last executing test programs: 11.143471647s ago: executing program 1 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2c0}}, 0x4048010) 10.282184352s ago: executing program 1 (id=984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) 10.224045585s ago: executing program 2 (id=986): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x40, 0x30}, 0x0, 0x0}) 9.735003357s ago: executing program 1 (id=987): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0xfd, 0x700, &(0x7f0000001880)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002000000"], 0x0) 9.073663742s ago: executing program 1 (id=989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, "93"}]}}, 0x0}, 0x0) 8.703612567s ago: executing program 3 (id=991): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') 7.824726389s ago: executing program 3 (id=993): setreuid(0x0, 0xee01) r0 = shmget$private(0x0, 0x4000, 0x1944, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0xc) 7.203787907s ago: executing program 3 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 6.958026532s ago: executing program 5 (id=996): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000f00)=0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) 6.783118074s ago: executing program 2 (id=997): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 6.767571476s ago: executing program 4 (id=998): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/167, 0xa7}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0xd, @private2, 0x71}}}, 0xe6) 6.466633039s ago: executing program 3 (id=999): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000300)={[{@disable_roll_forward}, {@nobarrier}, {@acl}, {@compress_cache}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@atgc}, {@noacl}, {@noinline_dentry}, {@noinline_dentry}, {@background_gc_off}]}, 0xfd, 0x5519, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 6.321853714s ago: executing program 5 (id=1000): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x4, @multicast, 'veth0_macvtap\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x4000000, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}) 6.038164164s ago: executing program 2 (id=1001): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x1, 0x3, 'fo\x00', 0x3, 0x52, 0x4000000}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 5.844604145s ago: executing program 4 (id=1002): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '5'}, @global=@item_4={0x3, 0x1, 0x0, "fe862411"}]}}, 0x0}, 0x0) 5.659538001s ago: executing program 5 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) 5.532502777s ago: executing program 1 (id=1005): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)={[{@usrquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@discard}, {}, {@quota}, {@noquota}, {@quota, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@umask={'umask', 0x3d, 0x81}}, {@usrquota}, {@nodiscard}, {@umask={'umask', 0x3d, 0x1}}, {@grpquota}, {@umask={'umask', 0x3d, 0x20045}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, ']}@}X}[-)+'}}]}, 0xfe, 0x612b, &(0x7f0000006540)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 5.394528282s ago: executing program 2 (id=1006): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') read(r0, &(0x7f0000000140)=""/56, 0x38) pread64(r0, &(0x7f0000000040)=""/91, 0x5b, 0x8af9) 5.082183623s ago: executing program 5 (id=1007): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\x00') memfd_secret(0x0) 4.781079193s ago: executing program 2 (id=1009): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.444103284s ago: executing program 5 (id=1010): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0xaf, 0x7, 0x1, 0x3, 0xf1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x1, 0x1}}}}}]}}]}}, 0x0) 4.300395021s ago: executing program 0 (id=1011): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_mpls={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 3.503140112s ago: executing program 0 (id=1012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.324277997s ago: executing program 2 (id=1013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x195, 0x0) 2.965293416s ago: executing program 4 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2.78350605s ago: executing program 0 (id=1015): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045516, &(0x7f0000000080)) 2.290924304s ago: executing program 4 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000003060102000000000000000004b3793d0500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 2.245627241s ago: executing program 0 (id=1017): r0 = syz_io_uring_setup(0x6c38, &(0x7f0000000800)={0x0, 0xfffffffe, 0x40, 0x0, 0x2}, &(0x7f0000000200), &(0x7f0000ffb000)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x8, 0x0, &(0x7f0000000000)="0990ffff48000092", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 1.860737449s ago: executing program 3 (id=1018): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d69736f383835392d31352c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000000000006745,decompose,barrier,force,gid=', @ANYRESHEX=0xee00, @ANYRES8=0x0], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 1.717424045s ago: executing program 4 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1.305469577s ago: executing program 0 (id=1020): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@discard}, {@quota}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xdd7401, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040), 0xffffff1b) 1.121280549s ago: executing program 1 (id=1021): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x611f, &(0x7f00000154c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.11385054s ago: executing program 3 (id=1022): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="0348cc6ed0d252c0da7bdf2749e113dbea56885501c4628046b5f2b68b26c9ad45fafffffffffffffff5628ffc1bf3c140335bbf290b8512b377278e07a48633442dbf6cde30037047111c9fab8b4ca109708789d3cae64296747a27809ffb21debc65c87dbe04db24a07daed36e19da1d92212c0c0be4db2400"/135, 0xffffff37}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002e00)=""/4096, 0x1000}], 0x1}, 0xfffffff7}], 0x1, 0x2, 0x0) 1.046607014s ago: executing program 4 (id=1023): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000100)={[{@pqnoenforce}, {@noquota}, {@usrquota}, {@pqnoenforce}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f0000013140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b62f0b0a9252213400000000000000000000000000000000000000000000000000000000000000000200000000000000fcff"]) 816.591782ms ago: executing program 5 (id=1024): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f00000003c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nospace_cache}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) 0s ago: executing program 0 (id=1025): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x0, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) kernel console output (not intermixed with test programs): oop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.740489][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.763748][ T25] usb 1-1: config 0 descriptor?? [ 87.806805][ T5830] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 88.195945][ T6093] loop5: detected capacity change from 0 to 32768 [ 88.303994][ T6119] loop3: detected capacity change from 0 to 64 [ 88.343317][ T6105] loop1: detected capacity change from 0 to 32768 [ 88.358228][ T6093] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 88.381150][ T6093] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.622211][ T6093] XFS (loop5): Ending clean mount [ 88.655135][ T6093] XFS (loop5): Quotacheck needed: Please wait. [ 88.681819][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.70'. [ 88.706236][ T6105] JBD2: Ignoring recovery information on journal [ 88.733076][ T6093] XFS (loop5): Quotacheck: Done. [ 88.923523][ T6105] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 89.040496][ T5833] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.280447][ T6146] loop3: detected capacity change from 0 to 256 [ 89.411278][ T6146] vfat: Unknown parameter 'rodirÐ8ni_xlate' [ 89.507693][ T6146] No control pipe specified [ 89.545454][ T5822] ocfs2: Unmounting device (7,1) on (node local) [ 89.972500][ T6152] loop3: detected capacity change from 0 to 1024 [ 90.257862][ T3489] hfsplus: b-tree write err: -5, ino 4 [ 90.283998][ T6160] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.83'. [ 90.349402][ T6162] loop5: detected capacity change from 0 to 128 [ 90.350493][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 90.385118][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 90.427143][ T25] usb 1-1: USB disconnect, device number 2 [ 90.511663][ T6162] FAT-fs (loop5): error, clusters badly computed (4 != 3) [ 90.557143][ T6162] FAT-fs (loop5): Filesystem has been set read-only [ 90.648656][ T6162] FAT-fs (loop5): error, clusters badly computed (5 != 4) [ 90.692547][ T6162] FAT-fs (loop5): error, clusters badly computed (6 != 5) [ 91.011538][ T968] IPVS: starting estimator thread 0... [ 91.112539][ T6176] IPVS: using max 20 ests per chain, 48000 per kthread [ 91.300711][ T6154] loop2: detected capacity change from 0 to 40427 [ 91.313950][ T6186] capability: warning: `syz.5.93' uses deprecated v2 capabilities in a way that may be insecure [ 91.347922][ T6154] F2FS-fs (loop2): invalid crc value [ 91.380997][ T6186] program syz.5.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.595643][ T6185] loop0: detected capacity change from 0 to 32768 [ 91.637581][ T6154] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.872130][ T6154] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.931316][ T6185] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 91.957836][ T6185] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 91.967855][ T6185] bcachefs (loop0): Version upgrade required: [ 91.967855][ T6185] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 91.967855][ T6185] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 91.967855][ T6185] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 91.985648][ T6156] loop1: detected capacity change from 0 to 32768 [ 92.038951][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.074157][ T6185] bcachefs (loop0): dropping and reconstructing all alloc info [ 92.077427][ T6156] XFS: ikeep mount option is deprecated. [ 92.150453][ T6169] loop4: detected capacity change from 0 to 40427 [ 92.200374][ T5830] syz-executor: attempt to access beyond end of device [ 92.200374][ T5830] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.200985][ T6185] bcachefs (loop0): accounting_read... [ 92.220186][ T5830] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.235965][ T6156] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.301051][ T6185] done [ 92.311780][ T6185] bcachefs (loop0): alloc_read... done [ 92.317102][ T6212] loop5: detected capacity change from 0 to 256 [ 92.318300][ T6185] bcachefs (loop0): stripes_read... done [ 92.341268][ T6169] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 92.348791][ T6185] bcachefs (loop0): done starting filesystem [ 92.405776][ T6169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 92.427436][ T6212] FAT-fs (loop5): Directory bread(block 64) failed [ 92.468115][ T6212] FAT-fs (loop5): Directory bread(block 65) failed [ 92.489094][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 92.499098][ T6212] FAT-fs (loop5): Directory bread(block 66) failed [ 92.524629][ T6169] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.529192][ T6212] FAT-fs (loop5): Directory bread(block 67) failed [ 92.568137][ T6156] XFS (loop1): Ending clean mount [ 92.589390][ T6156] XFS (loop1): Quotacheck needed: Please wait. [ 92.602228][ T6212] FAT-fs (loop5): Directory bread(block 68) failed [ 92.639675][ T6212] FAT-fs (loop5): Directory bread(block 69) failed [ 92.691317][ T6156] XFS (loop1): Quotacheck: Done. [ 92.696827][ T6212] FAT-fs (loop5): Directory bread(block 70) failed [ 92.728708][ T6169] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 92.738307][ T6169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.762200][ T6212] FAT-fs (loop5): Directory bread(block 71) failed [ 92.768872][ T6212] FAT-fs (loop5): Directory bread(block 72) failed [ 92.795303][ T5823] bcachefs (loop0): shutting down [ 92.812530][ T6212] FAT-fs (loop5): Directory bread(block 73) failed [ 92.929598][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.953680][ T5823] bcachefs (loop0): shutdown complete [ 93.051764][ T6227] loop2: detected capacity change from 0 to 2048 [ 93.233884][ T6233] loop3: detected capacity change from 0 to 1024 [ 93.241429][ T6233] EXT4-fs: Ignoring removed nobh option [ 93.273532][ T6227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.280219][ T6233] EXT4-fs: Ignoring removed bh option [ 93.384213][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.519775][ T6241] loop1: detected capacity change from 0 to 64 [ 93.655038][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.904121][ T6252] syz.5.112 uses obsolete (PF_INET,SOCK_PACKET) [ 94.088360][ T6256] capability: warning: `syz.5.117' uses 32-bit capabilities (legacy support in use) [ 94.394731][ T6263] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.120'. [ 94.427925][ T6265] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.122'. [ 94.436406][ T6267] loop5: detected capacity change from 0 to 128 [ 94.459042][ T6265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.669897][ T5833] sysv_free_block: flc_count > flc_size [ 94.677216][ T5833] sysv_free_block: flc_count > flc_size [ 94.712317][ T5833] sysv_free_block: flc_count > flc_size [ 94.752336][ T5833] sysv_free_block: flc_count > flc_size [ 94.772246][ T5833] sysv_free_block: flc_count > flc_size [ 94.777842][ T5833] sysv_free_block: flc_count > flc_size [ 94.813345][ T5833] sysv_free_block: flc_count > flc_size [ 94.833131][ T5833] sysv_free_block: flc_count > flc_size [ 94.838729][ T5833] sysv_free_block: flc_count > flc_size [ 94.902415][ T6250] loop2: detected capacity change from 0 to 40427 [ 94.906942][ T5833] sysv_free_block: flc_count > flc_size [ 94.928256][ T6250] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 94.937062][ T6250] F2FS-fs (loop2): Image doesn't support compression [ 94.949351][ T5833] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 94.960721][ T6250] F2FS-fs (loop2): heap/no_heap options were deprecated [ 94.978444][ T6250] F2FS-fs (loop2): Image doesn't support compression [ 94.991466][ T6250] F2FS-fs (loop2): invalid crc value [ 95.007762][ T6250] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.042232][ T29] audit: type=1326 audit(1736499954.258:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.105984][ T29] audit: type=1326 audit(1736499954.268:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.156705][ T29] audit: type=1326 audit(1736499954.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.186307][ T29] audit: type=1326 audit(1736499954.308:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.292325][ T29] audit: type=1326 audit(1736499954.308:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.316066][ T29] audit: type=1326 audit(1736499954.308:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.362842][ T29] audit: type=1326 audit(1736499954.308:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.372094][ T6250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.457636][ T29] audit: type=1326 audit(1736499954.308:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 95.512237][ T5944] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.600281][ T6289] loop3: detected capacity change from 0 to 4096 [ 95.657503][ T5830] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x595/0x1de0 [ 95.674182][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.704677][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.715014][ T5944] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 95.736467][ T5830] F2FS-fs (loop2): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 95.767737][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.824375][ T5944] usb 6-1: config 0 descriptor?? [ 96.309802][ T5944] logitech 0003:046D:CA04.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 96.360402][ T5944] logitech 0003:046D:CA04.0001: no inputs found [ 96.488663][ T5944] usb 6-1: USB disconnect, device number 2 [ 96.682430][ T6284] loop4: detected capacity change from 0 to 40427 [ 96.716037][ T6304] loop0: detected capacity change from 0 to 128 [ 96.729567][ T6284] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 96.754815][ T6284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.807290][ T6284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.012545][ T6284] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.042436][ T5944] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.047161][ T6284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.097212][ T6312] netlink: 'syz.0.140': attribute type 30 has an invalid length. [ 97.183108][ T6294] loop1: detected capacity change from 0 to 32768 [ 97.244783][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.265659][ T6294] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 97.278645][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.289848][ T5821] syz-executor: attempt to access beyond end of device [ 97.289848][ T5821] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.312201][ T5821] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 97.352230][ T5944] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 97.400176][ T6294] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.402175][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.411785][ T6317] loop3: detected capacity change from 0 to 4096 [ 97.493165][ T5944] usb 3-1: config 0 descriptor?? [ 97.495787][ T6294] erofs (device erofs): cannot find valid erofs superblock [ 97.518493][ T6317] ntfs3(loop3): failed to convert "0080" to macturkish [ 97.536544][ T6317] ntfs3(loop3): failed to convert name for inode 1e. [ 97.917117][ T6326] sd 0:0:1:0: device reset [ 97.921569][ T5944] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 97.955512][ T5822] ocfs2: Unmounting device (7,1) on (node local) [ 98.153324][ T5944] isku 0003:1E7D:319C.0002: couldn't init struct isku_device [ 98.160793][ T5944] isku 0003:1E7D:319C.0002: couldn't install keyboard [ 98.223813][ T5944] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -71 [ 98.263161][ T6334] loop5: detected capacity change from 0 to 1024 [ 98.288854][ T5944] usb 3-1: USB disconnect, device number 2 [ 98.289019][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 98.632587][ T29] audit: type=1400 audit(1736499957.868:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 98.655880][ T6346] loop0: detected capacity change from 0 to 1024 [ 98.801889][ T6346] hfsplus: bad catalog entry type [ 98.863058][ T6350] (unnamed net_device) (uninitialized): option ad_select: invalid value (254) [ 98.873597][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 98.882740][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 99.023552][ T5920] hfsplus: b-tree write err: -5, ino 4 [ 99.410921][ T6342] loop1: detected capacity change from 0 to 40427 [ 99.541144][ T6342] F2FS-fs (loop1): invalid crc value [ 99.741185][ T6381] loop5: detected capacity change from 0 to 128 [ 99.783758][ T6382] loop3: detected capacity change from 0 to 64 [ 99.790016][ T6342] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.817747][ T6385] loop2: detected capacity change from 0 to 256 [ 99.925359][ T6381] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.042381][ T6381] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.055441][ T6342] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.117576][ T6385] FAT-fs (loop2): Directory bread(block 64) failed [ 100.141434][ T6385] FAT-fs (loop2): Directory bread(block 65) failed [ 100.164904][ T6385] FAT-fs (loop2): Directory bread(block 66) failed [ 100.208904][ T6385] FAT-fs (loop2): Directory bread(block 67) failed [ 100.231652][ T6385] FAT-fs (loop2): Directory bread(block 68) failed [ 100.251861][ T6385] FAT-fs (loop2): Directory bread(block 69) failed [ 100.279181][ T6385] FAT-fs (loop2): Directory bread(block 70) failed [ 100.295402][ T6385] FAT-fs (loop2): Directory bread(block 71) failed [ 100.339122][ T6385] FAT-fs (loop2): Directory bread(block 72) failed [ 100.346199][ T5822] syz-executor: attempt to access beyond end of device [ 100.346199][ T5822] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.392686][ T6385] FAT-fs (loop2): Directory bread(block 73) failed [ 100.393518][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.432336][ T5822] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 100.503899][ T6406] loop3: detected capacity change from 0 to 4096 [ 100.752172][ T6406] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 100.871479][ T6406] ntfs3(loop3): failed to convert "046c" to maccroatian [ 101.552180][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.714797][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.742070][ T25] usb 4-1: config 0 has no interfaces? [ 101.747611][ T25] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.783589][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.825953][ T25] usb 4-1: config 0 descriptor?? [ 102.032228][ T6447] netlink: 312 bytes leftover after parsing attributes in process `syz.1.202'. [ 102.105000][ T968] usb 4-1: USB disconnect, device number 3 [ 102.200651][ T6451] loop5: detected capacity change from 0 to 2048 [ 102.244342][ T6451] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.323493][ T6451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.798736][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.212'. [ 102.852435][ T6468] netlink: 'syz.5.212': attribute type 7 has an invalid length. [ 103.052632][ T6478] support for cryptoloop has been removed. Use dm-crypt instead. [ 103.110688][ T6481] raw_sendmsg: syz.5.218 forgot to set AF_INET. Fix it! [ 103.357444][ T6449] loop2: detected capacity change from 0 to 32768 [ 103.712953][ T6497] loop0: detected capacity change from 0 to 256 [ 104.052938][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.231'. [ 104.359642][ T6518] loop2: detected capacity change from 0 to 128 [ 104.366887][ T6518] ext4: Unknown parameter 'smackfsdef' [ 104.517112][ T6493] loop5: detected capacity change from 0 to 32768 [ 104.748788][ T6493] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 104.963006][ T6514] loop0: detected capacity change from 0 to 32768 [ 104.974151][ T6514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.230 (6514) [ 105.513434][ T6539] loop4: detected capacity change from 0 to 32768 [ 105.530688][ T6539] (syz.4.246,6539,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.544865][ T6539] (syz.4.246,6539,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.575058][ T6514] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.603325][ T6514] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.613845][ T6514] BTRFS info (device loop0): using free-space-tree [ 105.692275][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 105.787566][ T6522] loop3: detected capacity change from 0 to 32768 [ 105.828030][ T6522] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.238 (6522) [ 106.016515][ T6522] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 106.021641][ T6539] JBD2: Ignoring recovery information on journal [ 106.037740][ T6522] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 106.059407][ T6522] BTRFS info (device loop3): using free-space-tree [ 106.234187][ T6539] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 106.341925][ T6568] loop2: detected capacity change from 0 to 4096 [ 106.375149][ T6568] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 106.397513][ T6560] loop1: detected capacity change from 0 to 4096 [ 106.405985][ T6560] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 106.673640][ T6568] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 106.875300][ T6522] BTRFS warning (device loop3): can't set the incompat:0,default_subvol feature bits while mounted [ 106.924895][ T6597] loop1: detected capacity change from 0 to 512 [ 106.925553][ T5823] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.988983][ T6597] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.007763][ T6597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.035514][ T6599] loop5: detected capacity change from 0 to 512 [ 107.101695][ T5834] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 107.108205][ T5821] ocfs2: Unmounting device (7,4) on (node local) [ 107.146919][ T6597] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.269999][ T6608] mmap: syz.4.256 (6608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.386463][ T6597] EXT4-fs (loop1): 1 truncate cleaned up [ 107.393802][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.501467][ T6599] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.261: bg 0: block 248: padding at end of block bitmap is not set [ 107.532812][ T6599] Quota error (device loop5): write_blk: dquota write failed [ 107.580763][ T6599] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 107.611050][ T6599] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.261: Failed to acquire dquot type 1 [ 107.653246][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.907743][ T968] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.958368][ T6599] EXT4-fs (loop5): 1 truncate cleaned up [ 107.991961][ T6599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.993795][ T6626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.267'. [ 108.043854][ T6599] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.086874][ T6621] loop1: detected capacity change from 0 to 4096 [ 108.112909][ T968] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.139739][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.157528][ T6629] loop4: detected capacity change from 0 to 256 [ 108.167303][ T968] usb 3-1: config 0 descriptor?? [ 108.194500][ T968] cp210x 3-1:0.0: cp210x converter detected [ 108.272270][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.392147][ T5893] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 108.600781][ T6623] loop3: detected capacity change from 0 to 32768 [ 108.608289][ T6623] XFS: attr2 mount option is deprecated. [ 108.772233][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 108.779564][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.784414][ T6623] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.791535][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.812338][ T5931] usb 1-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 108.821529][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.833466][ T5931] usb 1-1: config 0 descriptor?? [ 108.836491][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 108.847930][ T5893] usb 6-1: not running at top speed; connect to a high speed hub [ 108.874143][ T5893] usb 6-1: language id specifier not provided by device, defaulting to English [ 108.891438][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.906465][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.915188][ T5893] usb 6-1: Product: syz [ 108.919464][ T5893] usb 6-1: Manufacturer: syz [ 108.924523][ T5893] usb 6-1: SerialNumber: syz [ 108.938687][ T968] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.146246][ T968] usb 3-1: USB disconnect, device number 3 [ 109.151911][ T5893] cdc_ncm 6-1:1.0: bind() failure [ 109.163700][ T5893] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 109.167293][ T968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.170571][ T5893] cdc_ncm 6-1:1.1: bind() failure [ 109.215784][ T5893] usb 6-1: USB disconnect, device number 3 [ 109.230901][ T6623] XFS (loop3): Ending clean mount [ 109.290052][ T968] cp210x 3-1:0.0: device disconnected [ 109.337770][ T6652] mkiss: ax0: crc mode is auto. [ 109.356708][ T6623] XFS (loop3): Quotacheck needed: Please wait. [ 109.401982][ T6623] XFS (loop3): Quotacheck: Done. [ 109.495862][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.520004][ T6640] loop4: detected capacity change from 0 to 32768 [ 109.542897][ T968] usb 1-1: USB disconnect, device number 3 [ 109.670749][ T6654] loop1: detected capacity change from 0 to 1024 [ 110.026219][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.064061][ T3489] hfsplus: b-tree write err: -5, ino 4 [ 110.138041][ T6656] loop3: detected capacity change from 0 to 32768 [ 110.147003][ T6656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.274 (6656) [ 110.387809][ T6656] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.401805][ T6656] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 110.763779][ T6682] loop1: detected capacity change from 0 to 2048 [ 110.776324][ T6682] EXT4-fs: Ignoring removed orlov option [ 110.782331][ T6682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.804424][ T6683] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 110.836291][ T6683] netlink: 228 bytes leftover after parsing attributes in process `syz.0.285'. [ 110.867089][ T6683] netlink: 11 bytes leftover after parsing attributes in process `syz.0.285'. [ 110.900026][ T6682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.969833][ T6656] BTRFS info (device loop3): rebuilding free space tree [ 111.068775][ T6656] BTRFS info (device loop3): disabling free space tree [ 111.102380][ T6656] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.142174][ T6656] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.151206][ T6702] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.287'. [ 111.311311][ T6675] loop2: detected capacity change from 0 to 32768 [ 111.332379][ T29] audit: type=1800 audit(1736499970.568:13): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.274" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 111.473101][ T6675] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 111.473101][ T6675] [ 111.517005][ T6675] ERROR: (device loop2): remounting filesystem as read-only [ 111.531798][ T5834] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.550885][ T6712] loop4: detected capacity change from 0 to 2048 [ 111.657542][ T6712] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 111.685737][ T6712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.710305][ T113] blkno = 5002c, nblocks = 1 [ 111.719309][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 111.719309][ T113] [ 111.728667][ T6721] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.776219][ T6719] loop0: detected capacity change from 0 to 1024 [ 111.802759][ T6719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.878245][ T29] audit: type=1800 audit(1736499971.098:14): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 112.063967][ T6719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.204485][ T29] audit: type=1800 audit(1736499971.448:15): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.294" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 112.298720][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.559760][ T6733] Bluetooth: MGMT ver 1.23 [ 112.714666][ T6723] loop5: detected capacity change from 0 to 32768 [ 112.721839][ T6723] XFS: ikeep mount option is deprecated. [ 112.766015][ T6723] XFS: ikeep mount option is deprecated. [ 112.897982][ T6723] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.915821][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 112.993478][ T6756] loop2: detected capacity change from 0 to 128 [ 113.261502][ T6756] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 113.282166][ T6756] FAT-fs (loop2): Filesystem has been set read-only [ 113.331145][ T6723] XFS (loop5): Ending clean mount [ 113.384697][ T6723] XFS (loop5): Quotacheck needed: Please wait. [ 113.430562][ T6723] XFS (loop5): Quotacheck: Done. [ 113.590555][ T6777] sctp: [Deprecated]: syz.2.317 (pid 6777) Use of int in max_burst socket option. [ 113.590555][ T6777] Use struct sctp_assoc_value instead [ 113.644360][ T6774] IPVS: Scheduler module ip_vs_sip not found [ 113.656054][ T5833] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.932422][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.121507][ T5893] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.142398][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.173548][ T5893] usb 2-1: Product: syz [ 114.177770][ T5893] usb 2-1: Manufacturer: syz [ 114.213876][ T5893] usb 2-1: SerialNumber: syz [ 114.245578][ T5893] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.268499][ T6603] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 114.315682][ T5889] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.446242][ T6793] loop3: detected capacity change from 0 to 4096 [ 114.492484][ T6793] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 114.549656][ T6801] loop2: detected capacity change from 0 to 4096 [ 114.615331][ T6793] ntfs3(loop3): Failed to load $Extend (-22). [ 114.641850][ T6793] ntfs3(loop3): Failed to initialize $Extend. [ 115.454266][ T6812] loop4: detected capacity change from 0 to 1024 [ 115.626551][ T6812] hfsplus: bad catalog entry type [ 116.033255][ T5920] hfsplus: b-tree write err: -5, ino 4 [ 116.607785][ T6826] loop0: detected capacity change from 0 to 4096 [ 116.717849][ T6833] loop4: detected capacity change from 0 to 2048 [ 116.825119][ T6833] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.031955][ T6837] netlink: 'syz.3.346': attribute type 5 has an invalid length. [ 117.089390][ T6838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.961920][ T6826] ntfs3(loop0): failed to convert "0080" to macturkish [ 118.013272][ T6826] ntfs3(loop0): failed to convert name for inode 1e. [ 118.232331][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.482702][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.569985][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.674936][ T5944] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 118.746734][ T6859] tipc: Started in network mode [ 118.751863][ T6859] tipc: Node identity fc000000000000005f00000000005f3a, cluster identity 4711 [ 118.785679][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.843067][ T5944] usb 6-1: config 0 descriptor?? [ 118.866754][ T6859] tipc: Enabling of bearer rejected, failed to enable media [ 119.414071][ T5944] hid-retrode 0003:0403:97C1.0004: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.5-1/input0 [ 119.608879][ T5944] usb 6-1: USB disconnect, device number 4 [ 119.742125][ T968] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 119.939487][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.018589][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.083988][ T968] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 120.156841][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.252618][ T968] usb 5-1: config 0 descriptor?? [ 120.709798][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 120.740457][ T6881] loop0: detected capacity change from 0 to 128 [ 120.785328][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 120.840219][ T6881] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 120.847752][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 120.895687][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 120.982158][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 121.042135][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 121.099967][ T968] isku 0003:1E7D:3264.0005: unknown main item tag 0x0 [ 121.167215][ T968] isku 0003:1E7D:3264.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 121.224103][ T5823] sysv_free_block: trying to free block not in datazone [ 121.305553][ T968] usb 5-1: USB disconnect, device number 2 [ 121.313677][ T5823] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 121.454762][ T6886] loop3: detected capacity change from 0 to 256 [ 121.574022][ T6886] FAT-fs (loop3): Directory bread(block 1285) failed [ 121.735814][ T6886] FAT-fs (loop3): Directory bread(block 1285) failed [ 122.472715][ C1] sched: DL replenish lagged too much [ 122.524683][ T6894] loop4: detected capacity change from 0 to 4096 [ 122.602925][ T6900] loop3: detected capacity change from 0 to 16 [ 122.674035][ T6894] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 122.686430][ T6900] erofs (device loop3): mounted with root inode @ nid 36. [ 122.897252][ T6894] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 123.153624][ T6894] ntfs3(loop4): ino=1b, "file0" attr_set_size [ 123.245287][ T6894] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 123.322285][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.552288][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 123.603927][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 123.692422][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.814826][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 123.929937][ T8] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 124.062187][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.121865][ T8] usb 1-1: config 0 descriptor?? [ 124.664104][ T8] uclogic 0003:5543:0004.0006: unknown main item tag 0x0 [ 124.752263][ T8] uclogic 0003:5543:0004.0006: unknown main item tag 0x0 [ 124.803027][ T8] uclogic 0003:5543:0004.0006: unknown main item tag 0x0 [ 124.864518][ T8] uclogic 0003:5543:0004.0006: unknown main item tag 0x0 [ 124.910168][ T8] uclogic 0003:5543:0004.0006: unknown main item tag 0x0 [ 124.962549][ T8] uclogic 0003:5543:0004.0006: No inputs registered, leaving [ 125.070436][ T8] uclogic 0003:5543:0004.0006: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 125.213803][ T8] usb 1-1: USB disconnect, device number 4 [ 125.302180][ T5944] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 125.527928][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.549968][ T6904] loop2: detected capacity change from 0 to 32768 [ 125.613125][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.723967][ T5944] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 125.787734][ T6904] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 125.825231][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.918577][ T5944] usb 6-1: config 0 descriptor?? [ 126.079877][ T6912] loop3: detected capacity change from 0 to 32768 [ 126.115626][ T6904] XFS (loop2): Ending clean mount [ 126.201615][ T6912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.378 (6912) [ 126.292890][ T6904] XFS (loop2): Quotacheck needed: Please wait. [ 126.400830][ T6912] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.454531][ T5944] ortek 0003:1223:3F07.0007: unknown main item tag 0x6 [ 126.558935][ T6912] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 126.568289][ T5944] ortek 0003:1223:3F07.0007: report_id 29495 is invalid [ 126.639555][ T5944] ortek 0003:1223:3F07.0007: item 0 2 1 8 parsing failed [ 126.670303][ T6912] BTRFS info (device loop3): disk space caching is enabled [ 126.704950][ T6904] XFS (loop2): Quotacheck: Done. [ 126.753352][ T5944] ortek 0003:1223:3F07.0007: probe with driver ortek failed with error -22 [ 126.789255][ T6912] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 126.862411][ T5944] usb 6-1: USB disconnect, device number 5 [ 126.920852][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 126.954676][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 127.016091][ T5830] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 127.072607][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 127.072901][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 127.152537][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 127.235784][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 127.339041][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 127.389818][ T6945] loop0: detected capacity change from 0 to 4096 [ 127.419669][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 127.419964][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 127.531804][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 127.601590][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 127.640300][ T6945] ntfs3(loop0): It is recommened to use chkdsk. [ 127.719592][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 127.719872][ T6912] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 127.791943][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 127.881021][ T6912] BTRFS error (device loop3): open_ctree failed [ 128.035666][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 128.176904][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 128.284687][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 128.382254][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 128.390151][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 128.559487][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 128.632683][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 128.640589][ T6945] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 129.626851][ T6941] loop4: detected capacity change from 0 to 32768 [ 129.873092][ T6941] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 129.887775][ T6941] (syz.4.388,6941,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 130.074815][ T6941] (syz.4.388,6941,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 130.938782][ T6991] loop3: detected capacity change from 0 to 24 [ 131.015906][ T6991] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 131.124250][ T6991] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 131.915553][ T7001] loop0: detected capacity change from 0 to 1024 [ 132.362563][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.373540][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.534797][ T5920] hfsplus: b-tree write err: -5, ino 4 [ 134.102799][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 134.188177][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 134.225526][ T6995] loop5: detected capacity change from 0 to 32768 [ 134.759997][ T7003] loop3: detected capacity change from 0 to 32768 [ 134.987050][ T29] audit: type=1326 audit(1736499994.228:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 135.014009][ T7003] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 135.124602][ T7003] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 135.125010][ T7003] XFS (loop3): log mount failed [ 135.231985][ T29] audit: type=1326 audit(1736499994.228:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 135.610418][ T7038] pim6reg: entered allmulticast mode [ 135.734842][ T7041] loop0: detected capacity change from 0 to 64 [ 135.898410][ T7041] netlink: 244 bytes leftover after parsing attributes in process `syz.0.427'. [ 136.717219][ T7047] loop0: detected capacity change from 0 to 256 [ 136.803797][ T7047] exfat: Deprecated parameter 'utf8' [ 136.816617][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.431'. [ 137.088722][ T7047] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 137.548374][ T7027] loop4: detected capacity change from 0 to 32768 [ 137.662353][ T7027] read_mapping_page failed! [ 137.720498][ T7027] jfs_mount: Failed to read AGGREGATE_I [ 137.780103][ T7027] Mount JFS Failure: -5 [ 137.842309][ T7027] jfs_mount failed w/return code = -5 [ 138.630999][ T7061] loop0: detected capacity change from 0 to 512 [ 138.812806][ T7061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.005000][ T7061] EXT4-fs (loop0): 1 truncate cleaned up [ 139.078554][ T7061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.273188][ T29] audit: type=1800 audit(1736499998.508:18): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.437" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 139.367978][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 139.766274][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.103356][ T7055] loop5: detected capacity change from 0 to 32768 [ 140.192692][ T7055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.433 (7055) [ 140.318963][ T7055] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.417583][ T7055] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 140.509615][ T7055] BTRFS info (device loop5): using free-space-tree [ 140.577359][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 140.610137][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 140.697247][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 140.781653][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 140.862480][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 140.934993][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 141.028120][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 141.109394][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 141.202554][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 141.302696][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 141.383792][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 141.426698][ T7096] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 141.453113][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.473617][ T7098] loop4: detected capacity change from 0 to 256 [ 141.505774][ T7055] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 141.533709][ T7055] BTRFS error (device loop5): open_ctree failed [ 142.172490][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.043629][ T7128] loop5: detected capacity change from 0 to 4096 [ 144.164959][ T7128] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 144.383898][ T7128] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 144.438286][ T7137] loop4: detected capacity change from 0 to 64 [ 144.500977][ T7135] loop0: detected capacity change from 0 to 2048 [ 144.646045][ T7128] ntfs3(loop5): ino=1e, "file1" failed to parse mft record [ 144.702512][ T7135] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.753999][ T7128] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 144.884347][ T7141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.460800][ T7148] loop4: detected capacity change from 0 to 1024 [ 145.583933][ T7148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 145.653751][ T5931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.696028][ T7148] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 145.862197][ T7148] EXT4-fs (loop4): invalid journal inode [ 145.872449][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 145.912577][ T7148] EXT4-fs (loop4): can't get journal size [ 145.975381][ T7148] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.466: blocks 48-48 from inode overlap system zone [ 146.034960][ T5931] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 146.084992][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.118690][ T7148] EXT4-fs (loop4): failed to initialize system zone (-117) [ 146.157041][ T5931] usb 4-1: Product: syz [ 146.161270][ T5931] usb 4-1: Manufacturer: syz [ 146.192284][ T7148] EXT4-fs (loop4): mount failed [ 146.274993][ T5931] usb 4-1: SerialNumber: syz [ 146.314083][ T5931] usb 4-1: config 0 descriptor?? [ 146.654759][ T968] kernel write not supported for file /audio1 (pid: 968 comm: kworker/0:2) [ 146.664886][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.770955][ T5931] airspy 4-1:0.0: Board ID: 00 [ 146.808838][ T5931] airspy 4-1:0.0: Firmware version: [ 146.882862][ T8] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 146.945610][ T8] usb 5-1: config 0 has no interface number 0 [ 146.998255][ T5931] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 147.010135][ T8] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.102151][ T8] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.122416][ T5931] airspy 4-1:0.0: Registered as swradio24 [ 147.159149][ T5931] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 147.221110][ T8] usb 5-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 147.274148][ T5931] usb 4-1: USB disconnect, device number 4 [ 147.293345][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.365046][ T8] usb 5-1: Product: syz [ 147.414670][ T8] usb 5-1: Manufacturer: syz [ 147.453156][ T8] usb 5-1: SerialNumber: syz [ 147.558316][ T8] usb 5-1: config 0 descriptor?? [ 147.622275][ T8] usb 5-1: Interface #216 referenced by multiple IADs [ 147.728959][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.974312][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 148.034618][ T7144] loop2: detected capacity change from 0 to 32768 [ 148.085596][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.472'. [ 148.155208][ T8] snd-usb-audio 5-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 148.174774][ T7161] netlink: 'syz.5.472': attribute type 18 has an invalid length. [ 148.292758][ T8] usb 5-1: USB disconnect, device number 3 [ 148.317154][ T7144] syz.2.465: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.518451][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz.2.465 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 148.529116][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.539190][ T7144] Call Trace: [ 148.542485][ T7144] [ 148.545435][ T7144] dump_stack_lvl+0x241/0x360 [ 148.550157][ T7144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.555392][ T7144] ? __pfx__printk+0x10/0x10 [ 148.560015][ T7144] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 148.566468][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.572133][ T7144] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 148.578677][ T7144] warn_alloc+0x278/0x410 [ 148.583036][ T7144] ? __pfx_warn_alloc+0x10/0x10 [ 148.587916][ T7144] ? __bch2_darray_resize_noprof+0xd8/0x240 [ 148.593842][ T7144] ? __get_vm_area_node+0x1c8/0x2d0 [ 148.599074][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.605164][ T7144] ? __get_vm_area_node+0x25c/0x2d0 [ 148.610422][ T7144] __vmalloc_node_range_noprof+0x62f/0x1380 [ 148.616351][ T7144] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 148.622132][ T7144] ? rcu_is_watching+0x15/0xb0 [ 148.626942][ T7144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.633407][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.639074][ T7144] ? rcu_is_watching+0x15/0xb0 [ 148.643880][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.649553][ T7144] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 148.655052][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.660720][ T7144] ? __kvmalloc_node_noprof+0x72/0x190 [ 148.666216][ T7144] __kvmalloc_node_noprof+0x142/0x190 [ 148.671620][ T7144] ? __bch2_darray_resize_noprof+0xd8/0x240 [ 148.677565][ T7144] __bch2_darray_resize_noprof+0xd8/0x240 [ 148.683340][ T7144] bch2_fs_btree_write_buffer_init+0x28f/0x2e0 [ 148.689544][ T7144] bch2_fs_open+0x2b79/0x2f80 [ 148.694282][ T7144] ? __pfx_bch2_fs_open+0x10/0x10 [ 148.699333][ T7144] ? stack_trace_save+0x118/0x1d0 [ 148.704403][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.710065][ T7144] ? kasan_save_track+0x51/0x80 [ 148.714943][ T7144] ? kasan_save_track+0x3f/0x80 [ 148.719817][ T7144] ? kasan_save_free_info+0x40/0x50 [ 148.725048][ T7144] ? __kasan_slab_free+0x59/0x70 [ 148.730019][ T7144] ? kfree+0x196/0x430 [ 148.734125][ T7144] ? do_syscall_64+0xf3/0x230 [ 148.738844][ T7144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.744980][ T7144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.751347][ T7144] ? kasan_quarantine_put+0xdc/0x230 [ 148.756663][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.762329][ T7144] ? sget+0x2b8/0x620 [ 148.766357][ T7144] ? __pfx_bch2_test_super+0x10/0x10 [ 148.771675][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.777333][ T7144] ? sget+0x2b8/0x620 [ 148.781354][ T7144] ? __pfx_bch2_noset_super+0x10/0x10 [ 148.786757][ T7144] bch2_fs_get_tree+0x738/0x1710 [ 148.791751][ T7144] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 148.797171][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.802836][ T7144] ? generic_parse_monolithic+0x387/0x400 [ 148.808609][ T7144] ? apparmor_capable+0x13b/0x1b0 [ 148.813689][ T7144] vfs_get_tree+0x92/0x2b0 [ 148.818144][ T7144] do_new_mount+0x2be/0xb40 [ 148.822685][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.828352][ T7144] ? __pfx_do_new_mount+0x10/0x10 [ 148.833425][ T7144] __se_sys_mount+0x2d6/0x3c0 [ 148.838150][ T7144] ? __pfx___se_sys_mount+0x10/0x10 [ 148.843431][ T7144] ? exc_page_fault+0x590/0x8b0 [ 148.848316][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.854328][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.859994][ T7144] ? __x64_sys_mount+0x20/0xc0 [ 148.864798][ T7144] do_syscall_64+0xf3/0x230 [ 148.869350][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.875285][ T7144] RIP: 0033:0x7f2e6c1874ca [ 148.879725][ T7144] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.899369][ T7144] RSP: 002b:00007f2e6cf0ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.907825][ T7144] RAX: ffffffffffffffda RBX: 00007f2e6cf0cef0 RCX: 00007f2e6c1874ca [ 148.915824][ T7144] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 00007f2e6cf0ceb0 [ 148.923825][ T7144] RBP: 0000000020000080 R08: 00007f2e6cf0cef0 R09: 0000000000800000 [ 148.931836][ T7144] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000020000000 [ 148.939832][ T7144] R13: 00007f2e6cf0ceb0 R14: 000000000000597c R15: 0000000020000a40 [ 148.947849][ T7144] [ 149.652456][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.952275][ T968] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.241598][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 151.367005][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.411372][ T7212] loop0: detected capacity change from 0 to 4096 [ 151.441240][ T968] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 151.484083][ T968] usb 6-1: config 7 has no interface number 0 [ 151.490229][ T968] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 151.607913][ T7212] ntfs3(loop0): Failed to load $Extend (-22). [ 151.646192][ T968] usb 6-1: config 7 interface 187 has no altsetting 0 [ 151.662200][ T7212] ntfs3(loop0): Failed to initialize $Extend. [ 151.762339][ T968] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 151.828932][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.862171][ T7212] ntfs3(loop0): ino=5, "/" directory corrupted [ 151.913902][ T968] usb 6-1: Product: syz [ 151.918123][ T968] usb 6-1: Manufacturer: syz [ 151.983765][ T7144] Mem-Info: [ 151.989543][ T968] usb 6-1: SerialNumber: syz [ 152.014553][ T7144] active_anon:10397 inactive_anon:0 isolated_anon:0 [ 152.014553][ T7144] active_file:1749 inactive_file:38414 isolated_file:0 [ 152.014553][ T7144] unevictable:768 dirty:504 writeback:0 [ 152.014553][ T7144] slab_reclaimable:10261 slab_unreclaimable:104702 [ 152.014553][ T7144] mapped:34558 shmem:6266 pagetables:865 [ 152.014553][ T7144] sec_pagetables:0 bounce:0 [ 152.014553][ T7144] kernel_misc_reclaimable:0 [ 152.014553][ T7144] free:1308375 free_pcp:1988 free_cma:0 [ 152.119597][ T7201] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 152.342182][ T5931] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 152.360089][ T7144] Node 0 active_anon:41588kB inactive_anon:0kB active_file:6996kB inactive_file:153580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138332kB dirty:2016kB writeback:0kB shmem:23528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11608kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no [ 152.502345][ T968] usb 6-1: Limiting number of CPorts to U8_MAX [ 152.566534][ T968] usb 6-1: Unknown endpoint type found, address 0x07 [ 152.596913][ T5931] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.649448][ T968] usb 6-1: Not enough endpoints found in device, aborting! [ 152.688235][ T5931] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.719897][ T7144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 152.822165][ T968] usb 6-1: USB disconnect, device number 6 [ 152.854070][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.937466][ T5931] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 153.019901][ T5931] usb 4-1: Product: syz [ 153.039040][ T5931] usb 4-1: Manufacturer: syz [ 153.047096][ T7144] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.121745][ T5931] hub 4-1:4.0: USB hub found [ 153.259686][ T7144] lowmem_reserve[]: 0 2465 2466 0 0 [ 153.314236][ T7144] Node 0 DMA32 free:1313716kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:39668kB inactive_anon:0kB active_file:6996kB inactive_file:152688kB unevictable:1536kB writepending:2040kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:7064kB local_pcp:1484kB free_cma:0kB [ 153.409979][ T5931] hub 4-1:4.0: 2 ports detected [ 153.588463][ T7144] lowmem_reserve[]: 0 0 0 0 0 [ 153.603939][ T5931] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 153.662340][ T7144] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 153.692113][ T5931] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 153.850183][ T5931] usb 4-1: USB disconnect, device number 5 [ 153.946232][ T7144] lowmem_reserve[]: 0 0 0 0 0 [ 154.001526][ T7144] Node 1 Normal free:3906308kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 154.169318][ T7235] warning: `syz.4.503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.247928][ T7144] lowmem_reserve[]: 0 0 0 0 0 [ 154.306090][ T7144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.395379][ T7144] Node 0 DMA32: 26*4kB (UME) 23*8kB (UME) 32*16kB (UE) 52*32kB (UM) 123*64kB (UME) 75*128kB (UM) 34*256kB (M) 18*512kB (ME) 19*1024kB (UME) 15*2048kB (UME) 298*4096kB (UM) = 1308640kB [ 154.571658][ T7144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.688402][ T7144] Node 1 Normal: 69*4kB (UME) 44*8kB (UME) 35*16kB (UME) 203*32kB (UME) 102*64kB (UME) 33*128kB (UME) 17*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906308kB [ 154.859099][ T7144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.939911][ T7144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.039272][ T7144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.130489][ T7144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.235473][ T7144] 46728 total pagecache pages [ 155.274169][ T7144] 0 pages in swap cache [ 155.306377][ T7144] Free swap = 124984kB [ 155.362143][ T7144] Total swap = 124996kB [ 155.412381][ T7144] 2097051 pages RAM [ 155.436458][ T7144] 0 pages HighMem/MovableOnly [ 155.511822][ T7144] 427006 pages reserved [ 155.539565][ T7144] 0 pages cma reserved [ 155.613696][ T7144] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 155.764215][ T7249] Invalid ELF header magic: != ELF [ 156.529950][ T7233] loop5: detected capacity change from 0 to 32768 [ 156.593774][ T7257] loop3: detected capacity change from 0 to 256 [ 156.741798][ T7257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 156.814575][ T7233] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.878661][ T7233] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 156.879143][ T7233] XFS (loop5): log mount failed [ 157.002708][ T7237] loop0: detected capacity change from 0 to 32768 [ 157.072950][ T7144] bcachefs: bch2_fs_get_tree() error: ENOMEM [ 157.249372][ T7237] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.352840][ T7237] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 157.353179][ T7237] XFS (loop0): log mount failed [ 158.018025][ T7271] syz.3.515 (7271) used obsolete PPPIOCDETACH ioctl [ 159.072537][ T7255] loop4: detected capacity change from 0 to 32768 [ 159.144405][ T7278] loop3: detected capacity change from 0 to 1024 [ 159.158814][ T7275] loop2: detected capacity change from 0 to 4096 [ 159.331593][ T7275] NILFS (loop2): invalid segment: Checksum error in segment payload [ 159.435488][ T7275] NILFS (loop2): trying rollback from an earlier position [ 159.641421][ T7275] NILFS (loop2): recovery complete [ 159.703421][ T53] hfsplus: b-tree write err: -5, ino 4 [ 159.759945][ T7291] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.790149][ T7255] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 159.939651][ T7255] bcachefs (loop4): initializing new filesystem [ 160.040543][ T7255] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 160.065513][ T7290] loop0: detected capacity change from 0 to 4096 [ 160.140199][ T7255] bcachefs (loop4): going read-write [ 160.197386][ T7255] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 160.284614][ T7255] bcachefs (loop4): going read-only [ 160.376003][ T7255] bcachefs (loop4): finished waiting for writes to stop [ 160.383338][ T7296] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.454447][ T7255] bcachefs (loop4): flushing journal and stopping allocators, journal seq 0 [ 160.563154][ T7255] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 0 [ 160.612121][ T29] audit: type=1800 audit(1736500019.848:19): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.520" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 160.829822][ T7255] bcachefs (loop4): shutdown complete, journal seq 1 [ 160.871797][ T7255] bcachefs (loop4): done going read-only, filesystem not clean [ 160.942182][ T7255] bcachefs (loop4): bch2_fs_initialize(): error EINTR [ 161.023568][ T7255] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 161.095517][ T7255] bcachefs (loop4): shutting down [ 161.259953][ T7255] bcachefs (loop4): shutdown complete [ 161.751728][ T7314] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 162.284445][ T5931] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 162.355800][ T5931] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 162.671718][ T7322] loop0: detected capacity change from 0 to 4096 [ 163.521070][ T7306] loop5: detected capacity change from 0 to 32768 [ 163.580278][ T7306] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.526 (7306) [ 163.764380][ T7306] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 163.818012][ T7306] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.902141][ T7306] BTRFS info (device loop5): disk space caching is enabled [ 163.935862][ T7331] loop3: detected capacity change from 0 to 8 [ 163.992220][ T7306] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 164.415184][ T7306] BTRFS error (device loop5): open_ctree failed [ 165.214524][ T7352] loop0: detected capacity change from 0 to 4096 [ 165.342268][ T7352] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 165.399756][ T7357] loop3: detected capacity change from 0 to 512 [ 165.545035][ T7357] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 165.734205][ T7357] overlayfs: workdir and upperdir must be separate subtrees [ 167.204201][ T7370] syz.0.549: attempt to access beyond end of device [ 167.204201][ T7370] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 167.334820][ T7370] XFS (loop0): SB validate failed with error -5. [ 167.412870][ T41] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 168.627837][ T7361] loop5: detected capacity change from 0 to 32768 [ 168.749584][ T7361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.545 (7361) [ 168.993792][ T7361] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.087128][ T7361] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 169.228979][ T7389] loop0: detected capacity change from 0 to 512 [ 169.240148][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 169.240431][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 169.257964][ T7384] loop3: detected capacity change from 0 to 4096 [ 169.322585][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 169.322853][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 169.401809][ T7389] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.429828][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 169.430089][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 169.482241][ T7384] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 169.561306][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 169.561582][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 169.616389][ T7389] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 169.713606][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 169.713871][ T7361] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 169.835359][ T7361] BTRFS error (device loop5): open_ctree failed [ 169.912579][ T7389] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 170.034616][ T7389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 170.111253][ T7389] System zones: 0-2, 18-18, 34-34 [ 170.225959][ T7389] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.374364][ T7255] bcachefs: bch2_fs_get_tree() error: EINTR [ 170.425108][ T7389] EXT4-fs (loop0): 1 truncate cleaned up [ 170.510065][ T7389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.982224][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 171.259276][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.337513][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.401882][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.474609][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.617541][ T5880] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 171.732176][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.837479][ T5880] usb 6-1: config 0 descriptor?? [ 172.399701][ T5880] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 172.399742][ T5880] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 172.399770][ T5880] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 172.399797][ T5880] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 172.399824][ T5880] cherry 0003:046A:0027.0009: unknown main item tag 0x0 [ 172.429859][ T5880] cherry 0003:046A:0027.0009: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 172.712276][ T5880] usb 6-1: USB disconnect, device number 7 [ 172.944064][ T7424] [U] Eh [ 174.965335][ T7453] loop3: detected capacity change from 0 to 64 [ 175.639009][ T7462] loop5: detected capacity change from 0 to 8 [ 176.113661][ T7466] mkiss: ax0: crc mode is auto. [ 176.817466][ T7470] loop3: detected capacity change from 0 to 2048 [ 176.959260][ T7470] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.206415][ T7474] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.297167][ T7473] UHID_CREATE from different security context by process 183 (syz.5.586), this is not allowed. [ 177.873293][ T7451] loop4: detected capacity change from 0 to 32768 [ 177.938629][ T7451] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 178.102655][ T7480] process 'syz.3.588' launched '/dev/fd/3' with NULL argv: empty string added [ 178.400090][ T7477] loop5: detected capacity change from 0 to 4096 [ 178.592271][ T7477] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 180.850906][ T7506] loop4: detected capacity change from 0 to 1024 [ 180.984888][ T7506] hfsplus: failed to load root directory [ 182.431158][ T7528] loop0: detected capacity change from 0 to 1024 [ 182.601310][ T7528] EXT4-fs: Ignoring removed nobh option [ 182.640910][ T7530] loop2: detected capacity change from 0 to 512 [ 182.672229][ T7528] EXT4-fs: Ignoring removed bh option [ 182.720011][ T7533] loop5: detected capacity change from 0 to 8 [ 182.774004][ T7530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.853183][ T7528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.035603][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.179395][ T7503] loop3: detected capacity change from 0 to 32768 [ 183.190314][ T7530] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.446899][ T7503] read_mapping_page failed! [ 183.480198][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.514229][ T7503] jfs_mount: diMount failed w/rc = -5 [ 183.563197][ T7503] Mount JFS Failure: -5 [ 183.617898][ T7503] jfs_mount failed w/return code = -5 [ 183.984097][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.295842][ T7553] loop3: detected capacity change from 0 to 512 [ 185.393919][ T7553] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 185.512463][ T7553] EXT4-fs (loop3): invalid journal inode [ 185.518211][ T7553] EXT4-fs (loop3): can't get journal size [ 185.666494][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 185.751110][ T7540] loop4: detected capacity change from 0 to 32768 [ 185.782756][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.923818][ T7540] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 186.042198][ T7540] JBD2: journal reset failed [ 186.084463][ T7540] (syz.4.616,7540,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 186.170010][ T7540] (syz.4.616,7540,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 186.519174][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.676265][ T7549] loop0: detected capacity change from 0 to 32768 [ 186.775845][ T7549] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.619 (7549) [ 187.002706][ T7549] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.102554][ T7549] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 187.177396][ T7549] BTRFS info (device loop0): using free-space-tree [ 187.228728][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 187.251981][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 187.341500][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 187.462583][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 187.518468][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 187.625140][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 187.739699][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 187.822474][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 187.897796][ T7575] loop3: detected capacity change from 0 to 512 [ 187.941082][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 187.941350][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 188.024416][ T7549] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 188.123766][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.216548][ T7549] BTRFS error (device loop0): open_ctree failed [ 188.299462][ T7575] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.483359][ T7575] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 188.491427][ T7575] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 188.730027][ T7575] EXT4-fs (loop3): 1 truncate cleaned up [ 188.783145][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.086022][ T29] audit: type=1326 audit(1736500048.318:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 189.342250][ T29] audit: type=1326 audit(1736500048.418:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 189.549060][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.606980][ T29] audit: type=1326 audit(1736500048.418:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 189.872123][ T29] audit: type=1326 audit(1736500048.418:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 190.022357][ T7605] ALSA: mixer_oss: invalid OSS volume '*jB¯á½1ÊÍ#zªúÛèB‡­MÁ£”Çؤ¸' [ 190.030784][ T7605] ALSA: mixer_oss: invalid OSS volume 'ÄÊ f”LCKv~’š²‚™ú{΢š38ô¦‡Ÿ¤ë' [ 190.148826][ T29] audit: type=1326 audit(1736500048.428:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 190.248748][ T7603] loop0: detected capacity change from 0 to 4096 [ 190.350232][ T29] audit: type=1326 audit(1736500048.428:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 190.452239][ T5931] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 190.495445][ T7603] NILFS (loop0): invalid segment: Checksum error in segment payload [ 190.582281][ T7603] NILFS (loop0): trying rollback from an earlier position [ 190.607940][ T29] audit: type=1326 audit(1736500048.428:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc35185d29 code=0x7ffc0000 [ 190.700761][ T5931] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 190.752202][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.791129][ T7603] NILFS (loop0): recovery complete [ 190.870902][ T29] audit: type=1326 audit(1736500048.898:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff087d85d29 code=0x7ffc0000 [ 190.870956][ T29] audit: type=1326 audit(1736500048.938:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff087d85d29 code=0x7ffc0000 [ 190.871001][ T29] audit: type=1326 audit(1736500049.018:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff087d85d29 code=0x7ffc0000 [ 190.872795][ T5931] usb 4-1: config 0 descriptor?? [ 190.915894][ T7615] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.340658][ T5931] aquacomputer_d5next 0003:0C70:F003.000A: hidraw0: USB HID vb.51 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 191.407494][ T7616] loop2: detected capacity change from 0 to 4096 [ 191.470520][ T7616] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 191.508996][ T7616] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 191.535897][ T5931] usb 4-1: USB disconnect, device number 6 [ 191.710471][ T7622] loop5: detected capacity change from 0 to 64 [ 192.655863][ T7631] qrtr: Invalid version 0 [ 192.962145][ T5880] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.144863][ T7637] netlink: 100 bytes leftover after parsing attributes in process `syz.5.652'. [ 193.192181][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 193.231087][ T7637] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 193.247311][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.336388][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.414678][ T5880] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 193.505050][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.584164][ T5880] usb 4-1: config 0 descriptor?? [ 193.789851][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.796713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.059611][ T5880] ntrig 0003:1B96:0008.000B: unbalanced collection at end of report description [ 194.161773][ T5880] ntrig 0003:1B96:0008.000B: parse failed [ 194.210902][ T5880] ntrig 0003:1B96:0008.000B: probe with driver ntrig failed with error -22 [ 194.333642][ T5880] usb 4-1: USB disconnect, device number 7 [ 195.102241][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 195.111071][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 195.247270][ T7655] netlink: 'syz.1.658': attribute type 13 has an invalid length. [ 195.292426][ T7655] netlink: 'syz.1.658': attribute type 11 has an invalid length. [ 195.858085][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 195.864378][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 195.870420][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 195.882523][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 195.890896][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 197.367753][ T7683] loop3: detected capacity change from 0 to 256 [ 197.479221][ T7683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4cdf561e, utbl_chksum : 0xe619d30d) [ 197.708803][ T968] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 198.012266][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 198.093851][ T968] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 198.165859][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.250167][ T968] usb 6-1: config 0 descriptor?? [ 198.314813][ T968] gspca_main: sq930x-2.14.0 probing 041e:403c [ 198.401927][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 198.895654][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.964691][ T968] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 198.970708][ T968] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 199.115342][ T968] usb 6-1: USB disconnect, device number 8 [ 199.495690][ T7673] loop0: detected capacity change from 0 to 32768 [ 200.271818][ T7710] loop5: detected capacity change from 0 to 2048 [ 200.403806][ T7710] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.545514][ T7710] syz.5.685: attempt to access beyond end of device [ 200.545514][ T7710] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 200.563085][ T7717] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.624435][ T7718] loop3: detected capacity change from 0 to 47 [ 200.796174][ T7710] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 201.072357][ T7710] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 201.170647][ T5843] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 201.181094][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:8 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 201.191976][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.202057][ T5843] Workqueue: hci3 hci_rx_work [ 201.206785][ T5843] Call Trace: [ 201.210076][ T5843] [ 201.213022][ T5843] dump_stack_lvl+0x241/0x360 [ 201.217752][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.223009][ T5843] ? __pfx__printk+0x10/0x10 [ 201.227639][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.233304][ T5843] ? __kmalloc_cache_noprof+0x243/0x390 [ 201.238881][ T5843] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 201.244203][ T5843] sysfs_create_dir_ns+0x2ce/0x3a0 [ 201.249346][ T5843] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.255089][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.260760][ T5843] kobject_add_internal+0x435/0x8d0 [ 201.265997][ T5843] kobject_add+0x152/0x220 [ 201.270450][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.276110][ T5843] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.281337][ T5843] ? device_add+0x3e7/0xbf0 [ 201.285873][ T5843] ? __pfx_kobject_add+0x10/0x10 [ 201.290849][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.296512][ T5843] ? _raw_spin_unlock+0x28/0x50 [ 201.301392][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.307053][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.312710][ T5843] ? get_device_parent+0x165/0x410 [ 201.317856][ T5843] device_add+0x4e5/0xbf0 [ 201.322223][ T5843] hci_conn_add_sysfs+0xe8/0x200 [ 201.327200][ T5843] le_conn_complete_evt+0xc9f/0x12e0 [ 201.332535][ T5843] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 201.338286][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.343941][ T5843] ? __mutex_unlock_slowpath+0x21e/0x790 [ 201.349618][ T5843] ? __pfx___mutex_lock+0x10/0x10 [ 201.354684][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.360343][ T5843] ? skb_pull_data+0x112/0x230 [ 201.365146][ T5843] hci_le_enh_conn_complete_evt+0x185/0x420 [ 201.371076][ T5843] hci_event_packet+0xa57/0x1540 [ 201.376056][ T5843] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 201.381379][ T5843] ? __pfx_hci_event_packet+0x10/0x10 [ 201.386790][ T5843] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.392020][ T5843] ? hci_send_to_monitor+0xd8/0x7f0 [ 201.397247][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.402908][ T5843] ? kcov_remote_start+0x97/0x7d0 [ 201.407964][ T5843] hci_rx_work+0x3f3/0xdb0 [ 201.412425][ T5843] ? process_scheduled_works+0x976/0x1840 [ 201.418175][ T5843] process_scheduled_works+0xa68/0x1840 [ 201.423781][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 201.429798][ T5843] ? assign_work+0x364/0x3d0 [ 201.434418][ T5843] worker_thread+0x870/0xd30 [ 201.439053][ T5843] ? __kthread_parkme+0x169/0x1d0 [ 201.444109][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 201.449248][ T5843] kthread+0x2f2/0x390 [ 201.453346][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 201.458484][ T5843] ? __pfx_kthread+0x10/0x10 [ 201.463103][ T5843] ret_from_fork+0x4d/0x80 [ 201.467545][ T5843] ? __pfx_kthread+0x10/0x10 [ 201.472163][ T5843] ret_from_fork_asm+0x1a/0x30 [ 201.476966][ T5843] [ 201.506639][ T5843] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.524934][ T5843] Bluetooth: hci3: failed to register connection device [ 202.708526][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 202.747099][ T7744] loop2: detected capacity change from 0 to 256 [ 203.616665][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 204.228990][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 204.229015][ T29] audit: type=1326 audit(1736500063.468:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 204.516471][ T29] audit: type=1326 audit(1736500063.468:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 204.765786][ T29] audit: type=1326 audit(1736500063.508:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 204.942653][ T29] audit: type=1326 audit(1736500063.508:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 205.178634][ T29] audit: type=1326 audit(1736500063.508:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 205.420800][ T29] audit: type=1326 audit(1736500063.508:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 205.500238][ T7745] loop0: detected capacity change from 0 to 32768 [ 205.622648][ T29] audit: type=1326 audit(1736500063.508:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 205.667338][ T7745] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 205.667549][ T7745] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 205.862956][ T7745] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 205.920344][ T29] audit: type=1326 audit(1736500063.508:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 206.223035][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.714'. [ 206.342399][ T7779] netlink: 108 bytes leftover after parsing attributes in process `syz.5.714'. [ 206.511893][ T7781] loop2: detected capacity change from 0 to 128 [ 206.599565][ T7781] EXT4-fs: Ignoring removed nobh option [ 206.744152][ T7781] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.832658][ T7781] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.329958][ T7789] loop4: detected capacity change from 0 to 512 [ 207.341265][ T7788] loop5: detected capacity change from 0 to 2048 [ 207.362397][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.398987][ T7789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.558105][ T7789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.641298][ T7768] loop3: detected capacity change from 0 to 32768 [ 207.750139][ T7789] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.839600][ T7768] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 207.839695][ T7768] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 208.010464][ T7768] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 208.445172][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.633753][ T7803] loop2: detected capacity change from 0 to 512 [ 208.740028][ T7803] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 208.842529][ T7803] EXT4-fs (loop2): invalid journal inode [ 208.848285][ T7803] EXT4-fs (loop2): can't get journal size [ 209.042765][ T7803] EXT4-fs (loop2): 1 truncate cleaned up [ 209.049393][ T7803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.322879][ T7803] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 209.715599][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.287963][ T7830] loop3: detected capacity change from 0 to 128 [ 212.741464][ T7838] loop3: detected capacity change from 0 to 256 [ 212.865465][ T7838] exfat: Deprecated parameter 'namecase' [ 212.877733][ T7822] loop4: detected capacity change from 0 to 32768 [ 212.918481][ T7841] loop2: detected capacity change from 0 to 1024 [ 213.015419][ T7838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 213.042916][ T7841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.159475][ T7841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.756088][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.063230][ T7851] loop3: detected capacity change from 0 to 512 [ 214.151897][ T7851] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.329297][ T7851] EXT4-fs (loop3): 1 truncate cleaned up [ 214.388531][ T7851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.801428][ T7856] loop5: detected capacity change from 0 to 4096 [ 214.993392][ T7856] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 215.043849][ T7856] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 215.220000][ T7856] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 215.298016][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.715548][ T7866] loop3: detected capacity change from 0 to 64 [ 216.773749][ T7880] loop4: detected capacity change from 0 to 128 [ 216.932766][ T7880] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.026087][ T7880] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.056703][ T7890] loop5: detected capacity change from 0 to 256 [ 217.133769][ T7890] exfat: Deprecated parameter 'utf8' [ 217.252411][ T7890] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 217.793637][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.830976][ T7916] loop3: detected capacity change from 0 to 1024 [ 218.963325][ T7916] hfsplus: bad catalog folder entry [ 220.869983][ T7937] mkiss: ax0: crc mode is auto. [ 221.340832][ T7943] loop0: detected capacity change from 0 to 256 [ 221.450573][ T7946] loop3: detected capacity change from 0 to 256 [ 221.502808][ T7943] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 221.534100][ T7946] exfat: Deprecated parameter 'utf8' [ 221.539486][ T7946] exfat: Deprecated parameter 'namecase' [ 221.602245][ T968] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.674045][ T7946] exfat: Deprecated parameter 'utf8' [ 221.704336][ T29] audit: type=1800 audit(1736500080.948:48): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.778" name="file1" dev="loop0" ino=1048632 res=0 errno=0 [ 221.788610][ T7946] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb899b466, utbl_chksum : 0xe619d30d) [ 221.830676][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 221.872327][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.956460][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.979234][ T7925] loop2: detected capacity change from 0 to 32768 [ 222.035704][ T7949] loop4: detected capacity change from 0 to 2048 [ 222.054157][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.149453][ T7949] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.169642][ T968] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 222.246603][ T7925] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 222.273232][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.373217][ T968] usb 6-1: config 0 descriptor?? [ 222.426338][ T7953] loop0: detected capacity change from 0 to 64 [ 222.433271][ T7954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.925644][ T968] ryos 0003:1E7D:31CE.000C: unbalanced delimiter at end of report description [ 223.002643][ T968] ryos 0003:1E7D:31CE.000C: parse failed [ 223.008392][ T968] ryos 0003:1E7D:31CE.000C: probe with driver ryos failed with error -22 [ 223.120294][ T7954] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 223.132451][ T5830] ocfs2: Unmounting device (7,2) on (node local) [ 223.184521][ T968] usb 6-1: USB disconnect, device number 9 [ 223.262609][ T7954] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 223.455643][ T7954] Remounting filesystem read-only [ 223.493731][ T5821] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 224.197900][ T7967] loop0: detected capacity change from 0 to 512 [ 224.358473][ T7967] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.452272][ T7967] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 224.657322][ T7967] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 224.721138][ T7967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 224.781647][ T7967] System zones: 0-2, 18-18, 34-34 [ 224.808234][ T7971] loop2: detected capacity change from 0 to 4096 [ 224.838635][ T7967] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 225.010558][ T7980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.067949][ T7967] EXT4-fs (loop0): 1 truncate cleaned up [ 225.106124][ T7967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.599081][ T7984] loop5: detected capacity change from 0 to 2048 [ 225.720196][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.851382][ T7990] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.297585][ T7989] loop2: detected capacity change from 0 to 4096 [ 226.322689][ T7990] NILFS (loop5): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 226.399853][ T7989] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 226.409943][ T7990] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=2) [ 226.545042][ T7990] Remounting filesystem read-only [ 226.605855][ T5833] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 226.809813][ T7989] ntfs3(loop2): ino=0, attr_set_size [ 226.894293][ T7997] ntfs3(loop2): ino=0, attr_set_size [ 226.980618][ T8001] loop4: detected capacity change from 0 to 256 [ 227.076428][ T8000] loop3: detected capacity change from 0 to 256 [ 227.169200][ T8000] exfat: Deprecated parameter 'utf8' [ 227.216498][ T8000] exfat: Deprecated parameter 'utf8' [ 227.282183][ T8000] exfat: Deprecated parameter 'namecase' [ 227.422357][ T8000] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 227.741697][ T29] audit: type=1800 audit(1736500086.978:49): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.804" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 228.036694][ T8012] ubi1: attaching mtd0 [ 228.616362][ T8017] loop3: detected capacity change from 0 to 128 [ 228.723022][ T8017] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.874179][ T8017] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.969179][ T7993] loop0: detected capacity change from 0 to 32768 [ 229.134315][ T7993] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.798 (7993) [ 229.456134][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.229260][ T8033] loop4: detected capacity change from 0 to 2048 [ 230.355374][ T8033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.620577][ T8033] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 231.516770][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 231.709084][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 232.200164][ T8051] loop0: detected capacity change from 0 to 64 [ 232.682246][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 232.962981][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 233.004677][ T5880] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.082825][ T5880] usb 5-1: config 179 has no interface number 0 [ 233.133280][ T5880] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 233.219066][ T5880] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 233.316455][ T5880] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.392582][ T5880] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 233.465026][ T5880] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.571774][ T5880] usb 5-1: config 179 interface 65 has no altsetting 0 [ 233.626374][ T5880] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 233.704056][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.873584][ T5880] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 233.983530][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 234.307825][ T8072] loop3: detected capacity change from 0 to 512 [ 234.472455][ T8072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.515312][ T8049] loop5: detected capacity change from 0 to 32768 [ 234.528707][ T8074] loop2: detected capacity change from 0 to 2048 [ 234.647323][ T29] audit: type=1800 audit(1736500093.888:50): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.825" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 234.672718][ T8072] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.807901][ T8079] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.869751][ T5880] usb 5-1: USB disconnect, device number 4 [ 234.875832][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 235.007774][ T5880] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 235.081347][ T8072] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 235.622434][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.788104][ T8097] netlink: 'syz.5.838': attribute type 10 has an invalid length. [ 236.858044][ T8100] netlink: 'syz.5.838': attribute type 10 has an invalid length. [ 236.970157][ T8100] netlink: 2 bytes leftover after parsing attributes in process `syz.5.838'. [ 237.238083][ T8097] batman_adv: batadv0: Adding interface: team0 [ 237.314304][ T8097] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.402328][ T8105] netlink: 'syz.2.846': attribute type 62 has an invalid length. [ 237.652177][ T8097] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 237.730855][ T8100] team0: entered promiscuous mode [ 237.810058][ T8100] team_slave_0: entered promiscuous mode [ 237.858584][ T8100] team_slave_1: entered promiscuous mode [ 237.947780][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.039043][ T8100] batman_adv: batadv0: Interface activated: team0 [ 238.095798][ T8100] batman_adv: batadv0: Interface deactivated: team0 [ 238.161956][ T8100] batman_adv: batadv0: Removing interface: team0 [ 238.247320][ T8100] bridge0: port 3(team0) entered blocking state [ 238.319596][ T8100] bridge0: port 3(team0) entered disabled state [ 238.410593][ T8100] team0: entered allmulticast mode [ 238.454227][ T8121] loop3: detected capacity change from 0 to 1024 [ 238.502186][ T8100] team_slave_0: entered allmulticast mode [ 238.541722][ T8100] team_slave_1: entered allmulticast mode [ 238.612902][ T8100] bridge0: port 3(team0) entered blocking state [ 238.621221][ T8100] bridge0: port 3(team0) entered forwarding state [ 238.704137][ T8121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.184977][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.445455][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.860'. [ 239.626408][ T8142] program syz.4.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.565703][ T8160] loop0: detected capacity change from 0 to 64 [ 240.581984][ T8158] loop2: detected capacity change from 0 to 1024 [ 241.546717][ T8171] loop5: detected capacity change from 0 to 512 [ 241.636441][ T8171] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.763027][ T5931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 241.802295][ T8171] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 241.938628][ T8171] EXT4-fs (loop5): 1 truncate cleaned up [ 241.992314][ T8171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.022133][ T5931] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.059362][ T5931] usb 1-1: config 0 has no interface number 0 [ 242.138818][ T5931] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.253825][ T5931] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.325106][ T5931] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 242.440112][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.534817][ T5931] usb 1-1: config 0 descriptor?? [ 242.580860][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.004242][ T5931] prodikeys 0003:041E:2801.000D: unbalanced collection at end of report description [ 243.098549][ T5931] prodikeys 0003:041E:2801.000D: hid parse failed [ 243.164571][ T5931] prodikeys 0003:041E:2801.000D: probe with driver prodikeys failed with error -22 [ 243.278915][ T5931] usb 1-1: USB disconnect, device number 5 [ 243.798578][ T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.019415][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 244.081018][ T968] usb 4-1: descriptor type invalid, skip [ 244.130795][ T968] usb 4-1: descriptor type invalid, skip [ 244.218703][ T968] usb 4-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.259554][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.889'. [ 244.318920][ T968] usb 4-1: config 1 interface 0 has no altsetting 0 [ 244.332440][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.889'. [ 244.432229][ T968] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.40 [ 244.488097][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.542149][ T968] usb 4-1: Product: syz [ 244.602140][ T968] usb 4-1: Manufacturer: syz [ 244.630926][ T968] usb 4-1: SerialNumber: syz [ 244.691584][ T8182] loop2: detected capacity change from 0 to 32768 [ 245.024826][ T8182] JBD2: journal reset failed [ 245.029468][ T8182] (syz.2.877,8182,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 245.126830][ T968] usbhid 4-1:1.0: can't add hid device: -71 [ 245.134881][ T8182] (syz.2.877,8182,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 245.183526][ T968] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 245.342569][ T968] usb 4-1: USB disconnect, device number 8 [ 245.383864][ T8189] loop4: detected capacity change from 0 to 32768 [ 245.663081][ T8189] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 245.663177][ T8189] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 246.918780][ T8189] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 247.042621][ T8243] loop5: detected capacity change from 0 to 1024 [ 247.702621][ T8243] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 247.823137][ T8243] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 248.195198][ T35] hfsplus: b-tree write err: -5, ino 4 [ 248.327146][ T29] audit: type=1326 audit(1736500107.568:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 248.453643][ T8259] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.530581][ T29] audit: type=1326 audit(1736500107.618:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 248.793033][ T29] audit: type=1326 audit(1736500107.618:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 249.022173][ T29] audit: type=1326 audit(1736500107.628:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 249.219243][ T29] audit: type=1326 audit(1736500107.628:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 249.492142][ T29] audit: type=1326 audit(1736500107.628:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 249.762322][ T29] audit: type=1326 audit(1736500107.628:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 249.875422][ T8271] loop3: detected capacity change from 0 to 1024 [ 249.916546][ T8275] loop4: detected capacity change from 0 to 256 [ 249.962915][ T8271] EXT4-fs: Ignoring removed orlov option [ 250.024194][ T8271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.231212][ T8271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.345533][ T8249] loop2: detected capacity change from 0 to 32768 [ 250.432378][ T29] audit: type=1326 audit(1736500109.658:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 250.477820][ T8249] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.907 (8249) [ 250.702146][ T29] audit: type=1326 audit(1736500109.658:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 250.835370][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.950414][ T29] audit: type=1326 audit(1736500109.708:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa0cb785d29 code=0x7ffc0000 [ 251.677873][ T8292] sg_write: data in/out 8192/1 bytes for SCSI command 0xf2-- guessing data in; [ 251.677873][ T8292] program syz.0.927 not setting count and/or reply_len properly [ 253.104702][ T8308] loop4: detected capacity change from 0 to 164 [ 253.369348][ T8312] loop3: detected capacity change from 0 to 256 [ 253.568721][ T8315] netlink: 216 bytes leftover after parsing attributes in process `syz.2.937'. [ 253.679656][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 254.982675][ T8332] tipc: Started in network mode [ 254.997924][ T8332] tipc: Node identity , cluster identity 4711 [ 255.054211][ T8332] tipc: Failed to set node id, please configure manually [ 255.128402][ T8332] tipc: Enabling of bearer rejected, failed to enable media [ 255.150191][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 255.228899][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.237977][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.253237][ T8338] netlink: 'syz.3.946': attribute type 3 has an invalid length. [ 255.370196][ T8334] loop2: detected capacity change from 0 to 4096 [ 255.656027][ T8341] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.720505][ T8340] loop5: detected capacity change from 0 to 1024 [ 255.833743][ T8334] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 144115188075855872 [ 255.982176][ T8334] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=14) [ 256.209092][ T8334] Remounting filesystem read-only [ 256.272402][ T8334] NILFS (loop2): error -5 truncating bmap (ino=14) [ 256.323474][ T53] hfsplus: b-tree write err: -5, ino 4 [ 256.643562][ T5830] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 256.792401][ T968] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.002214][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 257.091933][ T968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.132184][ T968] usb 1-1: config 0 has no interface number 0 [ 257.242162][ T968] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 257.302121][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.391711][ T968] usb 1-1: Product: syz [ 257.413812][ T968] usb 1-1: Manufacturer: syz [ 257.452170][ T968] usb 1-1: SerialNumber: syz [ 257.522996][ T968] usb 1-1: config 0 descriptor?? [ 257.605426][ T968] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 257.895978][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 257.896003][ T29] audit: type=1326 audit(1736500117.138:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff087d85d29 code=0x0 [ 257.957489][ T8358] loop2: detected capacity change from 0 to 8192 [ 258.304514][ T968] gspca_spca1528: reg_w err -71 [ 258.337149][ T968] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 258.371754][ T8365] loop5: detected capacity change from 0 to 1764 [ 258.427503][ T968] usb 1-1: USB disconnect, device number 6 [ 258.803591][ T8347] loop3: detected capacity change from 0 to 32768 [ 258.988610][ T8347] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.397763][ T8351] loop4: detected capacity change from 0 to 32768 [ 259.513247][ T8351] read_mapping_page failed! [ 259.532491][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 259.570152][ T8351] jfs_mount: Failed to read AGGREGATE_I [ 259.662165][ T8351] Mount JFS Failure: -5 [ 259.675774][ T8375] loop0: detected capacity change from 0 to 2048 [ 259.707219][ T8351] jfs_mount failed w/return code = -5 [ 259.936437][ T8375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.094294][ T8375] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.632782][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.906170][ T8387] loop3: detected capacity change from 0 to 256 [ 261.741028][ T8397] loop3: detected capacity change from 0 to 256 [ 261.838648][ T8397] exfat: Deprecated parameter 'namecase' [ 261.886741][ T8397] exfat: Deprecated parameter 'utf8' [ 262.087773][ T8397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 262.310311][ T8370] loop5: detected capacity change from 0 to 32768 [ 262.595206][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.979'. [ 262.736491][ T8412] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 544 [ 263.745309][ T8421] loop3: detected capacity change from 0 to 2048 [ 263.832201][ T968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 263.854468][ T8421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.072607][ T968] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 264.145223][ T968] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 264.225425][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.319897][ T968] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 264.791777][ T8407] loop4: detected capacity change from 0 to 32768 [ 264.889683][ T8407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.978 (8407) [ 265.079508][ T8407] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.210210][ T8407] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 265.315086][ T8407] BTRFS info (device loop4): using free-space-tree [ 265.425580][ T8407] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 265.425877][ T8407] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 265.467011][ T968] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 265.585745][ T8407] BTRFS error (device loop4): open_ctree failed [ 265.630010][ T968] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 265.726375][ T968] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 265.949104][ T968] usb 3-1: USB disconnect, device number 4 [ 266.405367][ T8456] dlm: non-version read from control device 2147479540 [ 266.718221][ T8458] overlayfs: missing 'workdir' [ 267.885605][ T5944] IPVS: starting estimator thread 0... [ 268.012361][ T8473] IPVS: using max 18 ests per chain, 43200 per kthread [ 268.262156][ T5944] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.472990][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 268.556412][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.634172][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.735231][ T5944] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 268.769249][ T29] audit: type=1326 audit(1736500127.998:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 268.853802][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.000263][ T29] audit: type=1326 audit(1736500128.048:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 269.043308][ T5944] usb 5-1: config 0 descriptor?? [ 269.216521][ T8488] can0: slcan on ttyS3. [ 269.246709][ T29] audit: type=1326 audit(1736500128.098:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 269.499165][ T29] audit: type=1326 audit(1736500128.098:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 269.581100][ T5944] smartjoyplus 0003:6666:8804.000E: unbalanced collection at end of report description [ 269.631405][ T8492] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 269.655101][ T5944] smartjoyplus 0003:6666:8804.000E: parse failed [ 269.669048][ T29] audit: type=1326 audit(1736500128.098:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 269.734265][ T5944] smartjoyplus 0003:6666:8804.000E: probe with driver smartjoyplus failed with error -22 [ 269.744601][ T968] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 269.824937][ T8488] can0 (unregistered): slcan off ttyS3. [ 269.885694][ T5944] usb 5-1: USB disconnect, device number 5 [ 269.916258][ T29] audit: type=1326 audit(1736500128.098:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 269.939434][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 270.015034][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.082812][ T968] usb 6-1: config 127 has an invalid interface number: 25 but max is 0 [ 270.091123][ T968] usb 6-1: config 127 has no interface number 0 [ 270.181917][ T29] audit: type=1326 audit(1736500128.098:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 270.216207][ T968] usb 6-1: config 127 interface 25 has no altsetting 0 [ 270.302795][ T968] usb 6-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 270.385459][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.412415][ T29] audit: type=1326 audit(1736500128.098:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb9785d29 code=0x7ffc0000 [ 270.470698][ T968] usb 6-1: Product: syz [ 270.493426][ T968] usb 6-1: Manufacturer: syz [ 270.530922][ T968] usb 6-1: SerialNumber: syz [ 270.874143][ T968] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 271.523506][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 271.544563][ T968] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 271.860813][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.949017][ T8507] loop3: detected capacity change from 0 to 1024 [ 271.989128][ T968] usb 6-1: device firmware changed [ 272.063147][ T968] ueagle-atm 6-1:127.25: usbatm_usb_probe: bind failed: -19! [ 272.185091][ T968] usb 6-1: USB disconnect, device number 10 [ 272.451750][ T5920] hfsplus: b-tree write err: -5, ino 4 [ 272.753941][ T8511] loop0: detected capacity change from 0 to 2048 [ 272.870957][ T8511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.012366][ T8511] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.772363][ T30] INFO: task jbd2/sda1-8:5160 blocked for more than 143 seconds. [ 273.835290][ T30] Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 273.882219][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.948017][ T30] task:jbd2/sda1-8 state:D stack:24824 pid:5160 tgid:5160 ppid:2 flags:0x00004000 [ 274.062538][ T30] Call Trace: [ 274.075229][ T30] [ 274.112323][ T30] __schedule+0x1850/0x4c30 [ 274.162201][ T30] ? __pfx___schedule+0x10/0x10 [ 274.183406][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.202306][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.248115][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.296107][ T30] ? schedule+0x90/0x320 [ 274.350087][ T30] schedule+0x14b/0x320 [ 274.402319][ T30] io_schedule+0x8d/0x110 [ 274.432304][ T30] bit_wait_io+0x12/0xd0 [ 274.472346][ T30] __wait_on_bit+0xb2/0x2f0 [ 274.508948][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 274.562958][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 274.583304][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 274.635115][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 274.688703][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 274.736926][ T30] jbd2_journal_commit_transaction+0x3d09/0x6560 [ 274.782927][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 274.843254][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 274.877972][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.918936][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 274.977909][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.015639][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 275.085589][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.135920][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 275.182205][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 275.195742][ T30] ? prepare_to_wait+0x186/0x210 [ 275.232302][ T30] ? schedule+0x90/0x320 [ 275.266636][ T30] kjournald2+0x41c/0x7b0 [ 275.291938][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.310787][ T8523] loop5: detected capacity change from 0 to 32768 [ 275.340165][ T30] ? __pfx_kjournald2+0x10/0x10 [ 275.354604][ T8516] loop4: detected capacity change from 0 to 32768 [ 275.381599][ T8523] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1024 (8523) [ 275.412218][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.426649][ T8516] XFS: ikeep mount option is deprecated. [ 275.436167][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.508018][ T8516] XFS: noikeep mount option is deprecated. [ 275.514126][ T30] ? __kthread_parkme+0x169/0x1d0 [ 275.530299][ T8523] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.556920][ T30] ? __pfx_kjournald2+0x10/0x10 [ 275.608109][ T30] kthread+0x2f2/0x390 [ 275.622265][ T8523] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 275.658275][ T30] ? __pfx_kjournald2+0x10/0x10 [ 275.692359][ T30] ? __pfx_kthread+0x10/0x10 [ 275.701450][ T8516] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.721912][ T30] ret_from_fork+0x4d/0x80 [ 275.740042][ T30] ? __pfx_kthread+0x10/0x10 [ 275.765811][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.805663][ T30] [ 275.828453][ T30] [ 275.828453][ T30] Showing all locks held in the system: [ 275.850627][ T8523] BTRFS info (device loop5): rebuilding free space tree [ 275.908896][ T30] 3 locks held by kworker/1:0/25: [ 275.927156][ T8516] XFS (loop4): Ending clean mount [ 275.950138][ T8516] XFS (loop4): Quotacheck needed: Please wait. [ 275.965246][ T30] 1 lock held by khungtaskd/30: [ 275.985753][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 276.025104][ T8523] BTRFS info (device loop5): disabling free space tree [ 276.092718][ T30] 2 locks held by kworker/u8:3/53: [ 276.101915][ T8523] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.146936][ T8516] XFS (loop4): Quotacheck: Done. [ 276.154639][ T30] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 276.202464][ T8523] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.234583][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 276.291618][ T30] 3 locks held by kworker/u8:5/1834: [ 276.319792][ T30] 2 locks held by getty/5581: [ 276.346630][ T30] #0: ffff888031ca40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 276.394598][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 276.427643][ T30] 2 locks held by kworker/1:4/5889: [ 276.444033][ T30] 4 locks held by kworker/1:7/5893: [ 276.461062][ T30] 1 lock held by syz.5.1024/8523: [ 276.487371][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 276.528245][ T30] 1 lock held by udevadm/8531: [ 276.540396][ T30] [ 276.565760][ T5821] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 276.608651][ T30] ============================================= [ 276.608651][ T30] [ 276.647155][ T30] NMI backtrace for cpu 0 [ 276.651542][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 276.662156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.672230][ T30] Call Trace: [ 276.675524][ T30] [ 276.678470][ T30] dump_stack_lvl+0x241/0x360 [ 276.683189][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.688428][ T30] ? __pfx__printk+0x10/0x10 [ 276.693065][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 276.698038][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.703523][ T30] ? _printk+0xd5/0x120 [ 276.707712][ T30] ? __pfx__printk+0x10/0x10 [ 276.712333][ T30] ? __wake_up_klogd+0xcc/0x110 [ 276.717207][ T30] ? __pfx__printk+0x10/0x10 [ 276.721825][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.727479][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 276.732532][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.738538][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 276.744560][ T30] watchdog+0xff6/0x1040 [ 276.748833][ T30] ? watchdog+0x1ea/0x1040 [ 276.753280][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.757984][ T30] kthread+0x2f2/0x390 [ 276.762081][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.766790][ T30] ? __pfx_kthread+0x10/0x10 [ 276.771409][ T30] ret_from_fork+0x4d/0x80 [ 276.775847][ T30] ? __pfx_kthread+0x10/0x10 [ 276.780468][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.785270][ T30] [ 276.789509][ T30] Sending NMI from CPU 0 to CPUs 1: [ 276.795213][ C1] NMI backtrace for cpu 1 [ 276.795228][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 276.795255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.795271][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 276.795313][ C1] RIP: 0010:validate_chain+0x1e6/0x5920 [ 276.795349][ C1] Code: 89 df e8 ed 6e 8a 00 48 89 5c 24 48 48 8b 1b 48 85 db 74 48 48 83 c3 f8 74 42 4c 8d 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 c0 6e 8a 00 49 8b 07 4c 39 f0 0f 84 83 03 00 00 [ 276.795369][ C1] RSP: 0018:ffffc90000a183e0 EFLAGS: 00000046 [ 276.795389][ C1] RAX: 1ffffffff287070b RBX: ffffffff94383840 RCX: ffffffff817b783e [ 276.795408][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942a5900 [ 276.795424][ C1] RBP: ffffc90000a186e0 R08: ffffffff942a5907 R09: 1ffffffff2854b20 [ 276.795443][ C1] R10: dffffc0000000000 R11: fffffbfff2854b21 R12: dffffc0000000000 [ 276.795461][ C1] R13: ffff88801d2ea950 R14: 2531ff47a6c95801 R15: ffffffff94383858 [ 276.795483][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 276.795503][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.795521][ C1] CR2: 00005555592f1808 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 276.795547][ C1] Call Trace: [ 276.795555][ C1] [ 276.795564][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 276.795594][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 276.795624][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.795662][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 276.795685][ C1] ? nmi_handle+0x151/0x5a0 [ 276.795714][ C1] ? nmi_handle+0x2a/0x5a0 [ 276.795744][ C1] ? validate_chain+0x1e6/0x5920 [ 276.795777][ C1] ? default_do_nmi+0x63/0x160 [ 276.795805][ C1] ? exc_nmi+0x123/0x1f0 [ 276.795831][ C1] ? end_repeat_nmi+0xf/0x53 [ 276.795857][ C1] ? validate_chain+0x11e/0x5920 [ 276.795891][ C1] ? validate_chain+0x1e6/0x5920 [ 276.795924][ C1] ? validate_chain+0x1e6/0x5920 [ 276.795958][ C1] ? validate_chain+0x1e6/0x5920 [ 276.795990][ C1] [ 276.795999][ C1] [ 276.796011][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796042][ C1] ? __pfx_lock_release+0x10/0x10 [ 276.796071][ C1] ? __pfx_validate_chain+0x10/0x10 [ 276.796104][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796129][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.796153][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796178][ C1] ? mark_lock+0x9a/0x360 [ 276.796207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796258][ C1] ? __lock_acquire+0x1397/0x2100 [ 276.796293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796320][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796344][ C1] ? mark_lock+0x9a/0x360 [ 276.796373][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796400][ C1] __lock_acquire+0x1397/0x2100 [ 276.796436][ C1] lock_acquire+0x1ed/0x550 [ 276.796462][ C1] ? dummy_timer+0x85e/0x4620 [ 276.796491][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 276.796517][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796547][ C1] ? usb_free_urb+0x9f/0x120 [ 276.796583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796607][ C1] ? __usb_hcd_giveback_urb+0x553/0x6e0 [ 276.796640][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 276.796674][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.796695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796723][ C1] _raw_spin_lock+0x2e/0x40 [ 276.796752][ C1] ? dummy_timer+0x85e/0x4620 [ 276.796774][ C1] dummy_timer+0x85e/0x4620 [ 276.796797][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796826][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 276.796875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.796913][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 276.796940][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 276.796963][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 276.796998][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 276.797035][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 276.797069][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797119][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 276.797150][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 276.797187][ C1] handle_softirqs+0x2d6/0x9b0 [ 276.797223][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797253][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 276.797291][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 276.797328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797353][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 276.797385][ C1] __irq_exit_rcu+0xf7/0x220 [ 276.797421][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 276.797460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797486][ C1] irq_exit_rcu+0x9/0x30 [ 276.797520][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.797558][ C1] [ 276.797566][ C1] [ 276.797574][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.797612][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 276.797650][ C1] Code: 8c e8 24 34 67 0a 65 66 8b 05 f4 00 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 08 69 45 00 fb 65 8b 05 b8 00 a2 7e <85> c0 75 05 e8 37 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 276.797669][ C1] RSP: 0018:ffffc900001f7600 EFLAGS: 00000286 [ 276.797689][ C1] RAX: 0000000080000000 RBX: 1ffff9200003eec4 RCX: ffffffff817b378a [ 276.797707][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb0a0 [ 276.797726][ C1] RBP: ffffc900001f76b0 R08: ffffffff942a5987 R09: 1ffffffff2854b30 [ 276.797744][ C1] R10: dffffc0000000000 R11: fffffbfff2854b31 R12: dffffc0000000000 [ 276.797763][ C1] R13: 1ffff9200003eec8 R14: ffffc900001f7640 R15: 0000000000000201 [ 276.797785][ C1] ? mark_lock+0x9a/0x360 [ 276.797818][ C1] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 276.797857][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 276.797892][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.797919][ C1] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 276.797959][ C1] wg_packet_decrypt_worker+0xcde/0xd80 [ 276.798005][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 276.798082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.798107][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.798136][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.798170][ C1] ? process_scheduled_works+0x976/0x1840 [ 276.798195][ C1] process_scheduled_works+0xa68/0x1840 [ 276.798233][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.798262][ C1] ? assign_work+0x364/0x3d0 [ 276.798286][ C1] worker_thread+0x870/0xd30 [ 276.798319][ C1] ? __kthread_parkme+0x169/0x1d0 [ 276.798346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 276.798371][ C1] kthread+0x2f2/0x390 [ 276.798399][ C1] ? __pfx_worker_thread+0x10/0x10 [ 276.798423][ C1] ? __pfx_kthread+0x10/0x10 [ 276.798452][ C1] ret_from_fork+0x4d/0x80 [ 276.798476][ C1] ? __pfx_kthread+0x10/0x10 [ 276.798505][ C1] ret_from_fork_asm+0x1a/0x30 [ 276.798538][ C1] [ 277.577253][ T5833] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 277.630348][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 277.637251][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 277.647785][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.657857][ T30] Call Trace: [ 277.661150][ T30] [ 277.664098][ T30] dump_stack_lvl+0x241/0x360 [ 277.668818][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.674053][ T30] ? __pfx__printk+0x10/0x10 [ 277.678675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.684689][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.690347][ T30] ? vscnprintf+0x5d/0x90 [ 277.694704][ T30] panic+0x349/0x880 [ 277.698627][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.704286][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 277.710470][ T30] ? __pfx_panic+0x10/0x10 [ 277.714919][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 277.720328][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.725985][ T30] ? __irq_work_queue_local+0x137/0x410 [ 277.731557][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.737297][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 277.742701][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 277.748970][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 277.755152][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.760810][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 277.766993][ T30] watchdog+0x1035/0x1040 [ 277.771352][ T30] ? watchdog+0x1ea/0x1040 [ 277.775801][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.780502][ T30] kthread+0x2f2/0x390 [ 277.784604][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.789305][ T30] ? __pfx_kthread+0x10/0x10 [ 277.793924][ T30] ret_from_fork+0x4d/0x80 [ 277.798364][ T30] ? __pfx_kthread+0x10/0x10 [ 277.803069][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.807869][ T30] [ 277.811676][ T30] Kernel Offset: disabled [ 277.816192][ T30] Rebooting in 86400 seconds..