread(block 1057) failed [ 552.176440][T17395] FAT-fs (loop8): Directory bread(block 1058) failed [ 552.198612][T17395] FAT-fs (loop8): Directory bread(block 1059) failed [ 552.215888][T17403] syz.6.4902: attempt to access beyond end of device [ 552.215888][T17403] loop6: rw=0, sector=36, nr_sectors = 1 limit=16 [ 552.259668][T17395] FAT-fs (loop8): Directory bread(block 1060) failed [ 552.300338][T17395] FAT-fs (loop8): Directory bread(block 1061) failed [ 552.307291][T17395] FAT-fs (loop8): Directory bread(block 1062) failed [ 552.326490][T17395] FAT-fs (loop8): Directory bread(block 1063) failed [ 552.374115][T17408] loop0: detected capacity change from 0 to 256 [ 552.389630][T17395] FAT-fs (loop8): Directory bread(block 1056) failed [ 552.426382][T17395] FAT-fs (loop8): Directory bread(block 1057) failed [ 552.463849][T17408] FAT-fs (loop0): Directory bread(block 64) failed [ 552.547620][T17408] FAT-fs (loop0): Directory bread(block 65) failed [ 552.576579][T17408] FAT-fs (loop0): Directory bread(block 66) failed [ 552.627129][T17408] FAT-fs (loop0): Directory bread(block 67) failed [ 552.700821][T17408] FAT-fs (loop0): Directory bread(block 68) failed [ 552.719543][T17408] FAT-fs (loop0): Directory bread(block 69) failed [ 552.726202][T17408] FAT-fs (loop0): Directory bread(block 70) failed [ 552.786311][T17418] loop8: detected capacity change from 0 to 16 [ 552.801917][T17408] FAT-fs (loop0): Directory bread(block 71) failed [ 552.839638][T17408] FAT-fs (loop0): Directory bread(block 72) failed [ 552.869307][T17418] erofs: (device loop8): mounted with root inode @ nid 36. [ 552.909667][T17408] FAT-fs (loop0): Directory bread(block 73) failed [ 552.982487][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'. [ 553.046630][T17424] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4912'. [ 554.077124][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4927'. [ 554.121338][T17469] device hsr0 left promiscuous mode [ 554.899256][T17487] loop8: detected capacity change from 0 to 4096 [ 554.936280][T17487] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 554.989935][T17487] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 4096) [ 555.065788][T17498] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.288729][T17503] loop0: detected capacity change from 0 to 1024 [ 555.542600][ T5090] hfsplus: b-tree write err: -5, ino 4 [ 555.757957][T17518] loop2: detected capacity change from 0 to 2048 [ 555.866461][T17524] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.546914][T17547] loop2: detected capacity change from 0 to 2048 [ 556.558988][T17549] loop0: detected capacity change from 0 to 256 [ 556.602579][T17549] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.631465][T17550] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.679834][T17549] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 556.755671][T17549] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 556.975779][T17558] loop9: detected capacity change from 0 to 16 [ 557.010312][T17529] loop8: detected capacity change from 0 to 32768 [ 557.037466][T17558] erofs: (device loop9): mounted with root inode @ nid 36. [ 557.080567][T17529] ERROR: (device loop8): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 557.080567][T17529] [ 557.164323][T17529] ERROR: (device loop8): remounting filesystem as read-only [ 557.215202][T17529] ERROR: (device loop8): jfs_unlink: [ 557.215202][T17529] [ 557.237760][T17563] loop0: detected capacity change from 0 to 2048 [ 557.310689][ T107] BUG: Bad page state in process jfsCommit pfn:2efcf [ 557.317746][ T107] page:ffffea0000bbf3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x2efcf [ 557.370656][T17563] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 557.380715][ T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 557.380764][ T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 557.380779][ T107] raw: 000000000000001c ffff88807dc17ba0 00000000ffffffff 0000000000000000 [ 557.380789][ T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 557.380804][ T107] page_owner tracks the page as allocated [ 557.380812][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 17529, tgid 17528 (syz.8.4949), ts 557076049442, free_ts 557021377462 [ 557.380843][ T107] post_alloc_hook+0x173/0x1a0 [ 557.380872][ T107] get_page_from_freelist+0x1a1e/0x1ab0 [ 557.380895][ T107] __alloc_pages+0x1ec/0x4f0 [ 557.380917][ T107] folio_alloc+0x1c/0x60 [ 557.380938][ T107] filemap_alloc_folio+0xdb/0x480 [ 557.473688][T17568] loop9: detected capacity change from 0 to 256 [ 557.533415][T17573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.597664][T17573] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 557.600475][T17568] netlink: 240 bytes leftover after parsing attributes in process `syz.9.4963'. [ 557.626476][T17573] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 557.664322][ T107] do_read_cache_folio+0x1bb/0x760 [ 557.683767][T17573] Remounting filesystem read-only [ 557.694501][ T107] do_read_cache_page+0x32/0x220 [ 557.712023][ T107] __get_metapage+0x316/0xfa0 [ 557.729956][ T107] diRead+0x6f7/0xbb0 [ 557.752018][ T107] jfs_iget+0x89/0x3f0 [ 557.766451][ T107] jfs_fill_super+0x70e/0xad0 [ 557.790506][ T107] mount_bdev+0x287/0x3c0 [ 557.802626][ T107] legacy_get_tree+0xe6/0x180 [ 557.813322][ T107] vfs_get_tree+0x88/0x270 [ 557.825689][ T107] do_new_mount+0x24a/0xa40 [ 557.848278][ T107] __se_sys_mount+0x2e3/0x3d0 [ 557.859011][ T107] page last free stack trace: [ 557.864831][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 557.873262][ T107] free_unref_page_list+0xbb/0x8e0 [ 557.879820][ T107] release_pages+0x1fa6/0x2220 [ 557.885183][ T107] tlb_flush_mmu+0x105/0x220 [ 557.891193][ T107] tlb_finish_mmu+0xbd/0x1c0 [ 557.896344][ T107] exit_mmap+0x384/0x960 [ 557.901555][ T107] __mmput+0x118/0x3c0 [ 557.905846][ T107] exit_mm+0x1fe/0x2d0 [ 557.912510][ T107] do_exit+0x905/0x2480 [ 557.916889][ T107] do_group_exit+0x217/0x2d0 [ 557.923910][ T107] get_signal+0x1272/0x1350 [ 557.928549][ T107] arch_do_signal_or_restart+0xc4/0x1350 [ 557.934964][ T107] exit_to_user_mode_loop+0x70/0x110 [ 557.940751][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 557.946641][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 557.953100][ T107] do_syscall_64+0x58/0xa0 [ 557.957783][ T107] Modules linked in: [ 557.957908][T13477] ERROR: (device loop8): xtTruncate: XT_GETPAGE: xtree page corrupt [ 557.957908][T13477] [ 557.962418][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 557.979652][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 557.990192][ T107] Call Trace: [ 557.993753][ T107] [ 557.996715][ T107] dump_stack_lvl+0x188/0x24e [ 557.997659][T13477] ERROR: (device loop8): remounting filesystem as read-only [ 558.001799][ T107] ? show_regs_print_info+0x12/0x12 [ 558.001832][ T107] ? swiotlb_print_info+0x60/0x60 [ 558.001858][ T107] bad_page+0x14b/0x170 [ 558.001875][ T107] free_unref_page_prepare+0x42a/0x9a0 [ 558.001901][ T107] free_unref_page+0x2e/0x3f0 [ 558.001922][ T107] ? __folio_put+0xf1/0x210 [ 558.001943][ T107] txUnlock+0x27e/0xcb0 [ 558.001971][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 558.001990][ T107] jfs_lazycommit+0x56a/0xa70 [ 558.002016][ T107] ? txFreelock+0x5a0/0x5a0 [ 558.002035][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 558.002054][ T107] ? do_task_dead+0xd0/0xd0 [ 558.002078][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 558.002099][ T107] ? __kthread_parkme+0x162/0x1c0 [ 558.002129][ T107] kthread+0x29d/0x330 [ 558.002151][ T107] ? txFreelock+0x5a0/0x5a0 [ 558.002171][ T107] ? kthread_blkcg+0xd0/0xd0 [ 558.002186][ T107] ret_from_fork+0x1f/0x30 [ 558.002217][ T107] [ 558.105851][ T4274] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 558.140171][ T107] Disabling lock debugging due to kernel taint [ 558.146639][ T107] page:ffffea0000bbf3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x2efcf [ 558.158593][ T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 558.172979][ T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 558.182295][ T107] raw: 000000000000001c ffff88807dc17ba0 00000000ffffffff 0000000000000000 [ 558.195151][ T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 558.212172][ T107] page_owner tracks the page as allocated [ 558.221367][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 17529, tgid 17528 (syz.8.4949), ts 557076049442, free_ts 557021377462 [ 558.241796][ T107] post_alloc_hook+0x173/0x1a0 [ 558.246689][ T107] get_page_from_freelist+0x1a1e/0x1ab0 [ 558.252433][ T107] __alloc_pages+0x1ec/0x4f0 [ 558.257169][ T107] folio_alloc+0x1c/0x60 [ 558.263250][ T107] filemap_alloc_folio+0xdb/0x480 [ 558.268570][ T107] do_read_cache_folio+0x1bb/0x760 [ 558.274375][ T107] do_read_cache_page+0x32/0x220 [ 558.281648][ T107] __get_metapage+0x316/0xfa0 [ 558.286465][ T107] diRead+0x6f7/0xbb0 [ 558.290669][ T107] jfs_iget+0x89/0x3f0 [ 558.294830][ T107] jfs_fill_super+0x70e/0xad0 [ 558.302210][ T107] mount_bdev+0x287/0x3c0 [ 558.319872][ T107] legacy_get_tree+0xe6/0x180 [ 558.324731][ T107] vfs_get_tree+0x88/0x270 [ 558.335288][ T107] do_new_mount+0x24a/0xa40 [ 558.344699][ T107] __se_sys_mount+0x2e3/0x3d0 [ 558.349678][ T107] page last free stack trace: [ 558.354645][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 558.360406][ T107] free_unref_page_list+0xbb/0x8e0 [ 558.365644][ T107] release_pages+0x1fa6/0x2220 [ 558.370833][ T107] tlb_flush_mmu+0x105/0x220 [ 558.375695][ T107] tlb_finish_mmu+0xbd/0x1c0 [ 558.380613][ T107] exit_mmap+0x384/0x960 [ 558.384888][ T107] __mmput+0x118/0x3c0 [ 558.388988][ T107] exit_mm+0x1fe/0x2d0 [ 558.393809][ T107] do_exit+0x905/0x2480 [ 558.398010][ T107] do_group_exit+0x217/0x2d0 [ 558.404597][ T107] get_signal+0x1272/0x1350 [ 558.409199][ T107] arch_do_signal_or_restart+0xc4/0x1350 [ 558.415549][ T107] exit_to_user_mode_loop+0x70/0x110 [ 558.421108][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 558.426792][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 558.433038][ T107] do_syscall_64+0x58/0xa0 [ 558.437980][ T107] ------------[ cut here ]------------ [ 558.443608][ T107] kernel BUG at include/linux/mm.h:1146! [ 558.449282][ T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 558.455580][ T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G B syzkaller #0 [ 558.464423][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 558.474658][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 558.480138][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 9b c3 e0 fe e9 25 ff ff ff e8 d1 d7 8f fe 48 8b 3c 24 48 c7 c6 40 30 c6 8a e8 31 ee ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a db 8f [ 558.500196][ T107] RSP: 0018:ffffc90002687ce0 EFLAGS: 00010246 [ 558.506290][ T107] RAX: c5e9e41c9c1f3c00 RBX: ffff88807dc17ba0 RCX: c5e9e41c9c1f3c00 [ 558.514264][ T107] RDX: 0000000000000000 RSI: ffffffff8adf0d00 RDI: ffffffff8adf0cc0 [ 558.522850][ T107] RBP: 000000000000007f R08: ffffffff8e1fcc2f R09: 1ffffffff1c3f985 [ 558.530913][ T107] R10: dffffc0000000000 R11: fffffbfff1c3f986 R12: ffff88807dc17bc8 [ 558.538980][ T107] R13: ffffea0000bbf3f4 R14: 1ffff1100fb82f79 R15: 1ffff1100fb82f86 [ 558.547228][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 558.556430][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.563026][ T107] CR2: 00005590fd0fa4b0 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 558.571178][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.579589][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.588424][ T107] Call Trace: [ 558.591716][ T107] [ 558.594666][ T107] txUnlock+0x427/0xcb0 [ 558.599189][ T107] jfs_lazycommit+0x56a/0xa70 [ 558.603864][ T107] ? txFreelock+0x5a0/0x5a0 [ 558.608467][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 558.614651][ T107] ? do_task_dead+0xd0/0xd0 [ 558.619603][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 558.625509][ T107] ? __kthread_parkme+0x162/0x1c0 [ 558.630567][ T107] kthread+0x29d/0x330 [ 558.634838][ T107] ? txFreelock+0x5a0/0x5a0 [ 558.639624][ T107] ? kthread_blkcg+0xd0/0xd0 [ 558.644492][ T107] ret_from_fork+0x1f/0x30 [ 558.649028][ T107] [ 558.652069][ T107] Modules linked in: [ 558.669544][ T107] ---[ end trace 0000000000000000 ]--- [ 558.675560][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 558.682756][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 9b c3 e0 fe e9 25 ff ff ff e8 d1 d7 8f fe 48 8b 3c 24 48 c7 c6 40 30 c6 8a e8 31 ee ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a db 8f [ 558.703965][ T107] RSP: 0018:ffffc90002687ce0 EFLAGS: 00010246 [ 558.710629][ T107] RAX: c5e9e41c9c1f3c00 RBX: ffff88807dc17ba0 RCX: c5e9e41c9c1f3c00 [ 558.718880][ T107] RDX: 0000000000000000 RSI: ffffffff8adf0d00 RDI: ffffffff8adf0cc0 [ 558.726950][ T107] RBP: 000000000000007f R08: ffffffff8e1fcc2f R09: 1ffffffff1c3f985 [ 558.735326][ T107] R10: dffffc0000000000 R11: fffffbfff1c3f986 R12: ffff88807dc17bc8 [ 558.744622][ T107] R13: ffffea0000bbf3f4 R14: 1ffff1100fb82f79 R15: 1ffff1100fb82f86 [ 558.752784][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 558.765022][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.774954][ T107] CR2: 00007ffec4298200 CR3: 0000000029106000 CR4: 00000000003506e0 [ 558.784903][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.793813][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.802115][ T107] Kernel panic - not syncing: Fatal exception [ 558.808752][ T107] Kernel Offset: disabled [ 558.813523][ T107] Rebooting in 86400 seconds..