last executing test programs: 3.477202963s ago: executing program 0 (id=2194): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4002f516, 0x0) 3.317595509s ago: executing program 3 (id=2196): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') 2.163557346s ago: executing program 3 (id=2200): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 1.96894113s ago: executing program 0 (id=2202): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1}, 0x9}], 0x1, 0x0, 0x0) 1.960672211s ago: executing program 1 (id=2203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80000001}]}}]}, 0x38}}, 0x0) 1.856643811s ago: executing program 1 (id=2205): open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.795588118s ago: executing program 1 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xeb, &(0x7f00000002c0)=""/235, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000040), 0x1, r0}, 0x38) 1.763933425s ago: executing program 3 (id=2208): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.612250209s ago: executing program 1 (id=2211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x180000e, &(0x7f0000000080)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@acl}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x4, @desc3}) 1.588894139s ago: executing program 3 (id=2212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="00803e0080", 0x5}], 0x1}, 0x0) 1.440751125s ago: executing program 3 (id=2213): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) 1.346137542s ago: executing program 1 (id=2214): syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x100) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x11000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 1.272170775s ago: executing program 2 (id=2215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.183520053s ago: executing program 3 (id=2217): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.174451923s ago: executing program 2 (id=2218): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xee01) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mincore(&(0x7f00004d8000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/178) 1.113142453s ago: executing program 4 (id=2220): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0xb}, 0x20) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/238, 0xee}], 0x1, 0x40000, 0xfffffe9f) 1.108740237s ago: executing program 2 (id=2221): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 518.905742ms ago: executing program 0 (id=2222): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) 518.807921ms ago: executing program 2 (id=2223): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast2, 0x41}) 518.728833ms ago: executing program 4 (id=2224): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @random="000000e5ff00"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r1, 0x1, 0x6, @remote}, 0x10) 473.398133ms ago: executing program 2 (id=2225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 419.812934ms ago: executing program 2 (id=2226): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2, 0x14, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) 412.675123ms ago: executing program 0 (id=2227): socket(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1, 0x14a, 0x0) 406.27703ms ago: executing program 4 (id=2228): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x1a00001, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dd592f1af2c696f636861727365743d69736f383835392d332c636f6465706167653d63703836312c000fa24b3fddc1642ef5a081eb095d2715c2ed4df1bdbd28f0b60de544f6fdad3ed7a04cd153b43fed0fb3435d2b10d92462cfbe97"], 0x5, 0x330, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 335.39336ms ago: executing program 0 (id=2229): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) connect$tipc(r0, &(0x7f0000000100)=@id, 0x10) shutdown(r0, 0x2) 326.086507ms ago: executing program 4 (id=2230): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 273.158556ms ago: executing program 4 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 242.794921ms ago: executing program 4 (id=2232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fchmod(0xffffffffffffffff, 0x80) 101.141818ms ago: executing program 0 (id=2233): r0 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) kernel console output (not intermixed with test programs): noring removed bh option [ 139.027242][ T8872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.066567][ T8867] ntfs3(loop3): failed to convert "0000" to iso8859-6 [ 139.086794][ T8867] ntfs3(loop3): failed to convert "0030" to iso8859-6 [ 139.110034][ T8872] ext4 filesystem being mounted at /249/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.137775][ T8867] ntfs3(loop3): failed to convert name for inode 1e. [ 139.189636][ T8867] ntfs3(loop3): failed to convert "0032" to iso8859-6 [ 139.236125][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.320348][ T8898] loop4: detected capacity change from 0 to 256 [ 139.357935][ T8898] vfat: Unknown parameter '' [ 139.619417][ T8891] loop2: detected capacity change from 0 to 32768 [ 139.635611][ T8908] loop4: detected capacity change from 0 to 1024 [ 139.685396][ T8891] MetaData crosses page boundary!! [ 139.685808][ T8908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.692416][ T8891] lblock = 631800, size = 28672 [ 139.710782][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.2.1227 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 139.721044][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.731115][ T8891] Call Trace: [ 139.734408][ T8891] [ 139.737359][ T8891] dump_stack_lvl+0x241/0x360 [ 139.742070][ T8891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.747267][ T8891] ? __pfx__printk+0x10/0x10 [ 139.751856][ T8891] __get_metapage+0xa24/0xef0 [ 139.756532][ T8891] dtSearch+0x582/0x2520 [ 139.760787][ T8891] jfs_lookup+0x17f/0x410 [ 139.765114][ T8891] ? __pfx_jfs_lookup+0x10/0x10 [ 139.770131][ T8891] ? d_alloc_parallel+0x14a8/0x1600 [ 139.775326][ T8891] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 139.781652][ T8891] ? rcu_is_watching+0x15/0xb0 [ 139.786441][ T8891] ? __pfx_d_alloc_parallel+0x10/0x10 [ 139.791803][ T8891] ? lock_release+0xbf/0xa30 [ 139.796386][ T8891] ? __init_waitqueue_head+0xae/0x150 [ 139.801758][ T8891] __lookup_slow+0x28c/0x3f0 [ 139.806344][ T8891] ? __pfx___lookup_slow+0x10/0x10 [ 139.811458][ T8891] lookup_slow+0x53/0x70 [ 139.815697][ T8891] link_path_walk+0x99b/0xea0 [ 139.820374][ T8891] path_lookupat+0xa9/0x450 [ 139.824878][ T8891] filename_lookup+0x256/0x610 [ 139.829638][ T8891] ? __pfx_filename_lookup+0x10/0x10 [ 139.834926][ T8891] ? rcu_is_watching+0x15/0xb0 [ 139.839686][ T8891] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 139.845051][ T8891] ? getname_kernel+0x140/0x2f0 [ 139.849920][ T8891] kern_path+0x35/0x50 [ 139.854006][ T8891] unix_find_other+0x123/0x910 [ 139.858909][ T8891] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 139.864670][ T8891] ? __pfx_unix_find_other+0x10/0x10 [ 139.870037][ T8891] ? tomoyo_check_unix_address+0x15a/0x880 [ 139.875836][ T8891] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 139.881984][ T8891] unix_dgram_sendmsg+0xae0/0x1f80 [ 139.887092][ T8891] ? aa_sk_perm+0x96d/0xab0 [ 139.891677][ T8891] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 139.897214][ T8891] ? aa_sock_msg_perm+0x91/0x160 [ 139.902225][ T8891] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 139.907755][ T8891] __sock_sendmsg+0x221/0x270 [ 139.912438][ T8891] ____sys_sendmsg+0x52a/0x7e0 [ 139.917231][ T8891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.922507][ T8891] ? rcu_is_watching+0x15/0xb0 [ 139.927367][ T8891] ? __might_fault+0xaa/0x120 [ 139.932034][ T8891] __sys_sendmmsg+0x3ab/0x730 [ 139.936702][ T8891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.941919][ T8891] ? wake_up_q+0xdc/0x120 [ 139.946467][ T8891] ? futex_wait+0x285/0x360 [ 139.950977][ T8891] ? __pfx_futex_wait+0x10/0x10 [ 139.955831][ T8891] ? __pfx_lock_acquire+0x10/0x10 [ 139.960853][ T8891] ? alloc_file_pseudo+0x21f/0x290 [ 139.965967][ T8891] ? __pfx_lock_release+0x10/0x10 [ 139.970986][ T8891] ? do_futex+0x33b/0x560 [ 139.975348][ T8891] ? fd_install+0x9c/0x5d0 [ 139.979758][ T8891] ? fd_install+0x35c/0x5d0 [ 139.984259][ T8891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.990584][ T8891] ? rcu_is_watching+0x15/0xb0 [ 139.995338][ T8891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.001664][ T8891] ? rcu_is_watching+0x15/0xb0 [ 140.006435][ T8891] __x64_sys_sendmmsg+0xa0/0xb0 [ 140.011279][ T8891] do_syscall_64+0xf3/0x230 [ 140.015772][ T8891] ? clear_bhb_loop+0x35/0x90 [ 140.020441][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.026324][ T8891] RIP: 0033:0x7f2a09f7dff9 [ 140.030747][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.050343][ T8891] RSP: 002b:00007f2a0ace1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.058759][ T8891] RAX: ffffffffffffffda RBX: 00007f2a0a135f80 RCX: 00007f2a09f7dff9 [ 140.066723][ T8891] RDX: 0000000000000002 RSI: 0000000020000e80 RDI: 0000000000000006 [ 140.074688][ T8891] RBP: 00007f2a09ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 140.082654][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.090611][ T8891] R13: 0000000000000000 R14: 00007f2a0a135f80 R15: 00007ffe9e40f228 [ 140.098582][ T8891] [ 140.105010][ T8908] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.115673][ T8910] loop0: detected capacity change from 0 to 1024 [ 140.119974][ T8891] bread failed! [ 140.126084][ T8891] jfs_lookup: dtSearch returned -5 [ 140.136418][ T8910] EXT4-fs: inline encryption not supported [ 140.204844][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.211389][ T8910] EXT4-fs: Ignoring removed orlov option [ 140.251763][ T8910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.295786][ T8896] loop3: detected capacity change from 0 to 32768 [ 140.305830][ T8914] netlink: 'syz.4.1237': attribute type 25 has an invalid length. [ 140.345863][ T8914] netlink: 'syz.4.1237': attribute type 7 has an invalid length. [ 140.367475][ T8896] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.382076][ T8910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.490649][ T8896] XFS (loop3): Ending clean mount [ 140.498961][ T8896] XFS (loop3): Quotacheck needed: Please wait. [ 140.517042][ T8896] XFS (loop3): Quotacheck: Done. [ 140.557349][ T29] audit: type=1800 audit(1728375413.730:109): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1235" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 140.609081][ T29] audit: type=1800 audit(1728375413.770:110): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1230" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 140.619039][ T8939] loop2: detected capacity change from 0 to 1024 [ 140.640755][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.706179][ T5233] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.737482][ T8931] loop4: detected capacity change from 0 to 32768 [ 140.746325][ T8931] XFS: attr2 mount option is deprecated. [ 140.764380][ T35] hfsplus: b-tree write err: -5, ino 4 [ 140.798926][ T8931] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.845239][ T8931] XFS (loop4): Ending clean mount [ 140.863899][ T8931] XFS (loop4): Quotacheck needed: Please wait. [ 140.888186][ T8931] XFS (loop4): Quotacheck: Done. [ 140.990944][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 140.996299][ T5234] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 141.033052][ T8959] wireguard0: entered promiscuous mode [ 141.038770][ T8959] wireguard0: entered allmulticast mode [ 141.387868][ T8984] loop3: detected capacity change from 0 to 4096 [ 141.438572][ T8991] loop1: detected capacity change from 0 to 1024 [ 141.457060][ T8984] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 141.566256][ T8984] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 141.586003][ T8983] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 141.592972][ T8996] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 141.620077][ T8998] loop0: detected capacity change from 0 to 128 [ 141.645332][ T8998] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 141.669164][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1269'. [ 141.771857][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 141.796429][ T35] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 141.807222][ T35] kworker/u8:2: attempt to access beyond end of device [ 141.807222][ T35] loop0: rw=2049, sector=889, nr_sectors = 152 limit=128 [ 141.879423][ T9010] loop3: detected capacity change from 0 to 4096 [ 141.927819][ T9010] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 141.931149][ T1112] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 141.972005][ T9010] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 141.990667][ T9023] loop1: detected capacity change from 0 to 1024 [ 142.106180][ T1112] hfsplus: b-tree write err: -5, ino 4 [ 142.167261][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 142.209658][ T9036] macsec2: entered promiscuous mode [ 142.229454][ T9036] vlan0: entered promiscuous mode [ 142.255718][ T9036] vlan0: left promiscuous mode [ 142.404136][ T9053] loop4: detected capacity change from 0 to 8 [ 142.435916][ T9053] SQUASHFS error: Failed to read block 0x260685: -5 [ 142.456196][ T9053] SQUASHFS error: Unable to read metadata cache entry [260685] [ 142.473505][ T9053] SQUASHFS error: Unable to read directory block [260685:0] [ 142.640668][ T9065] loop4: detected capacity change from 0 to 1024 [ 142.717902][ T29] audit: type=1800 audit(1728375415.890:111): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1294" name="bus" dev="loop4" ino=6 res=0 errno=0 [ 142.718118][ T9047] loop2: detected capacity change from 0 to 32768 [ 142.755321][ T9069] loop0: detected capacity change from 0 to 2048 [ 142.834916][ T9076] loop3: detected capacity change from 0 to 512 [ 142.880631][ T9076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 142.896412][ T9076] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.920015][ T9076] overlayfs: conflicting options: nfs_export=on,index=off [ 143.077740][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 143.141670][ T5245] Bluetooth: hci5: command 0x0405 tx timeout [ 143.252401][ T9084] loop0: detected capacity change from 0 to 32768 [ 143.288469][ T9094] loop3: detected capacity change from 0 to 2048 [ 143.296202][ T9084] jfs_readdir called with invalid offset! [ 143.338203][ T9101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.085505][ T9110] loop1: detected capacity change from 0 to 32768 [ 144.154371][ T9110] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.257130][ T9146] loop2: detected capacity change from 0 to 1024 [ 144.270825][ T9110] XFS (loop1): Ending clean mount [ 144.278503][ T9110] XFS (loop1): Quotacheck needed: Please wait. [ 144.297027][ T9110] XFS (loop1): Quotacheck: Done. [ 144.323887][ T9146] hfsplus: bad catalog entry type [ 144.359346][ T1058] hfsplus: b-tree write err: -5, ino 4 [ 144.408334][ T5230] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.638460][ T9156] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 144.663588][ T9156] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.1329'. [ 144.688953][ T9156] netlink: 'syz.3.1329': attribute type 2 has an invalid length. [ 144.707222][ T9156] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 144.798856][ T9144] loop4: detected capacity change from 0 to 40427 [ 144.824268][ T9144] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 144.832005][ T9144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.841038][ T9144] F2FS-fs (loop4): build fault injection attr: rate: 18446, type: 0x1fffff [ 144.853387][ T9144] F2FS-fs (loop4): invalid crc value [ 144.860083][ T9144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.907772][ T9144] F2FS-fs (loop4): Start checkpoint disabled! [ 144.920860][ T9144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.930928][ T9162] loop1: detected capacity change from 0 to 4096 [ 144.931904][ T9144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 144.974012][ T9162] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 144.976113][ T9144] syz.4.1323: attempt to access beyond end of device [ 144.976113][ T9144] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 145.022675][ T9144] syz.4.1323: attempt to access beyond end of device [ 145.022675][ T9144] loop4: rw=2049, sector=53256, nr_sectors = 120 limit=40427 [ 145.043613][ T9144] syz.4.1323: attempt to access beyond end of device [ 145.043613][ T9144] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 145.067973][ T9172] loop2: detected capacity change from 0 to 2048 [ 145.069900][ T9162] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 145.131334][ T9172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.191472][ T1112] kworker/u8:6: attempt to access beyond end of device [ 145.191472][ T1112] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 145.231362][ T1112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 145.238435][ T1112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 145.322773][ T9184] random: crng reseeded on system resumption [ 145.580817][ T9188] netlink: 'syz.0.1342': attribute type 14 has an invalid length. [ 145.649812][ T9192] loop4: detected capacity change from 0 to 4096 [ 145.693616][ T9192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.710573][ T9170] loop3: detected capacity change from 0 to 40427 [ 145.718913][ T9170] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.727293][ T9170] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.751211][ T29] audit: type=1800 audit(1728375418.920:112): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1336" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 145.802671][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.814290][ T9170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.935422][ T9170] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.942883][ T9170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.251687][ T9210] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1350'. [ 146.291264][ T9210] 0: renamed from hsr_slave_1 (while UP) [ 146.300512][ T9194] loop1: detected capacity change from 0 to 40427 [ 146.325049][ T9210] 0: entered allmulticast mode [ 146.330181][ T9194] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 146.338921][ T9210] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 146.360259][ T9194] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 146.393831][ T9194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.403526][ T9211] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 146.451200][ T9211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'. [ 146.493918][ T9211] hsr0: entered promiscuous mode [ 146.523199][ T9211] hsr0: entered allmulticast mode [ 146.541495][ T9211] hsr_slave_0: entered allmulticast mode [ 146.554142][ T9194] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 146.574721][ T9211] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 146.590568][ T9194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.625669][ T9206] loop4: detected capacity change from 0 to 65536 [ 146.700312][ T9206] XFS (loop4): Mounting V5 Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 146.803504][ T9206] XFS (loop4): Ending clean mount [ 146.925902][ T5234] XFS (loop4): Unmounting Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 147.093850][ T9201] loop0: detected capacity change from 0 to 40427 [ 147.175078][ T9201] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 147.241426][ T9201] F2FS-fs (loop0): Image doesn't support compression [ 147.287443][ T9201] F2FS-fs (loop0): heap/no_heap options were deprecated [ 147.340066][ T9201] F2FS-fs (loop0): Image doesn't support compression [ 147.483505][ T9201] F2FS-fs (loop0): invalid crc value [ 147.552523][ T9201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.569766][ T9257] loop1: detected capacity change from 0 to 1024 [ 147.848821][ T9201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.930643][ T9201] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x228/0xb90 [ 147.996436][ T6298] syz-executor: attempt to access beyond end of device [ 147.996436][ T6298] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 148.020810][ T6298] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 148.033248][ T6298] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 148.477462][ T9317] loop1: detected capacity change from 0 to 128 [ 148.644513][ T9317] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.659418][ T9317] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.691367][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.808899][ T9317] fscrypt (loop1, inode 12): Unsupported encryption flags (0x23) [ 148.877032][ T5230] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.941893][ T9320] loop3: detected capacity change from 0 to 32768 [ 148.942515][ T9333] loop1: detected capacity change from 0 to 128 [ 148.963565][ T9320] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.975675][ T9333] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.977460][ T9320] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 149.004626][ T9333] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.040525][ T9320] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 149.059077][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 149.066016][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 149.104498][ T9337] loop0: detected capacity change from 0 to 128 [ 149.140182][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 149.159063][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 149.179503][ T9320] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 149.406091][ T9347] loop0: detected capacity change from 0 to 4096 [ 149.506127][ T9341] loop1: detected capacity change from 0 to 32768 [ 149.526690][ T9341] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 149.529803][ T9347] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 149.559896][ T9341] JBD2: Ignoring recovery information on journal [ 149.659017][ T9344] loop2: detected capacity change from 0 to 32768 [ 149.668076][ T9344] XFS: attr2 mount option is deprecated. [ 149.674865][ T9344] XFS: ikeep mount option is deprecated. [ 149.681018][ T9344] XFS: noikeep mount option is deprecated. [ 149.691142][ T9347] UDF-fs: Scanning with blocksize 512 failed [ 149.697448][ T9341] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.801392][ T9344] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 149.833789][ T9347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.849523][ T5230] ocfs2: Unmounting device (7,1) on (node local) [ 149.872537][ T9344] XFS (loop2): Ending clean mount [ 149.880827][ T9344] XFS (loop2): Quotacheck needed: Please wait. [ 149.936214][ T9344] XFS (loop2): Quotacheck: Done. [ 150.133013][ T5763] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.929123][ T9375] loop3: detected capacity change from 0 to 40427 [ 150.959681][ T9375] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 150.990686][ T9375] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.066368][ T9375] F2FS-fs (loop3): invalid crc value [ 151.097286][ T9387] loop4: detected capacity change from 0 to 256 [ 151.104906][ T9379] loop1: detected capacity change from 0 to 40427 [ 151.114440][ T9387] exfat: Deprecated parameter 'utf8' [ 151.120833][ T9387] exfat: Deprecated parameter 'namecase' [ 151.128907][ T9379] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 151.139515][ T9379] F2FS-fs (loop1): Image doesn't support compression [ 151.148567][ T9387] exfat: Deprecated parameter 'namecase' [ 151.157566][ T9379] F2FS-fs (loop1): Image doesn't support compression [ 151.164769][ T9387] exfat: Deprecated parameter 'utf8' [ 151.174371][ T9379] F2FS-fs (loop1): invalid crc value [ 151.185841][ T9387] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 151.212874][ T9375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.307218][ T9375] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 151.322567][ T9375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 151.363542][ T9379] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.452646][ T5233] syz-executor: attempt to access beyond end of device [ 151.452646][ T5233] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.540589][ T9379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.597284][ T9379] F2FS-fs (loop1): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1d0/0x3b0 [ 151.607680][ T29] audit: type=1800 audit(1728375424.760:113): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1407" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 151.629394][ T5233] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.134093][ T5230] syz-executor: attempt to access beyond end of device [ 152.134093][ T5230] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 152.152829][ T5230] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.160458][ T5230] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.521677][ T5284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.682343][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.695107][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.704714][ T939] kernel write not supported for file /amidi2 (pid: 939 comm: kworker/0:2) [ 152.704930][ T5284] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.731139][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.749445][ T5284] usb 3-1: SerialNumber: syz [ 152.983010][ T5284] usb 3-1: 0:2 : does not exist [ 153.005442][ T5284] usb 3-1: USB disconnect, device number 7 [ 153.491977][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 153.549051][ T9445] loop1: detected capacity change from 0 to 32768 [ 153.575645][ T9445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1433 (9445) [ 153.608520][ T9445] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.619293][ T9445] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 153.631248][ T9445] BTRFS info (device loop1): using free-space-tree [ 153.836869][ T5230] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.884854][ T9448] loop0: detected capacity change from 0 to 32768 [ 153.898986][ T9448] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1434 (9448) [ 153.924595][ T9448] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 153.936194][ T9448] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 153.949925][ T9448] BTRFS info (device loop0): using free-space-tree [ 154.071972][ T9489] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 154.071972][ T9489] SȘȞZ6' [ 154.129145][ T9499] loop2: detected capacity change from 0 to 256 [ 154.167522][ T9499] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 154.181734][ T8] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 154.231799][ T29] audit: type=1800 audit(1728375427.410:114): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1434" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 154.338919][ T6298] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.373723][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.373751][ T8] usb 4-1: config 0 has no interface number 0 [ 154.373778][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 154.373813][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.373835][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.376627][ T8] usb 4-1: config 0 descriptor?? [ 154.379289][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 154.584922][ T8] usb 4-1: USB disconnect, device number 12 [ 154.676953][ T9525] netlink: 'syz.0.1455': attribute type 46 has an invalid length. [ 154.685377][ T9525] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1455'. [ 154.695209][ T58] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.851665][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 154.858139][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.869197][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.901160][ T58] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.920478][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.932988][ T58] usb 3-1: config 0 descriptor?? [ 155.021209][ T937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.044866][ T9523] loop4: detected capacity change from 0 to 40427 [ 155.054771][ T9523] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 155.062133][ T9523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.070636][ T9523] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff [ 155.081415][ T9523] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 155.090532][ T9523] F2FS-fs (loop4): invalid crc value [ 155.113741][ T9523] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.169819][ T9523] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 155.184849][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.185386][ T9523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.203482][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.214386][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.229639][ T937] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 155.238760][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.250444][ T937] usb 1-1: config 0 descriptor?? [ 155.253812][ T9523] syz.4.1454: attempt to access beyond end of device [ 155.253812][ T9523] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 155.284867][ T5234] syz-executor: attempt to access beyond end of device [ 155.284867][ T5234] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.299265][ T5234] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 155.481543][ T9544] gretap0: entered promiscuous mode [ 155.487691][ T9544] erspan0: entered promiscuous mode [ 155.572138][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1465'. [ 155.583792][ T9548] tipc: Started in network mode [ 155.588702][ T9548] tipc: Node identity , cluster identity 8 [ 155.674562][ T9554] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 155.684355][ T9554] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.1467'. [ 155.694673][ T9554] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 155.735404][ T937] betop 0003:11C2:2208.0007: unknown main item tag 0x0 [ 155.749463][ T937] betop 0003:11C2:2208.0007: unknown main item tag 0x0 [ 155.769696][ T937] betop 0003:11C2:2208.0007: unknown main item tag 0x0 [ 155.789890][ T937] betop 0003:11C2:2208.0007: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 155.821178][ T937] betop 0003:11C2:2208.0007: no inputs found [ 156.041772][ T937] usb 1-1: USB disconnect, device number 6 [ 156.079435][ T9561] loop4: detected capacity change from 0 to 32768 [ 156.385265][ T9571] loop3: detected capacity change from 0 to 32768 [ 156.395181][ T9571] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1475 (9571) [ 156.410520][ T9571] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.421781][ T9571] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.430649][ T9571] BTRFS info (device loop3): using free-space-tree [ 156.568864][ T9591] loop0: detected capacity change from 0 to 128 [ 156.775432][ T5233] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.010278][ T9608] loop3: detected capacity change from 0 to 512 [ 157.054946][ T939] IPVS: starting estimator thread 0... [ 157.069980][ T9608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.092314][ T9608] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.141830][ T9610] IPVS: using max 37 ests per chain, 88800 per kthread [ 157.212311][ T9593] loop4: detected capacity change from 0 to 32768 [ 157.228763][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.321205][ T939] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.476599][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 157.483573][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.489087][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.493489][ T58] usb 3-1: USB disconnect, device number 8 [ 157.539774][ T9626] batman_adv: batadv0: Adding interface: macvlan3 [ 157.546371][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.567177][ T9624] loop0: detected capacity change from 0 to 2048 [ 157.577754][ T9626] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.603185][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.612314][ T939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.641194][ T9626] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 157.645609][ T9624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.653053][ T939] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 157.695310][ T9624] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.707940][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.720859][ T9636] bridge_slave_0: default FDB implementation only supports local addresses [ 157.738874][ T939] usb 2-1: config 0 descriptor?? [ 157.856782][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.919329][ T9646] sctp: [Deprecated]: syz.4.1501 (pid 9646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.919329][ T9646] Use struct sctp_sack_info instead [ 157.981246][ T9650] tap0: tun_chr_ioctl cmd 1074025677 [ 157.990950][ T9650] tap0: linktype set to 825 [ 158.002098][ T58] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.016346][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 158.171413][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 158.182854][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.199182][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.212572][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.226145][ T58] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.235814][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.246705][ T58] usb 3-1: config 0 descriptor?? [ 158.467412][ T9678] loop4: detected capacity change from 0 to 256 [ 158.483772][ T939] usbhid 2-1:0.0: can't add hid device: -71 [ 158.483781][ T9678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d) [ 158.539661][ T939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 158.565917][ T939] usb 2-1: USB disconnect, device number 9 [ 158.658337][ T58] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 158.676711][ T58] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input20 [ 158.703903][ T58] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 158.821338][ T937] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.831155][ T5284] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 158.904090][ T29] audit: type=1326 audit(1728375432.080:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.0.1522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb16af7dff9 code=0x0 [ 158.914680][ T58] usb 3-1: USB disconnect, device number 9 [ 158.984557][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 158.991682][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.002065][ T937] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 159.011915][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.020183][ T5284] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.030595][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.038411][ T937] usb 4-1: config 0 descriptor?? [ 159.043528][ T5284] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 159.053258][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.065135][ T5284] usb 5-1: config 0 descriptor?? [ 159.273757][ T9] usb 4-1: USB disconnect, device number 13 [ 159.492908][ T5284] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 159.498946][ T9700] loop2: detected capacity change from 0 to 1024 [ 159.499622][ T5284] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 159.531153][ T5284] kye 0003:0458:0138.0009: unexpected long global item [ 159.538366][ T5284] kye 0003:0458:0138.0009: parse failed [ 159.550695][ T5284] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 159.862774][ T9707] loop1: detected capacity change from 0 to 32768 [ 159.869704][ T9707] XFS: attr2 mount option is deprecated. [ 159.875437][ T9707] XFS: ikeep mount option is deprecated. [ 159.881577][ T9707] XFS: noikeep mount option is deprecated. [ 159.921226][ T5284] usb 5-1: USB disconnect, device number 11 [ 160.158924][ T9719] loop2: detected capacity change from 0 to 32768 [ 160.166389][ T9719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1531 (9719) [ 160.179601][ T9707] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 160.194822][ T9719] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.205470][ T9719] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.228530][ T9707] XFS (loop1): Ending clean mount [ 160.236455][ T9707] XFS (loop1): Quotacheck needed: Please wait. [ 160.243930][ T9719] BTRFS info (device loop2): using free-space-tree [ 160.293097][ T9707] XFS (loop1): Quotacheck: Done. [ 160.386492][ T5230] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 160.396937][ T1112] BTRFS info (device loop2): cannot satisfy tickets, dumping space info [ 160.405457][ T1112] BTRFS info (device loop2): space_info DATA+METADATA has 10035200 free, is full [ 160.414966][ T1112] BTRFS info (device loop2): space_info total=11534336, used=57344, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 160.429185][ T1112] BTRFS info (device loop2): failing ticket with 4398046511104 bytes [ 160.451923][ T29] audit: type=1800 audit(1728375433.550:116): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1531" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 160.483662][ T9719] BTRFS info (device loop2): space_info DATA+METADATA has 10035200 free, is full [ 160.493128][ T9719] BTRFS info (device loop2): space_info total=11534336, used=57344, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 160.507578][ T9719] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792 [ 160.517178][ T9719] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 160.524883][ T9719] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 160.532670][ T9719] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 160.540769][ T9719] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 160.608369][ T9712] loop3: detected capacity change from 0 to 32768 [ 160.627458][ T9712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1529 (9712) [ 160.668077][ T9712] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.684171][ T9712] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 160.694401][ T9712] BTRFS info (device loop3): using free-space-tree [ 160.706110][ T5763] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.860643][ T9774] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1540'. [ 160.884672][ T5233] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.898937][ T9774] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1540'. [ 161.147318][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 161.180599][ T9730] loop0: detected capacity change from 0 to 32768 [ 161.223612][ T9773] loop2: detected capacity change from 0 to 32768 [ 161.281789][ T9773] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.303897][ T9730] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 161.329118][ T9773] XFS (loop2): Ending clean mount [ 161.339754][ T29] audit: type=1800 audit(1728375434.510:117): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1534" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 161.414125][ T6298] ocfs2: Unmounting device (7,0) on (node local) [ 161.646861][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.654053][ T9807] loop0: detected capacity change from 0 to 64 [ 161.856885][ T9793] loop1: detected capacity change from 0 to 32768 [ 161.895659][ T9793] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.950058][ T9820] Attempt to restore checkpoint with obsolete wellknown handles [ 162.185410][ T5230] ocfs2: Unmounting device (7,1) on (node local) [ 162.415451][ T9840] loop3: detected capacity change from 0 to 128 [ 162.491470][ T9840] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 162.530219][ T9840] sysv_free_block: trying to free block not in datazone [ 162.603313][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 162.610471][ T9835] loop2: detected capacity change from 0 to 32768 [ 162.618522][ T9835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1561 (9835) [ 162.642267][ T9835] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.647889][ T9843] loop1: detected capacity change from 0 to 8192 [ 162.652473][ T9835] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 162.696277][ T9835] BTRFS info (device loop2): using free-space-tree [ 162.728348][ T9843] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.746039][ T9843] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 162.754072][ T9843] FAT-fs (loop1): Filesystem has been set read-only [ 162.815595][ T5230] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 162.865665][ T9862] loop1: detected capacity change from 0 to 256 [ 163.011169][ T5284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.039474][ T9841] loop0: detected capacity change from 0 to 32768 [ 163.175940][ T9841] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 163.176200][ T5763] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.196058][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 163.204162][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.207272][ T5284] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.207300][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.207318][ T5284] usb 5-1: Product: syz [ 163.207330][ T5284] usb 5-1: Manufacturer: syz [ 163.207345][ T5284] usb 5-1: SerialNumber: syz [ 163.208954][ T5284] usb 5-1: config 0 descriptor?? [ 163.210851][ T5284] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.210882][ T5284] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 163.388631][ T6298] ocfs2: Unmounting device (7,0) on (node local) [ 163.479058][ T9900] loop1: detected capacity change from 0 to 128 [ 163.497598][ T9900] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.568514][ T9900] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.584093][ T9898] loop2: detected capacity change from 0 to 4096 [ 163.613547][ T9898] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 163.642559][ T9900] fscrypt (loop1, inode 12): Unsupported encryption flags (0x0c) [ 163.665590][ T9898] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 163.682392][ T9898] ntfs3(loop2): Failed to load $Extend (-22). [ 163.697670][ T9898] ntfs3(loop2): Failed to initialize $Extend. [ 163.708044][ T5230] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.719923][ T29] audit: type=1800 audit(1728375436.900:118): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1577" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 163.740253][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.754220][ T9909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1585'. [ 163.763372][ T9909] macvtap0: entered promiscuous mode [ 163.770665][ T9909] macvtap0: left allmulticast mode [ 163.829375][ T5284] em28xx 5-1:0.0: chip ID is em28174 [ 163.918983][ T9922] loop0: detected capacity change from 0 to 256 [ 164.092727][ T5284] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 164.101063][ T5284] em28xx 5-1:0.0: board has no eeprom [ 164.171599][ T5284] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 164.179653][ T5284] em28xx 5-1:0.0: dvb set to bulk mode. [ 164.190213][ T9939] program syz.1.1597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.192247][ T937] em28xx 5-1:0.0: Binding DVB extension [ 164.211369][ T5284] usb 5-1: USB disconnect, device number 12 [ 164.224566][ T5284] em28xx 5-1:0.0: Disconnecting em28xx [ 164.279675][ T937] em28xx 5-1:0.0: Registering input extension [ 164.364191][ T937] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 164.378313][ T9924] loop3: detected capacity change from 0 to 32768 [ 164.379785][ T937] Registered IR keymap rc-empty [ 164.398949][ T937] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 164.430679][ T937] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 164.457151][ T937] em28xx 5-1:0.0: Input extension successfully initialized [ 164.466898][ T9924] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.469990][ T5284] em28xx 5-1:0.0: Closing input extension [ 164.501338][ T9934] mmap: syz.0.1595 (9934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.515145][ T5284] em28xx 5-1:0.0: Freeing device [ 164.558792][ T9924] XFS (loop3): Ending clean mount [ 164.574001][ T9924] XFS (loop3): Quotacheck needed: Please wait. [ 164.619948][ T9924] XFS (loop3): Quotacheck: Done. [ 164.657868][ T9962] loop4: detected capacity change from 0 to 16 [ 164.676596][ T9962] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 164.743534][ T5233] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.823725][ T9966] loop4: detected capacity change from 0 to 2048 [ 164.858904][ T9966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.958690][ T29] audit: type=1800 audit(1728375438.130:119): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1605" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 164.959827][ T9966] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.014560][ T9980] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1609'. [ 165.064642][ T9980] 0: renamed from hsr_slave_1 (while UP) [ 165.094170][ T9980] 0: entered allmulticast mode [ 165.102397][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.112018][ T9980] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 165.148293][ T9985] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 165.177589][ T9985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'. [ 165.198313][ T9985] hsr0: entered promiscuous mode [ 165.211415][ T9985] hsr0: entered allmulticast mode [ 165.212373][ T9987] loop4: detected capacity change from 0 to 256 [ 165.219411][ T9985] hsr_slave_0: entered allmulticast mode [ 165.238650][ T9985] bridge0: port 3(hsr0) entered blocking state [ 165.250842][ T9985] bridge0: port 3(hsr0) entered disabled state [ 165.268767][ T9985] bridge0: port 3(hsr0) entered blocking state [ 165.275611][ T9985] bridge0: port 3(hsr0) entered forwarding state [ 165.345033][ T9974] loop3: detected capacity change from 0 to 40427 [ 165.365057][ T9974] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.372760][ T9993] loop1: detected capacity change from 0 to 22 [ 165.388158][ T9993] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 165.401816][ T9993] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 165.425460][ T9974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.565375][T10000] loop1: detected capacity change from 0 to 64 [ 165.588188][ T5233] syz-executor: attempt to access beyond end of device [ 165.588188][ T5233] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.622855][ T5233] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 165.793699][ T9996] loop4: detected capacity change from 0 to 32768 [ 165.811604][ T9996] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1613 (9996) [ 165.837563][ T9996] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.852534][ T9996] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 165.871970][ T9996] BTRFS info (device loop4): using free-space-tree [ 166.354576][ T5234] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 166.394630][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 166.643561][T10062] loop1: detected capacity change from 0 to 16 [ 166.653263][T10062] erofs: (device loop1): mounted with root inode @ nid 36. [ 166.941381][ T5284] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.966095][T10049] loop2: detected capacity change from 0 to 32768 [ 167.043218][T10076] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.102823][ T5284] usb 4-1: config 0 has no interfaces? [ 167.110663][ T5284] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 167.130317][ T5284] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 167.149409][ T5284] usb 4-1: Manufacturer: syz [ 167.164789][ T5284] usb 4-1: config 0 descriptor?? [ 167.219071][T10086] loop1: detected capacity change from 0 to 512 [ 167.247626][T10089] loop2: detected capacity change from 0 to 512 [ 167.255606][T10086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.278203][T10086] EXT4-fs (loop1): 1 truncate cleaned up [ 167.285401][T10089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 167.291865][T10086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.298043][T10089] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.339531][T10089] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 167.376765][T10089] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 167.396950][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.406087][T10089] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1657: Failed to acquire dquot type 0 [ 167.435991][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.459872][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.475834][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 167.484742][ T9] usb 4-1: USB disconnect, device number 14 [ 167.731256][ T939] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 167.831466][ T29] audit: type=1326 audit(1728375441.000:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 167.857288][ T29] audit: type=1326 audit(1728375441.010:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 167.883120][T10129] loop2: detected capacity change from 0 to 128 [ 167.890854][ T29] audit: type=1326 audit(1728375441.030:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 167.914817][ T29] audit: type=1326 audit(1728375441.030:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 167.940946][ T29] audit: type=1326 audit(1728375441.030:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 167.964372][ T939] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 167.973850][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.002008][ T939] usb 2-1: config 0 descriptor?? [ 168.010416][ T29] audit: type=1326 audit(1728375441.030:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 168.051298][ T937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.079301][ T29] audit: type=1326 audit(1728375441.030:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088cf7dff9 code=0x7ffc0000 [ 168.226076][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.257123][ T937] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.282708][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.304628][ T937] usb 1-1: config 0 descriptor?? [ 168.416360][ T939] [drm:udl_init] *ERROR* Selecting channel failed [ 168.427352][ T939] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 168.442571][ T939] [drm] Initialized udl on minor 2 [ 168.454049][ T939] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 168.469369][ T939] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 168.495846][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 168.505465][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 168.516399][ T939] usb 2-1: USB disconnect, device number 10 [ 168.743764][ T937] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 168.756240][ T937] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input22 [ 168.771208][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.826422][ T937] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 168.861184][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.921719][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 168.928864][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.944362][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.968601][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.003086][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.015565][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 169.031011][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.041547][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.059485][ T9] usb 3-1: config 179 has no interface number 0 [ 169.067186][ T8] usb 5-1: config 0 descriptor?? [ 169.074265][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 169.101428][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 169.123858][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.149908][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 169.173456][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.188661][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.198844][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.229337][ T939] usb 1-1: USB disconnect, device number 7 [ 169.257738][T10158] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 169.505040][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.552358][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.560920][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.588969][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.606609][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.621180][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.638834][ T8] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 169.660175][ T8] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 169.682260][ T8] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 169.717356][ T8] microsoft 0003:045E:07DA.000B: no inputs found [ 169.743641][ T8] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 169.755896][ T939] usb 3-1: USB disconnect, device number 10 [ 169.755942][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.770153][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.799790][ T8] usb 5-1: USB disconnect, device number 13 [ 169.858598][T10195] loop3: detected capacity change from 0 to 8192 [ 169.890790][T10201] loop1: detected capacity change from 0 to 1024 [ 169.902083][T10195] loop3: p1 p3 p4 [ 169.905849][T10195] loop3: partition table partially beyond EOD, truncated [ 169.922125][T10195] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 169.930046][T10195] loop3: p3 start 16777215 is beyond EOD, truncated [ 169.945113][T10195] loop3: p4 size 50331648 extends beyond EOD, truncated [ 169.961381][T10201] hfsplus: xattr searching failed [ 170.023280][ T12] hfsplus: b-tree write err: -5, ino 4 [ 170.139060][T10211] loop3: detected capacity change from 0 to 1024 [ 170.499370][T10240] loop3: detected capacity change from 0 to 512 [ 170.506372][T10240] EXT4-fs: Ignoring removed nobh option [ 170.509359][T10235] loop0: detected capacity change from 0 to 2048 [ 170.522577][T10240] EXT4-fs (loop3): blocks per group (8192) and clusters per group (32) inconsistent [ 170.592233][T10244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.684173][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 170.684193][ T29] audit: type=1800 audit(1728375443.860:138): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1714" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 170.761731][T10219] loop1: detected capacity change from 0 to 32768 [ 170.774578][T10219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1706 (10219) [ 170.873771][T10219] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.905290][T10244] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 170.923364][T10219] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.924524][T10237] loop2: detected capacity change from 0 to 32768 [ 170.936423][T10244] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 170.977734][T10219] BTRFS info (device loop1): using free-space-tree [ 170.989192][T10244] Remounting filesystem read-only [ 171.021606][ T6298] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 171.034297][T10237] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.189886][T10237] XFS (loop2): Ending clean mount [ 171.253328][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.275135][ T5230] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.364795][T10295] loop3: detected capacity change from 0 to 512 [ 171.424996][T10295] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1734: casefold flag without casefold feature [ 171.481515][T10295] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1734: couldn't read orphan inode 15 (err -117) [ 171.514552][T10295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.644399][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.691277][ T939] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 171.819023][T10297] loop4: detected capacity change from 0 to 32768 [ 171.852215][T10297] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 171.879001][T10321] loop3: detected capacity change from 0 to 512 [ 171.879517][T10321] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.881468][T10297] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 171.885624][T10297] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 171.887352][ T5242] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 171.887369][ T5242] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 171.932356][T10321] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 171.944257][ T5242] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 171.944330][ T5242] gfs2: fsid=syz:syz.0: jid=0: Done [ 171.944400][T10297] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 171.946461][T10321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 171.946543][T10321] System zones: 1-12 [ 171.948016][T10321] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1743: corrupted in-inode xattr: e_value size too large [ 171.948335][T10321] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1743: couldn't read orphan inode 15 (err -117) [ 171.949146][T10321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.016459][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.061464][ T939] usb 1-1: device not accepting address 8, error -71 [ 172.155790][T10329] random: crng reseeded on system resumption [ 172.389742][T10336] netlink: 816 bytes leftover after parsing attributes in process `syz.1.1749'. [ 172.401569][ T5242] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 172.546308][T10347] loop2: detected capacity change from 0 to 16 [ 172.581291][ T5242] usb 4-1: Using ep0 maxpacket: 32 [ 172.586305][T10347] erofs: (device loop2): mounted with root inode @ nid 36. [ 172.588152][ T5242] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.602509][ T5242] usb 4-1: config 0 has no interface number 0 [ 172.621630][ T5242] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.627591][T10347] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 172.659408][ T5242] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.669961][T10347] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 172.680402][ T5242] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 172.691368][T10347] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 172.702857][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.721920][ T5242] usb 4-1: config 0 descriptor?? [ 172.729684][T10347] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 172.753571][T10347] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 172.764435][T10330] loop4: detected capacity change from 0 to 40427 [ 172.804971][T10330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.894789][T10330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.963667][T10366] Zero length message leads to an empty skb [ 173.080764][T10370] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 173.089889][T10370] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 173.250655][T10360] loop2: detected capacity change from 0 to 32768 [ 173.272158][T10360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1759 (10360) [ 173.289185][T10360] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.300632][T10360] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 173.310745][T10360] BTRFS info (device loop2): using free-space-tree [ 173.339294][ T5242] uclogic 0003:28BD:0094.000C: pen parameters not found [ 173.363077][ T5242] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 173.399500][ T5242] usb 4-1: USB disconnect, device number 15 [ 173.549754][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.013584][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 174.090439][T10416] loop3: detected capacity change from 0 to 4096 [ 174.098887][T10416] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 174.636639][T10416] ntfs3(loop3): ino=1b, "file0" failed to parse mft record [ 174.645678][T10426] loop4: detected capacity change from 0 to 1024 [ 174.658527][T10416] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 174.672049][T10416] ntfs3(loop3): ino=1b, "file0" attr_set_size [ 174.740102][T10426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.780386][T10426] EXT4-fs (loop4): shut down requested (0) [ 174.834242][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.541394][ T5242] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.659510][T10465] loop4: detected capacity change from 0 to 256 [ 175.678699][T10465] exfat: Deprecated parameter 'utf8' [ 175.691598][T10465] exfat: Deprecated parameter 'utf8' [ 175.704515][T10465] exfat: Deprecated parameter 'utf8' [ 175.704730][ T5242] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 175.731398][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.734025][T10465] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 175.762255][ T5242] usb 1-1: config 0 descriptor?? [ 175.769601][ T5242] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 175.804762][T10465] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 175.834028][T10465] exFAT-fs (loop4): Filesystem has been set read-only [ 176.114049][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 176.321446][ T5284] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 176.347650][T10480] loop3: detected capacity change from 0 to 32768 [ 176.483972][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.514307][ T5284] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 176.527270][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.542515][ T5284] usb 3-1: config 0 descriptor?? [ 176.582937][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1816'. [ 176.743407][ T5242] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 176.750303][ T5242] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 176.761491][ T5242] usb 1-1: USB disconnect, device number 10 [ 176.857849][T10518] loop4: detected capacity change from 0 to 64 [ 176.873508][ T29] audit: type=1800 audit(1728375450.050:139): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1822" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 176.901673][ T58] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 176.960441][ T5284] hid (null): unknown global tag 0xe [ 176.970559][ T5284] elecom 0003:056E:00E6.000D: unknown main item tag 0x7 [ 176.978590][ T5284] elecom 0003:056E:00E6.000D: unknown global tag 0xe [ 176.991150][ T5284] elecom 0003:056E:00E6.000D: item 0 0 1 14 parsing failed [ 176.998750][ T5284] elecom 0003:056E:00E6.000D: probe with driver elecom failed with error -22 [ 177.032628][T10526] loop4: detected capacity change from 0 to 512 [ 177.043717][T10526] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1826: bad orphan inode 4 [ 177.053724][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 177.060032][T10526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.074548][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.084701][ T58] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 177.090243][T10526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1826: bg 0: block 3: invalid block bitmap [ 177.093776][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.094856][ T58] usb 4-1: config 0 descriptor?? [ 177.121560][ T58] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 177.140343][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.183450][ T939] usb 3-1: USB disconnect, device number 11 [ 177.217646][T10532] loop4: detected capacity change from 0 to 512 [ 177.265042][T10532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.289118][T10532] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.362233][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.440524][T10538] loop4: detected capacity change from 0 to 128 [ 177.458629][T10538] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.491604][T10538] ext4 filesystem being mounted at /390/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.539831][ T5234] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.600549][T10541] loop4: detected capacity change from 0 to 128 [ 177.612522][T10541] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 177.622588][T10541] sysv_free_block: trying to free block not in datazone [ 177.663932][ T5234] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.692303][T10534] loop0: detected capacity change from 0 to 40427 [ 177.754062][T10534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.762730][T10548] netlink: 'syz.2.1833': attribute type 58 has an invalid length. [ 177.774556][T10550] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 177.856184][T10534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.866961][T10554] loop2: detected capacity change from 0 to 2048 [ 177.923515][T10554] loop2: p1 < > p3 p4 < > [ 177.928905][ T58] gspca_vc032x: reg_w err -71 [ 177.934072][ T58] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 177.944076][ T58] usb 4-1: USB disconnect, device number 16 [ 177.954783][T10554] loop2: p3 start 4284289 is beyond EOD, truncated [ 177.992288][ T6298] syz-executor: attempt to access beyond end of device [ 177.992288][ T6298] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.043471][ T6298] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.066237][T10566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.111004][T10564] loop2: detected capacity change from 0 to 4096 [ 178.610926][T10570] loop4: detected capacity change from 0 to 40427 [ 178.619985][T10570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 178.629026][T10570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.642334][T10570] F2FS-fs (loop4): invalid crc value [ 178.656577][T10570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.685964][T10588] loop3: detected capacity change from 0 to 2048 [ 178.734257][T10588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.750110][T10570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 178.758110][T10570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.827458][T10596] loop3: detected capacity change from 0 to 2048 [ 178.876278][T10596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.023055][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.395486][T10615] loop4: detected capacity change from 0 to 64 [ 179.661174][ T939] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.811207][ T939] usb 3-1: Using ep0 maxpacket: 8 [ 179.822412][ T939] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 179.831363][ T939] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 179.839466][ T939] usb 3-1: config 0 has no interface number 0 [ 179.855885][ T939] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.878025][ T939] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.899255][ T939] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.923003][ T939] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 179.932694][T10608] loop0: detected capacity change from 0 to 32768 [ 179.939896][ T939] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 179.961237][ T939] usb 3-1: Product: syz [ 179.979732][ T939] usb 3-1: config 0 descriptor?? [ 179.998120][T10617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.134969][T10608] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 180.170843][T10628] loop3: detected capacity change from 0 to 40427 [ 180.178815][T10628] F2FS-fs (loop3): Invalid segment count (0) [ 180.191495][T10628] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.202457][T10628] F2FS-fs (loop3): invalid crc value [ 180.216016][T10628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.298599][T10608] XFS (loop0): Ending clean mount [ 180.316811][T10628] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.331272][T10628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.344191][T10636] loop4: detected capacity change from 0 to 32768 [ 180.369985][T10636] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 180.385974][ T6298] XFS (loop0): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 180.413910][ T5233] syz-executor: attempt to access beyond end of device [ 180.413910][ T5233] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.437176][ T5233] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 180.502493][ T5234] ocfs2: Unmounting device (7,4) on (node local) [ 180.637326][ T939] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input24 [ 180.814176][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 180.863231][ T5242] usb 3-1: USB disconnect, device number 12 [ 180.863279][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 181.056325][T10670] futex_wake_op: syz.3.1877 tries to shift op by 32; fix this program [ 181.093775][T10672] loop4: detected capacity change from 0 to 64 [ 181.136623][T10672] hfs: bad catalog entry type 0 [ 181.241816][T10648] loop0: detected capacity change from 0 to 40427 [ 181.262252][T10648] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.324967][T10685] loop3: detected capacity change from 0 to 512 [ 181.344471][T10685] EXT4-fs (loop3): Invalid default hash set in the superblock [ 181.393414][T10648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.484507][T10648] syz.0.1868: attempt to access beyond end of device [ 181.484507][T10648] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.518887][T10648] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 181.531759][T10648] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 181.758725][T10701] loop3: detected capacity change from 0 to 2048 [ 181.826814][T10701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.902049][T10691] loop2: detected capacity change from 0 to 40427 [ 181.933219][T10691] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 181.945932][T10691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.976347][T10691] F2FS-fs (loop2): invalid crc value [ 181.988722][T10691] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.058438][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.073291][T10691] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.091402][T10691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.120264][T10691] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 182.211228][ T58] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.361181][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 182.372041][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.383396][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.411509][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.427041][T10719] loop0: detected capacity change from 0 to 32768 [ 182.434339][ T58] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 182.445890][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.461051][T10719] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1889 (10719) [ 182.475476][ T58] usb 5-1: config 0 descriptor?? [ 182.506191][T10719] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.527227][T10719] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 182.550091][T10736] loop2: detected capacity change from 0 to 4096 [ 182.558665][T10719] BTRFS info (device loop0): using free-space-tree [ 182.567732][T10736] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 182.615832][T10736] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 182.639205][T10736] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 182.707192][ T5763] ntfs3(loop2): ino=1a, ntfs_sync_fs failed, -22. [ 182.786372][ T6298] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.917941][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000E/input/input25 [ 183.016094][ T58] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000E/input/input26 [ 183.040886][ T58] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 183.086947][T10777] loop0: detected capacity change from 0 to 1024 [ 183.114397][T10777] syz.0.1915: attempt to access beyond end of device [ 183.114397][T10777] loop0: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 183.148732][T10777] buffer_io_error: 4 callbacks suppressed [ 183.148754][T10777] Buffer I/O error on dev loop0, logical block 2889, lost async page write [ 183.185024][T10780] syz.0.1915: attempt to access beyond end of device [ 183.185024][T10780] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 183.307744][ T58] usb 5-1: USB disconnect, device number 14 [ 183.376951][T10784] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 183.397952][T10771] loop2: detected capacity change from 0 to 32768 [ 183.429363][T10771] JBD2: Ignoring recovery information on journal [ 183.498124][T10771] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.564875][ T29] audit: type=1800 audit(1728375456.740:140): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1914" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 183.618559][T10779] loop3: detected capacity change from 0 to 32768 [ 183.635308][T10779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1916 (10779) [ 183.649974][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 183.659921][ T29] audit: type=1800 audit(1728375456.740:141): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1914" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 183.715692][T10779] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.726247][T10779] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 183.741550][T10779] BTRFS info (device loop3): using free-space-tree [ 184.069454][ T5233] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.103849][T10788] loop0: detected capacity change from 0 to 32768 [ 184.319074][T10834] cifs: Unknown parameter '_LI !BEJFAi_^wktcُE|,2' [ 184.573343][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.580652][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.588339][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.596070][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.608705][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 184.617217][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.693127][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 184.849714][T10849] loop0: detected capacity change from 0 to 32768 [ 185.018614][T10851] chnl_net:caif_netlink_parms(): no params data found [ 185.148030][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.156816][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.175737][T10851] bridge_slave_0: entered allmulticast mode [ 185.190665][T10851] bridge_slave_0: entered promiscuous mode [ 185.228165][T10876] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1950'. [ 185.242960][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.250150][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.291441][T10851] bridge_slave_1: entered allmulticast mode [ 185.311249][T10851] bridge_slave_1: entered promiscuous mode [ 185.402631][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.439168][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.513257][T10851] team0: Port device team_slave_0 added [ 185.525112][T10851] team0: Port device team_slave_1 added [ 185.662716][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.669694][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.696437][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.708162][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.715440][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.742227][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.754377][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 185.867511][T10851] hsr_slave_0: entered promiscuous mode [ 185.886771][T10906] loop2: detected capacity change from 0 to 256 [ 185.903788][T10851] hsr_slave_1: entered promiscuous mode [ 185.910950][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 185.929693][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 185.951151][T10851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.952673][T10906] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 185.967878][T10851] Cannot create hsr debugfs directory [ 185.982936][T10906] UDF-fs: Scanning with blocksize 512 failed [ 186.006732][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.036677][T10906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.089449][ T29] audit: type=1800 audit(1728375459.260:142): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1964" name="file2" dev="loop2" ino=66 res=0 errno=0 [ 186.195468][T10913] input: syz0 as /devices/virtual/input/input27 [ 186.341302][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 186.347356][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 186.451998][T10911] loop4: detected capacity change from 0 to 40427 [ 186.467020][T10911] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 186.475365][T10911] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 186.491760][T10911] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff [ 186.515653][T10911] F2FS-fs (loop4): invalid crc value [ 186.547471][T10911] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.665472][T10911] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 186.681326][T10911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.722770][T10911] syz.4.1966: attempt to access beyond end of device [ 186.722770][T10911] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.741324][ T5235] Bluetooth: hci6: command tx timeout [ 186.762315][T10851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.771586][T10911] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 186.882218][T10851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.983545][T10851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.116145][T10851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.241179][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.244868][T10851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.288084][T10952] can0: slcan on ttyS3. [ 187.290418][T10851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.310903][T10851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.320484][T10851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.351912][T10952] can0 (unregistered): slcan off ttyS3. [ 187.393319][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 187.423477][ T9] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 187.457013][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.469436][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.498151][ T9] usb 1-1: Product: syz [ 187.510513][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.517380][ T9] usb 1-1: Manufacturer: syz [ 187.531628][ T9] usb 1-1: SerialNumber: syz [ 187.537605][ T9] usb 1-1: config 0 descriptor?? [ 187.543733][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 187.562823][ T9] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 187.578836][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.586013][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.628508][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.635731][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.654680][ T9] usb 1-1: Found UVC 0.00 device syz (0d49:7000) [ 187.661070][ T9] usb 1-1: No valid video chain found. [ 187.714899][T10851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.833647][ T9] usb 1-1: USB disconnect, device number 11 [ 187.949662][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.025859][T10851] veth0_vlan: entered promiscuous mode [ 188.037707][T10851] veth1_vlan: entered promiscuous mode [ 188.051680][ T5242] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 188.055229][T10851] veth0_macvtap: entered promiscuous mode [ 188.069516][T10851] veth1_macvtap: entered promiscuous mode [ 188.083494][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.094675][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.105284][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.115754][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.125852][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.136515][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.146520][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.151515][ T29] audit: type=1326 audit(1728375461.320:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff796b7dff9 code=0x7ffc0000 [ 188.157302][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.189618][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.200987][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.212949][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.222634][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.233286][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.244593][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.255496][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.265538][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.276153][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.286220][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.295954][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.297168][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.313166][ T29] audit: type=1326 audit(1728375461.320:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff796b7dff9 code=0x7ffc0000 [ 188.318229][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.351020][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.351611][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.361778][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.387732][T10851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.394688][T10965] loop2: detected capacity change from 0 to 40427 [ 188.397433][T10851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.412302][T10851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.420988][T10851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.423974][ T5242] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.435629][ T29] audit: type=1326 audit(1728375461.320:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff796b7dff9 code=0x7ffc0000 [ 188.464782][T10965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.465635][ T29] audit: type=1326 audit(1728375461.320:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff796b7dff9 code=0x7ffc0000 [ 188.487267][ T5242] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 188.495959][ T29] audit: type=1326 audit(1728375461.320:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff796b7dff9 code=0x7ffc0000 [ 188.585137][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.597822][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.606966][T10965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 188.616157][ T5242] usb 5-1: config 0 descriptor?? [ 188.616188][T10997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.633260][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.639009][T10965] syz.2.1989: attempt to access beyond end of device [ 188.639009][T10965] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 188.684472][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.693038][ T5763] syz-executor: attempt to access beyond end of device [ 188.693038][ T5763] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 188.695313][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.711154][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 188.760580][T11002] loop3: detected capacity change from 0 to 2048 [ 188.807356][T11005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.831412][ T5235] Bluetooth: hci6: command tx timeout [ 188.842452][T11004] loop1: detected capacity change from 0 to 2048 [ 188.853878][ T5242] usbhid 5-1:0.0: can't add hid device: -71 [ 188.859911][ T5242] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.872960][T11004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.892903][T11000] loop0: detected capacity change from 0 to 4096 [ 188.947343][T11000] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 188.957475][ T5242] usb 5-1: USB disconnect, device number 15 [ 188.973976][T10851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.013390][T11000] ntfs3(loop0): failed to convert "c46c" to iso8859-13 [ 189.095628][T11013] ./bus: Can't lookup blockdev [ 189.368950][T11025] (unnamed net_device) (uninitialized): (slave team_slave_0): Device is not bonding slave [ 189.395586][T11025] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_0) [ 189.432160][ T5242] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.555135][T11022] loop2: detected capacity change from 0 to 40427 [ 189.581634][T11022] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 189.593221][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 189.597171][T11022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.601814][ T5242] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.619019][ T5242] usb 5-1: config 0 has no interface number 0 [ 189.626407][T11022] F2FS-fs (loop2): invalid crc value [ 189.636850][ T5242] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.648627][T11022] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.668482][ T5242] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.699930][ T5242] usb 5-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.735157][T11022] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 189.737854][ T5242] usb 5-1: config 0 interface 1 has no altsetting 0 [ 189.744460][T11036] netlink: 'syz.0.2013': attribute type 2 has an invalid length. [ 189.751760][ T5242] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 189.757184][T11022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.767085][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.801190][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2013'. [ 189.816050][T11022] syz.2.2008: attempt to access beyond end of device [ 189.816050][T11022] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.835504][ T5242] usb 5-1: config 0 descriptor?? [ 189.847727][ T5242] hso 5-1:0.1: Failed to find BULK IN ep [ 189.851450][T11036] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 189.940253][ T5763] syz-executor: attempt to access beyond end of device [ 189.940253][ T5763] loop2: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 189.971178][ T5763] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 190.128298][ T5242] usb 5-1: USB disconnect, device number 16 [ 190.292770][ T29] audit: type=1326 audit(1728375463.460:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.326925][ T29] audit: type=1326 audit(1728375463.460:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.350219][ T29] audit: type=1326 audit(1728375463.460:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.373076][ T29] audit: type=1326 audit(1728375463.460:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.395916][ T29] audit: type=1326 audit(1728375463.460:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.421550][ T29] audit: type=1326 audit(1728375463.460:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.444527][ T29] audit: type=1326 audit(1728375463.460:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.467511][ T29] audit: type=1326 audit(1728375463.460:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.490287][ T29] audit: type=1326 audit(1728375463.470:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.512982][ T29] audit: type=1326 audit(1728375463.470:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a09f7dff9 code=0x7ffc0000 [ 190.545158][T11066] loop3: detected capacity change from 0 to 512 [ 190.568520][T11066] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2025: bad orphan inode 15 [ 190.582287][T11066] ext4_test_bit(bit=14, block=5) = 0 [ 190.588255][T11066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.611484][T11066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 190.642983][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.901414][ T5235] Bluetooth: hci6: command tx timeout [ 191.105840][T11089] loop3: detected capacity change from 0 to 32768 [ 191.121462][ T937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.272712][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 191.280339][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.291911][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.307322][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.319646][ T937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.331078][ T937] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.348025][ T937] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.359383][ T937] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.376559][ T937] usb 2-1: Manufacturer: syz [ 191.392628][ T937] usb 2-1: config 0 descriptor?? [ 191.554657][T11101] loop2: detected capacity change from 0 to 32768 [ 191.567211][T11101] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 191.584008][T11101] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.599684][T11101] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 191.621979][ T58] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 191.628789][ T58] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 191.689311][ T937] rc_core: IR keymap rc-hauppauge not found [ 191.695592][ T937] Registered IR keymap rc-empty [ 191.700595][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.719917][ T58] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 191.727597][ T58] gfs2: fsid=syz:syz.0: jid=0: Done [ 191.733442][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.743439][T11101] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 191.751536][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 191.774434][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 191.793570][T11111] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 191.800804][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.808352][T11111] macsec1: entered promiscuous mode [ 191.816357][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.831186][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.838598][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.846939][T11111] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 191.859946][T11101] syz.2.2042 (11101): drop_caches: 2 [ 191.864454][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.882989][T11101] syz.2.2042 (11101): drop_caches: 2 [ 191.901636][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.944512][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 191.992687][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.011386][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.013498][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.073533][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.095738][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.133778][ T937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.162886][ T8] usb 4-1: config 0 has no interfaces? [ 192.164795][ T937] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 192.170674][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 192.176887][ T937] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.208127][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.208842][ T937] usb 2-1: USB disconnect, device number 11 [ 192.231405][ T8] usb 4-1: config 0 descriptor?? [ 192.412046][T11133] loop0: detected capacity change from 0 to 1024 [ 192.458083][ T8] usb 4-1: USB disconnect, device number 17 [ 192.513483][ T1058] hfsplus: b-tree write err: -5, ino 4 [ 192.540144][T11137] loop2: detected capacity change from 0 to 1024 [ 192.559810][ T5235] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 192.567446][T11139] loop0: detected capacity change from 0 to 8 [ 192.574877][T11139] squashfs image failed sanity check [ 192.680940][T11147] loop4: detected capacity change from 0 to 128 [ 192.688462][T11147] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.765683][T11152] loop4: detected capacity change from 0 to 1024 [ 192.826967][ T12] hfsplus: b-tree write err: -5, ino 4 [ 192.867842][T11157] loop1: detected capacity change from 0 to 2048 [ 192.916465][T11157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.981392][ T5235] Bluetooth: hci6: command tx timeout [ 193.100665][T11159] loop4: detected capacity change from 0 to 32768 [ 193.115169][T11159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2068 (11159) [ 193.129115][T10851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.141362][T11159] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.152001][T11159] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 193.160894][T11159] BTRFS info (device loop4): using free-space-tree [ 193.412513][ T5234] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.521961][T11173] loop2: detected capacity change from 0 to 32768 [ 193.584561][T11173] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 193.599391][T11173] (syz.2.2072,11173,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 193.671772][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 193.829393][T11206] loop0: detected capacity change from 0 to 512 [ 193.946662][T11206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.987301][T11193] loop1: detected capacity change from 0 to 32768 [ 193.994611][T11206] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.006309][T11193] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 194.022033][T11193] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 194.036310][T11216] loop4: detected capacity change from 0 to 2048 [ 194.051398][T11216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.072357][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.093587][T11193] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 194.125806][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 194.151370][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 194.259635][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 108ms [ 194.273701][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 194.283354][T11193] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 194.484138][T11239] loop0: detected capacity change from 0 to 128 [ 194.489904][T11237] loop2: detected capacity change from 0 to 1024 [ 194.503490][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.509911][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538063][T11237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.572910][T11242] loop3: detected capacity change from 0 to 128 [ 194.579913][T11239] EXT4-fs: Ignoring removed nobh option [ 194.630386][T11242] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.646124][T11239] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.702026][T11242] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.777051][T11248] loop4: detected capacity change from 0 to 512 [ 194.796775][T11239] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.812877][T11242] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.827432][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.894253][T11242] CUSE: unknown device info "gˤj~vrpW*f+ncy1w0o\I^K2^߻o" [ 194.909779][T11242] CUSE: unknown device info "Lo" [ 194.919993][T11248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.928860][T11242] CUSE: unknown device info "m)" [ 194.938108][T11242] CUSE: DEVNAME unspecified [ 194.945292][T11248] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.053660][T11239] fscrypt (loop0, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 195.066453][ T5233] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.086203][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.188892][T11253] loop2: detected capacity change from 0 to 32768 [ 195.212126][T11257] loop4: detected capacity change from 0 to 1024 [ 195.221058][T11253] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2094 (11253) [ 195.259692][T11261] loop3: detected capacity change from 0 to 1024 [ 195.271981][ T6298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.285954][T11253] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.286094][ T12] hfsplus: b-tree write err: -5, ino 4 [ 195.296873][T11253] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 195.333280][T11253] BTRFS info (device loop2): using free-space-tree [ 195.543184][T11282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2105'. [ 195.711694][T11253] BTRFS info (device loop2): rebuilding free space tree [ 195.830454][ T5763] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.951952][T11274] loop4: detected capacity change from 0 to 32768 [ 196.012288][ T2581] read_mapping_page failed! [ 196.016835][ T2581] ERROR: (device loop4): txCommit: [ 196.016835][ T2581] [ 196.035920][ T2581] ERROR: (device loop4): remounting filesystem as read-only [ 196.062889][ T2581] jfs_write_inode: jfs_commit_inode failed! [ 196.301861][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 196.327833][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 196.377763][T11322] loop4: detected capacity change from 0 to 4096 [ 196.412283][T11322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.484670][T11322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.510441][T11322] EXT4-fs (loop4): shut down requested (1) [ 196.580203][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.595032][ T5235] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 196.603736][ T5235] Bluetooth: hci3: Injecting HCI hardware error event [ 196.610600][ T5235] Bluetooth: hci3: hardware error 0x00 [ 196.638888][T11311] loop1: detected capacity change from 0 to 32768 [ 196.681516][T11311] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 196.681516][T11311] [ 196.698793][T11311] ERROR: (device loop1): remounting filesystem as read-only [ 196.729676][T11311] jfs_lookup: dtSearch returned -5 [ 196.761344][T11343] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 196.761344][T11343] [ 196.783211][T11343] jfs_readdir: unexpected rc = -5 from dtReadNext [ 196.975262][T11356] Process accounting resumed [ 196.979893][T11356] kernel write not supported for file /asound/timers (pid: 11356 comm: syz.4.2136) [ 197.527537][T11346] loop3: detected capacity change from 0 to 40427 [ 197.549722][T11346] F2FS-fs (loop3): invalid crc value [ 197.567571][T11346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.667256][T11346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 197.735356][T11372] loop0: detected capacity change from 0 to 512 [ 197.751917][T11372] EXT4-fs: Ignoring removed bh option [ 197.768969][T11355] loop2: detected capacity change from 0 to 131072 [ 197.769136][T11372] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 197.813620][T11355] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.817465][T11372] EXT4-fs (loop0): 1 truncate cleaned up [ 197.832094][ T5233] syz-executor: attempt to access beyond end of device [ 197.832094][ T5233] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.846569][ T5233] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 197.857091][T11355] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.885118][T11372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.911711][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 197.911729][ T29] audit: type=1800 audit(1728375471.090:161): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2139" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 197.980870][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.086226][T11384] loop1: detected capacity change from 0 to 1024 [ 198.129382][T11384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.347981][T11384] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 198.366328][T11384] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 198.379244][T11384] EXT4-fs (loop1): This should not happen!! Data will be lost [ 198.379244][T11384] [ 198.394930][T11384] EXT4-fs (loop1): Total free blocks count 0 [ 198.405025][T11384] EXT4-fs (loop1): Free/Dirty block details [ 198.419607][T11384] EXT4-fs (loop1): free_blocks=68451041280 [ 198.426473][T11384] EXT4-fs (loop1): dirty_blocks=16 [ 198.433078][T11384] EXT4-fs (loop1): Block reservation details [ 198.439145][T11384] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 198.478551][T11394] loop3: detected capacity change from 0 to 1024 [ 198.507397][T10851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.653850][T11404] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2151'. [ 198.663042][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 198.755189][T11412] loop2: detected capacity change from 0 to 16 [ 198.771748][T11412] erofs: (device loop2): mounted with root inode @ nid 36. [ 199.044338][T11426] loop1: detected capacity change from 0 to 4096 [ 199.056358][T11426] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 199.074510][T11426] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 199.227551][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 200.014012][T11483] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 200.061429][T11483] CIFS mount error: No usable UNC path provided in device string! [ 200.061429][T11483] [ 200.081211][T11483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 200.098226][T11486] loop3: detected capacity change from 0 to 512 [ 200.158032][T11486] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.2187: casefold flag without casefold feature [ 200.192679][T11486] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2187: couldn't read orphan inode 15 (err -117) [ 200.227708][T11489] loop2: detected capacity change from 0 to 64 [ 200.235076][T11486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.524879][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.671380][ T939] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.852829][T11491] loop4: detected capacity change from 0 to 40427 [ 200.931604][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 200.937989][ T939] usb 2-1: config 0 has no interfaces? [ 200.943585][T11491] F2FS-fs (loop4): invalid crc value [ 200.953429][ T939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.963004][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.971010][ T939] usb 2-1: Product: syz [ 200.977960][T11491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.001234][ T939] usb 2-1: Manufacturer: syz [ 201.005872][ T939] usb 2-1: SerialNumber: syz [ 201.021907][ T939] usb 2-1: config 0 descriptor?? [ 201.044739][T11491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.090852][ T29] audit: type=1804 audit(1728375474.260:162): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2190" name="/newroot/475/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 201.123360][T11504] loop2: detected capacity change from 0 to 32768 [ 201.135010][ T5234] syz-executor: attempt to access beyond end of device [ 201.135010][ T5234] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.153345][ T5234] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 201.157483][T11506] loop3: detected capacity change from 0 to 32768 [ 201.166926][T11504] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2195 (11504) [ 201.185509][T11506] (syz.3.2196,11506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.199788][T11504] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.220975][T11504] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.230495][T11504] BTRFS info (device loop2): using free-space-tree [ 201.251479][T11506] (syz.3.2196,11506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.411525][ T939] usb 2-1: USB disconnect, device number 12 [ 201.420523][T11506] JBD2: Ignoring recovery information on journal [ 201.515502][T11506] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 201.565677][ T5763] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.602775][T11500] loop0: detected capacity change from 0 to 40427 [ 201.623736][T11500] F2FS-fs (loop0): invalid crc value [ 201.761242][T11500] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.778279][ T5233] ocfs2: Unmounting device (7,3) on (node local) [ 201.816000][T11534] loop2: detected capacity change from 0 to 4096 [ 201.825976][T11534] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 201.869754][T11534] ntfs3(loop2): Failed to load $Extend (-22). [ 201.881716][T11500] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.888487][T11534] ntfs3(loop2): Failed to initialize $Extend. [ 201.932249][ T29] audit: type=1804 audit(1728375475.110:163): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2194" name="/newroot/297/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 201.981785][ T6298] syz-executor: attempt to access beyond end of device [ 201.981785][ T6298] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.996711][ T29] audit: type=1800 audit(1728375475.140:164): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2199" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 202.055592][ T6298] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 202.066014][T11542] loop3: detected capacity change from 0 to 512 [ 202.098031][T11542] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 202.111800][T11542] EXT4-fs (loop3): 1 truncate cleaned up [ 202.118963][T11542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.138813][T11542] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.2200: Logical block already allocated [ 202.151205][T11542] EXT4-fs (loop3): Remounting filesystem read-only [ 202.171736][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.249844][T11552] loop3: detected capacity change from 0 to 1024 [ 202.306997][T11552] hfsplus: xattr searching failed [ 202.356957][ T52] hfsplus: bad catalog file entry [ 202.362098][ T52] hfsplus: b-tree write err: -5, ino 3 [ 202.398988][T11560] loop1: detected capacity change from 0 to 512 [ 202.418858][T11560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.470584][T11560] EXT4-fs (loop1): 1 truncate cleaned up [ 202.479600][T11560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.504781][T11560] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 202.598626][T10851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.707341][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 202.787931][T11580] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2219'. [ 202.798760][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2219'. [ 203.061553][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.224566][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 203.233799][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.242070][ T9] usb 4-1: Product: syz [ 203.247440][ T9] usb 4-1: Manufacturer: syz [ 203.252092][ T9] usb 4-1: SerialNumber: syz [ 203.257900][ T9] usb 4-1: config 0 descriptor?? [ 203.469282][ T9] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 203.559397][T11599] loop4: detected capacity change from 0 to 64 [ 203.900859][ T9] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 203.918623][T11602] loop2: detected capacity change from 0 to 32768 [ 203.928379][T11602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2226 (11602) [ 203.956442][T11602] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.961546][T11615] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 203.977849][T11602] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 203.979253][T11615] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 203.992025][T11602] BTRFS info (device loop2): using free-space-tree [ 203.996299][T11615] CPU: 1 UID: 0 PID: 11615 Comm: syz.0.2233 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 203.996326][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.996337][T11615] RIP: 0010:strlen+0x2c/0x70 [ 204.028155][T11615] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 204.047935][T11615] RSP: 0018:ffffc900094478a8 EFLAGS: 00010246 [ 204.054005][T11615] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 204.062074][T11615] RDX: ffffc90018800000 RSI: 0000000000000136 RDI: 0000000000000000 [ 204.070041][T11615] RBP: 0000000000000000 R08: ffffffff901d3f2f R09: 1ffffffff203a7e5 [ 204.078018][T11615] R10: dffffc0000000000 R11: fffffbfff203a7e6 R12: ffffffffffffffff [ 204.085987][T11615] R13: ffff88805dbf4000 R14: 0000000000000000 R15: dffffc0000000000 [ 204.093987][T11615] FS: 00007fb16bd396c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 204.102937][T11615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.109524][T11615] CR2: 000000110c303fa6 CR3: 0000000030aea000 CR4: 00000000003526f0 [ 204.117578][T11615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.125557][T11615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.133612][T11615] Call Trace: [ 204.136881][T11615] [ 204.139824][T11615] ? __die_body+0x5f/0xb0 [ 204.144161][T11615] ? die_addr+0xb0/0xe0 [ 204.148305][T11615] ? exc_general_protection+0x3dd/0x5d0 [ 204.153950][T11615] ? asm_exc_general_protection+0x26/0x30 [ 204.159666][T11615] ? strlen+0x2c/0x70 [ 204.163639][T11615] ? __kasan_kmalloc+0x98/0xb0 [ 204.168426][T11615] getname_kernel+0x1d/0x2f0 [ 204.173017][T11615] kern_path+0x1d/0x50 [ 204.177089][T11615] btrfs_scan_one_device+0x19e/0xd90 [ 204.182374][T11615] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 204.188178][T11615] ? __pfx___mutex_lock+0x10/0x10 [ 204.193200][T11615] btrfs_get_tree+0x30e/0x1920 [ 204.197992][T11615] ? lockdep_init_map_type+0xa1/0x910 [ 204.203464][T11615] ? __pfx_btrfs_get_tree+0x10/0x10 [ 204.208744][T11615] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 204.214545][T11615] ? rcu_is_watching+0x15/0xb0 [ 204.219305][T11615] vfs_get_tree+0x90/0x2b0 [ 204.223710][T11615] fc_mount+0x1b/0xb0 [ 204.227680][T11615] btrfs_get_tree+0x652/0x1920 [ 204.232438][T11615] ? __pfx_aa_get_newest_label+0x10/0x10 [ 204.238064][T11615] ? __mutex_lock+0x2ef/0xd70 [ 204.242747][T11615] ? __pfx_btrfs_get_tree+0x10/0x10 [ 204.247943][T11615] ? apparmor_capable+0x13b/0x1b0 [ 204.252965][T11615] vfs_get_tree+0x90/0x2b0 [ 204.257380][T11615] vfs_cmd_create+0xa0/0x1f0 [ 204.261963][T11615] ? __se_sys_fsconfig+0xa15/0xf70 [ 204.267075][T11615] __se_sys_fsconfig+0xa1f/0xf70 [ 204.272016][T11615] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 204.277471][T11615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.283795][T11615] ? rcu_is_watching+0x15/0xb0 [ 204.288566][T11615] ? rcu_is_watching+0x15/0xb0 [ 204.293333][T11615] ? __x64_sys_fsconfig+0x20/0xc0 [ 204.298350][T11615] do_syscall_64+0xf3/0x230 [ 204.302844][T11615] ? clear_bhb_loop+0x35/0x90 [ 204.307512][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.313395][T11615] RIP: 0033:0x7fb16af7dff9 [ 204.317807][T11615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.337490][T11615] RSP: 002b:00007fb16bd39038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 204.345895][T11615] RAX: ffffffffffffffda RBX: 00007fb16b135f80 RCX: 00007fb16af7dff9 [ 204.353856][T11615] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 204.361816][T11615] RBP: 00007fb16aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 204.369796][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.377777][T11615] R13: 0000000000000000 R14: 00007fb16b135f80 R15: 00007ffde3591b58 [ 204.385775][T11615] [ 204.388785][T11615] Modules linked in: [ 204.394220][T11615] ---[ end trace 0000000000000000 ]--- [ 204.421651][T11615] RIP: 0010:strlen+0x2c/0x70 [ 204.427139][ T939] usb 4-1: USB disconnect, device number 18 [ 204.439020][T11615] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 204.458773][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.495106][T11615] RSP: 0018:ffffc900094478a8 EFLAGS: 00010246 [ 204.501547][T11615] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 204.509770][T11615] RDX: ffffc90018800000 RSI: 0000000000000136 RDI: 0000000000000000 [ 204.518402][T11615] RBP: 0000000000000000 R08: ffffffff901d3f2f R09: 1ffffffff203a7e5 [ 204.526691][T11615] R10: dffffc0000000000 R11: fffffbfff203a7e6 R12: ffffffffffffffff [ 204.534870][T11615] R13: ffff88805dbf4000 R14: 0000000000000000 R15: dffffc0000000000 [ 204.543304][T11615] FS: 00007fb16bd396c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 204.552682][T11615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.559497][T11615] CR2: 0000001b32e12ff8 CR3: 0000000030aea000 CR4: 00000000003526f0 [ 204.567636][T11615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.576977][T11615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.585138][T11615] Kernel panic - not syncing: Fatal exception [ 204.591369][T11615] Kernel Offset: disabled [ 204.595679][T11615] Rebooting in 86400 seconds..