last executing test programs: 5.219117047s ago: executing program 1 (id=893): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) 4.963734474s ago: executing program 1 (id=897): r0 = socket(0xa, 0x2, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902"], 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0x1c, &(0x7f0000000200)={&(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x5dc}, 0x5}, 0x0) 4.573292281s ago: executing program 4 (id=900): unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 4.448445519s ago: executing program 4 (id=901): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x800}}, {@overriderock}, {@overriderock}, {@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@cruft}, {@unhide}, {@cruft}, {@mode={'mode', 0x3d, 0x8}}, {@session={'session', 0x3d, 0x40}}]}, 0x4, 0xa12, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.236598974s ago: executing program 4 (id=903): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040bd2809090000000000010902240001000000000904400002030000000921000000012205000905810360"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "96cf62ab"}]}}, 0x0}, 0x0) 3.286318418s ago: executing program 1 (id=913): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4008f510, 0x0) 2.548839778s ago: executing program 0 (id=921): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES16=0x0], 0x1, 0x1a2, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000200000003"], 0x0) 2.300674705s ago: executing program 3 (id=924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a0000000000080009000000000008000a00000000000c000b8008000900000000001c000b8008000c00000000000800090000000000080009000000000024000b80080009000000000008000900000000000800090000000000080009000000000054000b8008000a000000000008000a000000000008"], 0x16c}}, 0x0) 2.101252398s ago: executing program 0 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.07334299s ago: executing program 3 (id=928): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) 1.934926069s ago: executing program 3 (id=929): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4096, 0x0, 0x1000, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) 1.852583595s ago: executing program 2 (id=930): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 1.852308795s ago: executing program 0 (id=931): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 1.849731275s ago: executing program 1 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60e, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.825602677s ago: executing program 4 (id=933): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000480)={&(0x7f0000000380)={0x18, 0x3e, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) 1.752711342s ago: executing program 3 (id=934): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000580)=ANY=[@ANYBLOB='quiet,umask=0000000000005,iocharset=iso8859-3,\x00'/57], 0x11, 0x2b6, &(0x7f0000000200)="$eJzs3U9rE0EYx/HfbNI22lK3tiJ4rBb0Ilov4iUieRGeRG0iFENFrfjnVMWTiN69+xZ8EV4U34CePPkC6mllZifZJLvZTUOTber3Aw2b7D47z2T/zDyBsgLw37rV+Pn52m/7Z6SKKtK7G1IgqSZVJZ3R2dqznd3t3Xarmbejiouwf0ZxpElts7XTygq1cS7CC+27qpZ6P8NkRFF081fZSaB07urPEEgL/up062tTzyzf6zHj9g45j1lj9rWvF1ouOw8AQLn8+B/4cX7Jz9+DQNrww/6RHP/HtV92AhMX5a7tGf9dlRUZe3xPuVVJvedKOLs+6FSJo7Q8N/B+XvGZ1TfBNEVVpcslOPFgu926vPWo3Qz0RnWvZ7M199qMT92OgmzXM2rTHCP03WTPKBddH+ZsHzbj/J9L6st/dcwWx2a+mu/mjgn1Sc3u/K8aGXuY3JEKB45UnP+V4Xt0vQztVvK3jXq9HvRtsuIaOedb8Ap6WcuuSNQ5o1bU/wNBWJSnizo9EBX37mpB1Gpm1Gbn3ZCotb4o25vu2Ty8vUkzH8xts64/+qJGz/w/sPltKPfKTK4asxEPBe4bj/szn91c1e0zTI0c6cul+y0uDEv9b/49DQfwXvd1XctPX756WGm3W0/swr2MhcdL3U/m3kqZ25S8oL3kkwVFTmrjzqA0zcQuHeoO7f2jcGN7lR2Jg3KsFxrfpnsilbFQ8v0JU5Ec9LIzQUnsvMvE9V9Sr1TjyZ59CTPn6SP+EOD3GNk5dreCS2KjeEYu6eSBKrjF4RVcuuZK1Yyu5jp/Uboweouhz/OYMA390F1+/wcAAAAAAAAAAAAAAAAAAJg10/h3grL7CAAAAAAAAAAAAAAAAAAAAADArOs+/1ed5/9qtOf/Dj6K5TCf//txRzz/F5i8fwEAAP//FZd8vg==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) 1.716902134s ago: executing program 0 (id=935): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 1.606294672s ago: executing program 4 (id=936): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x5546, &(0x7f0000010140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 1.532387457s ago: executing program 0 (id=937): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x41, 0x9755, &(0x7f0000012ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4048587b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 1.442713143s ago: executing program 3 (id=938): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x810c90, &(0x7f00000002c0)={[{@errors_continue}, {@utf8}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x1, 0x1519, &(0x7f0000002280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.153434873s ago: executing program 1 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.105518726s ago: executing program 3 (id=940): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)={[{@commit}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@acl}, {@localflocks}]}, 0x1, 0x4422, &(0x7f0000004480)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 976.105204ms ago: executing program 1 (id=941): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d85901a0"}, @main=@item_012={0x1, 0x0, 0x0, '}'}]}}, 0x0}, 0x0) 703.476583ms ago: executing program 2 (id=942): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 554.550113ms ago: executing program 2 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xa}]}, 0x3c}}, 0x0) 399.653644ms ago: executing program 2 (id=944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f89bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 176.239968ms ago: executing program 0 (id=945): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x200000) unshare(0x400) open_by_handle_at(r0, &(0x7f0000000300)=@reiserfs_5={0x14, 0x5, {0x5, 0x1, 0x9, 0x0, 0x9}}, 0x130080) 175.881269ms ago: executing program 2 (id=946): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d307830303030303030303030303030382c756e686964652c756e686964652c6769643d0000256b54778c2300540ba59f221bcfba00021b92d6b97c0c8e60f526f5d33b1b18", @ANYRESHEX=0x0, @ANYBLOB=',norock,iocharset=iso8859-15,norock,\x00'], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) 21.692969ms ago: executing program 4 (id=947): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000bc0)={[{@gid}, {@noquota}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@nointegrity, 0x0}, {@gid}, {@quota}, {@usrquota}, {@resize}, {@gid}, {@discard}, {@noquota}, {@noquota}]}, 0x1, 0x60a5, &(0x7f0000006400)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 2 (id=948): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) kernel console output (not intermixed with test programs): -1: USB disconnect, device number 2 [ 68.447711][ T14] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.474203][ T14] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.498256][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.510078][ T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 68.539542][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.566857][ T14] usb 2-1: config 0 descriptor?? [ 68.703081][ T3688] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.808876][ T3787] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 68.817421][ T3787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 68.973610][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 69.034892][ T3791] loop4: detected capacity change from 0 to 512 [ 69.041456][ T3793] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 69.044575][ T3779] loop3: detected capacity change from 0 to 32768 [ 69.071189][ T14] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 69.089273][ T3779] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.27 (3779) [ 69.102347][ T3791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.102567][ T14] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 69.126597][ T3791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.145304][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.165478][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.176414][ T3688] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 69.187598][ T3791] EXT4-fs (loop4): 1 truncate cleaned up [ 69.188244][ T14] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0002/input/input5 [ 69.205755][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.223867][ T3791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.250009][ T3688] usb 3-1: config 0 descriptor?? [ 69.260982][ T3779] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 69.277413][ T3779] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 69.309428][ T14] usb 2-1: USB disconnect, device number 2 [ 69.322934][ T3779] BTRFS info (device loop3): using free space tree [ 69.520328][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 69.575837][ T3809] loop0: detected capacity change from 0 to 1764 [ 69.643664][ T3630] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.687477][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 69.721081][ T3779] BTRFS info (device loop3): enabling ssd optimizations [ 69.750964][ T3688] apple 0003:05AC:027D.0003: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 69.954769][ T3648] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 69.977302][ T26] usb 3-1: USB disconnect, device number 3 [ 70.146924][ T3831] loop0: detected capacity change from 0 to 1024 [ 70.299286][ T3831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.576455][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 70.979456][ T3866] loop1: detected capacity change from 0 to 24 [ 71.137189][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.143840][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.609484][ T3881] loop4: detected capacity change from 0 to 8192 [ 71.630134][ T3891] loop2: detected capacity change from 0 to 1024 [ 71.659219][ T3881] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.759332][ T3881] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 71.811297][ T3881] REISERFS (device loop4): using ordered data mode [ 71.862907][ T3881] reiserfs: using flush barriers [ 71.891036][ T3881] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 8388382, max trans age 30 [ 71.939484][ T3881] REISERFS (device loop4): checking transaction log (loop4) [ 71.956607][ T3881] REISERFS (device loop4): Using r5 hash to sort names [ 72.014629][ T11] hfsplus: b-tree write err: -5, ino 4 [ 72.166235][ T3902] loop2: detected capacity change from 0 to 1024 [ 72.207575][ T3902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.226551][ T3900] loop0: detected capacity change from 0 to 4096 [ 72.270146][ T3900] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 72.349253][ T3900] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.374082][ T3902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.454921][ T3889] loop1: detected capacity change from 0 to 32768 [ 72.476079][ T3889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (3889) [ 72.521112][ T3889] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.536923][ T3889] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 72.569648][ T3898] loop3: detected capacity change from 0 to 32768 [ 72.592899][ T3889] BTRFS info (device loop1): using free space tree [ 72.609319][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 72.642630][ T3898] XFS: ikeep mount option is deprecated. [ 72.836529][ T3898] XFS (loop3): Mounting V5 Filesystem [ 72.944799][ T3889] BTRFS info (device loop1): enabling ssd optimizations [ 73.035984][ T3898] XFS (loop3): Ending clean mount [ 73.086877][ T3898] XFS (loop3): Quotacheck needed: Please wait. [ 73.163123][ T3898] XFS (loop3): Quotacheck: Done. [ 73.330868][ T3648] XFS (loop3): Unmounting Filesystem [ 73.410523][ T3638] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.246818][ T3654] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 74.326191][ T3947] loop2: detected capacity change from 0 to 32768 [ 74.387759][ T3947] XFS: attr2 mount option is deprecated. [ 74.538724][ T3947] XFS (loop2): Mounting V5 Filesystem [ 74.720471][ T3947] XFS (loop2): Ending clean mount [ 74.743735][ T3947] XFS (loop2): Quotacheck needed: Please wait. [ 74.803575][ T3993] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 74.814094][ T3947] XFS (loop2): Quotacheck: Done. [ 75.001357][ T3644] XFS (loop2): Unmounting Filesystem [ 75.025275][ T3971] loop0: detected capacity change from 0 to 32768 [ 75.152245][ T3971] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.176048][ T3971] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.225455][ T3971] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 75.226818][ T3965] loop1: detected capacity change from 0 to 40427 [ 75.247396][ T3840] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.257105][ T3840] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.303275][ T3965] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 75.318677][ T3965] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.389403][ T3965] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.430837][ T3840] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 173ms [ 75.450273][ T3840] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.467579][ T3971] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.540128][ T3965] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.557568][ T3965] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.691306][ T4004] loop2: detected capacity change from 0 to 8192 [ 75.738715][ T4004] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 76.192358][ T4011] loop1: detected capacity change from 0 to 64 [ 76.247286][ T4002] loop3: detected capacity change from 0 to 32768 [ 76.261988][ T4002] ======================================================= [ 76.261988][ T4002] WARNING: The mand mount option has been deprecated and [ 76.261988][ T4002] and is ignored by this kernel. Remove the mand [ 76.261988][ T4002] option from the mount to silence this warning. [ 76.261988][ T4002] ======================================================= [ 76.456360][ T4002] XFS (loop3): Mounting V5 Filesystem [ 76.648274][ T4026] loop1: detected capacity change from 0 to 256 [ 76.754909][ T4002] XFS (loop3): Ending clean mount [ 76.770918][ T4002] XFS (loop3): Quotacheck needed: Please wait. [ 76.903232][ T4002] XFS (loop3): Quotacheck: Done. [ 77.100688][ T3648] XFS (loop3): Unmounting Filesystem [ 78.210498][ T4070] loop4: detected capacity change from 0 to 128 [ 78.309073][ T4070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.361986][ T4070] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 78.446765][ T4037] loop2: detected capacity change from 0 to 40427 [ 78.511598][ T4037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.523571][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 78.612871][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.671599][ T4037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.874165][ T3644] syz-executor: attempt to access beyond end of device [ 78.874165][ T3644] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.023040][ T14] usb 1-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 79.056575][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.086837][ T14] usb 1-1: config 0 descriptor?? [ 79.359385][ T4107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.143'. [ 79.370791][ T4107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.385005][ T4109] loop1: detected capacity change from 0 to 128 [ 79.393124][ T4107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.434150][ T4107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.475278][ T4107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.503829][ T4109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.144'. [ 79.514604][ T4107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.535631][ T4107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.545835][ T4109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.144'. [ 79.580205][ T4107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.591051][ T14] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 79.604134][ T4107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.620587][ T14] mxuport: probe of 1-1:0.0 failed with error -5 [ 79.651031][ T4107] device batadv_slave_1 entered promiscuous mode [ 79.709629][ T4095] loop4: detected capacity change from 0 to 32768 [ 79.749830][ T4095] XFS: noikeep mount option is deprecated. [ 79.770876][ T4115] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.809650][ T4114] loop1: detected capacity change from 0 to 512 [ 79.814069][ T14] usb 1-1: USB disconnect, device number 3 [ 79.831939][ T4114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.849765][ T4115] CIFS: Unable to determine destination address [ 79.889639][ T4114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 79.908254][ T4114] System zones: 1-12 [ 79.910503][ T4095] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 79.957992][ T4114] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.981989][ T4114] EXT4-fs (loop1): 1 truncate cleaned up [ 79.989130][ T4114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.037045][ T4095] XFS (loop4): Quotacheck needed: Please wait. [ 80.108616][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 80.200491][ T4095] XFS (loop4): Quotacheck: Done. [ 80.253131][ T4138] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 80.345779][ T3639] XFS (loop4): Unmounting Filesystem [ 80.916835][ T4135] loop2: detected capacity change from 0 to 32768 [ 80.942572][ T4135] XFS: ikeep mount option is deprecated. [ 80.977020][ T4135] XFS: noikeep mount option is deprecated. [ 81.044399][ T4157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.160'. [ 81.056320][ T4162] loop3: detected capacity change from 0 to 256 [ 81.058876][ T4135] XFS (loop2): Mounting V5 Filesystem [ 81.092035][ T4162] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 81.211820][ T4135] XFS (loop2): Ending clean mount [ 81.243030][ T4135] XFS (loop2): Quotacheck needed: Please wait. [ 81.281482][ T4135] XFS (loop2): Quotacheck: Done. [ 81.304664][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 81.332987][ T3688] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.383667][ T2617] cfg80211: failed to load regulatory.db [ 81.467571][ T4174] loop0: detected capacity change from 0 to 2048 [ 81.528500][ T3644] XFS (loop2): Unmounting Filesystem [ 81.540054][ T4174] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 81.563581][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 81.579694][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 81.593959][ T4179] netlink: 'syz.3.168': attribute type 5 has an invalid length. [ 81.613909][ T4174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.733114][ T3688] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.741765][ T3688] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.789495][ T3688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.833203][ T3688] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 81.858657][ T3688] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 81.869049][ T4185] loop1: detected capacity change from 0 to 1024 [ 81.931009][ T4185] hfsplus: bad catalog entry type [ 82.003285][ T3688] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.022579][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.049099][ T3688] usb 5-1: Product: syz [ 82.053739][ T3683] hfsplus: b-tree write err: -5, ino 4 [ 82.063342][ T3688] usb 5-1: Manufacturer: syz [ 82.123978][ T3688] cdc_wdm 5-1:1.0: skipping garbage [ 82.129234][ T3688] cdc_wdm 5-1:1.0: skipping garbage [ 82.151250][ T3688] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 82.174519][ T3688] cdc_wdm 5-1:1.0: Unknown control protocol [ 82.320351][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 82.362897][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.418367][ T3840] usb 5-1: USB disconnect, device number 2 [ 82.475625][ T4183] loop3: detected capacity change from 0 to 32768 [ 82.542179][ T4183] XFS (loop3): Mounting V5 Filesystem [ 82.688795][ T4212] loop2: detected capacity change from 0 to 4096 [ 82.697850][ T4212] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 82.717010][ T4183] XFS (loop3): Ending clean mount [ 82.730366][ T4183] XFS (loop3): Quotacheck needed: Please wait. [ 82.753891][ T14] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 82.765757][ T4183] XFS (loop3): Quotacheck: Done. [ 82.793480][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.828947][ T14] usb 1-1: config 0 descriptor?? [ 82.884732][ T14] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 82.946586][ T3648] XFS (loop3): Unmounting Filesystem [ 83.359977][ T4230] mmap: syz.4.191 (4230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.412604][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 83.491370][ T4235] loop3: detected capacity change from 0 to 128 [ 83.498063][ T4236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 83.529425][ T4235] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.544158][ T14] gspca_sonixj: reg_w1 err -71 [ 83.552898][ T14] sonixj: probe of 1-1:0.0 failed with error -71 [ 83.579703][ T14] usb 1-1: USB disconnect, device number 4 [ 84.228346][ T4264] Bluetooth: MGMT ver 1.22 [ 84.499296][ T4274] loop0: detected capacity change from 0 to 4096 [ 84.512416][ T4279] loop1: detected capacity change from 0 to 1024 [ 84.526585][ T4274] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 84.568961][ T4279] hfsplus: bad catalog entry type [ 84.626870][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.655323][ T11] hfsplus: b-tree write err: -5, ino 4 [ 84.687829][ T4274] ntfs3: loop0: Failed to load $Extend. [ 85.547378][ T4320] loop2: detected capacity change from 0 to 512 [ 85.573878][ T4320] EXT4-fs: Ignoring removed orlov option [ 85.600670][ T4320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.613720][ T4320] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.233: corrupted in-inode xattr [ 85.641407][ T4320] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.233: couldn't read orphan inode 15 (err -117) [ 85.658320][ T4320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.760356][ T4320] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 85.770168][ T4320] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 85.772988][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.820359][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 85.963398][ T4316] loop4: detected capacity change from 0 to 32768 [ 85.988104][ T4316] XFS: ikeep mount option is deprecated. [ 86.003487][ T4316] XFS: noikeep mount option is deprecated. [ 86.047724][ T4316] XFS (loop4): Mounting V5 Filesystem [ 86.094639][ T4316] XFS (loop4): Ending clean mount [ 86.114617][ T4316] XFS (loop4): Quotacheck needed: Please wait. [ 86.144444][ T4316] XFS (loop4): Quotacheck: Done. [ 86.217735][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.240006][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.260535][ T3639] XFS (loop4): Unmounting Filesystem [ 86.266718][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.287894][ T14] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 86.310052][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.331815][ T14] usb 2-1: config 0 descriptor?? [ 86.417023][ T4346] Bluetooth: MGMT ver 1.22 [ 86.594941][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 86.594957][ T27] audit: type=1326 audit(1726302886.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 86.729131][ T27] audit: type=1326 audit(1726302886.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 86.783024][ T27] audit: type=1326 audit(1726302886.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 86.845152][ T14] hid-udraw 0003:20D6:CB17.0004: unbalanced delimiter at end of report description [ 86.861565][ T27] audit: type=1326 audit(1726302886.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 86.883543][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.892281][ T14] hid-udraw 0003:20D6:CB17.0004: parse failed [ 86.900467][ T14] hid-udraw: probe of 0003:20D6:CB17.0004 failed with error -22 [ 86.929083][ T27] audit: type=1326 audit(1726302886.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 86.951918][ T27] audit: type=1326 audit(1726302886.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac597def9 code=0x7ffc0000 [ 87.069736][ T2617] usb 2-1: USB disconnect, device number 3 [ 87.104120][ T3844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.182944][ T4344] loop3: detected capacity change from 0 to 32768 [ 87.258032][ T4344] XFS (loop3): Mounting V5 Filesystem [ 87.275277][ T4362] loop0: detected capacity change from 0 to 4096 [ 87.303191][ T4362] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 87.429557][ T4344] XFS (loop3): Ending clean mount [ 87.444858][ T4362] ntfs3: loop0: failed to convert "c46c" to cp860 [ 87.456215][ T4344] XFS (loop3): Quotacheck needed: Please wait. [ 87.473082][ T3844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.492860][ T3844] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.526193][ T3844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.544026][ T3844] usb 3-1: config 0 descriptor?? [ 87.611856][ T4344] XFS (loop3): Quotacheck: Done. [ 87.827202][ T4360] loop4: detected capacity change from 0 to 32768 [ 87.830603][ T3648] XFS (loop3): Unmounting Filesystem [ 87.858900][ T4360] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.248 (4360) [ 87.914975][ T4379] loop0: detected capacity change from 0 to 256 [ 87.938447][ T4360] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 87.970460][ T4360] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 88.016405][ T4379] FAT-fs (loop0): Directory bread(block 64) failed [ 88.029343][ T3844] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 88.041862][ T4360] BTRFS info (device loop4): using free space tree [ 88.052866][ T4379] FAT-fs (loop0): Directory bread(block 65) failed [ 88.075462][ T4379] FAT-fs (loop0): Directory bread(block 66) failed [ 88.082027][ T4379] FAT-fs (loop0): Directory bread(block 67) failed [ 88.116184][ T4379] FAT-fs (loop0): Directory bread(block 68) failed [ 88.135329][ T4379] FAT-fs (loop0): Directory bread(block 69) failed [ 88.152411][ T4379] FAT-fs (loop0): Directory bread(block 70) failed [ 88.163007][ T4379] FAT-fs (loop0): Directory bread(block 71) failed [ 88.169641][ T4379] FAT-fs (loop0): Directory bread(block 72) failed [ 88.192918][ T4379] FAT-fs (loop0): Directory bread(block 73) failed [ 88.242993][ T3844] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 88.263070][ T3844] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 88.312902][ T3844] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 88.333090][ T3844] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 88.352552][ T3844] usb 3-1: USB disconnect, device number 4 [ 88.503553][ T4360] BTRFS info (device loop4): enabling ssd optimizations [ 88.704644][ T3639] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 88.927530][ T4375] loop1: detected capacity change from 0 to 32768 [ 88.936988][ T4375] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.251 (4375) [ 88.974250][ T4375] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 89.003932][ T4375] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 89.034388][ T4375] BTRFS info (device loop1): using free space tree [ 89.174971][ T4375] BTRFS info (device loop1): enabling ssd optimizations [ 89.323335][ T3638] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 90.117759][ T4473] loop4: detected capacity change from 0 to 16 [ 90.169409][ T4473] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 90.450030][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 90.530960][ T4488] loop0: detected capacity change from 0 to 64 [ 91.100713][ T4504] loop2: detected capacity change from 0 to 4096 [ 91.146144][ T4504] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 91.269877][ T4504] ntfs: volume version 3.1. [ 91.355538][ T4510] loop0: detected capacity change from 0 to 4096 [ 91.432337][ T4510] NILFS (loop0): invalid segment: Checksum error in segment payload [ 91.461029][ T4510] NILFS (loop0): trying rollback from an earlier position [ 91.490052][ T4480] loop3: detected capacity change from 0 to 32768 [ 91.535342][ T4510] NILFS (loop0): recovery complete [ 91.586035][ T4511] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.792039][ T27] audit: type=1326 audit(1726302891.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 91.898070][ T27] audit: type=1326 audit(1726302891.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.022289][ T27] audit: type=1326 audit(1726302891.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.039010][ T4500] loop1: detected capacity change from 0 to 32768 [ 92.096242][ T4500] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.291 (4500) [ 92.138771][ T27] audit: type=1326 audit(1726302891.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.224498][ T4500] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.241330][ T27] audit: type=1326 audit(1726302891.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.279062][ T4500] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 92.309373][ T4500] BTRFS info (device loop1): setting nodatacow, compression disabled [ 92.333152][ T4500] BTRFS info (device loop1): setting datacow [ 92.339187][ T4500] BTRFS info (device loop1): doing ref verification [ 92.358451][ T27] audit: type=1326 audit(1726302891.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.386722][ T4500] BTRFS info (device loop1): setting nodatacow, compression disabled [ 92.432809][ T4500] BTRFS info (device loop1): turning off barriers [ 92.449534][ T4500] BTRFS info (device loop1): enabling ssd optimizations [ 92.450478][ T27] audit: type=1326 audit(1726302891.720:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.479954][ T4500] BTRFS info (device loop1): using spread ssd allocation scheme [ 92.505271][ T4500] BTRFS info (device loop1): not using ssd optimizations [ 92.539505][ T4500] BTRFS info (device loop1): not using spread ssd allocation scheme [ 92.573168][ T4500] BTRFS info (device loop1): using free space tree [ 92.581784][ T27] audit: type=1326 audit(1726302891.720:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad997def9 code=0x7ffc0000 [ 92.647693][ T4509] loop4: detected capacity change from 0 to 32768 [ 92.683079][ T4509] XFS: attr2 mount option is deprecated. [ 92.688771][ T4509] XFS: ikeep mount option is deprecated. [ 92.722969][ T4509] XFS: noikeep mount option is deprecated. [ 92.834007][ T4509] XFS (loop4): Mounting V5 Filesystem [ 92.978121][ T4509] XFS (loop4): Ending clean mount [ 92.993837][ T4543] loop2: detected capacity change from 0 to 4096 [ 92.995124][ T4509] XFS (loop4): Quotacheck needed: Please wait. [ 93.048037][ T4543] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 93.061333][ T4509] XFS (loop4): Quotacheck: Done. [ 93.093666][ T4543] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 93.134988][ T4543] ntfs: volume version 3.1. [ 93.272674][ T3638] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.303111][ T3639] XFS (loop4): Unmounting Filesystem [ 93.312215][ T4518] loop3: detected capacity change from 0 to 32768 [ 93.399287][ T4518] XFS: ikeep mount option is deprecated. [ 93.662151][ T4518] XFS (loop3): Mounting V5 Filesystem [ 93.849781][ T4518] XFS (loop3): Ending clean mount [ 93.877468][ T4518] XFS (loop3): Quotacheck needed: Please wait. [ 93.925683][ T4573] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.943249][ T4518] XFS (loop3): Quotacheck: Done. [ 94.080478][ T4559] loop0: detected capacity change from 0 to 32768 [ 94.120788][ T3648] XFS (loop3): Unmounting Filesystem [ 94.222100][ T4559] XFS (loop0): Mounting V5 Filesystem [ 94.323235][ T4573] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.388579][ T4573] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.403091][ T4574] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.438022][ T4573] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.453254][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.465679][ T4600] loop4: detected capacity change from 0 to 64 [ 94.479444][ T4559] XFS (loop0): Ending clean mount [ 94.489077][ T4559] XFS (loop0): Quotacheck needed: Please wait. [ 94.496110][ T4564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.556756][ T4559] XFS (loop0): Quotacheck: Done. [ 94.663098][ T4574] usb 2-1: Using ep0 maxpacket: 32 [ 94.694365][ T3647] XFS (loop0): Unmounting Filesystem [ 94.794418][ T4607] loop4: detected capacity change from 0 to 2048 [ 94.796318][ T4574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.818617][ T4607] EXT4-fs: Ignoring removed bh option [ 94.824343][ T4574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.848058][ T4574] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 94.874180][ T4574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.888639][ T4574] usb 2-1: config 0 descriptor?? [ 94.941189][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.989977][ T4607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.015371][ T4607] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 95.034173][ T4607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.034173][ T4607] [ 95.044283][ T4607] EXT4-fs (loop4): Total free blocks count 0 [ 95.050372][ T4607] EXT4-fs (loop4): Free/Dirty block details [ 95.056764][ T4607] EXT4-fs (loop4): free_blocks=2415919104 [ 95.062651][ T4607] EXT4-fs (loop4): dirty_blocks=32 [ 95.068251][ T4607] EXT4-fs (loop4): Block reservation details [ 95.074435][ T4607] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 95.164207][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.375529][ T4574] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0xe [ 95.387107][ T4574] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 95.603323][ T3684] usb 2-1: USB disconnect, device number 4 [ 95.930180][ T4617] loop0: detected capacity change from 0 to 32768 [ 95.945404][ T4617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.317 (4617) [ 95.989735][ T4617] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.005470][ T4621] loop3: detected capacity change from 0 to 32768 [ 96.012047][ T4617] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 96.022514][ T4617] BTRFS info (device loop0): use zlib compression, level 3 [ 96.029997][ T4617] BTRFS info (device loop0): using free space tree [ 96.069192][ T4621] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 96.088798][ T4621] XFS (loop3): Mounting V5 Filesystem [ 96.151781][ T4621] XFS (loop3): Ending clean mount [ 96.164277][ T4621] XFS (loop3): Quotacheck needed: Please wait. [ 96.193009][ T3684] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.254854][ T4621] XFS (loop3): Quotacheck: Done. [ 96.302142][ T4573] usb 3-1: USB disconnect, device number 5 [ 96.322487][ T4617] BTRFS info (device loop0): enabling ssd optimizations [ 96.388813][ T3648] XFS (loop3): Unmounting Filesystem [ 96.445299][ T3684] usb 5-1: Using ep0 maxpacket: 32 [ 96.526123][ T3647] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.602881][ T2617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.608427][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.632691][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.653030][ T3684] usb 5-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 96.672342][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.706079][ T3684] usb 5-1: config 0 descriptor?? [ 96.853133][ T2617] usb 2-1: Using ep0 maxpacket: 8 [ 96.904903][ T4667] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 96.973195][ T2617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.003724][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.044677][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 97.081114][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.183271][ T2617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.190729][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.238704][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 97.275152][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.292049][ T4679] loop0: detected capacity change from 0 to 128 [ 97.321831][ T4679] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 97.373441][ T2617] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.385115][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.446558][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 97.478425][ T2617] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.504153][ T3381] usb 5-1: USB disconnect, device number 3 [ 97.732875][ T2617] usb 2-1: string descriptor 0 read error: -22 [ 97.749879][ T2617] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.770084][ T2617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.836460][ T2617] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.929990][ T4677] loop2: detected capacity change from 0 to 32768 [ 97.955805][ T4677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.335 (4677) [ 97.984670][ T4677] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.013494][ T4677] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 98.072840][ T4677] BTRFS info (device loop2): using free space tree [ 98.122430][ T4681] loop3: detected capacity change from 0 to 32768 [ 98.131265][ T4573] usb 2-1: USB disconnect, device number 5 [ 98.183962][ T4681] XFS: ikeep mount option is deprecated. [ 98.328692][ T4681] XFS (loop3): Mounting V5 Filesystem [ 98.387764][ T4677] BTRFS info (device loop2): enabling ssd optimizations [ 98.469717][ T4681] XFS (loop3): Ending clean mount [ 98.490023][ T4714] loop4: detected capacity change from 0 to 1024 [ 98.516453][ T4684] loop0: detected capacity change from 0 to 32768 [ 98.580459][ T3644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.609348][ T4684] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 98.623232][ T4714] hfsplus: bad catalog entry type [ 98.646019][ T3648] XFS (loop3): Unmounting Filesystem [ 98.660814][ T4684] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 98.865668][ T11] hfsplus: b-tree write err: -5, ino 4 [ 98.904250][ T4684] XFS (loop0): Quotacheck needed: Please wait. [ 98.939225][ T4725] loop1: detected capacity change from 0 to 1024 [ 99.059218][ T4684] XFS (loop0): Quotacheck: Done. [ 99.189670][ T51] hfsplus: b-tree write err: -5, ino 4 [ 99.230598][ T3647] XFS (loop0): Unmounting Filesystem [ 99.386213][ T4731] device bridge1 entered promiscuous mode [ 99.409057][ T4731] team0: Port device bridge1 added [ 99.549118][ T4736] loop3: detected capacity change from 0 to 4096 [ 99.596788][ T4575] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.704346][ T4743] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.820884][ T4745] loop2: detected capacity change from 0 to 512 [ 99.878061][ T3632] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.902947][ T4745] ceph: Unexpected value for 'acl' [ 99.992984][ T4575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.014655][ T4575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.028814][ T4575] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 100.042093][ T4754] loop1: detected capacity change from 0 to 64 [ 100.048855][ T4575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.064328][ T4575] usb 5-1: config 0 descriptor?? [ 100.278595][ T4760] loop1: detected capacity change from 0 to 16 [ 100.341878][ T4760] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.349921][ T3684] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.376266][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 100.428716][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 100.448954][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.469754][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 100.480496][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.504094][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 100.515910][ T4766] loop0: detected capacity change from 0 to 512 [ 100.523048][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 100.532177][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 100.550441][ T4575] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 100.572579][ T4766] EXT4-fs: Ignoring removed bh option [ 100.593371][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.609394][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 100.619599][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.628107][ T4766] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.359: inode #11614: comm syz.0.359: iget: illegal inode # [ 100.631170][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 100.651726][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 100.661620][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 100.671307][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 100.680840][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 100.690338][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 100.699865][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 100.700800][ T4766] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.359: error while reading EA inode 11614 err=-117 [ 100.710196][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.734413][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.752191][ T4766] EXT4-fs (loop0): 1 truncate cleaned up [ 100.755774][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.758699][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 100.767614][ T3684] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 100.767645][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.769604][ T3684] usb 4-1: config 0 descriptor?? [ 100.808354][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.818505][ T4766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.827327][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 100.838568][ T4573] usb 5-1: USB disconnect, device number 4 [ 100.851869][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 100.861927][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 100.871133][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 100.893746][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.926401][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 100.947320][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 100.955458][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.965177][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 100.974938][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 100.984237][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.993934][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 101.003359][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.013729][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 101.023847][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.033244][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 101.072978][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.100645][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 101.127840][ T4762] loop2: detected capacity change from 0 to 32768 [ 101.132914][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 101.155195][ T4762] XFS (loop2): Mounting V5 Filesystem [ 101.191235][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 101.205081][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 101.214503][ T4762] XFS (loop2): Ending clean mount [ 101.220691][ T4760] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.230982][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 101.240258][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 101.259618][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 101.269043][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 101.278410][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 101.297799][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 101.333678][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 101.340876][ T3684] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 101.351869][ T3644] XFS (loop2): Unmounting Filesystem [ 101.362854][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 101.382375][ T4760] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 101.392052][ T3684] logitech 0003:046D:C294.0009: unknown main item tag 0x5 [ 101.409182][ T3684] logitech 0003:046D:C294.0009: unbalanced collection at end of report description [ 101.432881][ T4760] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 101.447680][ T3684] logitech 0003:046D:C294.0009: parse failed [ 101.466143][ T4760] syz.1.356: attempt to access beyond end of device [ 101.466143][ T4760] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 101.483593][ T3684] logitech: probe of 0003:046D:C294.0009 failed with error -22 [ 101.512878][ T4760] syz.1.356: attempt to access beyond end of device [ 101.512878][ T4760] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 101.549636][ T3684] usb 4-1: USB disconnect, device number 2 [ 101.588883][ T4760] syz.1.356: attempt to access beyond end of device [ 101.588883][ T4760] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 101.673023][ T4760] syz.1.356: attempt to access beyond end of device [ 101.673023][ T4760] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 101.718460][ T4760] syz.1.356: attempt to access beyond end of device [ 101.718460][ T4760] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 101.769351][ T4760] syz.1.356: attempt to access beyond end of device [ 101.769351][ T4760] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 101.803122][ T4760] syz.1.356: attempt to access beyond end of device [ 101.803122][ T4760] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 101.838365][ T4760] syz.1.356: attempt to access beyond end of device [ 101.838365][ T4760] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 102.193671][ T4792] loop4: detected capacity change from 0 to 4096 [ 102.234322][ T4792] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 102.323516][ T4792] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 102.340128][ T4780] loop0: detected capacity change from 0 to 32768 [ 102.350019][ T4803] loop3: detected capacity change from 0 to 128 [ 102.518211][ T4780] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.843387][ T3647] ocfs2: Unmounting device (7,0) on (node local) [ 103.409870][ T4835] loop2: detected capacity change from 0 to 512 [ 103.458323][ T4835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.474346][ T4841] loop1: detected capacity change from 0 to 256 [ 103.494202][ T4835] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.388: bg 0: block 425: padding at end of block bitmap is not set [ 103.511636][ T4835] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 103.564038][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 103.629555][ T4841] FAT-fs (loop1): Directory bread(block 64) failed [ 103.672227][ T4841] FAT-fs (loop1): Directory bread(block 65) failed [ 103.693277][ T4841] FAT-fs (loop1): Directory bread(block 66) failed [ 103.709636][ T4841] FAT-fs (loop1): Directory bread(block 67) failed [ 103.736897][ T4841] FAT-fs (loop1): Directory bread(block 68) failed [ 103.751954][ T4841] FAT-fs (loop1): Directory bread(block 69) failed [ 103.789346][ T4841] FAT-fs (loop1): Directory bread(block 70) failed [ 103.813250][ T4841] FAT-fs (loop1): Directory bread(block 71) failed [ 103.834447][ T4841] FAT-fs (loop1): Directory bread(block 72) failed [ 103.851262][ T4841] FAT-fs (loop1): Directory bread(block 73) failed [ 103.907743][ T4853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 103.937095][ T4574] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.232339][ T4832] loop4: detected capacity change from 0 to 32768 [ 104.258787][ T4832] JBD2: Ignoring recovery information on journal [ 104.313155][ T4574] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 104.329890][ T4574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.346862][ T4574] usb 4-1: config 0 descriptor?? [ 104.356610][ T4832] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.383910][ T4574] ums-karma 4-1:0.0: USB Mass Storage device detected [ 104.394117][ T3684] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.529437][ T3639] ocfs2: Unmounting device (7,4) on (node local) [ 104.625108][ T4575] usb 4-1: USB disconnect, device number 3 [ 104.683038][ T3684] usb 2-1: Using ep0 maxpacket: 8 [ 104.978743][ T4880] loop0: detected capacity change from 0 to 4096 [ 104.985392][ T3684] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 105.004151][ T3684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.015754][ T3684] usb 2-1: Product: syz [ 105.021135][ T3684] usb 2-1: Manufacturer: syz [ 105.035885][ T3684] usb 2-1: SerialNumber: syz [ 105.044520][ T3684] usb 2-1: config 0 descriptor?? [ 105.323023][ T3684] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 105.340529][ T3684] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 105.360831][ T3684] usb 2-1: USB disconnect, device number 6 [ 105.876012][ T4911] loop3: detected capacity change from 0 to 1024 [ 106.111241][ T4887] loop2: detected capacity change from 0 to 40427 [ 106.125293][ T4887] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 106.142851][ T4574] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.162178][ T4887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.195163][ T4914] loop1: detected capacity change from 0 to 4096 [ 106.206039][ T4887] F2FS-fs (loop2): invalid crc value [ 106.247127][ T4887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.373119][ T4887] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.385778][ T4928] netlink: 2 bytes leftover after parsing attributes in process `syz.0.427'. [ 106.387687][ T4887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.423093][ T4574] usb 5-1: Using ep0 maxpacket: 16 [ 106.423112][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.483854][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.500832][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.518831][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.529637][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.552620][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.563008][ T4574] usb 5-1: config 65 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.563633][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.584915][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.586831][ T4574] usb 5-1: config 65 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.605964][ T4928] device batadv_slave_1 entered promiscuous mode [ 106.611891][ T4574] usb 5-1: config 65 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.645198][ T4574] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 106.661245][ T4574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.687113][ T3644] syz-executor: attempt to access beyond end of device [ 106.687113][ T3644] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.146256][ T4574] kye 0003:0458:5015.000A: unknown main item tag 0x0 [ 107.163427][ T4574] kye 0003:0458:5015.000A: unknown main item tag 0x0 [ 107.183656][ T4574] kye 0003:0458:5015.000A: unknown main item tag 0x0 [ 107.219237][ T4574] kye 0003:0458:5015.000A: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 107.256509][ T4574] kye 0003:0458:5015.000A: tablet-enabling feature report not found [ 107.270779][ T4942] loop0: detected capacity change from 0 to 256 [ 107.282809][ T4574] kye 0003:0458:5015.000A: tablet enabling failed [ 107.331468][ T4942] FAT-fs (loop0): Directory bread(block 64) failed [ 107.350785][ T4942] FAT-fs (loop0): Directory bread(block 65) failed [ 107.367590][ T4942] FAT-fs (loop0): Directory bread(block 66) failed [ 107.371342][ T3847] usb 5-1: USB disconnect, device number 5 [ 107.381635][ T4944] netlink: 'syz.2.431': attribute type 2 has an invalid length. [ 107.409919][ T4942] FAT-fs (loop0): Directory bread(block 67) failed [ 107.433112][ T4942] FAT-fs (loop0): Directory bread(block 68) failed [ 107.450002][ T4942] FAT-fs (loop0): Directory bread(block 69) failed [ 107.466697][ T4942] FAT-fs (loop0): Directory bread(block 70) failed [ 107.486023][ T4942] FAT-fs (loop0): Directory bread(block 71) failed [ 107.506107][ T4942] FAT-fs (loop0): Directory bread(block 72) failed [ 107.515977][ T4942] FAT-fs (loop0): Directory bread(block 73) failed [ 107.559677][ T4934] loop1: detected capacity change from 0 to 32768 [ 107.597859][ T4932] loop3: detected capacity change from 0 to 32768 [ 107.686830][ T4934] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.727724][ T4932] XFS (loop3): Mounting V5 Filesystem [ 107.805929][ T4932] XFS (loop3): Ending clean mount [ 107.898164][ T3638] ocfs2: Unmounting device (7,1) on (node local) [ 107.928891][ T3648] XFS (loop3): Unmounting Filesystem [ 108.209837][ T4971] loop0: detected capacity change from 0 to 512 [ 108.227170][ T4971] EXT4-fs: Ignoring removed nobh option [ 108.311688][ T4969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.343973][ T4971] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 108.352061][ T4971] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 108.434668][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #13: comm syz.0.447: casefold flag without casefold feature [ 108.491416][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.447: couldn't read orphan inode 13 (err -117) [ 108.517244][ T4978] loop1: detected capacity change from 0 to 164 [ 108.543811][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.574001][ T4978] Unable to read rock-ridge attributes [ 108.635768][ T4969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.645658][ T4978] Unable to read rock-ridge attributes [ 108.707617][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 108.831595][ T4969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.846958][ T4984] loop3: detected capacity change from 0 to 8 [ 108.898260][ T4986] capability: warning: `syz.1.451' uses 32-bit capabilities (legacy support in use) [ 108.974465][ T3654] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 108.983094][ T3654] Bluetooth: hci1: Injecting HCI hardware error event [ 108.991317][ T3646] Bluetooth: hci1: hardware error 0x00 [ 108.999828][ T4984] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.043174][ T4984] SQUASHFS error: Failed to read block 0xa8: -5 [ 109.051917][ T4969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.094826][ T4984] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.121721][ T4984] SQUASHFS error: Failed to read block 0xa8: -5 [ 109.183325][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 109.183354][ T27] audit: type=1800 audit(2000000013.520:17): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.450" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 109.199357][ T4984] syz.3.450 (4984) used greatest stack depth: 19608 bytes left [ 109.257685][ T4969] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.291976][ T4969] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.353669][ T4969] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.397039][ T4969] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.407087][ T4992] loop0: detected capacity change from 0 to 4096 [ 109.426014][ T4992] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 109.542548][ T4976] loop4: detected capacity change from 0 to 32768 [ 109.549761][ T4976] XFS: ikeep mount option is deprecated. [ 109.579211][ T4976] XFS: noikeep mount option is deprecated. [ 109.647366][ T4976] XFS (loop4): Mounting V5 Filesystem [ 109.739933][ T4976] XFS (loop4): Ending clean mount [ 109.758027][ T4976] XFS (loop4): Quotacheck needed: Please wait. [ 109.812400][ T4976] XFS (loop4): Quotacheck: Done. [ 109.852851][ T3687] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.958494][ T3639] XFS (loop4): Unmounting Filesystem [ 110.214126][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.225592][ T4998] loop3: detected capacity change from 0 to 32768 [ 110.234160][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.253724][ T4998] XFS: attr2 mount option is deprecated. [ 110.259402][ T4998] XFS: ikeep mount option is deprecated. [ 110.265363][ T3687] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 110.278397][ T4998] XFS: noikeep mount option is deprecated. [ 110.292912][ T3687] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 110.301977][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.340393][ T3687] usb 3-1: config 0 descriptor?? [ 110.361990][ T4998] XFS (loop3): Mounting V5 Filesystem [ 110.508216][ T4998] XFS (loop3): Ending clean mount [ 110.538576][ T5016] loop1: detected capacity change from 0 to 4096 [ 110.540441][ T4998] XFS (loop3): Quotacheck needed: Please wait. [ 110.556575][ T5016] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 110.661563][ T4998] XFS (loop3): Quotacheck: Done. [ 110.829621][ T3648] XFS (loop3): Unmounting Filesystem [ 110.842399][ T3687] redragon 0003:0C45:760B.000B: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.2-1/input0 [ 110.943060][ T4574] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.006811][ T5039] loop1: detected capacity change from 0 to 64 [ 111.040989][ T3687] usb 3-1: USB disconnect, device number 6 [ 111.052989][ T3646] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 111.242892][ T4574] usb 1-1: Using ep0 maxpacket: 16 [ 111.373203][ T4574] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 111.398209][ T4574] usb 1-1: config 0 has no interface number 0 [ 111.424802][ T4574] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.425637][ T5051] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.438063][ T4574] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.643091][ T4574] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 111.662489][ T4574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.675642][ T4574] usb 1-1: Product: syz [ 111.679849][ T4574] usb 1-1: Manufacturer: syz [ 111.691815][ T4574] usb 1-1: SerialNumber: syz [ 111.699735][ T4574] usb 1-1: config 0 descriptor?? [ 111.725432][ T5031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.736332][ T5031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.912860][ T3687] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.986592][ T5031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 112.006772][ T5031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 112.162876][ T4573] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.245709][ T5068] loop1: detected capacity change from 0 to 32768 [ 112.269908][ T5068] XFS (loop1): Mounting V5 Filesystem [ 112.283748][ T3687] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.292356][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.333009][ T3687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.352212][ T3687] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.358383][ T5068] XFS (loop1): Ending clean mount [ 112.410839][ T5068] syz.1.482 (5068) used greatest stack depth: 19240 bytes left [ 112.432816][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 112.451018][ T3638] XFS (loop1): Unmounting Filesystem [ 112.473126][ T4574] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.493870][ T3687] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.509468][ T3687] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.509941][ T4574] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 112.530170][ T3687] usb 5-1: Product: syz [ 112.530192][ T3687] usb 5-1: Manufacturer: syz [ 112.551028][ T4574] asix: probe of 1-1:0.251 failed with error -71 [ 112.574107][ T3687] cdc_wdm 5-1:1.0: skipping garbage [ 112.575110][ T4574] usb 1-1: USB disconnect, device number 5 [ 112.579343][ T3687] cdc_wdm 5-1:1.0: skipping garbage [ 112.591711][ T4573] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 112.607278][ T4573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.625649][ T3687] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 112.627832][ T4573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.631557][ T3687] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.653646][ T4573] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 112.687320][ T4573] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 112.690757][ T5074] loop3: detected capacity change from 0 to 32768 [ 112.708564][ T4573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.716264][ T5074] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.727234][ T4573] usb 3-1: config 0 descriptor?? [ 112.742802][ T5074] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.803393][ T5074] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 112.820965][ T3684] usb 5-1: USB disconnect, device number 6 [ 112.842194][ T4575] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.850182][ T4575] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.897410][ T4575] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 112.908629][ T4575] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.921574][ T5074] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.215903][ T4573] kye 0003:0458:5011.000C: unknown main item tag 0x0 [ 113.228861][ T4573] kye 0003:0458:5011.000C: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 113.239739][ T5090] netlink: 100 bytes leftover after parsing attributes in process `syz.0.488'. [ 113.240876][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 113.273207][ T4573] kye 0003:0458:5011.000C: tablet-enabling feature report not found [ 113.291602][ T4573] kye 0003:0458:5011.000C: tablet enabling failed [ 113.455861][ T3835] usb 3-1: USB disconnect, device number 7 [ 113.698388][ T5100] loop4: detected capacity change from 0 to 512 [ 113.731706][ T5100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.840159][ T5100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.494: inode #1: comm syz.4.494: iget: illegal inode # [ 113.855774][ T5086] loop1: detected capacity change from 0 to 32768 [ 113.882872][ T5100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.494: error while reading EA inode 1 err=-117 [ 113.925635][ T5086] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.950049][ T5108] loop0: detected capacity change from 0 to 1024 [ 113.957355][ T5108] EXT4-fs: Invalid uid value -1 [ 113.974287][ T5100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.494: inode #1: comm syz.4.494: iget: illegal inode # [ 114.010872][ T5100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.494: error while reading EA inode 1 err=-117 [ 114.027441][ T5100] EXT4-fs (loop4): 1 orphan inode deleted [ 114.033535][ T5100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.042626][ T3630] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.170515][ T5100] EXT4-fs error (device loop4): ext4_lookup:1856: inode #15: comm syz.4.494: unexpected EA_INODE flag [ 114.251447][ T3638] ocfs2: Unmounting device (7,1) on (node local) [ 114.339632][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 114.378371][ T5110] loop3: detected capacity change from 0 to 8192 [ 114.453513][ T5110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.507463][ T5110] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 114.517262][ T5110] REISERFS (device loop3): using ordered data mode [ 114.523942][ T5110] reiserfs: using flush barriers [ 114.530535][ T5110] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.548928][ T5110] REISERFS (device loop3): checking transaction log (loop3) [ 114.558079][ T5110] REISERFS (device loop3): Using r5 hash to sort names [ 114.573367][ T5110] REISERFS (device loop3): using 3.5.x disk format [ 114.592617][ T5110] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 115.288542][ T5117] loop2: detected capacity change from 0 to 32768 [ 115.312391][ T5115] loop0: detected capacity change from 0 to 32768 [ 115.334158][ T5117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.500 (5117) [ 115.381638][ T5115] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.498 (5115) [ 115.401810][ T5117] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.424558][ T5115] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.434888][ T3684] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.454114][ T5117] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 115.463493][ T5115] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 115.472153][ T5115] BTRFS info (device loop0): using free space tree [ 115.489214][ T5117] BTRFS info (device loop2): use zlib compression, level 3 [ 115.509092][ T5117] BTRFS info (device loop2): using free space tree [ 115.567175][ T5120] loop4: detected capacity change from 0 to 32768 [ 115.660516][ T5120] XFS (loop4): Mounting V5 Filesystem [ 115.748351][ T5115] BTRFS info (device loop0): enabling ssd optimizations [ 115.755731][ T5117] BTRFS info (device loop2): enabling ssd optimizations [ 115.819577][ T5120] XFS (loop4): Ending clean mount [ 115.825094][ T3684] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 115.839219][ T3684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.878078][ T3684] usb 4-1: config 0 has no interface number 0 [ 115.889360][ T5120] XFS (loop4): Quotacheck needed: Please wait. [ 115.908008][ T3684] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 115.935631][ T3647] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.940649][ T3684] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 115.967275][ T5120] XFS (loop4): Quotacheck: Done. [ 116.028291][ T3684] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 116.086504][ T5130] loop1: detected capacity change from 0 to 32768 [ 116.178188][ T5130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.504 (5130) [ 116.232323][ T5130] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.253123][ T3684] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 116.262198][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.270968][ T3639] XFS (loop4): Unmounting Filesystem [ 116.278577][ T3644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.298088][ T5130] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 116.318909][ T3684] usb 4-1: Product: syz [ 116.329681][ T3684] usb 4-1: Manufacturer: syz [ 116.336390][ T5130] BTRFS info (device loop1): setting nodatacow, compression disabled [ 116.347115][ T3684] usb 4-1: SerialNumber: syz [ 116.365045][ T3684] usb 4-1: config 0 descriptor?? [ 116.408357][ T5130] BTRFS info (device loop1): turning on sync discard [ 116.474691][ T3684] HFC-S_USB: probe of 4-1:0.117 failed with error -5 [ 116.483571][ T5130] BTRFS info (device loop1): enabling auto defrag [ 116.490067][ T5130] BTRFS info (device loop1): using free space tree [ 116.763651][ T4573] usb 4-1: USB disconnect, device number 4 [ 116.842990][ T5130] BTRFS info (device loop1): enabling ssd optimizations [ 117.060731][ T3638] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.245748][ T5208] loop2: detected capacity change from 0 to 16 [ 117.360350][ T5208] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.434140][ T5208] syz.2.513: attempt to access beyond end of device [ 117.434140][ T5208] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 117.543395][ T5208] syz.2.513: attempt to access beyond end of device [ 117.543395][ T5208] loop2: rw=524288, sector=304, nr_sectors = 16 limit=16 [ 117.952967][ T3839] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.972269][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 118.326312][ T3839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.359251][ T3839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.389640][ T3839] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 118.410878][ T3839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.456253][ T3839] usb 4-1: config 0 descriptor?? [ 118.489366][ T5206] loop4: detected capacity change from 0 to 32768 [ 118.947635][ T3839] petalynx 0003:18B1:0037.000D: unknown main item tag 0x0 [ 118.962771][ C0] sched: RT throttling activated [ 118.991033][ T5242] loop0: detected capacity change from 0 to 256 [ 119.014924][ T3839] petalynx 0003:18B1:0037.000D: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 119.092945][ T5242] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 119.150105][ T5230] loop1: detected capacity change from 0 to 131072 [ 119.159405][ T5230] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1538) root(3) [ 119.167407][ T5230] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.178425][ T5230] F2FS-fs (loop1): invalid crc value [ 119.184618][ T3839] usb 4-1: USB disconnect, device number 5 [ 119.188408][ T3646] Bluetooth: hci4: link tx timeout [ 119.196114][ T3646] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.244634][ T5230] F2FS-fs (loop1): Mismatch valid blocks 1 vs. 33 [ 119.256339][ T5230] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 119.965344][ T5263] loop1: detected capacity change from 0 to 1024 [ 120.286926][ T5275] loop1: detected capacity change from 0 to 2048 [ 120.412074][ T5275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.596232][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 120.641753][ T5269] loop2: detected capacity change from 0 to 32768 [ 120.669664][ T5284] loop0: detected capacity change from 0 to 4096 [ 120.679545][ T5269] XFS: ikeep mount option is deprecated. [ 120.870471][ T5269] XFS (loop2): Mounting V5 Filesystem [ 121.087945][ T5269] XFS (loop2): Ending clean mount [ 121.104400][ T5269] XFS (loop2): Quotacheck needed: Please wait. [ 121.178648][ T5269] XFS (loop2): Quotacheck: Done. [ 121.212895][ T3646] Bluetooth: hci4: command 0x0406 tx timeout [ 121.302112][ T5277] loop3: detected capacity change from 0 to 32768 [ 121.360472][ T5304] loop0: detected capacity change from 0 to 64 [ 121.369801][ T5277] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.543 (5277) [ 121.374553][ T3644] XFS (loop2): Unmounting Filesystem [ 121.395729][ T5277] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.420866][ T5277] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 121.438853][ T5277] BTRFS info (device loop3): using free space tree [ 121.599512][ T5279] loop4: detected capacity change from 0 to 32768 [ 121.608082][ T5279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.544 (5279) [ 121.625944][ T5279] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.636605][ T5279] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.660182][ T5279] BTRFS info (device loop4): setting nodatacow, compression disabled [ 121.677320][ T5279] BTRFS info (device loop4): setting datacow [ 121.720760][ T5279] BTRFS info (device loop4): doing ref verification [ 121.761961][ T5279] BTRFS info (device loop4): setting nodatacow, compression disabled [ 121.785335][ T5279] BTRFS info (device loop4): turning off barriers [ 121.803258][ T5277] BTRFS info (device loop3): enabling ssd optimizations [ 121.827701][ T5279] BTRFS info (device loop4): enabling ssd optimizations [ 121.874163][ T5279] BTRFS info (device loop4): using spread ssd allocation scheme [ 121.902871][ T5279] BTRFS info (device loop4): not using ssd optimizations [ 121.931056][ T5279] BTRFS info (device loop4): not using spread ssd allocation scheme [ 121.960655][ T5328] loop2: detected capacity change from 0 to 1024 [ 121.977414][ T5279] BTRFS info (device loop4): using free space tree [ 121.986956][ T3648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.263712][ T11] hfsplus: b-tree write err: -5, ino 4 [ 122.533579][ T3639] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.098139][ T5318] loop0: detected capacity change from 0 to 40427 [ 123.192934][ T5318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.202847][ T5367] Bluetooth: MGMT ver 1.22 [ 123.373033][ T3654] Bluetooth: hci4: command 0x0406 tx timeout [ 123.493106][ T5318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.552935][ T5348] loop1: detected capacity change from 0 to 32768 [ 123.569885][ T5378] loop4: detected capacity change from 0 to 1024 [ 123.590055][ T5348] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.556 (5348) [ 123.625839][ T3647] syz-executor: attempt to access beyond end of device [ 123.625839][ T3647] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.659228][ T5380] loop2: detected capacity change from 0 to 1024 [ 123.668815][ T5348] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 123.703085][ T5380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.728256][ T5348] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 123.768373][ T5348] BTRFS info (device loop1): using free space tree [ 123.790616][ T5380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.984883][ T27] audit: type=1800 audit(2000000028.320:18): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.566" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 124.067236][ T5391] netlink: 100 bytes leftover after parsing attributes in process `syz.4.568'. [ 124.112870][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 124.136217][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 124.288978][ T5373] loop3: detected capacity change from 0 to 32768 [ 124.314606][ T5348] BTRFS info (device loop1): enabling ssd optimizations [ 124.512435][ T5373] XFS (loop3): Mounting V5 Filesystem [ 124.605711][ T3638] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 124.689691][ T5373] XFS (loop3): Ending clean mount [ 124.712588][ T5373] XFS (loop3): Quotacheck needed: Please wait. [ 124.719654][ T5423] loop0: detected capacity change from 0 to 2048 [ 124.782115][ T5423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.950135][ T5373] XFS (loop3): Quotacheck: Done. [ 125.082409][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 125.157168][ T3648] XFS (loop3): Unmounting Filesystem [ 125.189589][ T5438] loop4: detected capacity change from 0 to 4096 [ 125.286083][ T5442] loop0: detected capacity change from 0 to 2048 [ 125.354095][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.406544][ T5438] ntfs: (device loop4): parse_options(): NLS character set iso not found. Using previous one cp950. [ 125.497578][ T5438] ntfs: volume version 3.1. [ 126.103874][ T3685] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.182189][ T5458] loop4: detected capacity change from 0 to 512 [ 126.220217][ T5458] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 126.241457][ T5441] loop2: detected capacity change from 0 to 32768 [ 126.347991][ T5446] loop1: detected capacity change from 0 to 32768 [ 126.372913][ T3685] usb 4-1: Using ep0 maxpacket: 16 [ 126.407452][ T5446] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 126.407452][ T5446] [ 126.451139][ T5458] EXT4-fs (loop4): failed to open journal device unknown-block(4,137) -6 [ 126.503042][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.544106][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.558610][ T3685] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 126.579660][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.627909][ T3685] usb 4-1: config 0 descriptor?? [ 126.715693][ T5464] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 126.728410][ T5454] loop0: detected capacity change from 0 to 32768 [ 126.739142][ T5454] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.583 (5454) [ 126.754511][ T5454] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.782855][ T5454] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.802862][ T5454] BTRFS info (device loop0): using free space tree [ 127.003108][ T5454] BTRFS info (device loop0): enabling ssd optimizations [ 127.151333][ T3685] corsair-psu 0003:1B1C:1C1E.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1e] on usb-dummy_hcd.3-1/input0 [ 127.163608][ T5490] loop1: detected capacity change from 0 to 4096 [ 127.183627][ T3647] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.210274][ T5490] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 127.263360][ T3685] corsair-psu 0003:1B1C:1C1E.000E: unable to initialize device (-38) [ 127.305455][ T3685] corsair-psu: probe of 0003:1B1C:1C1E.000E failed with error -38 [ 127.354447][ T3685] usb 4-1: USB disconnect, device number 6 [ 127.424363][ T5490] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.477795][ T5490] ntfs3: loop1: Failed to load $Extend. [ 127.990382][ T5482] loop2: detected capacity change from 0 to 32768 [ 128.027686][ T5482] XFS: noikeep mount option is deprecated. [ 128.147766][ T5503] loop3: detected capacity change from 0 to 256 [ 128.171158][ T5482] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 128.187433][ T5507] netlink: 'syz.1.595': attribute type 2 has an invalid length. [ 128.207777][ T5482] XFS (loop2): Quotacheck needed: Please wait. [ 128.236494][ T5503] exfat: Deprecated parameter 'utf8' [ 128.264863][ T5482] XFS (loop2): Quotacheck: Done. [ 128.310554][ T5503] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 128.324472][ T3644] XFS (loop2): Unmounting Filesystem [ 128.432589][ T5494] loop4: detected capacity change from 0 to 32768 [ 128.564452][ T5494] XFS (loop4): Mounting V5 Filesystem [ 128.715237][ T5494] XFS (loop4): Ending clean mount [ 128.724959][ T5494] XFS (loop4): Quotacheck needed: Please wait. [ 128.793046][ T5494] XFS (loop4): Quotacheck: Done. [ 128.834332][ T27] audit: type=1800 audit(2000000033.170:19): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.593" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 128.910869][ T3639] XFS (loop4): Unmounting Filesystem [ 128.926142][ T5498] loop0: detected capacity change from 0 to 32768 [ 129.088099][ T5498] XFS (loop0): Mounting V5 Filesystem [ 129.204458][ T5498] XFS (loop0): Ending clean mount [ 129.212041][ T5498] XFS (loop0): Quotacheck needed: Please wait. [ 129.274849][ T5498] XFS (loop0): Quotacheck: Done. [ 129.361725][ T5512] loop1: detected capacity change from 0 to 32768 [ 129.403634][ T5512] XFS: ikeep mount option is deprecated. [ 129.472690][ T3647] XFS (loop0): Unmounting Filesystem [ 129.520800][ T5512] XFS (loop1): Mounting V5 Filesystem [ 129.720756][ T5512] XFS (loop1): Ending clean mount [ 129.735267][ T5512] XFS (loop1): Quotacheck needed: Please wait. [ 129.801581][ T5512] XFS (loop1): Quotacheck: Done. [ 130.030577][ T3638] XFS (loop1): Unmounting Filesystem [ 130.093093][ T5553] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 130.350684][ T5540] loop4: detected capacity change from 0 to 32768 [ 130.398177][ T5540] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.598 (5540) [ 130.451276][ T5540] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 130.482702][ T5540] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 130.512887][ T5540] BTRFS info (device loop4): using free space tree [ 130.690526][ T5541] loop2: detected capacity change from 0 to 40427 [ 130.830016][ T5541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.838526][ T5540] BTRFS info (device loop4): enabling ssd optimizations [ 131.015537][ T3639] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 131.047988][ T5541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.261410][ T3644] syz-executor: attempt to access beyond end of device [ 131.261410][ T3644] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.539497][ T5568] loop0: detected capacity change from 0 to 32768 [ 131.583030][ T5568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.616 (5568) [ 131.654944][ T5568] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.686254][ T5568] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 131.731239][ T5568] BTRFS info (device loop0): use zlib compression, level 3 [ 131.785014][ T5568] BTRFS info (device loop0): using free space tree [ 131.963308][ T5568] BTRFS info (device loop0): enabling ssd optimizations [ 132.161269][ T3647] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.166666][ T5609] loop2: detected capacity change from 0 to 164 [ 132.180113][ T5608] loop4: detected capacity change from 0 to 512 [ 132.193910][ T5608] EXT4-fs: Ignoring removed nobh option [ 132.223423][ T5608] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 132.252357][ T5609] Unable to read rock-ridge attributes [ 132.262435][ T5608] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 132.289629][ T5608] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #13: comm syz.4.612: casefold flag without casefold feature [ 132.343540][ T5609] Unable to read rock-ridge attributes [ 132.371105][ T5608] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.612: couldn't read orphan inode 13 (err -117) [ 132.417885][ T5608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.454126][ T5585] loop1: detected capacity change from 0 to 32768 [ 132.583199][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589637][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.644004][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 132.769529][ T5617] loop2: detected capacity change from 0 to 64 [ 133.122580][ T5623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 133.242874][ T4572] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.324322][ T5626] loop1: detected capacity change from 0 to 4096 [ 133.352318][ T5626] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 133.388702][ T5626] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 133.422424][ T5626] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 133.442821][ T5626] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 133.475813][ T5626] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 133.498377][ T5626] ntfs: volume version 3.1. [ 133.509171][ T5626] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 133.531362][ T5626] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 133.532848][ T3381] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 133.570032][ T5626] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 133.592269][ T5626] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 133.613870][ T5626] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 133.623817][ T5619] loop0: detected capacity change from 0 to 32768 [ 133.628997][ T4572] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.654993][ T4572] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.658476][ T5619] XFS: noikeep mount option is deprecated. [ 133.675226][ T4572] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.737294][ T5619] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 133.755864][ T5619] XFS (loop0): Quotacheck needed: Please wait. [ 133.824098][ T5627] loop3: detected capacity change from 0 to 32768 [ 133.840387][ T5619] XFS (loop0): Quotacheck: Done. [ 133.862378][ T5627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (5627) [ 133.903357][ T4572] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.913277][ T5627] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.925696][ T3647] XFS (loop0): Unmounting Filesystem [ 133.926292][ T4572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.933716][ T3381] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 133.953407][ T5627] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.972669][ T3381] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 133.972918][ T4572] usb 5-1: Product: syz [ 133.972938][ T4572] usb 5-1: Manufacturer: syz [ 133.972956][ T4572] usb 5-1: SerialNumber: syz [ 133.986571][ T5627] BTRFS info (device loop3): using free space tree [ 134.010248][ T3381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 134.029909][ T3381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 134.049446][ T4572] hub 5-1:1.0: bad descriptor, ignoring hub [ 134.062810][ T4572] hub: probe of 5-1:1.0 failed with error -5 [ 134.153288][ T5627] BTRFS info (device loop3): enabling ssd optimizations [ 134.276275][ T4572] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.282953][ T3381] usb 3-1: string descriptor 0 read error: -22 [ 134.310342][ T3648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.326699][ T3381] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 134.352824][ T3381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.382097][ T3381] usb 3-1: config 0 descriptor?? [ 134.414267][ T5629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 134.433721][ T3381] hub 3-1:0.0: bad descriptor, ignoring hub [ 134.439676][ T3381] hub: probe of 3-1:0.0 failed with error -5 [ 134.465913][ T3381] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 134.672801][ T4572] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.750880][ T3717] usb 3-1: USB disconnect, device number 8 [ 134.844295][ T3381] usb 5-1: USB disconnect, device number 7 [ 134.847122][ T3381] usblp0: removed [ 134.932842][ T4572] usb 2-1: Using ep0 maxpacket: 16 [ 135.067025][ T4572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.071676][ T5670] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 135.095222][ T4572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.111664][ T4572] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 135.130846][ T4572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.143237][ T4572] usb 2-1: config 0 descriptor?? [ 135.257785][ T5675] loop0: detected capacity change from 0 to 4096 [ 135.285019][ T5675] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 135.620854][ T4572] cypress 0003:04B4:0001.000F: unknown main item tag 0x0 [ 135.652257][ T4572] cypress 0003:04B4:0001.000F: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 135.780610][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 135.837033][ T4572] usb 2-1: USB disconnect, device number 7 [ 136.123999][ T5707] loop0: detected capacity change from 0 to 1024 [ 136.143715][ T5707] hfsplus: Filesystem is marked locked, mounting read-only. [ 136.185111][ T5707] hfsplus: filesystem is marked locked, leaving read-only. [ 136.540018][ T5726] loop2: detected capacity change from 0 to 64 [ 136.956046][ T5732] loop1: detected capacity change from 0 to 4096 [ 137.004086][ T5732] ntfs: volume version 3.1. [ 137.298052][ T5721] loop0: detected capacity change from 0 to 32768 [ 137.334153][ T5721] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.651 (5721) [ 137.400814][ T5721] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.436137][ T5721] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 137.499467][ T5721] BTRFS info (device loop0): using free space tree [ 137.584346][ T5721] BTRFS info (device loop0): enabling ssd optimizations [ 137.686057][ T5772] loop4: detected capacity change from 0 to 512 [ 137.734692][ T5772] EXT4-fs: Ignoring removed bh option [ 137.807720][ T5772] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.666: inode #11614: comm syz.4.666: iget: illegal inode # [ 137.889547][ T3647] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.962098][ T5772] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.666: error while reading EA inode 11614 err=-117 [ 138.000525][ T5772] EXT4-fs (loop4): 1 truncate cleaned up [ 138.007465][ T5772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.059035][ T5783] loop3: detected capacity change from 0 to 256 [ 138.137057][ T5783] exfat: Deprecated parameter 'utf8' [ 138.142458][ T5783] exfat: Deprecated parameter 'utf8' [ 138.250998][ T5783] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 138.350566][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 138.411297][ T5788] loop1: detected capacity change from 0 to 64 [ 139.203646][ T5793] loop3: detected capacity change from 0 to 65536 [ 139.309050][ T3717] XFS (loop3): Superblock earlier than Version 5 has XFS_{P|G}QUOTA_{ENFD|CHKD} bits. [ 139.341535][ T3717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb block 0x0 [ 139.371949][ T3717] XFS (loop3): Unmount and run xfs_repair [ 139.406651][ T5776] loop2: detected capacity change from 0 to 32768 [ 139.419284][ T3717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 139.431117][ T5776] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 139.431117][ T5776] [ 139.482772][ T3717] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 01 00 00 XFSB............ [ 139.521572][ T3717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.522468][ T5811] vim2m vim2m.0: vidioc_s_fmt queue busy [ 139.539314][ T3717] 00000020: 5e 62 73 b8 21 67 42 bb 91 1b 41 8a a1 4a 12 61 ^bs.!gB...A..J.a [ 139.587876][ T3717] 00000030: 00 00 00 00 00 00 80 40 00 00 00 00 00 00 00 20 .......@....... [ 139.602883][ T3717] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 139.622019][ T3717] 00000050: 00 00 00 08 00 00 80 00 00 00 00 02 00 00 00 00 ................ [ 139.642851][ T3717] 00000060: 00 00 0b 40 b4 b4 02 00 01 00 00 02 00 00 00 00 ...@............ [ 139.651837][ T3717] 00000070: 00 00 00 00 00 00 00 00 09 09 08 01 0f 00 00 19 ................ [ 139.670062][ T5793] XFS (loop3): SB validate failed with error -117. [ 140.717532][ T5815] loop4: detected capacity change from 0 to 32768 [ 140.738954][ T5815] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.681 (5815) [ 140.791756][ T5815] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 140.849107][ T5815] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 140.881817][ T5815] BTRFS info (device loop4): using free space tree [ 141.207179][ T5870] loop2: detected capacity change from 0 to 4096 [ 141.233458][ T5815] BTRFS info (device loop4): enabling ssd optimizations [ 141.415430][ T3639] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 141.445531][ T5870] __ntfs_error: 12 callbacks suppressed [ 141.445547][ T5870] ntfs: (device loop2): parse_options(): NLS character set iso not found. Using previous one cp950. [ 141.519087][ T5879] loop1: detected capacity change from 0 to 4096 [ 141.543781][ T5870] ntfs: volume version 3.1. [ 141.608202][ T5879] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.748710][ T5879] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 141.784652][ T5879] ntfs3: loop1: Failed to load $Extend. [ 142.432562][ T5908] loop2: detected capacity change from 0 to 2048 [ 142.463580][ T5908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.499752][ T5864] loop0: detected capacity change from 0 to 40427 [ 142.539355][ T5864] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 142.577358][ T5864] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.642234][ T5864] F2FS-fs (loop0): invalid crc value [ 142.703822][ T5864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.848063][ T5864] F2FS-fs (loop0): recover fsync data on readonly fs [ 142.865518][ T5864] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 142.882522][ T5864] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 142.892503][ T5864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.193019][ T5784] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.447316][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 143.578483][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.607379][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.633315][ T5784] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 143.642383][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.671174][ T5784] usb 2-1: config 0 descriptor?? [ 143.708111][ T5951] loop4: detected capacity change from 0 to 64 [ 143.822009][ T5955] netlink: 'syz.0.741': attribute type 10 has an invalid length. [ 144.000987][ T5962] loop3: detected capacity change from 0 to 512 [ 144.155076][ T5962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.193288][ T5784] kye 0003:0458:0138.0010: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 144.230457][ T5962] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038 (0x7fffffff) [ 144.286592][ T5973] "syz.4.748" (5973) uses obsolete ecb(arc4) skcipher [ 144.376870][ T5784] usb 2-1: USB disconnect, device number 8 [ 144.402689][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 144.493281][ T5977] loop4: detected capacity change from 0 to 64 [ 144.707312][ T5982] loop3: detected capacity change from 0 to 512 [ 144.751236][ T5963] loop0: detected capacity change from 0 to 32768 [ 144.770279][ T5982] EXT4-fs: Ignoring removed orlov option [ 144.817192][ T5963] XFS (loop0): Mounting V5 Filesystem [ 144.935733][ T5982] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.988682][ T5963] XFS (loop0): Ending clean mount [ 145.012453][ T5963] XFS (loop0): Quotacheck needed: Please wait. [ 145.073137][ T5982] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 145.082693][ T5982] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.750: Failed to acquire dquot type 0 [ 145.085562][ T5963] XFS (loop0): Quotacheck: Done. [ 145.152971][ T5982] EXT4-fs (loop3): Remounting filesystem read-only [ 145.159600][ T5982] EXT4-fs (loop3): 1 orphan inode deleted [ 145.171691][ T5982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.188913][ T5982] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 145.249855][ T3647] XFS (loop0): Unmounting Filesystem [ 145.390907][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 145.691441][ T6014] netlink: 'syz.3.763': attribute type 29 has an invalid length. [ 145.716125][ T6020] netlink: 277 bytes leftover after parsing attributes in process `syz.1.766'. [ 146.099984][ T6037] loop2: detected capacity change from 0 to 256 [ 146.251631][ T6043] loop4: detected capacity change from 0 to 1024 [ 146.383615][ T6049] loop2: detected capacity change from 0 to 512 [ 146.399872][ T6049] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 146.450664][ T6049] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.779: invalid indirect mapped block 1 (level 1) [ 146.458355][ T6049] EXT4-fs (loop2): 1 truncate cleaned up [ 146.458393][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.661726][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 147.072871][ T4572] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.087547][ T6071] loop4: detected capacity change from 0 to 2048 [ 147.144336][ T6074] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.189115][ T6071] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=1023, name_len=0 [ 147.219237][ T6071] Remounting filesystem read-only [ 147.282789][ T4571] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.403425][ T6080] loop3: detected capacity change from 0 to 512 [ 147.421314][ T6080] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.469326][ T6080] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 147.506015][ T6080] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 147.548896][ T6080] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.792: Failed to acquire dquot type 0 [ 147.598851][ T6084] loop4: detected capacity change from 0 to 2048 [ 147.631955][ T6085] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.656547][ T4572] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.666125][ T4572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.667355][ T6080] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 147.685059][ T4572] usb 3-1: Product: syz [ 147.707469][ T4572] usb 3-1: Manufacturer: syz [ 147.720442][ T4571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.740454][ T4572] usb 3-1: SerialNumber: syz [ 147.750574][ T4571] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.751497][ T6080] EXT4-fs (loop3): 1 truncate cleaned up [ 147.770467][ T4571] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.812204][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.824731][ T4572] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.973091][ T4571] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.993459][ T4571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.001490][ T4571] usb 2-1: Product: syz [ 148.011967][ T6088] loop4: detected capacity change from 0 to 512 [ 148.012803][ T4571] usb 2-1: Manufacturer: syz [ 148.032800][ T4571] usb 2-1: SerialNumber: syz [ 148.072609][ T6088] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.084296][ T4571] hub 2-1:1.0: bad descriptor, ignoring hub [ 148.090222][ T4571] hub: probe of 2-1:1.0 failed with error -5 [ 148.097991][ T6073] loop0: detected capacity change from 0 to 40427 [ 148.111570][ T6088] EXT4-fs (loop4): invalid journal inode [ 148.119901][ T6088] EXT4-fs (loop4): can't get journal size [ 148.129288][ T6073] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.173963][ T6088] EXT4-fs (loop4): 1 truncate cleaned up [ 148.179620][ T6073] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.181452][ T6073] F2FS-fs (loop0): invalid crc value [ 148.194727][ T3648] EXT4-fs (loop3): unmounting filesystem. [ 148.227300][ T6088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.283667][ T6088] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 148.305470][ T6073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.340241][ T4571] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.410367][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 148.411875][ T6096] loop3: detected capacity change from 0 to 128 [ 148.490571][ T6073] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.525354][ T6073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 148.529122][ T4572] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.695754][ T4571] usb 2-1: USB disconnect, device number 9 [ 148.715611][ T4571] usblp0: removed [ 148.774635][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 148.792639][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 148.975546][ T3835] usb 3-1: USB disconnect, device number 9 [ 149.003037][ T5784] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.469789][ T6112] IPVS: stopping backup sync thread 6113 ... [ 149.477456][ T6113] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 149.745168][ T6107] loop0: detected capacity change from 0 to 65536 [ 149.772883][ T4572] usb 3-1: Service connection timeout for: 256 [ 149.779496][ T4572] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 149.792833][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 149.811661][ T4572] ath9k_htc: Failed to initialize the device [ 149.828105][ T26] XFS (loop0): Superblock earlier than Version 5 has XFS_{P|G}QUOTA_{ENFD|CHKD} bits. [ 149.838522][ T26] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb block 0x0 [ 149.849326][ T3835] usb 3-1: ath9k_htc: USB layer deinitialized [ 149.858737][ T26] XFS (loop0): Unmount and run xfs_repair [ 149.866333][ T26] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 149.874308][ T26] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 01 00 00 XFSB............ [ 149.883474][ T26] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.892380][ T26] 00000020: 5e 62 73 b8 21 67 42 bb 91 1b 41 8a a1 4a 12 61 ^bs.!gB...A..J.a [ 149.906317][ T26] 00000030: 00 00 00 00 00 00 80 40 00 00 00 00 00 00 00 20 .......@....... [ 149.915884][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.925800][ T26] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 149.935240][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.945225][ T26] 00000050: 00 00 00 08 00 00 80 00 00 00 00 02 00 00 00 00 ................ [ 149.954514][ T5784] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 149.964415][ T26] 00000060: 00 00 0b 40 b4 b4 02 00 01 00 00 02 00 00 00 00 ...@............ [ 149.973935][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.982095][ T26] 00000070: 00 00 00 00 00 00 00 00 09 09 08 01 0f 00 00 19 ................ [ 149.993244][ T5784] usb 5-1: config 0 descriptor?? [ 149.998709][ T6107] XFS (loop0): SB validate failed with error -117. [ 150.036707][ T5784] hso 5-1:0.0: Can't find BULK IN endpoint [ 150.381836][ T4572] usb 5-1: USB disconnect, device number 8 [ 150.606483][ T6135] ebt_among: dst integrity fail: 200 [ 150.715291][ T6139] loop3: detected capacity change from 0 to 2048 [ 150.786383][ T6143] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.834850][ T6111] loop1: detected capacity change from 0 to 32768 [ 150.841976][ T6111] XFS: attr2 mount option is deprecated. [ 150.978049][ T6111] XFS (loop1): Mounting V5 Filesystem [ 151.050877][ T6111] XFS (loop1): Ending clean mount [ 151.052506][ T6111] XFS (loop1): Quotacheck needed: Please wait. [ 151.182311][ T6111] XFS (loop1): Quotacheck: Done. [ 151.206705][ T27] audit: type=1800 audit(2000000055.540:20): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.803" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 151.321590][ T3638] XFS (loop1): Unmounting Filesystem [ 151.785261][ T6176] Invalid ELF header magic: != ELF [ 151.964453][ T6190] loop1: detected capacity change from 0 to 128 [ 152.038035][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.062304][ T6190] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038 (0x7fffffff) [ 152.102838][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.352818][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 152.409979][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 152.473165][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.502955][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.542830][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.560677][ T6210] loop1: detected capacity change from 0 to 1024 [ 152.583882][ T22] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.612866][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.614918][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.844'. [ 152.650234][ T22] usb 5-1: config 0 descriptor?? [ 152.659269][ T6214] process 'syz.2.845' launched './file0' with NULL argv: empty string added [ 152.751092][ T11] hfsplus: b-tree write err: -5, ino 4 [ 153.152195][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input10 [ 153.261203][ T6226] loop3: detected capacity change from 0 to 4096 [ 153.337089][ T6226] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 153.352197][ T22] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 153.394412][ T22] usb 5-1: USB disconnect, device number 9 [ 153.457667][ T6226] ntfs3: loop3: Failed to load $Extend. [ 153.527238][ T6226] ntfs3: loop3: ino=21, "bus" fiemap is not supported for compressed file (cp -r) [ 154.032364][ T6219] loop1: detected capacity change from 0 to 40427 [ 154.075298][ T6219] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.113479][ T6219] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.192203][ T6219] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.337487][ T6219] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.347041][ T6219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.374454][ T3717] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.391256][ T6219] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 154.622932][ T3717] usb 4-1: Using ep0 maxpacket: 32 [ 154.769303][ T3717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.787604][ T6281] loop4: detected capacity change from 0 to 256 [ 154.798066][ T3717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.831936][ T3717] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 154.850528][ T6281] FAT-fs (loop4): Directory bread(block 64) failed [ 154.866141][ T3717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.880096][ T6281] FAT-fs (loop4): Directory bread(block 65) failed [ 154.899670][ T3717] usb 4-1: config 0 descriptor?? [ 154.918317][ T6281] FAT-fs (loop4): Directory bread(block 66) failed [ 154.925247][ T6285] loop0: detected capacity change from 0 to 64 [ 154.953311][ T6281] FAT-fs (loop4): Directory bread(block 67) failed [ 154.957106][ T6287] loop2: detected capacity change from 0 to 128 [ 154.959930][ T6281] FAT-fs (loop4): Directory bread(block 68) failed [ 155.004107][ T27] audit: type=1800 audit(2000000059.340:21): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.876" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 155.027388][ T6287] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 155.056222][ T6281] FAT-fs (loop4): Directory bread(block 69) failed [ 155.064338][ T6287] sysv_count_free_blocks: free block count was -2041545935, correcting to 0 [ 155.069156][ T6289] loop1: detected capacity change from 0 to 64 [ 155.092034][ T6281] FAT-fs (loop4): Directory bread(block 70) failed [ 155.117697][ T6281] FAT-fs (loop4): Directory bread(block 71) failed [ 155.124517][ T6289] hfs: request for non-existent node 16777216 in B*Tree [ 155.132237][ T6289] hfs: request for non-existent node 16777216 in B*Tree [ 155.139729][ T6281] FAT-fs (loop4): Directory bread(block 72) failed [ 155.147114][ T6281] FAT-fs (loop4): Directory bread(block 73) failed [ 155.203952][ T6287] sysv_count_free_inodes: unable to read inode table [ 155.258959][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 155.289216][ T3644] sysv_free_block: trying to free block not in datazone [ 155.309732][ T3644] sysv_free_block: trying to free block not in datazone [ 155.329722][ T3644] sysv_free_block: trying to free block not in datazone [ 155.346680][ T3644] sysv_free_block: trying to free block not in datazone [ 155.361279][ T3644] sysv_free_block: trying to free block not in datazone [ 155.368670][ T3644] sysv_free_block: trying to free block not in datazone [ 155.381561][ T3644] sysv_free_block: trying to free block not in datazone [ 155.410284][ T3717] hid_mf 0003:0079:1801.0012: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 155.440501][ T3717] hid_mf 0003:0079:1801.0012: Invalid report, this should never happen! [ 155.451549][ T3644] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 155.473339][ T3717] hid_mf 0003:0079:1801.0012: Force feedback init failed. [ 155.600102][ T22] usb 4-1: USB disconnect, device number 7 [ 156.347152][ T6330] loop4: detected capacity change from 0 to 1024 [ 156.369278][ T6330] hfsplus: small dir entry [ 156.452988][ T3717] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.462133][ T6303] loop2: detected capacity change from 0 to 40427 [ 156.467744][ T6333] loop4: detected capacity change from 0 to 128 [ 156.486062][ T6303] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 156.497793][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.504193][ T6303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.515787][ T6333] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 156.532987][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.547044][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.593324][ T6303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.615662][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 156.676337][ T6303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.684380][ T6303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 156.723891][ T6303] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 156.732867][ T3717] usb 1-1: Using ep0 maxpacket: 16 [ 156.789960][ T6343] loop4: detected capacity change from 0 to 1764 [ 156.822963][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 156.849171][ T6343] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 156.888636][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.912454][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.943091][ T22] usb 2-1: config 0 has no interfaces? [ 156.950941][ T22] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 156.952914][ T3717] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 156.979331][ T3717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.985402][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.007028][ T3717] usb 1-1: config 0 descriptor?? [ 157.028922][ T22] usb 2-1: config 0 descriptor?? [ 157.119130][ T6349] vivid-004: disconnect [ 157.124947][ T6348] vivid-004: reconnect [ 157.305247][ T4571] usb 2-1: USB disconnect, device number 10 [ 157.337568][ T26] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 157.503189][ T3717] hid-led 0003:1294:1320.0013: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 157.558200][ T3717] hid-led 0003:1294:1320.0013: Riso Kagaku Webmail Notifier initialized [ 157.701690][ T6351] loop2: detected capacity change from 0 to 40427 [ 157.712340][ T3717] usb 1-1: USB disconnect, device number 6 [ 157.713288][ T26] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 157.735896][ T6351] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 157.747197][ T4571] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 157.752901][ T26] usb 5-1: config 0 has no interface number 0 [ 157.766932][ T6351] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.768049][ T4571] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 157.782424][ T26] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.812165][ T4571] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 157.815079][ T26] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 157.831078][ T6351] F2FS-fs (loop2): invalid crc value [ 157.837152][ T26] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.851123][ T26] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 157.874552][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.899132][ T6351] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.906720][ T26] usb 5-1: config 0 descriptor?? [ 157.923097][ T6345] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 158.043703][ T6351] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.051455][ T6351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 158.406400][ T26] uclogic 0003:28BD:0909.0014: interface is invalid, ignoring [ 158.472186][ T6380] loop0: detected capacity change from 0 to 512 [ 158.524594][ T6380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.561725][ T6380] EXT4-fs (loop0): 1 truncate cleaned up [ 158.569594][ T6380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.643088][ T26] usb 5-1: USB disconnect, device number 10 [ 158.679362][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 158.817416][ T6389] loop0: detected capacity change from 0 to 8 [ 158.856527][ T6369] loop1: detected capacity change from 0 to 40427 [ 158.903223][ T6369] F2FS-fs (loop1): invalid crc value [ 158.920814][ T6389] SQUASHFS error: lzo decompression failed, data probably corrupt [ 158.933798][ T6369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.939241][ T6389] SQUASHFS error: Failed to read block 0x18e: -5 [ 158.959466][ T6389] SQUASHFS error: Unable to read metadata cache entry [18c] [ 158.961882][ T6394] netlink: 72 bytes leftover after parsing attributes in process `syz.3.924'. [ 159.007309][ T6394] netlink: 56 bytes leftover after parsing attributes in process `syz.3.924'. [ 159.020209][ T6396] netlink: 'syz.2.925': attribute type 6 has an invalid length. [ 159.080212][ T6369] F2FS-fs (loop1): recover fsync data on readonly fs [ 159.102368][ T6369] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 159.147126][ T6369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 159.532510][ T6413] loop3: detected capacity change from 0 to 64 [ 159.853612][ T6420] loop3: detected capacity change from 0 to 256 [ 159.871862][ T6420] exfat: Deprecated parameter 'utf8' [ 159.890742][ T6420] exfat: Deprecated parameter 'namecase' [ 159.940686][ T6420] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 160.573019][ T4571] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.641308][ T6418] loop0: detected capacity change from 0 to 32768 [ 160.642650][ T6416] loop4: detected capacity change from 0 to 40427 [ 160.703451][ T6416] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 160.724671][ T6418] XFS (loop0): Mounting V5 Filesystem [ 160.725638][ T6416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.836547][ T6416] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.852748][ T6418] XFS (loop0): Ending clean mount [ 160.910221][ T6427] loop3: detected capacity change from 0 to 32768 [ 160.946383][ T3647] XFS (loop0): Unmounting Filesystem [ 160.959703][ T6416] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.976279][ T6416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.985657][ T4571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.001861][ T6450] loop2: detected capacity change from 0 to 164 [ 161.014018][ T6427] JBD2: Ignoring recovery information on journal [ 161.022208][ T4571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.070788][ T4571] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 161.084430][ T6416] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 161.090468][ T4571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.106507][ T6427] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.129562][ T6427] [ 161.131930][ T6427] ====================================================== [ 161.138950][ T6427] WARNING: possible circular locking dependency detected [ 161.145990][ T6427] 6.1.110-syzkaller #0 Not tainted [ 161.151107][ T6427] ------------------------------------------------------ [ 161.158136][ T6427] syz.3.940/6427 is trying to acquire lock: [ 161.164052][ T6427] ffff888058f66d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 161.177339][ T6427] [ 161.177339][ T6427] but task is already holding lock: [ 161.184722][ T6427] ffff888058f631b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 161.194240][ T6427] [ 161.194240][ T6427] which lock already depends on the new lock. [ 161.194240][ T6427] [ 161.204629][ T6427] [ 161.204629][ T6427] the existing dependency chain (in reverse order) is: [ 161.213650][ T6427] [ 161.213650][ T6427] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 161.221465][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.226502][ T6427] down_read+0xad/0xa30 [ 161.231182][ T6427] ocfs2_init_acl+0x398/0x930 [ 161.236382][ T6427] ocfs2_mknod+0x1f75/0x2e20 [ 161.241585][ T6427] ocfs2_mkdir+0x1c0/0x4e0 [ 161.246523][ T6427] vfs_mkdir+0x3b6/0x590 [ 161.251284][ T6427] do_mkdirat+0x225/0x360 [ 161.256132][ T6427] __x64_sys_mkdirat+0x85/0x90 [ 161.261433][ T6427] do_syscall_64+0x3b/0xb0 [ 161.266374][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.272789][ T6427] [ 161.272789][ T6427] -> #4 (jbd2_handle){++++}-{0:0}: [ 161.280082][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.285109][ T6427] start_this_handle+0x1f71/0x21b0 [ 161.290741][ T6427] jbd2__journal_start+0x2d1/0x5c0 [ 161.296375][ T6427] jbd2_journal_start+0x25/0x30 [ 161.301741][ T6427] ocfs2_start_trans+0x3c0/0x6f0 [ 161.307205][ T6427] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 161.313622][ T6427] ocfs2_dismount_volume+0x1fb/0x960 [ 161.319426][ T6427] generic_shutdown_super+0x130/0x340 [ 161.325318][ T6427] kill_block_super+0x7a/0xe0 [ 161.330516][ T6427] deactivate_locked_super+0xa0/0x110 [ 161.336407][ T6427] cleanup_mnt+0x490/0x520 [ 161.341434][ T6427] task_work_run+0x246/0x300 [ 161.346545][ T6427] exit_to_user_mode_loop+0xde/0x100 [ 161.352349][ T6427] exit_to_user_mode_prepare+0xb1/0x140 [ 161.358408][ T6427] syscall_exit_to_user_mode+0x60/0x270 [ 161.364475][ T6427] do_syscall_64+0x47/0xb0 [ 161.369413][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.375826][ T6427] [ 161.375826][ T6427] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 161.384338][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.389364][ T6427] down_read+0xad/0xa30 [ 161.394064][ T6427] ocfs2_start_trans+0x3b5/0x6f0 [ 161.399523][ T6427] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 161.405770][ T6427] ocfs2_dismount_volume+0x1fb/0x960 [ 161.411574][ T6427] generic_shutdown_super+0x130/0x340 [ 161.417464][ T6427] kill_block_super+0x7a/0xe0 [ 161.422659][ T6427] deactivate_locked_super+0xa0/0x110 [ 161.428547][ T6427] cleanup_mnt+0x490/0x520 [ 161.433485][ T6427] task_work_run+0x246/0x300 [ 161.438589][ T6427] exit_to_user_mode_loop+0xde/0x100 [ 161.444392][ T6427] exit_to_user_mode_prepare+0xb1/0x140 [ 161.450447][ T6427] syscall_exit_to_user_mode+0x60/0x270 [ 161.456506][ T6427] do_syscall_64+0x47/0xb0 [ 161.461450][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.467870][ T6427] [ 161.467870][ T6427] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 161.475356][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.480377][ T6427] ocfs2_start_trans+0x2b0/0x6f0 [ 161.485836][ T6427] ocfs2_mknod+0x1638/0x2e20 [ 161.490946][ T6427] ocfs2_create+0x1c0/0x4e0 [ 161.495977][ T6427] path_openat+0x12f1/0x2e60 [ 161.501088][ T6427] do_filp_open+0x230/0x480 [ 161.506114][ T6427] do_sys_openat2+0x13b/0x4f0 [ 161.511314][ T6427] __x64_sys_openat+0x243/0x290 [ 161.516704][ T6427] do_syscall_64+0x3b/0xb0 [ 161.521655][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.528071][ T6427] [ 161.528071][ T6427] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 161.538590][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.543617][ T6427] down_write+0x36/0x60 [ 161.548286][ T6427] ocfs2_reserve_local_alloc_bits+0x127/0x29d0 [ 161.554966][ T6427] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 161.561998][ T6427] ocfs2_mknod+0x15b5/0x2e20 [ 161.567112][ T6427] ocfs2_create+0x1c0/0x4e0 [ 161.572135][ T6427] path_openat+0x12f1/0x2e60 [ 161.577236][ T6427] do_filp_open+0x230/0x480 [ 161.582265][ T6427] do_sys_openat2+0x13b/0x4f0 [ 161.587469][ T6427] __x64_sys_openat+0x243/0x290 [ 161.592845][ T6427] do_syscall_64+0x3b/0xb0 [ 161.597782][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.604192][ T6427] [ 161.604192][ T6427] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 161.614697][ T6427] validate_chain+0x1661/0x5950 [ 161.620064][ T6427] __lock_acquire+0x125b/0x1f80 [ 161.625431][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.630453][ T6427] down_write+0x36/0x60 [ 161.635118][ T6427] ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 161.641526][ T6427] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 161.648377][ T6427] ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 161.654550][ T6427] ocfs2_xattr_set+0xf46/0x1930 [ 161.659928][ T6427] ocfs2_set_acl+0x4cb/0x570 [ 161.665043][ T6427] ocfs2_iop_set_acl+0x252/0x3c0 [ 161.670505][ T6427] posix_acl_xattr_set+0x37b/0x3e0 [ 161.676129][ T6427] __vfs_setxattr+0x3e7/0x420 [ 161.681335][ T6427] __vfs_setxattr_noperm+0x12a/0x5e0 [ 161.687170][ T6427] vfs_setxattr+0x21d/0x420 [ 161.692206][ T6427] setxattr+0x250/0x2b0 [ 161.696882][ T6427] path_setxattr+0x1bc/0x2a0 [ 161.701991][ T6427] __x64_sys_lsetxattr+0xb4/0xd0 [ 161.707446][ T6427] do_syscall_64+0x3b/0xb0 [ 161.712392][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.718810][ T6427] [ 161.718810][ T6427] other info that might help us debug this: [ 161.718810][ T6427] [ 161.729034][ T6427] Chain exists of: [ 161.729034][ T6427] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 161.729034][ T6427] [ 161.744793][ T6427] Possible unsafe locking scenario: [ 161.744793][ T6427] [ 161.752232][ T6427] CPU0 CPU1 [ 161.757605][ T6427] ---- ---- [ 161.762959][ T6427] lock(&oi->ip_xattr_sem); [ 161.767565][ T6427] lock(jbd2_handle); [ 161.774171][ T6427] lock(&oi->ip_xattr_sem); [ 161.781275][ T6427] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 161.788561][ T6427] [ 161.788561][ T6427] *** DEADLOCK *** [ 161.788561][ T6427] [ 161.796693][ T6427] 3 locks held by syz.3.940/6427: [ 161.801709][ T6427] #0: ffff888029424460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 161.810941][ T6427] #1: ffff888058f63488 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 161.821221][ T6427] #2: ffff888058f631b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 161.831169][ T6427] [ 161.831169][ T6427] stack backtrace: [ 161.837054][ T6427] CPU: 0 PID: 6427 Comm: syz.3.940 Not tainted 6.1.110-syzkaller #0 [ 161.845034][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 161.855088][ T6427] Call Trace: [ 161.858362][ T6427] [ 161.861287][ T6427] dump_stack_lvl+0x1e3/0x2cb [ 161.865982][ T6427] ? nf_tcp_handle_invalid+0x642/0x642 [ 161.871447][ T6427] ? print_circular_bug+0x12b/0x1a0 [ 161.876642][ T6427] check_noncircular+0x2fa/0x3b0 [ 161.881583][ T6427] ? add_chain_block+0x850/0x850 [ 161.886523][ T6427] ? lockdep_lock+0x11f/0x2a0 [ 161.891236][ T6427] ? unwind_get_return_address+0x49/0x80 [ 161.896863][ T6427] ? mark_lock+0x9a/0x340 [ 161.901194][ T6427] ? _find_first_zero_bit+0xd0/0x100 [ 161.906487][ T6427] validate_chain+0x1661/0x5950 [ 161.911344][ T6427] ? reacquire_held_locks+0x660/0x660 [ 161.916715][ T6427] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 161.922699][ T6427] ? look_up_lock_class+0x77/0x140 [ 161.927821][ T6427] ? register_lock_class+0x100/0x990 [ 161.933147][ T6427] ? is_dynamic_key+0x260/0x260 [ 161.938018][ T6427] ? mark_lock+0x9a/0x340 [ 161.942352][ T6427] __lock_acquire+0x125b/0x1f80 [ 161.947213][ T6427] lock_acquire+0x1f8/0x5a0 [ 161.951724][ T6427] ? ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 161.957796][ T6427] ? read_lock_is_recursive+0x10/0x10 [ 161.963171][ T6427] ? __might_sleep+0xb0/0xb0 [ 161.967762][ T6427] ? __lock_acquire+0x125b/0x1f80 [ 161.972799][ T6427] down_write+0x36/0x60 [ 161.976956][ T6427] ? ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 161.983024][ T6427] ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 161.988925][ T6427] ? mark_lock+0x9a/0x340 [ 161.993269][ T6427] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.999266][ T6427] ? do_raw_spin_unlock+0x137/0x8a0 [ 162.004462][ T6427] ? ocfs2_block_group_search+0x530/0x530 [ 162.010182][ T6427] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 162.016077][ T6427] ? _raw_spin_unlock+0x40/0x40 [ 162.020928][ T6427] ? stack_trace_save+0x113/0x1c0 [ 162.025976][ T6427] ? stack_trace_snprint+0xe0/0xe0 [ 162.031094][ T6427] ? __stack_depot_save+0x3f5/0x470 [ 162.036299][ T6427] ? kasan_set_track+0x60/0x70 [ 162.041241][ T6427] ? kasan_set_track+0x4b/0x70 [ 162.046009][ T6427] ? __kasan_kmalloc+0x97/0xb0 [ 162.050776][ T6427] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 162.057365][ T6427] ? ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 162.063172][ T6427] ? ocfs2_xattr_set+0xf46/0x1930 [ 162.068199][ T6427] ? ocfs2_set_acl+0x4cb/0x570 [ 162.072962][ T6427] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 162.078067][ T6427] ? posix_acl_xattr_set+0x37b/0x3e0 [ 162.083348][ T6427] ? __vfs_setxattr+0x3e7/0x420 [ 162.088199][ T6427] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 162.093667][ T6427] ? vfs_setxattr+0x21d/0x420 [ 162.098342][ T6427] ? setxattr+0x250/0x2b0 [ 162.102667][ T6427] ? path_setxattr+0x1bc/0x2a0 [ 162.107422][ T6427] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 162.112527][ T6427] ? do_syscall_64+0x3b/0xb0 [ 162.117118][ T6427] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.123200][ T6427] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 162.129528][ T6427] ? ocfs2_init_steal_slots+0x150/0x150 [ 162.135068][ T6427] ? ocfs2_xattr_block_set+0x3620/0x3620 [ 162.140700][ T6427] ? ocfs2_xattr_set+0xef8/0x1930 [ 162.145735][ T6427] ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 162.151377][ T6427] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 162.157619][ T6427] ? up_write+0x19d/0x580 [ 162.161947][ T6427] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 162.167835][ T6427] ? __up_read+0x690/0x690 [ 162.172251][ T6427] ? ocfs2_xattr_ibody_find+0xd0/0x9c0 [ 162.177721][ T6427] ocfs2_xattr_set+0xf46/0x1930 [ 162.182576][ T6427] ? print_irqtrace_events+0x210/0x210 [ 162.188478][ T6427] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 162.194377][ T6427] ? stack_trace_snprint+0xe0/0xe0 [ 162.199487][ T6427] ? kasan_set_track+0x60/0x70 [ 162.204250][ T6427] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 162.209353][ T6427] ? posix_acl_xattr_set+0x37b/0x3e0 [ 162.214625][ T6427] ? __vfs_setxattr+0x3e7/0x420 [ 162.219475][ T6427] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 162.225023][ T6427] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.231105][ T6427] ? from_kgid+0x1a3/0x730 [ 162.235523][ T6427] ? make_kgid+0x6f0/0x6f0 [ 162.239948][ T6427] ? ocfs2_set_acl+0x11b/0x570 [ 162.244723][ T6427] ? ocfs2_set_acl+0x11b/0x570 [ 162.249484][ T6427] ? __kmalloc+0xe2/0x230 [ 162.253807][ T6427] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 162.259347][ T6427] ocfs2_set_acl+0x4cb/0x570 [ 162.263954][ T6427] ocfs2_iop_set_acl+0x252/0x3c0 [ 162.268905][ T6427] ? ocfs2_xattr_get+0x2b0/0x2b0 [ 162.273845][ T6427] ? from_kgid+0x1a3/0x730 [ 162.278259][ T6427] ? make_kgid+0x6f0/0x6f0 [ 162.282678][ T6427] ? rcu_is_watching+0x11/0xb0 [ 162.287446][ T6427] ? posix_acl_valid+0x329/0x3b0 [ 162.292381][ T6427] posix_acl_xattr_set+0x37b/0x3e0 [ 162.297489][ T6427] ? posix_acl_xattr_get+0x560/0x560 [ 162.302773][ T6427] __vfs_setxattr+0x3e7/0x420 [ 162.307464][ T6427] __vfs_setxattr_noperm+0x12a/0x5e0 [ 162.312763][ T6427] vfs_setxattr+0x21d/0x420 [ 162.317262][ T6427] ? __lock_acquire+0x1f80/0x1f80 [ 162.322298][ T6427] ? xattr_permission+0x4f0/0x4f0 [ 162.327322][ T6427] ? __might_fault+0xbd/0x110 [ 162.332006][ T6427] ? _copy_from_user+0x109/0x170 [ 162.336938][ T6427] setxattr+0x250/0x2b0 [ 162.341106][ T6427] ? path_setxattr+0x2a0/0x2a0 [ 162.345894][ T6427] ? __mnt_want_write+0x222/0x2a0 [ 162.350933][ T6427] path_setxattr+0x1bc/0x2a0 [ 162.355526][ T6427] ? simple_xattr_list_add+0xf0/0xf0 [ 162.360811][ T6427] ? syscall_enter_from_user_mode+0x2e/0x230 [ 162.366793][ T6427] __x64_sys_lsetxattr+0xb4/0xd0 [ 162.371733][ T6427] do_syscall_64+0x3b/0xb0 [ 162.376173][ T6427] ? clear_bhb_loop+0x45/0xa0 [ 162.380854][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.386774][ T6427] RIP: 0033:0x7f3ad997def9 [ 162.391201][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.410809][ T6427] RSP: 002b:00007f3ada860038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 162.419229][ T6427] RAX: ffffffffffffffda RBX: 00007f3ad9b35f80 RCX: 00007f3ad997def9 [ 162.427199][ T6427] RDX: 00000000200000c0 RSI: 0000000020000440 RDI: 0000000020000400 [ 162.435168][ T6427] RBP: 00007f3ad99f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 162.443134][ T6427] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 162.451097][ T6427] R13: 0000000000000000 R14: 00007f3ad9b35f80 R15: 00007fffd0fa5578 [ 162.459069][ T6427] [ 162.476485][ T4571] usb 2-1: config 0 descriptor?? [ 162.547578][ T3648] ocfs2: Unmounting device (7,3) on (node local) [ 162.883864][ T6458] loop4: detected capacity change from 0 to 32768 [ 162.954447][ T4571] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 162.970491][ T4571] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 163.163777][ T26] usb 2-1: USB disconnect, device number 11 [ 165.624243][ T3654] Bluetooth: hci4: command 0x0406 tx timeout