last executing test programs: 3m0.966374887s ago: executing program 0 (id=16): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) 3m0.643771074s ago: executing program 0 (id=17): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m59.045573759s ago: executing program 0 (id=32): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000140)={{@local, 0x9}, 0x0, 0x2, 0x8000}) 2m58.856271721s ago: executing program 0 (id=35): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x820, &(0x7f00000006c0)=ANY=[@ANYBLOB='mode=0']) 2m56.814909177s ago: executing program 0 (id=45): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2m55.096529056s ago: executing program 0 (id=59): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) read(r0, &(0x7f0000000000)=""/150, 0x96) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) 2m54.397694576s ago: executing program 32 (id=59): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) read(r0, &(0x7f0000000000)=""/150, 0x96) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) 1m38.217339904s ago: executing program 5 (id=516): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 1m37.99778327s ago: executing program 5 (id=519): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x6, 0x8001) lseek(r0, 0x0, 0x3) 1m37.723666331s ago: executing program 5 (id=520): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/5, 0x5}}], 0x1, 0x0, 0x0) 1m37.595691896s ago: executing program 5 (id=522): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x820, &(0x7f00000006c0)=ANY=[@ANYBLOB='mode=0']) 1m36.974057418s ago: executing program 5 (id=524): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a561a00000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1m36.184925339s ago: executing program 5 (id=532): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0), 0x2, 0x400}) 1m35.944526597s ago: executing program 33 (id=532): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0), 0x2, 0x400}) 2.736551174s ago: executing program 6 (id=1547): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x0) 1.804384881s ago: executing program 6 (id=1560): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)='}', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000007c0)={0x80000000, 0x0, r2, 0xfbfbfbfb}) 1.694186684s ago: executing program 6 (id=1562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x1, r2, 0x5}) 1.535225092s ago: executing program 6 (id=1564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 1.480264099s ago: executing program 6 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2], 0x44}}, 0x0) 1.318149308s ago: executing program 6 (id=1568): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)={[{@intr}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@commit={'commit', 0x3d, 0x60262b80}}]}, 0x1, 0x4434, &(0x7f0000008940)="$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") io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 1.203566501s ago: executing program 1 (id=1571): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.080504645s ago: executing program 4 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 1.078329906s ago: executing program 1 (id=1575): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) 919.546474ms ago: executing program 1 (id=1577): r0 = semget$private(0x0, 0x207, 0x0) semtimedop(0x0, &(0x7f00000002c0)=[{0x0, 0xff78}], 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000140)=""/155) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x100]) 912.868934ms ago: executing program 4 (id=1578): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 843.390152ms ago: executing program 3 (id=1579): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[], 0x22c}}, 0x0) 835.896333ms ago: executing program 2 (id=1580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0) io_setup(0x202, &(0x7f0000000200)) 795.426088ms ago: executing program 4 (id=1581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) 737.386525ms ago: executing program 3 (id=1582): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 736.789245ms ago: executing program 1 (id=1583): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r0, 0x402, 0x80000004) getdents64(r0, &(0x7f0000001900)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 653.140764ms ago: executing program 4 (id=1584): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0, 0xd}) 600.43504ms ago: executing program 2 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 600.168801ms ago: executing program 1 (id=1586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x400e, &(0x7f0000000580), 0x1, 0x441, &(0x7f0000000d80)="$eJzs289PHFUcAPDv7AKV2hZs6o/Sqmg1En9AobVy8KLRxIMmJnqoRwTaYLfFFExsQxSNqUfTxLvxaOJf4EkvRj2Z9Kp306QxXFo9rZndGdjdLpSlC4vdzycZeG/mLe99d+btvnmPCaBrDac/koh9EfFHRAxUs/UFhqu/bq0sTf+zsjSdRLn8zt9JpdzNlaXpvGj+uvvzTE9E4YskjjSpd+HS5XNTpdLsxSw/tnj+w7GFS5dfmDs/dXb27OyFicnJkyfGXzo18WJb4kzjujn0yfzRw2+8d/Wt6dNX3//1+ySPvyGONhne6ODT5XKbq+us/TXppKeDDaElxWo3jd5K/x+IYqydvIF4/fOONg7YVuVyufzQ+oeXy8A9LIlOtwDojPyLPr3/zbcdGnrsCjdeqd4ApXHfyrbqkZ4oZGV6G+5v22k4Ik4v//tNusX2zEMAANT5MR3/PN9s/FeI2nmhA9kaymBEPBARByPiVEQciogHIyplH46IR1qsv3GR5PbxT+H6lgLbpHT893K2tlU//stHfzFYzHL7K/H3JmfmSrPHs/dkJHr3pPnxDer46bVrX613rHb8l25p/flYMGvH9Z499a+ZmVqcupuYa934LGKop1n8yepKQBIRhyNiqJU/3L+WnHv2u6PrFbtz/BtowzpT+duIZ6rnfzka4s8lG69Pjt0XpdnjY/lVcbvffr/y9nr131X8bZCe/71Nr//V+AeT2vXahdbruPLnl+ve02z1+u9L3q3b9/HU4uLF8Yi+5M1qo2v3Tx6oLzexVj6Nf+RY8/5/MNbeiSMRkV7Ej0bEYxHxeNb2JyLiyYg4tkH8v7z61Adbj397pfHPtHT+1xJ90bineaJ47ucf6iodbCX+9PyfrKRGsj2b+fzbTLu2djUDAADA/08hIvZFUhhdTRcKo6PV/+E/FHsLpfmFxefOzH90Yab6jMBg9Bbyma6BmvnQ8ey2Ps9PNORPZPPGXxf7K/nR6fnSTKeDhy5XeVanSf9P/VXsbNuAHeB5Lehe+j90L/0fupf+D92rSf/v70Q7gJ3X7Pv/0w60A9h5Df3fsh90kVbv/68l29QQYMeZ/4Pupf9DV1rojzs/JN/ZxMDuaIZEfSIKu6IZEtuU6PQnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8FwAA///N0+dQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) 549.321776ms ago: executing program 3 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0) 479.954924ms ago: executing program 2 (id=1588): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x2800}, 0x24000040) 337.252431ms ago: executing program 1 (id=1589): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000c40)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 336.458182ms ago: executing program 4 (id=1590): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 284.576187ms ago: executing program 2 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}]}, 0x40}}, 0x0) 273.936299ms ago: executing program 2 (id=1592): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34, 0x5}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x101, 0x80000001}) 262.31358ms ago: executing program 3 (id=1593): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES64], 0x90) 180.621089ms ago: executing program 2 (id=1594): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) recvfrom$inet(r0, &(0x7f0000000b80)=""/24, 0x4a, 0x162, 0x0, 0x0) 148.319693ms ago: executing program 3 (id=1595): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0) read$ptp(r0, &(0x7f00000010c0)=""/179, 0xb3) 85.08724ms ago: executing program 3 (id=1596): r0 = socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 0s ago: executing program 4 (id=1597): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x0, 0x0) kernel console output (not intermixed with test programs): ct, device number 4 [ 171.642674][ T5956] loop3: detected capacity change from 0 to 2048 [ 171.700368][ T5956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.709461][ T5956] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.973212][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 172.080738][ T4312] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 172.327146][ T5970] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 172.428201][ T5975] loop4: detected capacity change from 0 to 256 [ 172.537128][ T5949] loop5: detected capacity change from 0 to 32768 [ 172.574445][ T5949] XFS: noikeep mount option is deprecated. [ 172.604640][ T5949] XFS: ikeep mount option is deprecated. [ 172.754508][ T5949] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 172.824403][ T5949] XFS (loop5): Quotacheck needed: Please wait. [ 172.888719][ T5949] XFS (loop5): Quotacheck: Done. [ 173.040421][ T4484] XFS (loop5): Unmounting Filesystem [ 173.162138][ T4781] kernel read not supported for file /rfkill (pid: 4781 comm: kworker/1:13) [ 173.843574][ T6002] loop1: detected capacity change from 0 to 4096 [ 173.972068][ T6008] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.112002][ T6013] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 174.151235][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.5.459'. [ 174.266950][ T5993] loop4: detected capacity change from 0 to 32768 [ 174.305522][ T5993] XFS: noikeep mount option is deprecated. [ 174.457477][ T5993] XFS (loop4): Mounting V5 Filesystem [ 174.472349][ T5999] loop3: detected capacity change from 0 to 32768 [ 174.472784][ T6026] loop2: detected capacity change from 0 to 1024 [ 174.488013][ T5999] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.453 (5999) [ 174.515975][ T5999] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 174.529592][ T5999] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 174.561949][ T5999] BTRFS info (device loop3): using free space tree [ 174.720320][ T5993] XFS (loop4): Ending clean mount [ 174.753404][ T5993] XFS (loop4): Quotacheck needed: Please wait. [ 174.832581][ T5999] BTRFS info (device loop3): enabling ssd optimizations [ 174.854956][ T5993] XFS (loop4): Quotacheck: Done. [ 175.143404][ T4259] XFS (loop4): Unmounting Filesystem [ 175.208240][ T4252] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 175.449217][ T6060] loop5: detected capacity change from 0 to 8192 [ 175.520614][ T6060] loop5: p1 p3 p4 [ 175.569976][ T6060] loop5: partition table partially beyond EOD, truncated [ 175.592997][ T6060] loop5: p1 size 3523149824 extends beyond EOD, truncated [ 175.631280][ T6060] loop5: p3 start 16777215 is beyond EOD, truncated [ 175.689413][ T6060] loop5: p4 size 50331648 extends beyond EOD, truncated [ 175.853226][ T6070] loop1: detected capacity change from 0 to 128 [ 175.935910][ T6070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.000251][ T6070] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.025355][ T6076] loop5: detected capacity change from 0 to 4096 [ 176.107634][ T6076] ntfs: volume version 3.1. [ 176.116880][ T6070] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 176.121181][ T6076] __ntfs_error: 8 callbacks suppressed [ 176.121199][ T6076] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 176.243133][ T6076] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 176.257947][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 176.293885][ T6076] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 176.400666][ T6076] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 176.412962][ T6085] netlink: 277 bytes leftover after parsing attributes in process `syz.3.476'. [ 176.433350][ T6076] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 176.929323][ T4764] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.167368][ T6081] loop2: detected capacity change from 0 to 40427 [ 177.233222][ T6081] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 177.262243][ T6081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.295887][ T6081] F2FS-fs (loop2): invalid crc value [ 177.299491][ T4764] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 177.327666][ T4764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.331534][ T6081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.380335][ T4764] usb 4-1: config 0 descriptor?? [ 177.441662][ T4764] gspca_main: spca508-2.14.0 probing 8086:0110 [ 177.442596][ T6081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.473864][ T6090] loop1: detected capacity change from 0 to 32768 [ 177.514076][ T6090] XFS: noikeep mount option is deprecated. [ 177.532509][ T6081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.661866][ T4764] gspca_spca508: reg_read err -32 [ 177.699499][ T4764] gspca_spca508: reg_read err -32 [ 177.720211][ T6090] XFS (loop1): Mounting V5 Filesystem [ 177.837735][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.837776][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.871757][ T6090] XFS (loop1): Ending clean mount [ 177.896496][ T62] tipc: Subscription rejected, illegal request [ 177.908447][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.908480][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.924994][ T6090] XFS (loop1): Quotacheck needed: Please wait. [ 177.926473][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.977045][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 177.984971][ T4764] gspca_spca508: reg_read err -71 [ 178.003871][ T5594] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 178.009774][ T4764] gspca_spca508: reg_read err -71 [ 178.037595][ T6090] XFS (loop1): Quotacheck: Done. [ 178.069548][ T4764] gspca_spca508: reg write: error -71 [ 178.091238][ T4764] spca508: probe of 4-1:0.0 failed with error -71 [ 178.125464][ T4764] usb 4-1: USB disconnect, device number 6 [ 178.195573][ T4257] XFS (loop1): Unmounting Filesystem [ 178.921369][ T6140] netlink: 100 bytes leftover after parsing attributes in process `syz.4.498'. [ 178.965079][ T6143] tun0: tun_chr_ioctl cmd 1074025672 [ 178.985237][ T4781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.009393][ T6143] tun0: ignored: set checksum enabled [ 179.045192][ T6145] loop1: detected capacity change from 0 to 8 [ 179.173035][ T6145] SQUASHFS error: lzo decompression failed, data probably corrupt [ 179.189483][ T6145] SQUASHFS error: Failed to read block 0x4ec: -5 [ 179.206414][ T6145] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 179.226512][ T6145] SQUASHFS error: Unable to read inode 0x20087 [ 179.269423][ T4781] usb 4-1: Using ep0 maxpacket: 16 [ 179.389489][ T4781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.478318][ T4299] tipc: Subscription rejected, illegal request [ 179.523481][ T6133] loop5: detected capacity change from 0 to 32768 [ 179.589599][ T4781] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.598720][ T4781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.607396][ T6133] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 179.659708][ T6133] JBD2: Ignoring recovery information on journal [ 179.669586][ T4781] usb 4-1: Product: syz [ 179.673805][ T4781] usb 4-1: Manufacturer: syz [ 179.678435][ T4781] usb 4-1: SerialNumber: syz [ 179.741485][ T4781] usb 4-1: config 0 descriptor?? [ 179.781682][ T4781] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.812864][ T6133] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 179.837616][ T4781] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 180.024764][ T4484] ocfs2: Unmounting device (7,5) on (node local) [ 180.454186][ T4781] em28xx 4-1:0.0: chip ID is em28178 [ 180.494262][ T6170] loop5: detected capacity change from 0 to 4096 [ 180.693332][ T4484] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 180.718960][ T4484] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 180.809439][ T4781] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.825188][ T4781] em28xx 4-1:0.0: board has no eeprom [ 180.949431][ T4781] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 180.967600][ T4781] em28xx 4-1:0.0: dvb set to bulk mode. [ 180.978959][ T4327] em28xx 4-1:0.0: Binding DVB extension [ 181.023510][ T4781] usb 4-1: USB disconnect, device number 7 [ 181.047564][ T6166] loop2: detected capacity change from 0 to 32768 [ 181.054081][ T4781] em28xx 4-1:0.0: Disconnecting em28xx [ 181.247380][ T4327] em28xx 4-1:0.0: Registering input extension [ 181.439314][ T4327] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 181.449275][ T4327] Registered IR keymap rc-empty [ 181.464995][ T4327] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 181.496371][ T4327] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 181.569458][ T4327] em28xx 4-1:0.0: Input extension successfully initialized [ 181.590656][ T4781] em28xx 4-1:0.0: Closing input extension [ 181.737996][ T4781] em28xx 4-1:0.0: Freeing device [ 181.885258][ T6195] loop5: detected capacity change from 0 to 128 [ 181.938352][ T6195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.948422][ T6195] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.083959][ T4484] EXT4-fs (loop5): unmounting filesystem. [ 182.179303][ T4781] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.199543][ T5007] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.459477][ T5007] usb 3-1: Using ep0 maxpacket: 8 [ 182.464705][ T4764] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.537408][ T6206] loop5: detected capacity change from 0 to 40427 [ 182.565141][ T6206] F2FS-fs (loop5): invalid crc value [ 182.579736][ T5007] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.588382][ T5007] usb 3-1: config 0 has no interface number 0 [ 182.596452][ T5007] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.614559][ T6206] F2FS-fs (loop5): Found nat_bits in checkpoint [ 182.639331][ T5007] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.658724][ T5007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.681663][ T5007] usb 3-1: config 0 descriptor?? [ 182.713987][ T6206] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 182.725680][ T5007] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 182.759720][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.766958][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.779815][ T4781] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 182.797038][ T4781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.806814][ T4781] usb 4-1: Product: syz [ 182.817153][ T4781] usb 4-1: Manufacturer: syz [ 182.822414][ T4781] usb 4-1: SerialNumber: syz [ 182.830488][ T4484] syz-executor: attempt to access beyond end of device [ 182.830488][ T4484] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 182.844160][ T4781] usb 4-1: config 0 descriptor?? [ 182.849655][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.849692][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.849729][ T4764] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 182.849755][ T4764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.851726][ T4764] usb 2-1: config 0 descriptor?? [ 182.899583][ T4484] syz-executor: attempt to access beyond end of device [ 182.899583][ T4484] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 182.937362][ T4484] syz-executor: attempt to access beyond end of device [ 182.937362][ T4484] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.400920][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.419540][ T4781] usb 4-1: Firmware: major: 216, minor: 0, hardware type: ATUSB (1) [ 183.446455][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.464231][ T4299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.489387][ T4764] wacom 0003:056A:0065.0004: unknown main item tag 0x7 [ 183.496368][ T4764] wacom 0003:056A:0065.0004: unknown main item tag 0x4 [ 183.534308][ T4764] wacom 0003:056A:0065.0004: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 183.555407][ T4764] wacom 0003:056A:0065.0004: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.1-1/input0 [ 183.596739][ T4764] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0065.0004/input/input11 [ 183.656045][ T7] usb 3-1: USB disconnect, device number 5 [ 183.662117][ T4781] usb 4-1: failed to fetch extended address, random address set [ 183.733329][ T4764] usb 2-1: USB disconnect, device number 4 [ 183.745505][ T7] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 183.916232][ T4781] usb 4-1: USB disconnect, device number 8 [ 184.006948][ T4299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.187530][ T4299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.311328][ T4299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.713254][ T6242] loop1: detected capacity change from 0 to 1024 [ 184.733910][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.753516][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.763309][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.771936][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.800983][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.808529][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.994704][ T6246] loop3: detected capacity change from 0 to 4096 [ 185.117086][ T6253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.220406][ T6252] netlink: 19 bytes leftover after parsing attributes in process `syz.4.544'. [ 185.804296][ T6239] loop2: detected capacity change from 0 to 40427 [ 185.871031][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 185.899972][ T6239] F2FS-fs (loop2): invalid crc value [ 185.970669][ T6239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.989394][ T4781] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.126976][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 186.138967][ T6239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.220146][ T5594] syz-executor: attempt to access beyond end of device [ 186.220146][ T5594] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.239258][ T4781] usb 2-1: Using ep0 maxpacket: 8 [ 186.359564][ T4781] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.367909][ T4781] usb 2-1: config 179 has no interface number 0 [ 186.439288][ T4781] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.505880][ T4781] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.517772][ T4781] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.536692][ T4781] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.550068][ T4781] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.563947][ T4781] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.573731][ T4781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.609759][ T6269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.859483][ T4258] Bluetooth: hci0: command tx timeout [ 186.892627][ T4781] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 187.057310][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.074915][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.106569][ T6241] device bridge_slave_0 entered promiscuous mode [ 187.122603][ T4327] usb 2-1: USB disconnect, device number 5 [ 187.129327][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.137699][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.157612][ T4327] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 187.256050][ T4781] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.438034][ T6301] loop3: detected capacity change from 0 to 64 [ 187.445881][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.463779][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.500971][ T6241] device bridge_slave_1 entered promiscuous mode [ 187.540603][ T26] audit: type=1800 audit(1730299276.387:26): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.555" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 187.625253][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.634825][ T4781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.676973][ T4781] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.708475][ T4781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.741073][ T4781] usb 3-1: config 0 descriptor?? [ 187.793209][ T4299] device hsr_slave_0 left promiscuous mode [ 187.805219][ T4299] device hsr_slave_1 left promiscuous mode [ 187.829613][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.837083][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.894733][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.934568][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.948567][ T6314] loop4: detected capacity change from 0 to 1024 [ 187.975126][ T4299] device bridge_slave_1 left promiscuous mode [ 187.991841][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.034407][ T4299] device bridge_slave_0 left promiscuous mode [ 188.050273][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.221293][ T4299] device veth1_macvtap left promiscuous mode [ 188.227401][ T4299] device veth0_macvtap left promiscuous mode [ 188.236629][ T4781] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 188.262491][ T4781] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input15 [ 188.289574][ T4299] device veth1_vlan left promiscuous mode [ 188.295465][ T4299] device veth0_vlan left promiscuous mode [ 188.414502][ T4781] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 188.825586][ T6307] loop3: detected capacity change from 0 to 32768 [ 188.939542][ T4258] Bluetooth: hci0: command tx timeout [ 188.951352][ T6307] XFS (loop3): Mounting V5 Filesystem [ 189.091513][ T6307] XFS (loop3): Ending clean mount [ 189.107472][ T6307] XFS (loop3): Quotacheck needed: Please wait. [ 189.231172][ T4781] usb 3-1: USB disconnect, device number 6 [ 189.252006][ T6307] XFS (loop3): Quotacheck: Done. [ 189.418704][ T4252] XFS (loop3): Unmounting Filesystem [ 189.842687][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 189.937150][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 189.941263][ T6339] loop1: detected capacity change from 0 to 32768 [ 189.974316][ T6339] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.562 (6339) [ 190.011602][ T6339] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 190.028522][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.032508][ T6339] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 190.066209][ T6339] BTRFS info (device loop1): using free space tree [ 190.136850][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.233444][ T6339] BTRFS info (device loop1): enabling ssd optimizations [ 190.358201][ T4257] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 191.019580][ T4258] Bluetooth: hci0: command tx timeout [ 191.452961][ T4299] bond0 (unregistering): Released all slaves [ 191.564566][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.766672][ T6241] team0: Port device team_slave_0 added [ 191.833626][ T6241] team0: Port device team_slave_1 added [ 191.933452][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.009274][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.109236][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.151575][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.158571][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.294762][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.566698][ T6241] device hsr_slave_0 entered promiscuous mode [ 192.605305][ T6241] device hsr_slave_1 entered promiscuous mode [ 193.099412][ T4258] Bluetooth: hci0: command tx timeout [ 193.288285][ T6241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.363301][ T6241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.448544][ T6241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.471291][ T6382] loop1: detected capacity change from 0 to 32768 [ 193.511620][ T6241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.573096][ T6382] XFS (loop1): Mounting V5 Filesystem [ 193.802957][ T6382] XFS (loop1): Ending clean mount [ 193.842458][ T6382] XFS (loop1): Quotacheck needed: Please wait. [ 193.959148][ T6428] netlink: 'syz.2.584': attribute type 3 has an invalid length. [ 193.972314][ T6382] XFS (loop1): Quotacheck: Done. [ 193.992860][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.033406][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.041149][ T6428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.584'. [ 194.058961][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.073343][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.092184][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.116535][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.132518][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.139811][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.177463][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.186488][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.196314][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.206698][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.213887][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.225146][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231558][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.257609][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.328707][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.345769][ T4257] XFS (loop1): Unmounting Filesystem [ 194.396078][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.410231][ T6435] loop2: detected capacity change from 0 to 22 [ 194.432568][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.437551][ T6435] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 194.456105][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.477732][ T6435] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 194.507834][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.530626][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.570800][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.603153][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.646010][ T6241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.684417][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.710140][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.723568][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.772042][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 194.819640][ T6443] bond0: option miimon: invalid value (18446744073004908548) [ 194.844615][ T6443] bond0: option miimon: allowed values 0 - 2147483647 [ 195.388156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.399679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.533754][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.794975][ T6484] loop2: detected capacity change from 0 to 1024 [ 195.843918][ T6484] EXT4-fs: Ignoring removed orlov option [ 195.867915][ T6484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.042272][ T6484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.043326][ T6498] loop4: detected capacity change from 0 to 64 [ 196.083938][ T6497] input: syz1 as /devices/virtual/input/input16 [ 196.360872][ T5594] EXT4-fs (loop2): unmounting filesystem. [ 196.524086][ T6515] netlink: 'syz.3.611': attribute type 11 has an invalid length. [ 196.550534][ T6515] netlink: 204 bytes leftover after parsing attributes in process `syz.3.611'. [ 196.678935][ T93] block nbd1: Attempted send on invalid socket [ 196.685804][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 196.698871][ T6521] SQUASHFS error: Failed to read block 0x0: -5 [ 196.705616][ T6521] unable to read squashfs_super_block [ 196.893614][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.918335][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.947982][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.981407][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.047023][ T6241] device veth0_vlan entered promiscuous mode [ 197.073976][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.092620][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.110073][ T6538] loop2: detected capacity change from 0 to 256 [ 197.147807][ T6241] device veth1_vlan entered promiscuous mode [ 197.185504][ T6538] FAT-fs (loop2): Directory bread(block 64) failed [ 197.208426][ T6538] FAT-fs (loop2): Directory bread(block 65) failed [ 197.233407][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.242566][ T6538] FAT-fs (loop2): Directory bread(block 66) failed [ 197.249146][ T6538] FAT-fs (loop2): Directory bread(block 67) failed [ 197.258222][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.268247][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.276670][ T6538] FAT-fs (loop2): Directory bread(block 68) failed [ 197.284974][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.295378][ T6538] FAT-fs (loop2): Directory bread(block 69) failed [ 197.305064][ T6538] FAT-fs (loop2): Directory bread(block 70) failed [ 197.316753][ T6241] device veth0_macvtap entered promiscuous mode [ 197.325875][ T6538] FAT-fs (loop2): Directory bread(block 71) failed [ 197.336334][ T6241] device veth1_macvtap entered promiscuous mode [ 197.345352][ T6538] FAT-fs (loop2): Directory bread(block 72) failed [ 197.360395][ T6538] FAT-fs (loop2): Directory bread(block 73) failed [ 197.374868][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.394739][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.423349][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.462338][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.485411][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.529215][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.555183][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.573085][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.617692][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.623594][ T6524] loop4: detected capacity change from 0 to 32768 [ 197.643060][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.658513][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.685470][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.706173][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.727942][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.768452][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.820248][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.836950][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.856671][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.882606][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.896427][ T6545] loop3: detected capacity change from 0 to 512 [ 197.905657][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.917323][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.929682][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.978644][ T6545] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.619: inode #1: comm syz.3.619: iget: illegal inode # [ 198.043617][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.083728][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.089269][ T6545] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.619: error while reading EA inode 1 err=-117 [ 198.106370][ T6545] EXT4-fs (loop3): 1 orphan inode deleted [ 198.112350][ T6545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.125695][ T6241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.184093][ T6241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.217038][ T6241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.255902][ T6241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.382778][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 198.471969][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.511559][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.580842][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.625155][ T4520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.638743][ T6553] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 198.665452][ T4520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.726394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.939220][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 199.458887][ T6583] sg_write: process 320 (syz.4.632) changed security contexts after opening file descriptor, this is not allowed. [ 199.539451][ T6586] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.997707][ T6603] loop4: detected capacity change from 0 to 256 [ 200.440888][ T126] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.725671][ T6622] loop2: detected capacity change from 0 to 128 [ 200.833507][ T6622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 200.862440][ T6622] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.049841][ T126] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 201.061776][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.070615][ T126] usb 4-1: Product: syz [ 201.074891][ T126] usb 4-1: Manufacturer: syz [ 201.080175][ T126] usb 4-1: SerialNumber: syz [ 201.098967][ T126] usb 4-1: config 0 descriptor?? [ 201.098984][ T5594] EXT4-fs (loop2): unmounting filesystem. [ 201.386840][ T126] hso 4-1:0.0: Failed to find BULK IN ep [ 201.401159][ T6643] loop2: detected capacity change from 0 to 128 [ 201.411536][ T126] usb-storage 4-1:0.0: USB Mass Storage device detected [ 201.428087][ T6643] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.471227][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.591901][ T4293] usb 4-1: USB disconnect, device number 9 [ 201.758477][ T6652] loop6: detected capacity change from 0 to 16 [ 201.833356][ T6652] erofs: (device loop6): mounted with root inode @ nid 36. [ 201.904824][ T6652] syz.6.651: attempt to access beyond end of device [ 201.904824][ T6652] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 201.927226][ T6652] syz.6.651: attempt to access beyond end of device [ 201.927226][ T6652] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 201.957772][ T6652] syz.6.651: attempt to access beyond end of device [ 201.957772][ T6652] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 201.976523][ T6652] syz.6.651: attempt to access beyond end of device [ 201.976523][ T6652] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 202.139470][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 202.549630][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.568848][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.578098][ T7] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.593806][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.610221][ T4293] kernel read not supported for file /newroot/142/file0 (pid: 4293 comm: kworker/1:5) [ 202.616831][ T7] usb 3-1: config 0 descriptor?? [ 202.681368][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 202.700840][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 202.755570][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 202.801046][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 202.840692][ T7] usb 3-1: media controller created [ 202.871036][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.895060][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.924397][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.950537][ T6696] loop3: detected capacity change from 0 to 1024 [ 202.958647][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 202.993711][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 203.066657][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 203.085825][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 203.093058][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 203.152757][ T7] usb 3-1: USB disconnect, device number 7 [ 203.253121][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 204.108791][ T6701] loop6: detected capacity change from 0 to 32768 [ 204.421657][ T6739] loop4: detected capacity change from 0 to 1024 [ 204.427997][ T6736] loop2: detected capacity change from 0 to 2048 [ 204.523024][ T6736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.633658][ T6736] UDF-fs: bad mount option "xœìÝOl×}ðß-Å•ÜVLì*N›¶HeÆrõ/¦bÙe"s À•H© S$ARl¤ÓK=(Šr"ÐR40š"è‘i] ¹øPäÔÑÂFPôÀXÌì[qI‘¶" or missing value [ 204.827100][ T26] audit: type=1326 audit(1730299293.667:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.4.682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f1af7e719 code=0x0 [ 204.840232][ T6748] serio: Serial port ptm0 [ 205.087512][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.6.680'. [ 205.176230][ T6759] loop1: detected capacity change from 0 to 128 [ 205.575039][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 205.613405][ T6772] loop6: detected capacity change from 0 to 1024 [ 205.654620][ T6772] EXT4-fs: Ignoring removed nobh option [ 205.740198][ T6772] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 205.845334][ T6782] loop4: detected capacity change from 0 to 256 [ 205.893163][ T6782] exfat: Deprecated parameter 'utf8' [ 205.942947][ T6782] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 206.185102][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 206.629502][ T4764] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.989485][ T4764] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.004984][ T4764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.041435][ T4764] usb 4-1: config 0 descriptor?? [ 207.095841][ T4764] cp210x 4-1:0.0: cp210x converter detected [ 207.132762][ T6808] loop4: detected capacity change from 0 to 32768 [ 207.199337][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 207.234516][ T11] read_mapping_page failed! [ 207.245742][ T11] ERROR: (device loop4): txCommit: [ 207.245742][ T11] [ 207.258563][ T11] ERROR: (device loop4): remounting filesystem as read-only [ 207.275058][ T11] jfs_write_inode: jfs_commit_inode failed! [ 207.489629][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 207.547001][ T4764] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 207.561076][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.578007][ T7] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.588958][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.607658][ T7] usb 2-1: config 0 descriptor?? [ 207.613309][ T4764] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 207.628020][ T4764] usb 4-1: cp210x converter now attached to ttyUSB0 [ 207.817281][ T4764] usb 4-1: USB disconnect, device number 10 [ 207.831395][ T4764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.850173][ T4764] cp210x 4-1:0.0: device disconnected [ 208.099511][ T126] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 208.118892][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.122058][ T7] mcp2221 0003:04D8:00DD.0006: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 208.129037][ T126] usb 3-1: Product: syz [ 208.159314][ T126] usb 3-1: Manufacturer: syz [ 208.174301][ T126] usb 3-1: SerialNumber: syz [ 208.181942][ T6846] loop6: detected capacity change from 0 to 32768 [ 208.190605][ T126] usb 3-1: config 0 descriptor?? [ 208.210447][ T6846] XFS: attr2 mount option is deprecated. [ 208.216158][ T6846] XFS: ikeep mount option is deprecated. [ 208.252816][ T6846] XFS: noikeep mount option is deprecated. [ 208.292881][ T6846] XFS (loop6): Mounting V5 Filesystem [ 208.386508][ T6846] XFS (loop6): Ending clean mount [ 208.393277][ T7] usb 2-1: USB disconnect, device number 6 [ 208.398533][ T6846] XFS (loop6): Quotacheck needed: Please wait. [ 208.476762][ T126] hso 3-1:0.0: Failed to find BULK IN ep [ 208.491414][ T6846] XFS (loop6): Quotacheck: Done. [ 208.523442][ T126] usb-storage 3-1:0.0: USB Mass Storage device detected [ 208.614690][ T6241] XFS (loop6): Unmounting Filesystem [ 208.703598][ T126] usb 3-1: USB disconnect, device number 8 [ 209.266329][ T6882] loop4: detected capacity change from 0 to 1764 [ 209.419448][ T4258] Bluetooth: hci0: command tx timeout [ 210.250160][ T6910] netlink: 'syz.6.740': attribute type 29 has an invalid length. [ 210.286944][ T6910] netlink: 'syz.6.740': attribute type 29 has an invalid length. [ 210.319622][ T6912] netlink: 'syz.6.740': attribute type 29 has an invalid length. [ 210.378885][ T6910] netlink: 'syz.6.740': attribute type 29 has an invalid length. [ 210.520960][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.743'. [ 210.648483][ T6898] loop1: detected capacity change from 0 to 32768 [ 210.685681][ T6898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.735 (6898) [ 210.735389][ T6898] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.777065][ T6898] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 210.803884][ T6898] BTRFS info (device loop1): using free space tree [ 211.078131][ T6898] BTRFS info (device loop1): enabling ssd optimizations [ 211.117644][ T6953] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.416976][ T6965] loop4: detected capacity change from 0 to 128 [ 211.445336][ T4257] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.485512][ T6965] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 211.549284][ T6965] FAT-fs (loop4): Filesystem has been set read-only [ 211.659384][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 211.659576][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 211.665537][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 212.081943][ T6974] loop4: detected capacity change from 0 to 8 [ 212.130029][ T6974] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 212.160612][ T6957] loop2: detected capacity change from 0 to 32768 [ 212.248942][ T6957] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 212.262504][ T6977] loop1: detected capacity change from 0 to 2048 [ 212.284517][ T6977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.574575][ T5594] ocfs2: Unmounting device (7,2) on (node local) [ 212.774207][ T6970] loop6: detected capacity change from 0 to 32768 [ 212.863488][ T6969] loop3: detected capacity change from 0 to 32768 [ 212.885451][ T6970] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 212.973663][ T6992] netlink: 'syz.1.764': attribute type 11 has an invalid length. [ 212.977224][ T6969] XFS (loop3): Mounting V5 Filesystem [ 213.109509][ T6969] XFS (loop3): Ending clean mount [ 213.112958][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 213.153704][ T26] audit: type=1800 audit(1730299301.997:28): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.757" name="file1" dev="loop3" ino=1286 res=0 errno=0 [ 213.284453][ T4252] XFS (loop3): Unmounting Filesystem [ 213.390766][ T6241] ocfs2: Unmounting device (7,6) on (node local) [ 214.362160][ T7040] loop4: detected capacity change from 0 to 64 [ 214.511759][ T7040] hfs: request for non-existent node 237 in B*Tree [ 214.552961][ T7040] hfs: request for non-existent node 237 in B*Tree [ 214.655001][ T7043] hfs: request for non-existent node 237 in B*Tree [ 214.684961][ T7043] hfs: request for non-existent node 237 in B*Tree [ 214.815757][ T9] hfs: request for non-existent node 237 in B*Tree [ 214.850369][ T9] hfs: request for non-existent node 237 in B*Tree [ 215.379410][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.763650][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.781668][ T14] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.795557][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.808621][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 215.832688][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 215.962979][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.985615][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.013994][ T14] usb 4-1: Product: syz [ 216.027332][ T14] usb 4-1: Manufacturer: syz [ 216.090371][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 216.104233][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 216.143658][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 216.156641][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 216.774334][ T7092] loop1: detected capacity change from 0 to 32768 [ 216.781300][ T4786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.814682][ T7092] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.796 (7092) [ 216.868744][ T7092] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 216.898746][ T7092] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 216.911712][ T126] usb 4-1: USB disconnect, device number 11 [ 216.979456][ T7092] BTRFS info (device loop1): using free space tree [ 217.169457][ T4786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.188358][ T4786] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.219282][ T4786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.228356][ T4786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 217.254284][ T4786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 217.266743][ T7092] BTRFS info (device loop1): enabling ssd optimizations [ 217.389468][ T4786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.408840][ T4786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.450762][ T4786] usb 5-1: Product: syz [ 217.454987][ T4786] usb 5-1: Manufacturer: syz [ 217.530352][ T4786] cdc_wdm 5-1:1.0: skipping garbage [ 217.535623][ T4786] cdc_wdm 5-1:1.0: skipping garbage [ 217.560588][ T4257] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 217.577766][ T4786] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 217.604396][ T4786] cdc_wdm 5-1:1.0: Unknown control protocol [ 217.713026][ T7108] loop6: detected capacity change from 0 to 32768 [ 217.943973][ T7108] XFS (loop6): Mounting V5 Filesystem [ 218.044826][ T7108] XFS (loop6): Ending clean mount [ 218.271104][ T6241] XFS (loop6): Unmounting Filesystem [ 218.274623][ T7171] netlink: 14 bytes leftover after parsing attributes in process `syz.2.813'. [ 218.359909][ T5596] usb 5-1: USB disconnect, device number 5 [ 218.548278][ T7181] loop1: detected capacity change from 0 to 128 [ 218.683089][ T7152] loop3: detected capacity change from 0 to 32768 [ 218.711688][ T7152] XFS: noikeep mount option is deprecated. [ 218.795805][ T7152] XFS (loop3): Mounting V5 Filesystem [ 219.000254][ T7152] XFS (loop3): Ending clean mount [ 219.020165][ T7152] XFS (loop3): Quotacheck needed: Please wait. [ 219.096192][ T7152] XFS (loop3): Quotacheck: Done. [ 219.310500][ T4252] XFS (loop3): Unmounting Filesystem [ 220.599116][ T7245] loop2: detected capacity change from 0 to 128 [ 220.745708][ T7245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.807788][ T7245] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.898780][ T7221] loop1: detected capacity change from 0 to 40427 [ 220.950163][ T7221] F2FS-fs (loop1): invalid crc value [ 220.972973][ T7221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.993612][ T7254] loop3: detected capacity change from 0 to 1024 [ 221.030995][ T5594] EXT4-fs (loop2): unmounting filesystem. [ 221.125930][ T7254] hfsplus: bad catalog entry type [ 221.205940][ T7221] F2FS-fs (loop1): Start checkpoint disabled! [ 221.273034][ T62] hfsplus: b-tree write err: -5, ino 4 [ 221.320083][ T7221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 221.503656][ T7236] loop6: detected capacity change from 0 to 32768 [ 221.611276][ T7270] loop4: detected capacity change from 0 to 4096 [ 221.677652][ T7270] NILFS (loop4): invalid segment: Checksum error in segment payload [ 221.695036][ T7236] XFS (loop6): Mounting V5 Filesystem [ 221.699534][ T7270] NILFS (loop4): trying rollback from an earlier position [ 221.754803][ T7279] loop2: detected capacity change from 0 to 1764 [ 221.782450][ T4529] kworker/u4:8: attempt to access beyond end of device [ 221.782450][ T4529] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.819002][ T7270] NILFS (loop4): recovery complete [ 221.848295][ T7280] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.870574][ T7236] XFS (loop6): Ending clean mount [ 221.906721][ T7236] XFS (loop6): Quotacheck needed: Please wait. [ 221.936820][ T7279] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 221.987440][ T7236] XFS (loop6): Quotacheck: Done. [ 222.234404][ T7236] XFS (loop6): User initiated shutdown received. [ 222.275857][ T7287] loop4: detected capacity change from 0 to 512 [ 222.282424][ T7236] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 222.336840][ T7236] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 222.472410][ T6241] XFS (loop6): Unmounting Filesystem [ 222.478169][ T7287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.543698][ T7287] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.769650][ T26] audit: type=1800 audit(1730299311.607:29): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 222.888614][ T7305] loop2: detected capacity change from 0 to 4096 [ 222.917720][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 222.927405][ T7305] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 222.986579][ T7273] loop3: detected capacity change from 0 to 32768 [ 223.086075][ T7273] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.837 (7273) [ 223.139336][ T7273] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 223.166356][ T7273] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 223.200856][ T7273] BTRFS info (device loop3): enabling disk space caching [ 223.218281][ T7273] BTRFS info (device loop3): force clearing of disk cache [ 223.253270][ T7273] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.300114][ T7273] BTRFS info (device loop3): use zstd compression, level 3 [ 223.348629][ T7273] BTRFS info (device loop3): disk space caching is enabled [ 223.379444][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.538322][ T7323] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 223.701403][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'. [ 223.751341][ T7273] BTRFS info (device loop3): enabling ssd optimizations [ 223.761162][ T7273] BTRFS info (device loop3): rebuilding free space tree [ 223.770847][ T126] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.795963][ T7273] BTRFS info (device loop3): disabling free space tree [ 223.803037][ T7273] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.819283][ T126] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.820637][ T7273] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.870013][ T126] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.919242][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.972667][ T7312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.245935][ T4252] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.365163][ T7] usb 5-1: USB disconnect, device number 6 [ 224.651814][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.857'. [ 224.943202][ T7377] loop3: detected capacity change from 0 to 2048 [ 224.954613][ T7377] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 225.027555][ T7377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.272948][ T4779] kernel write not supported for file /dsp (pid: 4779 comm: kworker/1:11) [ 225.379350][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 225.749519][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 225.789766][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 225.818751][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.848556][ T7] usb 7-1: config 0 descriptor?? [ 225.891991][ T7] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 226.033364][ T7423] loop4: detected capacity change from 0 to 128 [ 226.093156][ T7] usb 7-1: USB disconnect, device number 2 [ 226.130799][ T7422] loop1: detected capacity change from 0 to 2048 [ 226.182993][ T7422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.212380][ T7422] EXT4-fs error (device loop1): ext4_ext_precache:645: inode #2: comm syz.1.873: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 226.364670][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 226.657854][ T7444] loop1: detected capacity change from 0 to 256 [ 226.685640][ T7444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 226.819431][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.021210][ T7459] loop1: detected capacity change from 0 to 2048 [ 227.080483][ T7459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.119023][ T7464] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.126644][ T27] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 227.155146][ T7459] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 227.239625][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.246405][ T7466] loop4: detected capacity change from 0 to 256 [ 227.258787][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.289230][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.324893][ T7466] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 227.399591][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.418274][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.444412][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.540199][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.561130][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.599234][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.634806][ T7478] loop6: detected capacity change from 0 to 256 [ 227.663378][ T7481] can0: slcan on ttyS3. [ 227.672543][ T7478] exfat: Deprecated parameter 'namecase' [ 227.689360][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.698300][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.720487][ T7478] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 227.722305][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.760147][ T7481] can0 (unregistered): slcan off ttyS3. [ 227.829541][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.853671][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.870576][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.973931][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.991627][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.019368][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.064163][ T7489] loop1: detected capacity change from 0 to 2048 [ 228.100613][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.120231][ T7489] loop1: p3 < > p4 < > [ 228.124447][ T7489] loop1: partition table partially beyond EOD, truncated [ 228.137426][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.160212][ T7489] loop1: p3 start 4284289 is beyond EOD, truncated [ 228.175568][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.279610][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.298823][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.319215][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.504841][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.512841][ T27] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.533043][ T27] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.559440][ T27] usb 4-1: Product: syz [ 228.569626][ T27] usb 4-1: Manufacturer: syz [ 228.579734][ T27] usb 4-1: SerialNumber: syz [ 228.601107][ T27] usb 4-1: config 0 descriptor?? [ 228.622540][ T7486] loop6: detected capacity change from 0 to 32768 [ 228.639772][ T7486] XFS: attr2 mount option is deprecated. [ 228.652388][ T27] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 228.712080][ T7492] loop4: detected capacity change from 0 to 32768 [ 228.713634][ T7486] XFS (loop6): Mounting V5 Filesystem [ 228.728054][ T7492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.901 (7492) [ 228.744252][ T7492] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.754696][ T7492] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 228.763822][ T7492] BTRFS info (device loop4): enabling auto defrag [ 228.770523][ T7492] BTRFS info (device loop4): doing ref verification [ 228.777153][ T7492] BTRFS info (device loop4): use no compression [ 228.784953][ T7492] BTRFS info (device loop4): force clearing of disk cache [ 228.792411][ T7492] BTRFS info (device loop4): disabling free space tree [ 228.809373][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 228.833588][ T7486] XFS (loop6): Ending clean mount [ 228.868673][ T7486] XFS (loop6): Quotacheck needed: Please wait. [ 228.879203][ T5139] usb 4-1: USB disconnect, device number 12 [ 228.892784][ T5139] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 228.923163][ T7486] XFS (loop6): Quotacheck: Done. [ 228.939657][ T126] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.947976][ T126] usb 3-1: config 179 has no interface number 0 [ 228.973536][ T126] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.988309][ T126] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 228.999847][ T126] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.011319][ T126] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.022921][ T7492] BTRFS info (device loop4): enabling ssd optimizations [ 229.032871][ T126] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.046437][ T126] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.055750][ T7492] BTRFS info (device loop4): rebuilding free space tree [ 229.067868][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.076855][ T7492] BTRFS info (device loop4): disabling free space tree [ 229.092613][ T7492] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.094185][ T6241] XFS (loop6): Unmounting Filesystem [ 229.102333][ T7492] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.125397][ T7494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.278758][ T7500] loop1: detected capacity change from 0 to 32768 [ 229.317873][ T7500] [ 229.317873][ T7500] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.317873][ T7500] [ 229.371424][ T7500] find_entry called with index = 0 [ 229.375239][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.378160][ T7500] read_mapping_page failed! [ 229.393404][ T7500] ERROR: (device loop1): txCommit: [ 229.393404][ T7500] [ 229.406774][ T7500] jfs_create: dtSearch returned -17 [ 229.414405][ T126] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18 [ 229.453463][ T4257] [ 229.453463][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.453463][ T4257] [ 229.479834][ T4257] [ 229.479834][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.479834][ T4257] [ 229.627514][ T5139] usb 3-1: USB disconnect, device number 9 [ 229.639506][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.647848][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 229.668100][ T5139] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 229.871024][ T7536] loop6: detected capacity change from 0 to 64 [ 230.012631][ T7536] MTD: Couldn't look up './file0': -15 [ 230.082541][ T7544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.653229][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 230.699895][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 230.798367][ T7586] loop1: detected capacity change from 0 to 256 [ 231.177137][ T7592] loop6: detected capacity change from 0 to 8192 [ 231.224357][ T7592] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.298072][ T7592] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 231.309917][ T7592] REISERFS (device loop6): using ordered data mode [ 231.316482][ T7592] reiserfs: using flush barriers [ 231.387855][ T7592] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.438133][ T7592] REISERFS (device loop6): checking transaction log (loop6) [ 231.461898][ T7614] netlink: 96 bytes leftover after parsing attributes in process `syz.3.943'. [ 231.469560][ T7592] REISERFS (device loop6): Using r5 hash to sort names [ 231.497449][ T7592] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 231.542765][ T7592] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 231.648632][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 231.676226][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'. [ 231.938198][ T7632] loop3: detected capacity change from 0 to 128 [ 231.996712][ T7636] loop1: detected capacity change from 0 to 256 [ 232.019736][ T4289] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 232.091712][ T7636] FAT-fs (loop1): Directory bread(block 64) failed [ 232.109530][ T7636] FAT-fs (loop1): Directory bread(block 65) failed [ 232.116251][ T7636] FAT-fs (loop1): Directory bread(block 66) failed [ 232.136802][ T7636] FAT-fs (loop1): Directory bread(block 67) failed [ 232.144575][ T7636] FAT-fs (loop1): Directory bread(block 68) failed [ 232.161447][ T7636] FAT-fs (loop1): Directory bread(block 69) failed [ 232.168113][ T7636] FAT-fs (loop1): Directory bread(block 70) failed [ 232.196211][ T7636] FAT-fs (loop1): Directory bread(block 71) failed [ 232.216665][ T7636] FAT-fs (loop1): Directory bread(block 72) failed [ 232.223823][ T7636] FAT-fs (loop1): Directory bread(block 73) failed [ 232.457082][ T7646] loop4: detected capacity change from 0 to 8192 [ 232.482543][ T7646] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.495706][ T7646] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 232.505050][ T7646] REISERFS (device loop4): using ordered data mode [ 232.515221][ T7646] reiserfs: using flush barriers [ 232.531906][ T7646] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.549533][ T4289] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.563416][ T7646] REISERFS (device loop4): checking transaction log (loop4) [ 232.569011][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.601372][ T4289] usb 3-1: Product: syz [ 232.605591][ T4289] usb 3-1: Manufacturer: syz [ 232.666634][ T4289] usb 3-1: SerialNumber: syz [ 232.703977][ T7646] REISERFS (device loop4): Using tea hash to sort names [ 232.711662][ T7646] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 232.730968][ T4289] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.817653][ T7654] loop6: detected capacity change from 0 to 1024 [ 232.898340][ T7642] hfsplus: request for non-existent node 211 in B*Tree [ 232.917721][ T7642] hfsplus: request for non-existent node 211 in B*Tree [ 233.123523][ T4320] hfsplus: b-tree write err: -5, ino 8 [ 233.196798][ T7663] loop1: detected capacity change from 0 to 2048 [ 233.240674][ T7668] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.272385][ T7663] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 233.300943][ T7663] Remounting filesystem read-only [ 233.310109][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.970'. [ 233.369418][ T4289] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.681393][ T7675] loop4: detected capacity change from 0 to 32768 [ 233.688838][ T7675] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.972 (7675) [ 233.706117][ T7675] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.716726][ T7675] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 233.725573][ T7675] BTRFS info (device loop4): enabling auto defrag [ 233.732091][ T7675] BTRFS info (device loop4): doing ref verification [ 233.738700][ T7675] BTRFS info (device loop4): force clearing of disk cache [ 233.745911][ T7675] BTRFS info (device loop4): turning on sync discard [ 233.752658][ T7675] BTRFS info (device loop4): setting nodatacow, compression disabled [ 233.760801][ T7675] BTRFS info (device loop4): using free space tree [ 233.786225][ T7675] BTRFS info (device loop4): enabling ssd optimizations [ 233.790579][ T126] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 233.816161][ T7675] BTRFS info (device loop4): rebuilding free space tree [ 233.947740][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.064665][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 234.189480][ T4760] usb 3-1: USB disconnect, device number 10 [ 234.199702][ T126] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 234.213242][ T126] usb 2-1: config 9 has no interface number 0 [ 234.229366][ T126] usb 2-1: config 9 interface 48 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 234.256299][ T126] usb 2-1: config 9 interface 48 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 234.276824][ T126] usb 2-1: config 9 interface 48 has no altsetting 0 [ 234.400226][ T7716] loop6: detected capacity change from 0 to 512 [ 234.409015][ T7716] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.440696][ T7716] EXT4-fs (loop6): 1 truncate cleaned up [ 234.446403][ T7716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 234.473649][ T126] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=a2.d8 [ 234.495213][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.519440][ T126] usb 2-1: Product: syz [ 234.523659][ T126] usb 2-1: Manufacturer: syz [ 234.528312][ T126] usb 2-1: SerialNumber: syz [ 234.545533][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 234.645384][ T7725] loop6: detected capacity change from 0 to 512 [ 234.688360][ T7725] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.986: attempt to clear invalid blocks 2 len 1 [ 234.715631][ T7725] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 234.734476][ T7725] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.986: invalid indirect mapped block 1819239214 (level 0) [ 234.748996][ T7725] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.986: invalid indirect mapped block 1819239214 (level 1) [ 234.778771][ T7725] EXT4-fs (loop6): 1 truncate cleaned up [ 234.784791][ T7725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 234.815159][ T7725] EXT4-fs (loop6): shut down requested (2) [ 234.859701][ T4289] usb 3-1: Service connection timeout for: 257 [ 234.865975][ T4289] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 234.902023][ T4289] ath9k_htc: Failed to initialize the device [ 234.907043][ T126] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 234.930058][ T126] usb 2-1: selecting invalid altsetting 0 [ 234.940015][ T4760] usb 3-1: ath9k_htc: USB layer deinitialized [ 234.969633][ T2307] pvrusb2: control-write URB failure, status=-71 [ 234.976474][ T2307] pvrusb2: Device being rendered inoperable [ 234.994388][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 235.003745][ T126] usb 2-1: USB disconnect, device number 7 [ 235.039542][ T2307] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 235.095783][ T7737] block nbd6: NBD_DISCONNECT [ 235.107948][ T2307] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.177288][ T7721] loop4: detected capacity change from 0 to 32768 [ 235.207913][ T7721] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.984 (7721) [ 235.251626][ T7721] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 235.272682][ T7721] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 235.297975][ T7721] BTRFS info (device loop4): force clearing of disk cache [ 235.311286][ T7721] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 235.349307][ T7721] BTRFS info (device loop4): use zstd compression, level 3 [ 235.356952][ T7721] BTRFS info (device loop4): using free space tree [ 235.493750][ T7768] loop2: detected capacity change from 0 to 64 [ 235.520101][ T7768] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 235.535852][ T7721] BTRFS info (device loop4): enabling ssd optimizations [ 235.571499][ T7721] BTRFS info (device loop4): rebuilding free space tree [ 235.669242][ T4289] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 235.692821][ T7783] overlayfs: upper fs is r/o, try multi-lower layers mount [ 235.714166][ T4259] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 236.029487][ T4289] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.042844][ T4289] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.073837][ T4289] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.104735][ T4289] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 236.123333][ T7794] nbd: must specify at least one socket [ 236.137072][ T4289] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 236.279563][ T4289] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.299059][ T4289] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.305997][ T7805] netem: incorrect ge model size [ 236.327457][ T4289] usb 7-1: Product: syz [ 236.342432][ T4289] usb 7-1: Manufacturer: syz [ 236.349553][ T7805] netem: change failed [ 236.383595][ T7807] loop3: detected capacity change from 0 to 16 [ 236.400346][ T4289] cdc_wdm 7-1:1.0: skipping garbage [ 236.406276][ T4289] cdc_wdm 7-1:1.0: skipping garbage [ 236.431930][ T4289] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 236.438321][ T7807] erofs: (device loop3): mounted with root inode @ nid 36. [ 236.451838][ T4289] cdc_wdm 7-1:1.0: Unknown control protocol [ 236.478405][ T4261] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 236.499006][ T7807] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 236.512453][ T26] audit: type=1800 audit(1730299325.357:30): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1015" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 236.745688][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.777005][ T7822] loop2: detected capacity change from 0 to 256 [ 236.802860][ T7822] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 236.991526][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 237.109531][ T27] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 237.117777][ T27] usb 5-1: config 0 has no interface number 0 [ 237.139275][ T27] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.169261][ T27] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.369538][ T27] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 237.388916][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.419549][ T27] usb 5-1: Product: syz [ 237.423768][ T27] usb 5-1: Manufacturer: syz [ 237.437461][ T27] usb 5-1: SerialNumber: syz [ 237.450578][ T27] usb 5-1: config 0 descriptor?? [ 237.490724][ T7813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.498114][ T7813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.505446][ T7830] loop2: detected capacity change from 0 to 32768 [ 237.512691][ T7840] rose0: tun_chr_ioctl cmd 1074025677 [ 237.523842][ T7840] rose0: linktype set to 825 [ 237.536692][ T7829] loop1: detected capacity change from 0 to 32768 [ 237.544918][ T7829] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1025 (7829) [ 237.544996][ T7830] XFS (loop2): Mounting V5 Filesystem [ 237.566603][ T7829] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 237.577130][ T7829] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 237.609050][ T7829] BTRFS info (device loop1): using free space tree [ 237.613858][ T7830] XFS (loop2): Ending clean mount [ 237.628011][ T7830] XFS (loop2): Quotacheck needed: Please wait. [ 237.678089][ T7830] XFS (loop2): Quotacheck: Done. [ 237.732349][ T7813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.733389][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 237.746912][ T7813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.767666][ T5594] XFS (loop2): Unmounting Filesystem [ 237.782961][ T7829] BTRFS info (device loop1): enabling ssd optimizations [ 237.938205][ T4257] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.205346][ T27] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 238.222334][ T7877] loop3: detected capacity change from 0 to 128 [ 238.223578][ T27] asix: probe of 5-1:0.251 failed with error -524 [ 238.268266][ T7877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.306289][ T7877] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.357447][ T7877] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 238.409783][ T27] usb 5-1: USB disconnect, device number 7 [ 238.442713][ T126] usb 7-1: USB disconnect, device number 3 [ 238.632019][ T7892] device bridge_slave_1 left promiscuous mode [ 238.638537][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.704359][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 238.872191][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 238.909736][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 238.925086][ T7902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.058697][ T7912] netlink: 'syz.3.1054': attribute type 19 has an invalid length. [ 239.077428][ T7912] Zero length message leads to an empty skb [ 239.247879][ T7920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1058'. [ 239.641742][ T7945] vim2m vim2m.0: vidioc_s_fmt queue busy [ 239.669253][ T4781] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 239.873493][ T7949] netlink: 'syz.2.1073': attribute type 5 has an invalid length. [ 239.939294][ T4781] usb 4-1: Using ep0 maxpacket: 32 [ 240.079688][ T4781] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.090042][ T4781] usb 4-1: config 0 has no interface number 0 [ 240.105671][ T4781] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.127903][ T4781] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.147977][ T4781] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 240.166762][ T4781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.187737][ T4781] usb 4-1: config 0 descriptor?? [ 240.266912][ T7946] loop4: detected capacity change from 0 to 32768 [ 240.285111][ T7946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1071 (7946) [ 240.331246][ T7946] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.349294][ T7946] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 240.366929][ T7952] loop6: detected capacity change from 0 to 40427 [ 240.368533][ T7946] BTRFS info (device loop4): using free space tree [ 240.387945][ T7952] F2FS-fs (loop6): invalid crc value [ 240.404672][ T7952] F2FS-fs (loop6): Found nat_bits in checkpoint [ 240.492819][ T7952] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 240.510571][ T7952] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 240.546491][ T26] audit: type=1800 audit(1730299329.387:31): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1074" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 240.566781][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.575859][ T7946] BTRFS info (device loop4): enabling ssd optimizations [ 240.585778][ T7952] syz.6.1074: attempt to access beyond end of device [ 240.585778][ T7952] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 240.643424][ T6241] syz-executor: attempt to access beyond end of device [ 240.643424][ T6241] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.679950][ T4259] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.836142][ T7956] loop2: detected capacity change from 0 to 32768 [ 240.879614][ T4781] uclogic 0003:28BD:0094.0007: pen parameters not found [ 240.886689][ T4781] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 241.025887][ T7956] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 241.083401][ T4289] usb 4-1: USB disconnect, device number 13 [ 241.113924][ T26] audit: type=1804 audit(1730299329.957:32): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1076" name="/newroot/130/file1/file1" dev="loop2" ino=17058 res=1 errno=0 [ 241.135760][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.232566][ T5594] ocfs2: Unmounting device (7,2) on (node local) [ 241.308149][ T7992] xt_cgroup: invalid path, errno=-2 [ 241.475210][ T7996] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1085'. [ 242.373323][ T8032] loop3: detected capacity change from 0 to 256 [ 242.429678][ T8032] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 242.899704][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1108'. [ 243.234070][ T8028] loop6: detected capacity change from 0 to 40427 [ 243.248818][ T8028] F2FS-fs (loop6): invalid crc value [ 243.284228][ T8028] F2FS-fs (loop6): Found nat_bits in checkpoint [ 243.442363][ T8028] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 243.485884][ T8028] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 243.540425][ T8028] syz.6.1100: attempt to access beyond end of device [ 243.540425][ T8028] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 243.699512][ T6241] syz-executor: attempt to access beyond end of device [ 243.699512][ T6241] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.887726][ T8046] loop3: detected capacity change from 0 to 40427 [ 243.915925][ T8046] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.943739][ T8046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 244.041964][ T8046] F2FS-fs (loop3): invalid crc value [ 244.099675][ T8046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 244.239295][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.259423][ T8046] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 244.275723][ T8046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.331307][ T8104] sp0: Synchronizing with TNC [ 244.409398][ T4252] syz-executor: attempt to access beyond end of device [ 244.409398][ T4252] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 244.489588][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 244.619631][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 244.649302][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 244.714290][ T8114] loop2: detected capacity change from 0 to 8192 [ 244.726563][ T4261] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 244.726654][ T4261] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 244.734492][ T4261] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 244.743102][ T4261] Bluetooth: hci0: Malformed LE Event: 0x02 [ 244.762869][ T8114] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.776964][ T8114] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 244.789597][ T8114] REISERFS (device loop2): using ordered data mode [ 244.796179][ T8114] reiserfs: using flush barriers [ 244.805871][ T8114] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.839506][ T27] usb 2-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 244.854103][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 244.862622][ T8114] REISERFS (device loop2): checking transaction log (loop2) [ 244.896721][ T27] usb 2-1: Product: syz [ 244.901435][ T27] usb 2-1: Manufacturer: syz [ 244.906076][ T27] usb 2-1: SerialNumber: syz [ 244.926929][ T27] usb 2-1: config 0 descriptor?? [ 245.033200][ T8114] REISERFS (device loop2): Using tea hash to sort names [ 245.051550][ T8114] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 245.239710][ T27] usb 2-1: USB disconnect, device number 8 [ 245.457740][ T8137] loop6: detected capacity change from 0 to 1024 [ 245.522820][ T8137] hfsplus: walked past end of dir [ 245.538556][ T8137] hfsplus: walked past end of dir [ 245.675113][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1144'. [ 245.813631][ T8130] loop4: detected capacity change from 0 to 32768 [ 245.834920][ T8151] capability: warning: `syz.1.1147' uses 32-bit capabilities (legacy support in use) [ 245.955367][ T8163] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 245.975935][ T8163] netlink: 'syz.1.1151': attribute type 2 has an invalid length. [ 246.050840][ T8130] XFS (loop4): Mounting V5 Filesystem [ 246.202487][ T8130] XFS (loop4): Ending clean mount [ 246.240892][ T8130] XFS (loop4): Quotacheck needed: Please wait. [ 246.329230][ T8130] XFS (loop4): Quotacheck: Done. [ 246.548457][ T4259] XFS (loop4): Unmounting Filesystem [ 246.799392][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 247.148260][ T8174] loop3: detected capacity change from 0 to 32768 [ 247.197357][ T8174] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 247.197357][ T8174] [ 247.235784][ T8174] ERROR: (device loop3): remounting filesystem as read-only [ 247.269422][ T8174] jfs_lookup: dtSearch returned -5 [ 247.275188][ T8199] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 247.275188][ T8199] [ 247.392028][ T8205] option changes via remount are deprecated (pid=8203 comm=syz.2.1166) [ 247.806624][ T8192] loop4: detected capacity change from 0 to 32768 [ 247.827686][ T8192] XFS (loop4): Mounting V5 Filesystem [ 247.901839][ T8192] XFS (loop4): Ending clean mount [ 247.912597][ T8192] XFS (loop4): Quotacheck needed: Please wait. [ 247.936193][ T26] audit: type=1326 audit(1730299336.777:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d57e719 code=0x0 [ 247.963328][ T8192] XFS (loop4): Quotacheck: Done. [ 248.004424][ T4259] XFS (loop4): Unmounting Filesystem [ 248.173885][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 248.667265][ T8252] loop4: detected capacity change from 0 to 1024 [ 248.709008][ T8252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.748976][ T8258] loop6: detected capacity change from 0 to 128 [ 248.787610][ T8258] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 248.843970][ T8261] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 248.866487][ T6241] sysv_free_block: trying to free block not in datazone [ 248.882917][ T6241] sysv_free_block: trying to free block not in datazone [ 248.884674][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1186'. [ 248.899351][ T6241] sysv_free_block: trying to free block not in datazone [ 248.906308][ T6241] sysv_free_block: trying to free block not in datazone [ 248.916605][ T6241] sysv_free_block: trying to free block not in datazone [ 248.935864][ T6241] sysv_free_block: trying to free block not in datazone [ 248.953136][ T6241] sysv_free_block: trying to free block not in datazone [ 248.979249][ T6241] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 249.039698][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 249.101193][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 249.344840][ T8285] loop6: detected capacity change from 0 to 512 [ 249.416128][ T8285] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 249.455426][ T8285] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.658358][ T8283] loop2: detected capacity change from 0 to 32768 [ 249.674374][ T27] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 249.694256][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.712458][ T27] usb 2-1: Product: syz [ 249.716914][ T27] usb 2-1: Manufacturer: syz [ 249.728290][ T27] usb 2-1: SerialNumber: syz [ 249.748498][ T8283] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 249.768147][ T27] usb 2-1: config 0 descriptor?? [ 249.791115][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 249.947938][ T5594] ocfs2: Unmounting device (7,2) on (node local) [ 250.069524][ T27] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 250.138085][ T8309] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 250.251813][ T8299] loop3: detected capacity change from 0 to 32768 [ 250.369017][ T8299] XFS (loop3): Mounting V5 Filesystem [ 250.499706][ T27] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 250.513338][ T8299] XFS (loop3): Ending clean mount [ 250.524816][ T8299] XFS (loop3): Quotacheck needed: Please wait. [ 250.569959][ T8299] XFS (loop3): Quotacheck: Done. [ 250.697030][ T4252] XFS (loop3): Unmounting Filesystem [ 250.705769][ T27] usb 2-1: USB disconnect, device number 9 [ 250.739102][ T26] audit: type=1326 audit(1730299339.577:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.2.1220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e01b7e719 code=0x0 [ 250.768004][ T8307] loop4: detected capacity change from 0 to 40427 [ 250.788845][ T8307] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 250.803423][ T8307] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.858856][ T8307] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.985762][ T8307] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.007498][ T8307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.120090][ T26] audit: type=1804 audit(1730299339.957:35): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1204" name="/newroot/252/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 251.293358][ T8338] loop3: detected capacity change from 0 to 16 [ 251.307479][ T8338] erofs: (device loop3): mounted with root inode @ nid 36. [ 251.320963][ T8338] syz.3.1212: attempt to access beyond end of device [ 251.320963][ T8338] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 251.377047][ T8338] syz.3.1212: attempt to access beyond end of device [ 251.377047][ T8338] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 251.458053][ T8343] syz.3.1212: attempt to access beyond end of device [ 251.458053][ T8343] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 251.698360][ T8351] serio: Serial port ptm0 [ 251.714939][ T8355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1219'. [ 251.846624][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1231'. [ 251.866287][ T8360] loop3: detected capacity change from 0 to 128 [ 251.943501][ T8354] loop4: detected capacity change from 0 to 8192 [ 251.970353][ T8354] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.050901][ T8354] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 252.095274][ T8354] REISERFS (device loop4): using ordered data mode [ 252.112145][ T8354] reiserfs: using flush barriers [ 252.134327][ T8354] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.144571][ T8345] loop6: detected capacity change from 0 to 32768 [ 252.163299][ T8354] REISERFS (device loop4): checking transaction log (loop4) [ 252.189449][ T8345] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt [ 252.189449][ T8345] [ 252.202835][ T8345] ERROR: (device loop6): remounting filesystem as read-only [ 252.228857][ T8345] jfs_lookup: dtSearch returned -5 [ 252.252429][ T8345] ERROR: (device loop6): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 252.252429][ T8345] [ 252.354006][ T8354] REISERFS (device loop4): Using tea hash to sort names [ 252.370399][ T8354] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 252.666886][ T8362] loop2: detected capacity change from 0 to 32768 [ 252.678782][ T26] audit: type=1326 audit(1730299341.527:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.1229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e5d57e719 code=0x0 [ 252.717019][ T8362] XFS (loop2): Mounting V5 Filesystem [ 252.790567][ T8362] XFS (loop2): Ending clean mount [ 252.802784][ T8362] XFS (loop2): Quotacheck needed: Please wait. [ 252.867187][ T8362] XFS (loop2): Quotacheck: Done. [ 253.032037][ T5594] XFS (loop2): Unmounting Filesystem [ 253.382413][ T8408] loop2: detected capacity change from 0 to 128 [ 253.746400][ T8405] loop1: detected capacity change from 0 to 32768 [ 253.769547][ T8405] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 253.769547][ T8405] [ 253.788916][ T8405] ERROR: (device loop1): remounting filesystem as read-only [ 253.806587][ T8405] jfs_lookup: dtSearch returned -5 [ 253.827824][ T8405] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 253.827824][ T8405] [ 254.269686][ T8420] loop2: detected capacity change from 0 to 32768 [ 254.325532][ T8439] loop1: detected capacity change from 0 to 1024 [ 254.343395][ T8439] EXT4-fs: Ignoring removed nobh option [ 254.375771][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1252'. [ 254.377015][ T8439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.504201][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 254.652116][ T8454] loop1: detected capacity change from 0 to 16 [ 254.680906][ T8454] erofs: (device loop1): mounted with root inode @ nid 36. [ 254.712093][ T8454] syz.1.1266: attempt to access beyond end of device [ 254.712093][ T8454] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 254.745986][ T8454] syz.1.1266: attempt to access beyond end of device [ 254.745986][ T8454] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 254.812806][ T8454] syz.1.1266: attempt to access beyond end of device [ 254.812806][ T8454] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 254.869546][ T8454] syz.1.1266: attempt to access beyond end of device [ 254.869546][ T8454] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 255.062656][ T8474] loop4: detected capacity change from 0 to 1024 [ 255.081326][ T8474] EXT4-fs: Ignoring removed nobh option [ 255.116707][ T8474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.315755][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 255.666650][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673013][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.065386][ T8521] loop2: detected capacity change from 0 to 16 [ 256.086660][ T8521] erofs: (device loop2): mounted with root inode @ nid 36. [ 256.111474][ T8521] syz.2.1281: attempt to access beyond end of device [ 256.111474][ T8521] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 256.131857][ T8521] syz.2.1281: attempt to access beyond end of device [ 256.131857][ T8521] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 256.164910][ T8521] syz.2.1281: attempt to access beyond end of device [ 256.164910][ T8521] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 256.410024][ T8533] serio: Serial port ptm0 [ 257.035538][ T8562] loop4: detected capacity change from 0 to 16 [ 257.078234][ T8562] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.115184][ T8562] bio_check_eod: 1 callbacks suppressed [ 257.115202][ T8562] syz.4.1299: attempt to access beyond end of device [ 257.115202][ T8562] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 257.141538][ T8523] loop3: detected capacity change from 0 to 32768 [ 257.149006][ T8523] XFS: attr2 mount option is deprecated. [ 257.161574][ T8523] XFS: ikeep mount option is deprecated. [ 257.167270][ T8523] XFS: noikeep mount option is deprecated. [ 257.183647][ T8562] syz.4.1299: attempt to access beyond end of device [ 257.183647][ T8562] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 257.219912][ T8563] syz.4.1299: attempt to access beyond end of device [ 257.219912][ T8563] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 257.309385][ T8571] loop2: detected capacity change from 0 to 128 [ 257.316479][ T8523] XFS (loop3): Mounting V5 Filesystem [ 257.337488][ T8571] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 257.375157][ T8571] FAT-fs (loop2): Filesystem has been set read-only [ 257.441225][ T8523] XFS (loop3): Ending clean mount [ 257.448372][ T8523] XFS (loop3): Quotacheck needed: Please wait. [ 257.543499][ T8580] loop6: detected capacity change from 0 to 8 [ 257.558490][ T8523] XFS (loop3): Quotacheck: Done. [ 257.568567][ T8580] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 257.647113][ T4252] XFS (loop3): Unmounting Filesystem [ 258.000304][ T8597] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 258.008837][ T8597] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 258.031113][ T8597] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 258.054861][ T8597] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 258.583228][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1322'. [ 258.859889][ T8633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 259.091343][ T8642] loop2: detected capacity change from 0 to 64 [ 259.143093][ T8645] loop6: detected capacity change from 0 to 128 [ 259.146599][ T8642] hfs: request for non-existent node 237 in B*Tree [ 259.166456][ T8642] hfs: request for non-existent node 237 in B*Tree [ 259.176851][ T8645] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 259.194862][ T8642] hfs: request for non-existent node 237 in B*Tree [ 259.199217][ T8645] FAT-fs (loop6): Filesystem has been set read-only [ 259.208477][ T8642] hfs: request for non-existent node 237 in B*Tree [ 259.285958][ T8615] loop1: detected capacity change from 0 to 32768 [ 259.293061][ T11] hfs: request for non-existent node 237 in B*Tree [ 259.302508][ T11] hfs: request for non-existent node 237 in B*Tree [ 259.319250][ T8615] XFS: attr2 mount option is deprecated. [ 259.341431][ T8615] XFS: ikeep mount option is deprecated. [ 259.347130][ T8615] XFS: noikeep mount option is deprecated. [ 259.411129][ T8653] loop2: detected capacity change from 0 to 8 [ 259.435150][ T8653] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 259.476059][ T8615] XFS (loop1): Mounting V5 Filesystem [ 259.576422][ T8615] XFS (loop1): Ending clean mount [ 259.591349][ T8615] XFS (loop1): Quotacheck needed: Please wait. [ 259.645161][ T8615] XFS (loop1): Quotacheck: Done. [ 259.898654][ T4257] XFS (loop1): Unmounting Filesystem [ 260.651905][ T8662] loop3: detected capacity change from 0 to 32768 [ 260.682290][ T8662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1338 (8662) [ 260.720758][ T8662] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.749305][ T8662] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 260.758569][ T8662] BTRFS info (device loop3): using free space tree [ 260.777567][ T8683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.040407][ T8662] BTRFS info (device loop3): enabling ssd optimizations [ 261.090152][ T8708] netlink: 'syz.4.1349': attribute type 11 has an invalid length. [ 261.240523][ T4252] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.322126][ T8677] loop2: detected capacity change from 0 to 32768 [ 261.355306][ T8677] XFS: noikeep mount option is deprecated. [ 261.426841][ T8677] XFS (loop2): Mounting V5 Filesystem [ 261.517334][ T8677] XFS (loop2): Ending clean mount [ 261.554672][ T8677] XFS (loop2): Quotacheck needed: Please wait. [ 261.676494][ T8677] XFS (loop2): Quotacheck: Done. [ 261.890709][ T5594] XFS (loop2): Unmounting Filesystem [ 262.142507][ T8746] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1364'. [ 262.231288][ T4780] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 262.311132][ T8749] loop3: detected capacity change from 0 to 128 [ 262.599474][ T4780] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.618385][ T4780] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.649528][ T4780] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.658628][ T4780] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 262.709270][ T4780] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 262.725023][ T8764] loop4: detected capacity change from 0 to 1764 [ 262.803404][ T8764] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 262.859534][ T4780] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.873247][ T4780] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.892493][ T4780] usb 7-1: Product: syz [ 262.896701][ T4780] usb 7-1: Manufacturer: syz [ 262.980781][ T4780] cdc_wdm 7-1:1.0: skipping garbage [ 262.996360][ T4780] cdc_wdm 7-1:1.0: skipping garbage [ 263.006426][ T4780] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 263.016414][ T4780] cdc_wdm 7-1:1.0: Unknown control protocol [ 263.139802][ T8750] loop2: detected capacity change from 0 to 32768 [ 263.160261][ T8750] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1362 (8750) [ 263.209309][ T8750] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 263.229340][ T8750] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 263.238166][ T8750] BTRFS info (device loop2): using free space tree [ 263.298458][ T8759] loop1: detected capacity change from 0 to 32768 [ 263.328072][ T8759] XFS (loop1): Mounting V5 Filesystem [ 263.337787][ T8750] BTRFS info (device loop2): enabling ssd optimizations [ 263.446720][ T8759] XFS (loop1): Ending clean mount [ 263.476830][ T5594] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 263.568685][ T4257] XFS (loop1): Unmounting Filesystem [ 263.750168][ T8803] loop3: detected capacity change from 0 to 256 [ 263.769685][ T4290] usb 7-1: USB disconnect, device number 4 [ 263.816114][ T8804] loop4: detected capacity change from 0 to 1024 [ 263.894727][ T8806] loop6: detected capacity change from 0 to 512 [ 263.896062][ T8804] hfsplus: bad catalog entry type [ 263.998437][ T8806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 264.029064][ T8806] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.055240][ T4529] hfsplus: b-tree write err: -5, ino 4 [ 264.098423][ T8813] loop3: detected capacity change from 0 to 128 [ 264.141930][ T26] audit: type=1800 audit(1730299352.987:37): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1380" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 264.200875][ T8813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.216216][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 264.225964][ T8813] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.306912][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 264.708770][ T8838] loop4: detected capacity change from 0 to 4096 [ 264.741158][ T8838] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 265.077610][ T8856] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 265.264695][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'. [ 265.426309][ T8844] loop6: detected capacity change from 0 to 32768 [ 265.435410][ T8844] XFS: noikeep mount option is deprecated. [ 265.537597][ T8844] XFS (loop6): Mounting V5 Filesystem [ 265.628018][ T8844] XFS (loop6): Ending clean mount [ 265.660278][ T8844] XFS (loop6): Quotacheck needed: Please wait. [ 265.738818][ T8844] XFS (loop6): Quotacheck: Done. [ 265.799351][ T4290] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 265.893992][ T6241] XFS (loop6): Unmounting Filesystem [ 266.159341][ T4290] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.168204][ T4290] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.199207][ T4290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.208240][ T4290] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 266.239290][ T4290] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 266.379452][ T4290] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.388951][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.406588][ T8909] loop3: detected capacity change from 0 to 2048 [ 266.439673][ T4290] usb 3-1: Product: syz [ 266.443898][ T4290] usb 3-1: Manufacturer: syz [ 266.451848][ T8909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.490426][ T4290] cdc_wdm 3-1:1.0: skipping garbage [ 266.495777][ T4290] cdc_wdm 3-1:1.0: skipping garbage [ 266.507294][ T8909] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 266.520354][ T4290] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 266.526900][ T4290] cdc_wdm 3-1:1.0: Unknown control protocol [ 266.863131][ T8919] loop6: detected capacity change from 0 to 128 [ 267.035431][ T8901] loop4: detected capacity change from 0 to 32768 [ 267.136707][ T8933] loop1: detected capacity change from 0 to 64 [ 267.173320][ T8901] XFS (loop4): Mounting V5 Filesystem [ 267.190497][ T8933] hfs: request for non-existent node 237 in B*Tree [ 267.197314][ T8933] hfs: request for non-existent node 237 in B*Tree [ 267.226453][ T8933] hfs: request for non-existent node 237 in B*Tree [ 267.237354][ T4290] usb 3-1: USB disconnect, device number 11 [ 267.259495][ T8933] hfs: request for non-existent node 237 in B*Tree [ 267.324638][ T62] hfs: request for non-existent node 237 in B*Tree [ 267.333970][ T8941] loop6: detected capacity change from 0 to 2048 [ 267.340454][ T62] hfs: request for non-existent node 237 in B*Tree [ 267.359096][ T8941] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 267.368066][ T8901] XFS (loop4): Ending clean mount [ 267.384474][ T8941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.433568][ T4259] XFS (loop4): Unmounting Filesystem [ 267.518430][ T8946] loop6: detected capacity change from 0 to 256 [ 267.543553][ T8946] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 267.675716][ T8953] can0: slcan on ttyS3. [ 267.755107][ T8953] can0 (unregistered): slcan off ttyS3. [ 268.032641][ T8965] loop2: detected capacity change from 0 to 2048 [ 268.103134][ T8965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.149468][ T8965] EXT4-fs error (device loop2): ext4_ext_precache:645: inode #2: comm syz.2.1446: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 268.186495][ T8971] loop6: detected capacity change from 0 to 256 [ 268.204642][ T8971] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 268.297104][ T5594] EXT4-fs (loop2): unmounting filesystem. [ 268.421559][ T8978] loop2: detected capacity change from 0 to 256 [ 268.428526][ T8978] exfat: Deprecated parameter 'namecase' [ 268.467384][ T8978] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 268.785926][ T8988] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 268.804295][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 268.806392][ T8992] loop6: detected capacity change from 0 to 128 [ 268.849066][ T8992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 268.865893][ T8992] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.987214][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 269.389464][ T5596] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 269.491788][ T9011] loop1: detected capacity change from 0 to 4096 [ 269.535358][ T9011] NILFS (loop1): invalid segment: Checksum error in segment payload [ 269.559254][ T9011] NILFS (loop1): trying rollback from an earlier position [ 269.600830][ T9011] NILFS (loop1): recovery complete [ 269.618223][ T9013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.759436][ T5596] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.779663][ T5596] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.819581][ T5596] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.841838][ T5596] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.879672][ T9003] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 270.007100][ T9001] loop3: detected capacity change from 0 to 40427 [ 270.023418][ T9001] F2FS-fs (loop3): invalid crc value [ 270.046864][ T9001] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.193008][ T5596] usb 7-1: USB disconnect, device number 5 [ 270.194326][ T9001] F2FS-fs (loop3): Start checkpoint disabled! [ 270.239437][ T9001] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 270.431273][ T4299] kworker/u4:5: attempt to access beyond end of device [ 270.431273][ T4299] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 270.654440][ T9018] loop1: detected capacity change from 0 to 32768 [ 270.718531][ T9018] XFS (loop1): Mounting V5 Filesystem [ 270.864205][ T9018] XFS (loop1): Ending clean mount [ 270.881496][ T9042] loop3: detected capacity change from 0 to 4096 [ 270.897806][ T9018] XFS (loop1): Quotacheck needed: Please wait. [ 270.898621][ T9042] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 270.948628][ T9021] loop2: detected capacity change from 0 to 32768 [ 270.994059][ T9018] XFS (loop1): Quotacheck: Done. [ 271.017573][ T9021] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1481 (9021) [ 271.063978][ T9021] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 271.118031][ T9021] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 271.132681][ T9021] BTRFS info (device loop2): enabling disk space caching [ 271.140047][ T9021] BTRFS info (device loop2): force clearing of disk cache [ 271.147216][ T9021] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 271.157216][ T9021] BTRFS info (device loop2): use zstd compression, level 3 [ 271.188894][ T9021] BTRFS info (device loop2): disk space caching is enabled [ 271.266290][ T4312] kernel write not supported for file /dsp (pid: 4312 comm: kworker/0:6) [ 271.415353][ T9021] BTRFS info (device loop2): enabling ssd optimizations [ 271.436854][ T9021] BTRFS info (device loop2): rebuilding free space tree [ 271.460872][ T9021] BTRFS info (device loop2): disabling free space tree [ 271.467831][ T9021] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 271.489282][ T9021] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 271.646052][ T5594] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 272.053091][ T9074] loop3: detected capacity change from 0 to 32768 [ 272.060946][ T9074] XFS: attr2 mount option is deprecated. [ 272.073620][ T9074] XFS (loop3): Mounting V5 Filesystem [ 272.118932][ T9074] XFS (loop3): Ending clean mount [ 272.125965][ T9074] XFS (loop3): Quotacheck needed: Please wait. [ 272.145440][ T9018] XFS (loop1): User initiated shutdown received. [ 272.152148][ T9018] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 272.166767][ T9018] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 272.187744][ T9074] XFS (loop3): Quotacheck: Done. [ 272.210916][ T4257] XFS (loop1): Unmounting Filesystem [ 272.294563][ T9089] loop2: detected capacity change from 0 to 2048 [ 272.324756][ T9089] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 272.371521][ T4252] XFS (loop3): Unmounting Filesystem [ 272.378363][ T9089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.054714][ T126] kernel write not supported for file /dsp (pid: 126 comm: kworker/1:2) [ 273.236171][ T9119] loop4: detected capacity change from 0 to 64 [ 273.279245][ T4776] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 273.303693][ T9119] MTD: Couldn't look up './file0': -15 [ 273.639426][ T4776] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.669259][ T4776] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.709238][ T4776] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.728548][ T4776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.765105][ T9116] loop1: detected capacity change from 0 to 32768 [ 273.779638][ T9109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.799712][ T9116] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1496 (9116) [ 273.854780][ T9116] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 273.875327][ T9116] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 273.895579][ T9116] BTRFS info (device loop1): enabling disk space caching [ 273.905695][ T9116] BTRFS info (device loop1): force clearing of disk cache [ 273.926014][ T9116] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 273.946398][ T9116] BTRFS info (device loop1): use zstd compression, level 3 [ 273.966679][ T9116] BTRFS info (device loop1): disk space caching is enabled [ 274.096160][ T9123] loop6: detected capacity change from 0 to 32768 [ 274.105614][ T5596] usb 3-1: USB disconnect, device number 12 [ 274.115571][ T9123] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1502 (9123) [ 274.146383][ T9123] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.167247][ T9123] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 274.184297][ T9123] BTRFS info (device loop6): enabling auto defrag [ 274.196261][ T9123] BTRFS info (device loop6): doing ref verification [ 274.203263][ T9123] BTRFS info (device loop6): use no compression [ 274.203298][ T9116] BTRFS info (device loop1): enabling ssd optimizations [ 274.215463][ T9123] BTRFS info (device loop6): force clearing of disk cache [ 274.224551][ T9123] BTRFS info (device loop6): disabling free space tree [ 274.238548][ T9116] BTRFS info (device loop1): rebuilding free space tree [ 274.262819][ T9123] BTRFS info (device loop6): enabling ssd optimizations [ 274.272714][ T9123] BTRFS info (device loop6): rebuilding free space tree [ 274.286181][ T9116] BTRFS info (device loop1): disabling free space tree [ 274.288088][ T9123] BTRFS info (device loop6): disabling free space tree [ 274.301475][ T9123] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.303577][ T9116] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.311228][ T9123] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.339372][ T9116] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.367988][ T9134] loop4: detected capacity change from 0 to 32768 [ 274.414104][ T9134] XFS (loop4): Mounting V5 Filesystem [ 274.486722][ T6241] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.508555][ T4257] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 274.524917][ T9134] XFS (loop4): Ending clean mount [ 274.534403][ T9134] XFS (loop4): Quotacheck needed: Please wait. [ 274.985258][ T9134] XFS (loop4): Quotacheck: Done. [ 275.030246][ T9134] XFS (loop4): User initiated shutdown received. [ 275.036689][ T9134] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 275.056426][ T9134] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 275.104056][ T4259] XFS (loop4): Unmounting Filesystem [ 275.672771][ T9210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.682930][ T4757] kernel write not supported for file /dsp (pid: 4757 comm: kworker/0:7) [ 275.713434][ T9216] loop6: detected capacity change from 0 to 128 [ 276.283609][ T9237] loop3: detected capacity change from 0 to 1024 [ 276.323561][ T9242] loop6: detected capacity change from 0 to 256 [ 276.358665][ T9218] hfsplus: request for non-existent node 211 in B*Tree [ 276.366116][ T9218] hfsplus: request for non-existent node 211 in B*Tree [ 276.368726][ T9242] FAT-fs (loop6): Directory bread(block 64) failed [ 276.385511][ T9242] FAT-fs (loop6): Directory bread(block 65) failed [ 276.393926][ T9242] FAT-fs (loop6): Directory bread(block 66) failed [ 276.406812][ T9242] FAT-fs (loop6): Directory bread(block 67) failed [ 276.413596][ T9242] FAT-fs (loop6): Directory bread(block 68) failed [ 276.426537][ T9242] FAT-fs (loop6): Directory bread(block 69) failed [ 276.433441][ T9242] FAT-fs (loop6): Directory bread(block 70) failed [ 276.447600][ T9242] FAT-fs (loop6): Directory bread(block 71) failed [ 276.454356][ T9242] FAT-fs (loop6): Directory bread(block 72) failed [ 276.466713][ T9242] FAT-fs (loop6): Directory bread(block 73) failed [ 276.507627][ T4529] hfsplus: b-tree write err: -5, ino 8 [ 276.541943][ T9246] loop1: detected capacity change from 0 to 256 [ 276.571210][ T9246] FAT-fs (loop1): Directory bread(block 64) failed [ 276.580219][ T9246] FAT-fs (loop1): Directory bread(block 65) failed [ 276.592505][ T9246] FAT-fs (loop1): Directory bread(block 66) failed [ 276.606215][ T9246] FAT-fs (loop1): Directory bread(block 67) failed [ 276.622652][ T9246] FAT-fs (loop1): Directory bread(block 68) failed [ 276.631063][ T9246] FAT-fs (loop1): Directory bread(block 69) failed [ 276.643273][ T9246] FAT-fs (loop1): Directory bread(block 70) failed [ 276.650016][ T9246] FAT-fs (loop1): Directory bread(block 71) failed [ 276.656959][ T9246] FAT-fs (loop1): Directory bread(block 72) failed [ 276.670278][ T9246] FAT-fs (loop1): Directory bread(block 73) failed [ 276.815872][ T9256] loop6: detected capacity change from 0 to 512 [ 276.847278][ T9256] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 276.860234][ T9256] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1541: invalid indirect mapped block 8 (level 2) [ 276.894676][ T9256] EXT4-fs (loop6): Remounting filesystem read-only [ 276.907990][ T9256] EXT4-fs (loop6): 1 truncate cleaned up [ 276.914274][ T9256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 276.932285][ T9256] EXT4-fs (loop6): shut down requested (2) [ 277.018640][ T6241] EXT4-fs (loop6): unmounting filesystem. [ 277.413314][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 278.115991][ T9303] loop2: detected capacity change from 0 to 2048 [ 278.172255][ T9307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.220268][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 278.232015][ T9303] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 278.264782][ T9303] Remounting filesystem read-only [ 278.351421][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'. [ 278.372808][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1565'. [ 278.589032][ T9322] netlink: 'syz.3.1569': attribute type 25 has an invalid length. [ 278.607529][ T9322] netlink: 'syz.3.1569': attribute type 8 has an invalid length. [ 279.258383][ T9356] loop1: detected capacity change from 0 to 512 [ 279.282915][ T9356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.332771][ T9356] EXT4-fs (loop1): 1 truncate cleaned up [ 279.339634][ T9356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 279.394204][ T9319] loop6: detected capacity change from 0 to 32768 [ 279.481156][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 279.556209][ T9319] JBD2: Ignoring recovery information on journal [ 279.710348][ T9319] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 279.786849][ T9319] [ 279.789228][ T9319] ====================================================== [ 279.796261][ T9319] WARNING: possible circular locking dependency detected [ 279.803300][ T9319] 6.1.114-syzkaller #0 Not tainted [ 279.808437][ T9319] ------------------------------------------------------ [ 279.815474][ T9319] syz.6.1568/9319 is trying to acquire lock: [ 279.821489][ T9319] ffff888052f8dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x398/0x930 [ 279.830857][ T9319] [ 279.830857][ T9319] but task is already holding lock: [ 279.838241][ T9319] ffff888067e44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f51/0x21b0 [ 279.847517][ T9319] [ 279.847517][ T9319] which lock already depends on the new lock. [ 279.847517][ T9319] [ 279.857939][ T9319] [ 279.857939][ T9319] the existing dependency chain (in reverse order) is: [ 279.866970][ T9319] [ 279.866970][ T9319] -> #3 (jbd2_handle){++++}-{0:0}: [ 279.874310][ T9319] lock_acquire+0x1f8/0x5a0 [ 279.879374][ T9319] start_this_handle+0x1f71/0x21b0 [ 279.885041][ T9319] jbd2__journal_start+0x2d1/0x5c0 [ 279.890713][ T9319] jbd2_journal_start+0x25/0x30 [ 279.896115][ T9319] ocfs2_start_trans+0x3c0/0x6f0 [ 279.901607][ T9319] ocfs2_mknod+0x1638/0x2e20 [ 279.906741][ T9319] ocfs2_mkdir+0x1c0/0x4e0 [ 279.911706][ T9319] vfs_mkdir+0x3b6/0x590 [ 279.916498][ T9319] do_mkdirat+0x225/0x360 [ 279.921380][ T9319] __x64_sys_mkdir+0x6a/0x80 [ 279.926538][ T9319] do_syscall_64+0x3b/0xb0 [ 279.931511][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.937974][ T9319] [ 279.937974][ T9319] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 279.946545][ T9319] lock_acquire+0x1f8/0x5a0 [ 279.951681][ T9319] down_read+0xad/0xa30 [ 279.956387][ T9319] ocfs2_start_trans+0x3b5/0x6f0 [ 279.961884][ T9319] ocfs2_mknod+0x1638/0x2e20 [ 279.967022][ T9319] ocfs2_mkdir+0x1c0/0x4e0 [ 279.971989][ T9319] vfs_mkdir+0x3b6/0x590 [ 279.976803][ T9319] do_mkdirat+0x225/0x360 [ 279.981699][ T9319] __x64_sys_mkdir+0x6a/0x80 [ 279.986844][ T9319] do_syscall_64+0x3b/0xb0 [ 279.991813][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.998283][ T9319] [ 279.998283][ T9319] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 280.005807][ T9319] lock_acquire+0x1f8/0x5a0 [ 280.010886][ T9319] ocfs2_start_trans+0x2b0/0x6f0 [ 280.016384][ T9319] ocfs2_xattr_set+0x118a/0x1930 [ 280.021871][ T9319] __vfs_setxattr+0x3e7/0x420 [ 280.027090][ T9319] __vfs_setxattr_noperm+0x12a/0x5e0 [ 280.032918][ T9319] vfs_setxattr+0x21d/0x420 [ 280.037977][ T9319] setxattr+0x250/0x2b0 [ 280.042683][ T9319] path_setxattr+0x1bc/0x2a0 [ 280.047822][ T9319] __x64_sys_setxattr+0xb7/0xd0 [ 280.053260][ T9319] do_syscall_64+0x3b/0xb0 [ 280.058253][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.064713][ T9319] [ 280.064713][ T9319] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 280.072575][ T9319] validate_chain+0x1661/0x5950 [ 280.077974][ T9319] __lock_acquire+0x125b/0x1f80 [ 280.083384][ T9319] lock_acquire+0x1f8/0x5a0 [ 280.088450][ T9319] down_read+0xad/0xa30 [ 280.093158][ T9319] ocfs2_init_acl+0x398/0x930 [ 280.098476][ T9319] ocfs2_mknod+0x1f75/0x2e20 [ 280.103618][ T9319] ocfs2_create+0x1c0/0x4e0 [ 280.108681][ T9319] path_openat+0x12f1/0x2e60 [ 280.113822][ T9319] do_filp_open+0x230/0x480 [ 280.118882][ T9319] do_sys_openat2+0x13b/0x4f0 [ 280.124123][ T9319] __x64_sys_openat+0x243/0x290 [ 280.129540][ T9319] do_syscall_64+0x3b/0xb0 [ 280.134506][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.140978][ T9319] [ 280.140978][ T9319] other info that might help us debug this: [ 280.140978][ T9319] [ 280.151228][ T9319] Chain exists of: [ 280.151228][ T9319] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 280.151228][ T9319] [ 280.165089][ T9319] Possible unsafe locking scenario: [ 280.165089][ T9319] [ 280.172557][ T9319] CPU0 CPU1 [ 280.177942][ T9319] ---- ---- [ 280.183320][ T9319] lock(jbd2_handle); [ 280.187416][ T9319] lock(&journal->j_trans_barrier); [ 280.195254][ T9319] lock(jbd2_handle); [ 280.201871][ T9319] lock(&oi->ip_xattr_sem); [ 280.206485][ T9319] [ 280.206485][ T9319] *** DEADLOCK *** [ 280.206485][ T9319] [ 280.214662][ T9319] 8 locks held by syz.6.1568/9319: [ 280.219792][ T9319] #0: ffff88807ac56460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 280.229075][ T9319] #1: ffff888052f8df48 (&type->i_mutex_dir_key#28){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 280.239404][ T9319] #2: ffff888052e089c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 280.253126][ T9319] #3: ffff888052f8c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 280.266852][ T9319] #4: ffff888052e0a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x127/0x29d0 [ 280.280843][ T9319] #5: ffff88807ac56650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0x1638/0x2e20 [ 280.290205][ T9319] #6: ffff88805a45c8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b5/0x6f0 [ 280.300962][ T9319] #7: ffff888067e44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f51/0x21b0 [ 280.310678][ T9319] [ 280.310678][ T9319] stack backtrace: [ 280.316591][ T9319] CPU: 1 PID: 9319 Comm: syz.6.1568 Not tainted 6.1.114-syzkaller #0 [ 280.324679][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.334765][ T9319] Call Trace: [ 280.338062][ T9319] [ 280.341014][ T9319] dump_stack_lvl+0x1e3/0x2cb [ 280.345810][ T9319] ? nf_tcp_handle_invalid+0x642/0x642 [ 280.351297][ T9319] ? print_circular_bug+0x12b/0x1a0 [ 280.356546][ T9319] check_noncircular+0x2fa/0x3b0 [ 280.361516][ T9319] ? add_chain_block+0x850/0x850 [ 280.366480][ T9319] ? lockdep_lock+0x11f/0x2a0 [ 280.371194][ T9319] ? validate_chain+0x112/0x5950 [ 280.376155][ T9319] ? _find_first_zero_bit+0xd0/0x100 [ 280.381478][ T9319] validate_chain+0x1661/0x5950 [ 280.386365][ T9319] ? reacquire_held_locks+0x660/0x660 [ 280.391760][ T9319] ? memset+0x1f/0x40 [ 280.395774][ T9319] ? lockdep_init_map_type+0x9d/0x900 [ 280.401154][ T9319] ? lockdep_softirqs_off+0x420/0x420 [ 280.406555][ T9319] ? do_raw_spin_unlock+0x137/0x8a0 [ 280.411752][ T9319] ? mark_lock+0x9a/0x340 [ 280.416093][ T9319] ? mark_lock+0x9a/0x340 [ 280.420442][ T9319] __lock_acquire+0x125b/0x1f80 [ 280.425316][ T9319] lock_acquire+0x1f8/0x5a0 [ 280.429820][ T9319] ? ocfs2_init_acl+0x398/0x930 [ 280.434670][ T9319] ? read_lock_is_recursive+0x10/0x10 [ 280.440054][ T9319] ? __might_sleep+0xb0/0xb0 [ 280.444662][ T9319] ? do_raw_spin_unlock+0x137/0x8a0 [ 280.449884][ T9319] ? __ocfs2_mknod_locked+0xf87/0x14e0 [ 280.455359][ T9319] down_read+0xad/0xa30 [ 280.459559][ T9319] ? ocfs2_init_acl+0x398/0x930 [ 280.464447][ T9319] ? ocfs2_mknod_credits+0x1b0/0x1b0 [ 280.469745][ T9319] ? __down_common+0x8b0/0x8b0 [ 280.474507][ T9319] ? trace_ocfs2_claim_new_inode_at_loc+0x270/0x270 [ 280.481101][ T9319] ? set_current_blocked+0x40/0x40 [ 280.486223][ T9319] ocfs2_init_acl+0x398/0x930 [ 280.490913][ T9319] ? ocfs2_mknod_locked+0x21e/0x3a0 [ 280.496123][ T9319] ? ocfs2_acl_chmod+0x360/0x360 [ 280.501067][ T9319] ? ocfs2_start_trans+0x4da/0x6f0 [ 280.506194][ T9319] ? __ocfs2_abort+0x230/0x230 [ 280.510954][ T9319] ? validate_chain+0x112/0x5950 [ 280.515898][ T9319] ? ocfs2_init_security_get+0x130/0x190 [ 280.521532][ T9319] ocfs2_mknod+0x1f75/0x2e20 [ 280.526121][ T9319] ? mark_lock+0x9a/0x340 [ 280.530472][ T9319] ? ocfs2_mkdir+0x4e0/0x4e0 [ 280.535084][ T9319] ? mark_lock+0x9a/0x340 [ 280.539430][ T9319] ? mark_lock+0x9a/0x340 [ 280.543798][ T9319] ? ocfs2_inode_unlock+0xa3/0x150 [ 280.548916][ T9319] ? __lock_acquire+0x1f80/0x1f80 [ 280.553957][ T9319] ? do_raw_spin_lock+0x14a/0x370 [ 280.558991][ T9319] ? do_raw_spin_unlock+0x137/0x8a0 [ 280.564204][ T9319] ? _raw_spin_unlock+0x24/0x40 [ 280.569063][ T9319] ? rcu_is_watching+0x11/0xb0 [ 280.573859][ T9319] ? ocfs2_lookup+0x547/0xb20 [ 280.578536][ T9319] ocfs2_create+0x1c0/0x4e0 [ 280.583036][ T9319] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 280.589282][ T9319] ? ocfs2_lookup+0xb20/0xb20 [ 280.593985][ T9319] ? inode_permission+0xf7/0x450 [ 280.598919][ T9319] ? ocfs2_getattr+0x380/0x380 [ 280.603682][ T9319] ? bpf_lsm_inode_create+0x5/0x10 [ 280.608790][ T9319] ? security_inode_create+0xb4/0x100 [ 280.614165][ T9319] ? ocfs2_lookup+0xb20/0xb20 [ 280.618877][ T9319] path_openat+0x12f1/0x2e60 [ 280.623498][ T9319] ? do_filp_open+0x480/0x480 [ 280.628202][ T9319] do_filp_open+0x230/0x480 [ 280.632783][ T9319] ? vfs_tmpfile+0x4a0/0x4a0 [ 280.637406][ T9319] ? _raw_spin_unlock+0x24/0x40 [ 280.642279][ T9319] ? alloc_fd+0x5a0/0x640 [ 280.646617][ T9319] do_sys_openat2+0x13b/0x4f0 [ 280.651307][ T9319] ? do_sys_open+0x220/0x220 [ 280.655926][ T9319] __x64_sys_openat+0x243/0x290 [ 280.660790][ T9319] ? __ia32_sys_open+0x270/0x270 [ 280.665736][ T9319] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.671720][ T9319] ? lockdep_hardirqs_on+0x94/0x130 [ 280.676935][ T9319] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.682965][ T9319] do_syscall_64+0x3b/0xb0 [ 280.687385][ T9319] ? clear_bhb_loop+0x45/0xa0 [ 280.692057][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.697959][ T9319] RIP: 0033:0x7f8375f7e719 [ 280.702407][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.722124][ T9319] RSP: 002b:00007f8376de8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.730549][ T9319] RAX: ffffffffffffffda RBX: 00007f8376135f80 RCX: 00007f8375f7e719 [ 280.738619][ T9319] RDX: 0000000000101042 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 280.746601][ T9319] RBP: 00007f8375ff132e R08: 0000000000000000 R09: 0000000000000000 [ 280.754578][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.762558][ T9319] R13: 0000000000000000 R14: 00007f8376135f80 R15: 00007ffcb135fa18 [ 280.770551][ T9319] [ 280.892104][ T6241] ocfs2: Unmounting device (7,6) on (node local)