last executing test programs: 32.095811944s ago: executing program 2 (id=1063): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f0000000480)={0x0, 0x114db, 0x0, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40010180, 0x1}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 32.091467364s ago: executing program 2 (id=1064): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000008c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) 31.928062287s ago: executing program 2 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xffff5a7b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 31.764937119s ago: executing program 2 (id=1073): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000280)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 30.551904318s ago: executing program 2 (id=1093): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000380)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="7f"}}}}}}, 0x0) 29.236430939s ago: executing program 2 (id=1109): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), 0x0, 0x0, 0x1) 28.923079413s ago: executing program 32 (id=1109): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), 0x0, 0x0, 0x1) 5.661804763s ago: executing program 0 (id=1368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x501, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.548873714s ago: executing program 0 (id=1370): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xccb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x18, 0x7c, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x40, 0x90, 0x1, {0x22, 0xff5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf2, 0x10, 0x9}}}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 4.54219571s ago: executing program 0 (id=1377): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000380)=[{0x4, 0x1200, 0x0, 0x0}, {0x99, 0x1011, 0x0, 0x0}], 0x2}) 2.958459214s ago: executing program 3 (id=1398): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 2.736780108s ago: executing program 3 (id=1400): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x11, 0x2000a002, 0x0) 2.655381149s ago: executing program 0 (id=1401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000) 2.417767393s ago: executing program 3 (id=1412): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x5d74, 0x4) 1.855943902s ago: executing program 4 (id=1409): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.855286132s ago: executing program 3 (id=1410): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x446b, &(0x7f0000004480)="$eJzs3cFvI1cZAPBvJuk2u3RLtrRSkZCwRCUQoCjbUyGVSLLZTZNuWBRohbh4ncTdDTjxKnEQhx7CrRInJA6IQ1UkOOVU7YFr+RO4cOBQThwq6AEJISFVGHk8zmYmduOWOFG2v98h43lv3psv/sbjN5ZmXppr3d/crWzuVmrbleb6G7svVn7abOxt1SM9I333/8TZ7Z/hjOI4Oe9j77Pszo1b33/9xYg/bvz5g3a73Y6O8ejr+pHX//7nm+tHlz1pqU2n3/69nZYfRcSzx+LqGIuIH/4hIomIubxsPl9ejoir0a17/c1f3K2cUjTvvl9/ufrRylsPZ15YPnj74eD/PYn4TeOL37y39Y+vjM389esf02VySqEBAAAAAAAAAAAAAAAAAHABLK7eee1709fjvSTGD5Lj9+su5stB98e2T82XB8b49/JNxQAAAAAAAAAAAAAAAAAAAPCYeXT/fyV5ps/9/wv5cnZA+/Z3Rh8jo7P03TsLN6ev5/O/H59q/KW86MO5sbjWZ9738vzvc6X2/ed/P70pzXvx9fY7GUk6VVhP06mpiN/mE78/n1xJG83d1jfeaO5tb5xaGBdWMf/dB20UspM/e2PY/M+X+h/9/P9fOHY0ddbvmjV/KMX8jw3c7nc/T4bK/41Su7PI/yflcTKPFPM/npVdPrrBbPfd6uT/l+Mn53+h1P+o8v90RFSSTqyVwhmgM4bplA8ar1BUzP8TWVnh1Jm/kYM+//8p5f9mqf/zOv/vl7+I6KuY/0tZ2URhizTaT3ZfXftX/qiuj/n83yr1fx7578S/nxWu/n60+774ivnPEz1e2CR7J4c9/y8Wml4akP/2/x33a2ke59NJ4Qg4SLrlg55XR1Ex/xPH6l/qfiXEh3PpUOO/V0rtz+r6r7ffyYjs+q93+v9a0r3+o79i/i+Xq//yXH4hNeznf6nUwajP/7PZ+I9Pq5j/K1lZcew8mf0dNv/Lpf7L+f/b504n7uyqZKKX/0fnk/8+2S1/x/hvKMX858lJj/4OsJ/9zcb/ycnj/1dL/Z/H+K9zcOyXLvIvjTaIC6uY/6fK1c/N5C86+f/TEN//t0sdjD7/EdN+6/vUivm/OnC77PM/cXL+V0rtRp3/r55QX/4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjczOfLyUjSqcJ6mk5NRdzI15+PK8labaO61miu/2Q3YiEvr8Qzyb1Gc63WqG5uNzfq1Vqj0VyPuJnXPxsTyW6j2apu1R7cOuzrcnK/XttprdVrrYhYzMu/FFd7fa1ttrZqDyLilcO6z6fNnQf3a9vVjc2db09PT0/H0mEM15L6z1r17VZ3793aiOXDtpPJkeCy6lcPY3kq+XFzb2e71sjKbx9p02iu1xpH2qzkdb+Ka0lrZ297vdaqVxvNe739nafZGMuWC0urP1i9ff1Y/d2ku5w/68AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+ETem/nWryNivLuWRsRs70XSb/t336+/XP1o5a2HMy8sH7z9zgeDtgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVjlIiBKAzAb8Ymdh7DKiSdbUQRLYwInkCP4WH0KF7CO1hY2FoJ7gws2Qlss1t9X/MgP+E9mB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3cPM5PD8MYkaLLEfHx8vm1nd+V+XbZ/v/kCDdyOLf389X1MJZ3Tzv5Rfn0PeX/9Pfn9Tkas3pf9GTZp42653T1rlbfukbZ6n1171mk3EfEVPLzlHPfr64BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhjBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86i64NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWQEAAP//Gfko3w==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000140)='./bus\x00', 0x8b) rmdir(&(0x7f00000001c0)='./bus\x00') 1.702769434s ago: executing program 4 (id=1413): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x82, 0x100, 0x0) 1.407462948s ago: executing program 4 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}]}, 0x38}}, 0x0) 1.251992671s ago: executing program 4 (id=1417): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.199651492s ago: executing program 4 (id=1418): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000240)={[{@uid}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000440)='./file0\x00') 1.192263342s ago: executing program 5 (id=1419): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) 964.431516ms ago: executing program 4 (id=1421): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10) 964.200865ms ago: executing program 5 (id=1422): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x5d74, 0x4) 962.869065ms ago: executing program 0 (id=1424): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 783.746848ms ago: executing program 1 (id=1425): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f00000003c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcZy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUWRNi2KEmV9Pjb13Z15b/a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSwWwEAPEiXx7526oz7PwA8Vq74/38AAAAAAAAAAAAAADjoUhTxZKSYv7yeJqr3HfVL7b6bt8aHR7avdiRVNQ9V5cuf+ukzZ8996YWh89281J79gPr322fjtbErFxsvz92YX5heXJyeaozPtifnpqZ3fYS91t9qsDoBjRuv35y6dm2xceb5s3fsvjXwfv8TxwcuDD178plu2fHhkZGxzSL13vK1e25Ix04zPA5HEScjxXPf/1lqRUQRez8X9Qc79lsdqToxWHVifHik6shMuzW7VO4c7Z6IIqLRU6nZPUfbj0XU+h5oH3bWjFgum182eLDs3th8a6F1dWa6MdpaWGovtedmR1OntWV/GlHE+RSxEhFr/Xcfri+KqEWK7x5bT1cj4lD3PHyxmhi8czuKfezjLpTtbPRFrBSPwJgdYP1RxKuR4ufvnIjJfJ2prjVfiHi1zB9GvFXmSxGp/GKci3hvm+8Rj6ZaFPEX5fhfWE9T1fWge1259PXGV2evzfWU7V5XPuL94a4rxUO6PxzZkg/GAb821aOIVnXFX0/3/psdAAAAAAAAAAAAAAAAAO63I1HEZyLFK//+x9W84qjmpR+7MPQHA7/aO2f86Q85Tln2+YhYLnY3J/dwnhg4mkZTeshziR9n9SjiT/L8v28/7MYAAAAAAAAAAAAAAAAAAAA81or4aaR48d0TaSV61xRvz15vXGldnemsCttd+7e7ZvrGxsZGI3WymXMi53LOlZyrOddyRpHr52zmnMi5nHMl52rOtZxxKNfP2cw5kXM550rO1ZxrOaOW6+ds5pzIuZxzJedqzrWccUDW7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DgpoohfRorvfHM9RYqIZsREdHK1/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhApGn/YvL2tFhGp+rfjRPnLuWgeLvOT0Rwq86VoXszZqrLW/PZDaD9705eK+Emk6K+/fXvA8/j3dd7d/hrEW9/afPfZWicPdXcOvN//xPFjF4ZGfuPpnV6n7RoweKk9e/NWY3x4ZGSsZ3Mtf/one7YN5M8t7k/XiYjFN958vTUzM71w7y/Kr8Aeqj9CL1LtcempF9WLqB2IZjycvvMYKO//70WK3333P7o3/M79vx6/0nl3+w4fv/jTzfv/i1sPtMv7f21rvXz/L+/p293/n+zZ9mL+3UhfLaK+dGO+73hEffGNN0+2b7SuT1+fnj136tSXh4a+fPZU3+GI+rX2zHTPq/tyugAAAAAAAAAAAAAAAAAenFTEVyJF6yfrqRERt6r5WgMXhp49+cyhOFTNt7pj3vZrY1cuNl6euzG/ML24OD3VGJ9tT85NTe/24+rVdK/x4ZF96cyHOrLP7T9Sf3lu/o2F9vU/Wtp2/9H6xauLSwutye13x5EoIpq9WwarBo8Pj1SNnmm3Zquqo9tOpv/o+lIR/xkpJs810ufztjz/f+sM/zvm/y9vPdA+zf//RM+28jNTKuIXkeJ3/vLp+HzVzqNx1znL5f42Ugye/1wuF4fLct02dJ4r0JkZWJb930jxj7+8s2x3PuSTm2VP7/rEPiLK8T8WKX7w59+L38zb7nz+w/bjf3TrgfZp/J/q2Xb0jucV7Lnr5PE/GSleevLt+K287YOe/9F99saJXPj28zn2afw/1bNtIH/ub9+frgMAAAAAAAAAADzS+lIRfxcpfjRSSy/kbbv5+39TWw+0T3//69M926buz3pFH/pizycVAAAAAA6IvlTETyPF9aW3b8+hvnP+d8/8z9/bnP85nLbsrf6c79eq5wbczz//6zWQP3di790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66lPVPP5p3ZcT301Urzy38/lcul4Wa67DvxA9Wv98tzsyYszM3OTraXW1Znpxth8a3K6rPtUpFj/m8/lukW1vnp3vfnOGu+ba7EvRIqRv++W7azF3l2b/KnNsqfLsp+IFP/1D3eW7a5j/anNsmfKsn8dKb7xz9uXPb5Z9mxZ9nuR4sffaHTLHi3Ldp+P+unNss9PzhX7MCoAAAAAAAAAAAAAAAAAAAA8bvpSEX8WKf7nxsrtufx5/f++nreVt77Vs97/Freqdf4HqvX/d3p9L+v/V88VWN7pUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRor5y+tptb9831G/1J69eWt8eGT7akdSVfNQVb78qZ8+c/bcl14YOt/ND65/v30mXhu7crHx8tyN+YXpxcXpqcb4bHtybmp610fYa/2tBqsT0Ljx+s2pa9cWG2eeP1ttPpx33xp4v/+J4wMXhp49+Uy37PjwyMhYzyFqfff86XdJO2w/HEX8VaR47vs/Sz/qjyhi7+fiQ747++1I1YnBqhPjwyNVR2bardmlcudo90QUEY2eSs3uOXoAY7EnzYjlsvllgwfL7o3NtxZaV2emG6OthaX2UntudjR1Wlv2pxFFnE8RKxGx1n/34fqiiNcjxXePrad/6Y841D0PX7w89rVTZ3ZuR7GPfdyFsp2NvoiV4hEYswOsP4r4p0jx83dOxL/2R9Si8xNfiHi1zB9GvBWd8U7lF+NcxHvbfI94NNWiiP8rx//Cenqnv7wedK8rl77e+Orstbmest3ryiN/f3iQdr42feWBtmMH9Sjix9UVfz39m/+uAQAAAAAAAAAAAAAAAA6QIn49Urz47olUzQ/Oc4qfynuvznSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjUK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs5w7xiAAAAAAAAAAAAAAAAAABgHxTVPym+8831tNHfWV96Ijq5aj3Qj73/DwAA//8H5/Ye") syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000640)={[{@nodiscard}, {@test_dummy_encryption}, {@nolazytime}, {@orlov}, {@data_err_abort}, {@errors_remount}, {@nobarrier}, {@quota}]}, 0xa, 0xbc2, &(0x7f0000002a40)="$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") statx(0xffffffffffffff9c, &(0x7f0000000b00)='./file2\x00', 0x800, 0x800, &(0x7f0000001280)) 783.516668ms ago: executing program 0 (id=1426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) 690.88478ms ago: executing program 3 (id=1427): socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) unshare(0x26000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 520.371902ms ago: executing program 1 (id=1428): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x2, 0x7, 0x5, 0x3}) 491.036152ms ago: executing program 5 (id=1429): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 383.078364ms ago: executing program 3 (id=1430): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 382.313464ms ago: executing program 5 (id=1431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000600000005"]) 311.938555ms ago: executing program 1 (id=1432): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x12) 298.769496ms ago: executing program 1 (id=1433): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x24040014}, 0x4000000) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000440)=""/21, 0x15}, 0xaee02048}], 0x1, 0x0, 0x0) 249.811417ms ago: executing program 1 (id=1434): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r1], 0x38}, 0x0) 197.998087ms ago: executing program 5 (id=1435): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x814490, &(0x7f0000002cc0)=ANY=[], 0xff, 0x27b, &(0x7f0000000480)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 181.587287ms ago: executing program 1 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 0s ago: executing program 5 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 027717][ T4255] XFS (loop2): Unmounting Filesystem [ 106.034092][ T5558] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.107995][ T5558] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 106.131908][ T5558] REISERFS (device loop1): using ordered data mode [ 106.141073][ T5020] usb 5-1: USB disconnect, device number 8 [ 106.157117][ T5558] reiserfs: using flush barriers [ 106.172403][ T5558] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.191694][ T5558] REISERFS (device loop1): checking transaction log (loop1) [ 106.409246][ T5558] REISERFS (device loop1): Using tea hash to sort names [ 106.434462][ T5558] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 106.740603][ T5560] loop3: detected capacity change from 0 to 32768 [ 106.866431][ T5560] XFS (loop3): Mounting V5 Filesystem [ 106.958380][ T5579] loop2: detected capacity change from 0 to 2048 [ 107.066441][ T5579] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.069948][ T5560] XFS (loop3): Ending clean mount [ 107.168713][ T26] audit: type=1800 audit(1751071044.482:15): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.469" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 107.184897][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 107.198217][ T5591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.198777][ T5579] syz.2.475: attempt to access beyond end of device [ 107.198777][ T5579] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 107.440547][ T4254] XFS (loop3): Unmounting Filesystem [ 107.514564][ T5025] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.540149][ T5599] loop4: detected capacity change from 0 to 4096 [ 107.639419][ T5599] ntfs: volume version 3.1. [ 107.702850][ T5025] usb 2-1: Using ep0 maxpacket: 32 [ 107.715280][ T5025] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.750731][ T5025] usb 2-1: config 0 has no interface number 0 [ 107.795525][ T5025] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.832015][ T5025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.840429][ T5025] usb 2-1: Product: syz [ 107.857289][ T5025] usb 2-1: Manufacturer: syz [ 107.870497][ T5025] usb 2-1: SerialNumber: syz [ 107.893822][ T5025] usb 2-1: config 0 descriptor?? [ 107.901925][ T5025] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.083022][ T5020] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.122017][ T5025] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.202988][ T5025] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.283188][ T5020] usb 1-1: Using ep0 maxpacket: 8 [ 108.290647][ T5020] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.353480][ T5020] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.378898][ T5020] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.402975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.419543][ T5020] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 108.451027][ T5020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.474275][ T5020] usb 1-1: config 0 descriptor?? [ 108.565750][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.577324][ T5024] usb 2-1: USB disconnect, device number 7 [ 108.595551][ T5024] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.630876][ T5024] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.658470][ T5024] quatech2 2-1:0.51: device disconnected [ 108.897316][ T5020] a4tech 0003:09DA:000A.0005: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 108.982621][ T3624] udevd[3624]: worker [4638] terminated by signal 33 (Unknown signal 33) [ 108.991631][ T3624] udevd[3624]: worker [4638] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 109.072549][ T5624] loop2: detected capacity change from 0 to 32768 [ 109.075300][ T5638] loop3: detected capacity change from 0 to 256 [ 109.121387][ T4703] usb 1-1: USB disconnect, device number 4 [ 109.246863][ T5624] XFS (loop2): Mounting V5 Filesystem [ 109.288034][ T5638] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.396925][ T5638] FAT-fs (loop3): Filesystem has been set read-only [ 109.430603][ T5639] fido_id[5639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.462190][ T5624] XFS (loop2): Ending clean mount [ 109.476164][ T5638] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.488380][ T5638] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 109.503408][ T5624] XFS (loop2): Quotacheck needed: Please wait. [ 109.535833][ T26] audit: type=1800 audit(1751071046.852:16): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.508" name="file1" dev="loop3" ino=1048609 res=0 errno=0 [ 109.596331][ T5650] loop1: detected capacity change from 0 to 4096 [ 109.649759][ T5624] XFS (loop2): Quotacheck: Done. [ 109.726100][ T5650] ntfs: volume version 3.1. [ 109.878663][ T5657] device wlan0 entered promiscuous mode [ 109.896971][ T5650] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 109.922450][ T4255] XFS (loop2): Unmounting Filesystem [ 109.940807][ T5657] device macsec2 entered promiscuous mode [ 110.058571][ T5650] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 110.141447][ T5650] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 110.182814][ T5650] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 110.207160][ T5662] loop4: detected capacity change from 0 to 8192 [ 110.289207][ T5662] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.371902][ T5662] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 110.481856][ T5662] REISERFS (device loop4): using ordered data mode [ 110.512876][ T5662] reiserfs: using flush barriers [ 110.535032][ T5662] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.603217][ T5662] REISERFS (device loop4): checking transaction log (loop4) [ 110.658702][ T5662] REISERFS (device loop4): Using r5 hash to sort names [ 110.673361][ T5662] REISERFS (device loop4): using 3.5.x disk format [ 110.701988][ T5662] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 111.032968][ T5024] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.194815][ T5683] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 111.228787][ T5024] usb 2-1: Using ep0 maxpacket: 32 [ 111.236101][ T5024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.288814][ T5687] netlink: 52 bytes leftover after parsing attributes in process `syz.0.512'. [ 111.308133][ T5024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.309094][ T5687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.512'. [ 111.322419][ T5024] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 111.349274][ T5024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.351121][ T5691] loop4: detected capacity change from 0 to 256 [ 111.387246][ T5024] usb 2-1: config 0 descriptor?? [ 111.610651][ T26] audit: type=1326 audit(1751071048.922:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5695 comm="syz.2.518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc5858e929 code=0x0 [ 111.636147][ T5696] loop3: detected capacity change from 0 to 2048 [ 111.679864][ T5696] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.730767][ T5701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.731068][ T5696] syz.3.516: attempt to access beyond end of device [ 111.731068][ T5696] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 111.823283][ T5024] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 111.839554][ T3624] udevd[3624]: worker [4244] terminated by signal 33 (Unknown signal 33) [ 111.865155][ T3624] udevd[3624]: worker [4244] failed while handling '/devices/virtual/block/loop3' [ 111.941006][ T3624] udevd[3624]: worker [4271] terminated by signal 33 (Unknown signal 33) [ 111.953015][ T3624] udevd[3624]: worker [4271] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2D5A.0006/hidraw/hidraw0' [ 111.995267][ T3624] udevd[3624]: worker [4246] terminated by signal 33 (Unknown signal 33) [ 112.010992][ T3624] udevd[3624]: worker [4246] failed while handling '/devices/virtual/block/loop3' [ 112.144460][ T5024] usb 2-1: USB disconnect, device number 8 [ 112.552494][ T5709] loop3: detected capacity change from 0 to 32768 [ 112.605475][ T5709] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 112.659753][ T5709] XFS (loop3): Mounting V5 Filesystem [ 112.764931][ T5709] XFS (loop3): Ending clean mount [ 112.780916][ T5709] XFS (loop3): Quotacheck needed: Please wait. [ 112.782318][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 112.811518][ T5712] loop4: detected capacity change from 0 to 32768 [ 112.859663][ T5712] XFS (loop4): Mounting V5 Filesystem [ 112.878518][ T5709] XFS (loop3): Quotacheck: Done. [ 112.975870][ T5712] XFS (loop4): Ending clean mount [ 113.014714][ T5712] XFS (loop4): Quotacheck needed: Please wait. [ 113.030273][ T4254] XFS (loop3): Unmounting Filesystem [ 113.096121][ T5712] XFS (loop4): Quotacheck: Done. [ 113.300761][ T4253] XFS (loop4): Unmounting Filesystem [ 113.542507][ T5721] loop2: detected capacity change from 0 to 32768 [ 113.627019][ T5721] XFS (loop2): Mounting V5 Filesystem [ 113.667025][ T5749] loop4: detected capacity change from 0 to 1024 [ 113.721669][ T26] audit: type=1800 audit(1751071051.032:18): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.530" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 113.725670][ T5721] XFS (loop2): Ending clean mount [ 113.883805][ T26] audit: type=1800 audit(1751071051.192:19): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.525" name="bus" dev="loop2" ino=6153 res=0 errno=0 [ 113.957246][ T5742] loop3: detected capacity change from 0 to 32768 [ 113.964628][ T5742] XFS: ikeep mount option is deprecated. [ 113.970379][ T5742] XFS: ikeep mount option is deprecated. [ 113.976542][ T5742] XFS: noikeep mount option is deprecated. [ 113.993198][ T5742] XFS (loop3): Mounting V5 Filesystem [ 114.016904][ T4255] XFS (loop2): Unmounting Filesystem [ 114.112239][ T5742] XFS (loop3): Ending clean mount [ 114.210317][ T5742] XFS: ikeep mount option is deprecated. [ 114.223016][ T5742] XFS: ikeep mount option is deprecated. [ 114.269320][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 114.298134][ T5772] loop4: detected capacity change from 0 to 8192 [ 114.314568][ T5772] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.328025][ T5772] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 114.337952][ T5772] REISERFS (device loop4): using ordered data mode [ 114.341636][ T5774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.535'. [ 114.346095][ T5772] reiserfs: using flush barriers [ 114.371164][ T4254] XFS (loop3): Unmounting Filesystem [ 114.378122][ T5772] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.394715][ T5772] REISERFS (device loop4): checking transaction log (loop4) [ 114.409575][ T5774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.535'. [ 114.467464][ T5774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.535'. [ 114.604718][ T5772] REISERFS (device loop4): Using tea hash to sort names [ 114.643214][ T5772] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 114.827926][ T5777] loop2: detected capacity change from 0 to 4096 [ 114.897878][ T5777] ntfs: volume version 3.1. [ 114.916329][ T5781] loop3: detected capacity change from 0 to 512 [ 114.947127][ T5777] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 115.022214][ T5781] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 115.030804][ T5777] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 115.054087][ T5781] EXT4-fs (loop3): 1 truncate cleaned up [ 115.059782][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.103652][ T5777] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 115.111518][ T5777] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 115.128448][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 115.185722][ T5770] loop1: detected capacity change from 0 to 40427 [ 115.209856][ T5770] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 115.226184][ T5770] F2FS-fs (loop1): invalid crc value [ 115.277030][ T5770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.398243][ T5770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.592431][ T4256] syz-executor: attempt to access beyond end of device [ 115.592431][ T4256] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.225706][ T5812] loop2: detected capacity change from 0 to 8192 [ 116.253471][ T5812] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.289284][ T5803] loop4: detected capacity change from 0 to 32768 [ 116.324996][ T5812] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 116.356122][ T5812] REISERFS (device loop2): using ordered data mode [ 116.376484][ T5812] reiserfs: using flush barriers [ 116.391468][ T5803] XFS (loop4): Mounting V5 Filesystem [ 116.416939][ T5812] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.488530][ T5812] REISERFS (device loop2): checking transaction log (loop2) [ 116.499959][ T5803] XFS (loop4): Ending clean mount [ 116.560757][ T26] audit: type=1800 audit(1751071053.872:20): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.545" name="bus" dev="loop4" ino=6153 res=0 errno=0 [ 116.658687][ T5821] loop1: detected capacity change from 0 to 32768 [ 116.726090][ T4253] XFS (loop4): Unmounting Filesystem [ 116.736960][ T5821] XFS (loop1): Mounting V5 Filesystem [ 116.800306][ T5812] REISERFS (device loop2): Using tea hash to sort names [ 116.832731][ T5821] XFS (loop1): Ending clean mount [ 116.837450][ T5846] loop3: detected capacity change from 0 to 256 [ 116.839813][ T5812] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 116.856922][ T5821] XFS (loop1): Quotacheck needed: Please wait. [ 116.947688][ T5821] XFS (loop1): Quotacheck: Done. [ 117.072572][ T4256] XFS (loop1): Unmounting Filesystem [ 117.159577][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 117.391975][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 118.223084][ T5894] loop1: detected capacity change from 0 to 8192 [ 118.233596][ T5903] device wlan0 entered promiscuous mode [ 118.250962][ T5903] device macsec1 entered promiscuous mode [ 118.273642][ T5894] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.290556][ T5894] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 118.300459][ T5894] REISERFS (device loop1): using ordered data mode [ 118.307303][ T5894] reiserfs: using flush barriers [ 118.322475][ T5894] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.358484][ T5894] REISERFS (device loop1): checking transaction log (loop1) [ 118.379191][ T5894] REISERFS (device loop1): Using r5 hash to sort names [ 118.386691][ T5894] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 118.402238][ T5894] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 118.430836][ T5894] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 118.474440][ T5894] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 118.499954][ T5894] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 118.676250][ T5922] loop2: detected capacity change from 0 to 256 [ 118.689971][ T5922] exfat: Deprecated parameter 'namecase' [ 118.702936][ T5922] exfat: Deprecated parameter 'utf8' [ 118.755385][ T5922] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 118.787397][ T5904] loop3: detected capacity change from 0 to 32768 [ 118.810837][ T5922] autofs4:pid:5922:autofs_fill_super: could not open pipe file descriptor [ 118.860880][ T5904] XFS (loop3): Mounting V5 Filesystem [ 118.980174][ T5904] XFS (loop3): Ending clean mount [ 118.997845][ T5904] XFS (loop3): Quotacheck needed: Please wait. [ 119.031951][ T5904] XFS (loop3): Quotacheck: Done. [ 119.086114][ T4254] XFS (loop3): Unmounting Filesystem [ 119.138888][ T5942] loop1: detected capacity change from 0 to 64 [ 119.193644][ T5944] device wlan0 entered promiscuous mode [ 119.199364][ T5944] device macsec1 entered promiscuous mode [ 119.373033][ T5950] loop6: detected capacity change from 0 to 524287999 [ 119.391500][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.400729][ C1] buffer_io_error: 2507 callbacks suppressed [ 119.400742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.440506][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 119.463070][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.472255][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.497151][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.506408][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.533658][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.542895][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.555852][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.565128][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.598444][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.607711][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.616828][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.626049][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.665215][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.674441][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.682492][ T5950] ldm_validate_partition_table(): Disk read failed. [ 119.733287][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.742494][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.769475][ T5959] loop3: detected capacity change from 0 to 8192 [ 119.776737][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.785935][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.805497][ T5950] Dev loop6: unable to read RDB block 0 [ 119.811352][ T5959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.817560][ T5950] loop6: unable to read partition table [ 119.831848][ T5950] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 119.840868][ T5959] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 119.872552][ T5959] REISERFS (device loop3): using ordered data mode [ 119.897946][ T5959] reiserfs: using flush barriers [ 119.931168][ T5959] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.953707][ T5959] REISERFS (device loop3): checking transaction log (loop3) [ 120.149960][ T5959] REISERFS (device loop3): Using tea hash to sort names [ 120.172467][ T5959] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 120.405070][ T5989] loop1: detected capacity change from 0 to 4096 [ 120.552895][ T4703] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.627097][ T5997] loop4: detected capacity change from 0 to 2048 [ 120.649945][ T6001] Failed to get privilege flags for destination (handle=0x2:0x0) [ 120.660472][ T6003] netlink: 'syz.3.627': attribute type 3 has an invalid length. [ 120.669132][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 120.689568][ T5997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.733019][ T5997] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 120.749920][ T4703] usb 3-1: Using ep0 maxpacket: 32 [ 120.753149][ T5997] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 120.763967][ T4703] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 120.783632][ T4703] usb 3-1: config 0 has no interface number 0 [ 120.790753][ T4703] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 120.801807][ T4703] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 120.812461][ T4703] usb 3-1: config 0 interface 126 has no altsetting 0 [ 120.821433][ T4703] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 120.832953][ T5997] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.832953][ T5997] [ 120.835292][ T4703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.853226][ T4703] usb 3-1: Product: syz [ 120.862899][ T4703] usb 3-1: Manufacturer: syz [ 120.872888][ T4703] usb 3-1: SerialNumber: syz [ 120.878675][ T5997] EXT4-fs (loop4): Total free blocks count 0 [ 120.884862][ T4703] usb 3-1: config 0 descriptor?? [ 120.885476][ T5985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.911704][ T5985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.920560][ T5997] EXT4-fs (loop4): Free/Dirty block details [ 120.943146][ T5997] EXT4-fs (loop4): free_blocks=2415919504 [ 120.949201][ T5997] EXT4-fs (loop4): dirty_blocks=48 [ 120.958214][ T5997] EXT4-fs (loop4): Block reservation details [ 120.966364][ T5997] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 120.986037][ T6009] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 121.168723][ T6019] loop1: detected capacity change from 0 to 8192 [ 121.185463][ T6019] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.217838][ T6019] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 121.227320][ T6019] REISERFS (device loop1): using ordered data mode [ 121.234412][ T6019] reiserfs: using flush barriers [ 121.241588][ T6019] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.259141][ T6019] REISERFS (device loop1): checking transaction log (loop1) [ 121.322909][ T5024] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.326128][ T6030] mkiss: ax0: crc mode is auto. [ 121.343657][ T4703] ir_usb 3-1:0.126: IR Dongle converter detected [ 121.369695][ T6019] REISERFS (device loop1): Using tea hash to sort names [ 121.377551][ T6019] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 121.442968][ T5019] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.540282][ T5024] usb 1-1: Using ep0 maxpacket: 32 [ 121.547498][ T5024] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.558427][ T4703] usb 3-1: IRDA class descriptor not found, device not bound [ 121.562826][ T5024] usb 1-1: config 0 has no interface number 0 [ 121.582832][ T5024] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.602814][ T5024] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.612637][ T5024] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 121.625642][ T5024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.638568][ T5024] usb 1-1: config 0 descriptor?? [ 121.657811][ T5019] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.672677][ T5019] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.695450][ T5019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.702149][ T5019] usb 4-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 121.718425][ T5019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.730352][ T5019] usb 4-1: config 0 descriptor?? [ 121.732868][ T4325] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.782308][ T4703] usb 3-1: USB disconnect, device number 7 [ 121.924874][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.942991][ T4325] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 121.952085][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.967681][ T4325] usb 5-1: config 0 descriptor?? [ 122.132820][ T5025] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.149649][ T5019] wacom 0003:056A:00CE.0008: hidraw0: USB HID vff.fe Device [HID 056a:00ce] on usb-dummy_hcd.3-1/input0 [ 122.260219][ T5024] uclogic 0003:28BD:0094.0007: pen parameters not found [ 122.267349][ T5024] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 122.323068][ T5025] usb 2-1: Using ep0 maxpacket: 16 [ 122.336511][ T5025] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.348128][ T5025] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 122.357352][ T5025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.368364][ T5025] usb 2-1: config 0 descriptor?? [ 122.369040][ T954] usb 4-1: USB disconnect, device number 5 [ 122.382951][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.392952][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.400892][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.410881][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.419708][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.427787][ T4325] steelseries_srws1 0003:1038:1410.0009: unknown main item tag 0x0 [ 122.435813][ T4325] steelseries_srws1 0003:1038:1410.0009: unexpected long global item [ 122.445261][ T4325] steelseries_srws1 0003:1038:1410.0009: parse failed [ 122.452086][ T4325] steelseries_srws1: probe of 0003:1038:1410.0009 failed with error -22 [ 122.467041][ T4325] usb 1-1: USB disconnect, device number 5 [ 122.596302][ T4703] usb 5-1: USB disconnect, device number 9 [ 122.782640][ T5025] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 122.789843][ T5025] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 122.797473][ T5025] appleir 0003:05AC:8241.000A: item fetching failed at offset 3/5 [ 122.808294][ T5025] appleir 0003:05AC:8241.000A: parse failed [ 122.814455][ T5025] appleir: probe of 0003:05AC:8241.000A failed with error -22 [ 122.987900][ T4703] usb 2-1: USB disconnect, device number 9 [ 123.012114][ T6046] loop3: detected capacity change from 0 to 256 [ 123.182083][ T6056] loop3: detected capacity change from 0 to 64 [ 123.332391][ T6062] loop3: detected capacity change from 0 to 2048 [ 123.351611][ T6062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.584348][ T6059] loop4: detected capacity change from 0 to 8192 [ 123.641045][ T6059] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.715213][ T6059] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 123.759715][ T6059] REISERFS (device loop4): using ordered data mode [ 123.810432][ T6059] reiserfs: using flush barriers [ 123.854282][ T6059] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.943795][ T6059] REISERFS (device loop4): checking transaction log (loop4) [ 124.145812][ T6072] capability: warning: `syz.3.658' uses 32-bit capabilities (legacy support in use) [ 124.235841][ T6073] loop3: detected capacity change from 0 to 512 [ 124.242764][ C1] sched: RT throttling activated [ 124.286310][ T6059] REISERFS (device loop4): Using tea hash to sort names [ 124.317724][ T6059] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 124.482467][ T6054] loop2: detected capacity change from 0 to 40427 [ 124.502908][ T6054] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.523132][ T6054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.555506][ T6054] F2FS-fs (loop2): invalid crc value [ 124.637199][ T6054] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 124.676969][ T6054] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 124.690828][ T6073] ext4: Unknown parameter 'noacl' [ 124.866149][ T6054] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.879423][ T6054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.922917][ T4703] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.077842][ T6088] loop1: detected capacity change from 0 to 32768 [ 125.112838][ T4703] usb 1-1: Using ep0 maxpacket: 8 [ 125.119555][ T4703] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.144490][ T4703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.173345][ T4703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.187536][ T4703] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.203876][ T4703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.213355][ T4703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.411547][ T6103] netlink: 'syz.4.671': attribute type 10 has an invalid length. [ 125.437301][ T4703] usb 1-1: GET_CAPABILITIES returned 0 [ 125.445299][ T4703] usbtmc 1-1:16.0: can't read capabilities [ 125.455884][ T6103] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 125.646508][ T4703] usb 1-1: USB disconnect, device number 6 [ 125.701640][ T6111] loop1: detected capacity change from 0 to 8192 [ 125.729944][ T6111] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.770558][ T6120] loop4: detected capacity change from 0 to 256 [ 125.774048][ T6111] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 125.777920][ T6120] exfat: Deprecated parameter 'namecase' [ 125.792482][ T6120] exfat: Deprecated parameter 'utf8' [ 125.798929][ T6111] REISERFS (device loop1): using ordered data mode [ 125.806010][ T6111] reiserfs: using flush barriers [ 125.826595][ T6111] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.840755][ T6120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 125.852229][ T6111] REISERFS (device loop1): checking transaction log (loop1) [ 125.938356][ T6126] device veth1_to_batadv entered promiscuous mode [ 126.041719][ T6111] REISERFS (device loop1): Using tea hash to sort names [ 126.052226][ T6111] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 126.091867][ T6131] loop2: detected capacity change from 0 to 2048 [ 126.101578][ T6131] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.139432][ T6131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.730315][ T6158] loop4: detected capacity change from 0 to 1024 [ 126.823620][ T6158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.961076][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 127.077758][ T6152] loop2: detected capacity change from 0 to 32768 [ 127.146318][ T6152] XFS (loop2): Mounting V5 Filesystem [ 127.217906][ T6154] loop1: detected capacity change from 0 to 32768 [ 127.298802][ T6152] XFS (loop2): Ending clean mount [ 127.313709][ T6154] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.327107][ T6152] XFS (loop2): Quotacheck needed: Please wait. [ 127.391233][ T75] (kworker/u4:4,75,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 127.442285][ T6152] XFS (loop2): Quotacheck: Done. [ 127.600675][ T4255] XFS (loop2): Unmounting Filesystem [ 127.710794][ T6181] loop4: detected capacity change from 0 to 32768 [ 127.721754][ T6154] (syz.1.690,6154,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 127.749882][ T6181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.700 (6181) [ 127.750001][ T6154] (syz.1.690,6154,0):ocfs2_orphan_del:2379 ERROR: status = -117 [ 127.778875][ T6154] (syz.1.690,6154,1):ocfs2_orphan_del:2401 ERROR: status = -117 [ 127.795536][ T6154] (syz.1.690,6154,1):ocfs2_remove_inode:676 ERROR: status = -117 [ 127.814893][ T6154] (syz.1.690,6154,1):ocfs2_wipe_inode:821 ERROR: status = -117 [ 127.828160][ T6181] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.841617][ T6154] (syz.1.690,6154,1):ocfs2_delete_inode:1082 ERROR: status = -117 [ 127.854906][ T6181] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 127.888989][ T6181] BTRFS info (device loop4): setting nodatacow, compression disabled [ 127.902897][ T6181] BTRFS info (device loop4): enabling ssd optimizations [ 127.920081][ T6181] BTRFS info (device loop4): setting datacow [ 127.932939][ T6181] BTRFS info (device loop4): doing ref verification [ 127.948107][ T6181] BTRFS info (device loop4): force clearing of disk cache [ 127.962307][ T6181] BTRFS info (device loop4): turning off barriers [ 127.971611][ T4256] (syz-executor,4256,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 127.978424][ T6187] loop3: detected capacity change from 0 to 4096 [ 127.989627][ T6181] BTRFS info (device loop4): using spread ssd allocation scheme [ 127.998537][ T4256] (syz-executor,4256,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 128.009916][ T6181] BTRFS info (device loop4): using free space tree [ 128.022224][ T4256] ocfs2: Unmounting device (7,1) on (node local) [ 128.090981][ T6187] ntfs: volume version 3.1. [ 128.143014][ T954] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 128.220787][ T6181] BTRFS info (device loop4): rebuilding free space tree [ 128.227039][ T6209] loop1: detected capacity change from 0 to 4096 [ 128.263382][ T6209] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 128.275998][ T6209] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 128.295195][ T6209] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 128.304191][ T6209] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 128.325116][ T6209] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 128.331030][ T6187] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 128.358763][ T954] usb 1-1: config 11 has an invalid interface number: 89 but max is 0 [ 128.373385][ T6209] ntfs: volume version 3.1. [ 128.377035][ T954] usb 1-1: config 11 has no interface number 0 [ 128.379378][ T6209] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 128.393397][ T6187] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 128.403154][ T954] usb 1-1: config 11 interface 89 has no altsetting 0 [ 128.431528][ T6209] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 128.449201][ T6187] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 128.449831][ T954] usb 1-1: New USB device found, idVendor=05ac, idProduct=60a3, bcdDevice=27.33 [ 128.473489][ T954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.486568][ T954] usb 1-1: Product: syz [ 128.491045][ T954] usb 1-1: Manufacturer: syz [ 128.502215][ T954] usb 1-1: SerialNumber: syz [ 128.539370][ T4253] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.677314][ T6195] loop2: detected capacity change from 0 to 32768 [ 128.720839][ T6195] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.703 (6195) [ 128.733572][ T954] ipheth 1-1:11.89: Unable to find alternate settings interface [ 128.745702][ T954] usb 1-1: USB disconnect, device number 7 [ 128.822864][ T6195] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 128.846502][ T6195] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 128.869149][ T6195] BTRFS info (device loop2): using free space tree [ 129.024487][ T6211] loop1: detected capacity change from 0 to 32768 [ 129.061918][ T6195] BTRFS info (device loop2): enabling ssd optimizations [ 129.308739][ T6225] loop4: detected capacity change from 0 to 32768 [ 129.358694][ T4255] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 129.375141][ T6225] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 129.557724][ T6240] loop1: detected capacity change from 0 to 1024 [ 129.612218][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.711911][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 129.740374][ T4256] EXT4-fs (loop1): unmounting filesystem. [ 129.936166][ T6248] loop2: detected capacity change from 0 to 64 [ 129.942657][ T6235] loop3: detected capacity change from 0 to 40427 [ 129.965293][ T6235] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 129.982879][ T6235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.010329][ T6235] F2FS-fs (loop3): invalid crc value [ 130.050402][ T6235] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.171297][ T6235] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.187547][ T6235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 130.308799][ T6259] loop2: detected capacity change from 0 to 256 [ 130.343430][ T4254] syz-executor: attempt to access beyond end of device [ 130.343430][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.379885][ T6259] FAT-fs (loop2): Directory bread(block 64) failed [ 130.387541][ T6259] FAT-fs (loop2): Directory bread(block 65) failed [ 130.418953][ T6259] FAT-fs (loop2): Directory bread(block 66) failed [ 130.439184][ T6259] FAT-fs (loop2): Directory bread(block 67) failed [ 130.453573][ T6259] FAT-fs (loop2): Directory bread(block 68) failed [ 130.460144][ T6259] FAT-fs (loop2): Directory bread(block 69) failed [ 130.502927][ T6259] FAT-fs (loop2): Directory bread(block 70) failed [ 130.523954][ T6259] FAT-fs (loop2): Directory bread(block 71) failed [ 130.533468][ T6246] loop1: detected capacity change from 0 to 32768 [ 130.543707][ T6259] FAT-fs (loop2): Directory bread(block 72) failed [ 130.550271][ T6259] FAT-fs (loop2): Directory bread(block 73) failed [ 130.588687][ T6251] loop4: detected capacity change from 0 to 32768 [ 130.601625][ T6246] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.628716][ T6251] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 130.685299][ T4256] ocfs2: Unmounting device (7,1) on (node local) [ 130.703141][ T6251] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.845497][ T6259] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 130.873023][ T6259] FAT-fs (loop2): Filesystem has been set read-only [ 130.894446][ T6259] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 131.018333][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 131.223036][ T954] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.305535][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 131.427156][ T954] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.448011][ T954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.462895][ T954] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 131.481650][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.513793][ T954] usb 4-1: config 0 descriptor?? [ 131.610650][ T6277] loop2: detected capacity change from 0 to 32768 [ 131.928130][ T954] kye 0003:0458:5013.000B: ignoring exceeding usage max [ 131.963147][ T954] kye 0003:0458:5013.000B: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 131.998468][ T954] kye 0003:0458:5013.000B: tablet-enabling feature report not found [ 132.017103][ T954] kye 0003:0458:5013.000B: tablet enabling failed [ 132.130637][ T954] usb 4-1: USB disconnect, device number 6 [ 132.229243][ T6290] loop4: detected capacity change from 0 to 32768 [ 132.285630][ T6290] XFS (loop4): Mounting V5 Filesystem [ 132.367909][ T6290] XFS (loop4): Ending clean mount [ 132.442517][ T4253] XFS (loop4): Unmounting Filesystem [ 132.459575][ T4699] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 132.658598][ T4699] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.677048][ T4699] usb 1-1: config 0 has no interface number 0 [ 132.697840][ T4699] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 132.724891][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.731262][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.743850][ T4699] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 132.765041][ T4699] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.774800][ T4699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.796257][ T4699] usb 1-1: config 0 descriptor?? [ 132.809061][ T6310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.835721][ T4699] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 133.262912][ T4699] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.403666][ T6353] loop2: detected capacity change from 0 to 64 [ 133.425591][ T6353] hfs: request for non-existent node 1317 in B*Tree [ 133.432429][ T6353] hfs: request for non-existent node 1317 in B*Tree [ 133.440111][ T6353] hfs: request for non-existent node 1536 in B*Tree [ 133.447161][ T4699] usb 2-1: Using ep0 maxpacket: 16 [ 133.452533][ T6353] hfs: request for non-existent node 1536 in B*Tree [ 133.460925][ T4699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.478314][ T4699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.497399][ T4699] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 133.517093][ T4699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.527492][ T11] hfs: request for non-existent node 1317 in B*Tree [ 133.528228][ T4699] usb 2-1: config 0 descriptor?? [ 133.543730][ T5019] usb 1-1: USB disconnect, device number 8 [ 133.552963][ T11] hfs: request for non-existent node 1317 in B*Tree [ 133.854280][ T6363] block nbd0: shutting down sockets [ 133.887214][ T6351] loop4: detected capacity change from 0 to 32768 [ 133.946202][ T4699] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 133.955954][ T6351] XFS (loop4): Mounting V5 Filesystem [ 133.967598][ T4699] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 133.977153][ T4699] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 133.985298][ T4699] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 133.993008][ T4699] glorious 0003:22D4:1503.000C: unknown main item tag 0x0 [ 134.003852][ T4699] glorious 0003:22D4:1503.000C: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 134.069944][ T6351] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 134.078751][ T6380] bridge: RTM_NEWNEIGH with invalid ether address [ 134.124205][ T6351] XFS (loop4): Starting recovery (logdev: internal) [ 134.169772][ T4699] usb 2-1: USB disconnect, device number 10 [ 134.190618][ T6351] XFS (loop4): Ending recovery (logdev: internal) [ 134.332629][ T6384] loop3: detected capacity change from 0 to 1024 [ 134.354119][ T6384] EXT4-fs: Ignoring removed bh option [ 134.375895][ T4253] XFS (loop4): Unmounting Filesystem [ 134.429881][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.638347][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 134.919875][ T6397] loop2: detected capacity change from 0 to 4096 [ 134.940987][ T6397] __ntfs_error: 5 callbacks suppressed [ 134.941005][ T6397] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 134.961752][ T6397] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 134.983032][ T6397] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.002081][ T6397] ntfs: volume version 3.1. [ 135.008990][ T6397] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 135.027024][ T6397] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 135.047100][ T6397] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 135.062914][ T5025] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 135.264767][ T5025] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.292944][ T5025] usb 4-1: config 0 has no interface number 0 [ 135.303037][ T5025] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.332002][ T5025] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.350818][ T6422] loop2: detected capacity change from 0 to 128 [ 135.359487][ T5025] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.369177][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.378469][ T6422] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.403439][ T6422] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.407486][ T5025] usb 4-1: config 0 descriptor?? [ 135.440233][ T6393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.455343][ T5025] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.532264][ T75] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.564247][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 135.903417][ T6444] loop1: detected capacity change from 0 to 8192 [ 136.003148][ T5019] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.192856][ T5019] usb 5-1: Using ep0 maxpacket: 32 [ 136.199793][ T5019] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.218757][ T5019] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.264661][ T5019] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 136.271952][ T954] usb 4-1: USB disconnect, device number 7 [ 136.281330][ T5019] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 136.281357][ T5019] usb 5-1: Product: syz [ 136.281370][ T5019] usb 5-1: Manufacturer: syz [ 136.281384][ T5019] usb 5-1: SerialNumber: syz [ 136.295929][ T5019] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input18 [ 136.392919][ T4699] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.486477][ T6477] loop2: detected capacity change from 0 to 2048 [ 136.491648][ T6478] loop1: detected capacity change from 0 to 2048 [ 136.508638][ T5019] usb 5-1: USB disconnect, device number 10 [ 136.526545][ T5019] appletouch 5-1:1.0: input: appletouch disconnected [ 136.540306][ T6477] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.571104][ T6481] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.597835][ T6478] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 136.620031][ T6478] UDF-fs: Scanning with blocksize 512 failed [ 136.652062][ T6478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.735547][ T6481] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 136.769461][ T6481] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 136.822190][ T6481] Remounting filesystem read-only [ 136.843751][ T4255] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 137.358103][ T6480] loop3: detected capacity change from 0 to 131072 [ 137.395913][ T4699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.408977][ T4699] usb 1-1: no configurations [ 137.413994][ T4699] usb 1-1: can't read configurations, error -22 [ 137.420974][ T6480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.467837][ T6480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.633403][ T6485] loop2: detected capacity change from 0 to 40427 [ 137.653032][ T6485] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.660802][ T6485] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.735671][ T6485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.806469][ T6485] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.824455][ T6485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.853006][ T4297] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.969685][ T26] audit: type=1800 audit(1751071075.282:22): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 138.071587][ T4297] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.093856][ T4297] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.139126][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.166639][ T4297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 138.198402][ T4297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 138.229416][ T4297] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.256824][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.284867][ T4297] usb 5-1: Product: syz [ 138.297771][ T4297] usb 5-1: Manufacturer: syz [ 138.321457][ T4297] cdc_wdm 5-1:1.0: skipping garbage [ 138.364391][ T4297] cdc_wdm 5-1:1.0: skipping garbage [ 138.403654][ T4297] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 138.409617][ T4297] cdc_wdm 5-1:1.0: Unknown control protocol [ 138.529826][ T5025] usb 5-1: USB disconnect, device number 11 [ 138.555178][ T6505] loop1: detected capacity change from 0 to 32768 [ 138.714432][ T6505] XFS (loop1): Mounting V5 Filesystem [ 138.898642][ T6505] XFS (loop1): Ending clean mount [ 138.999477][ T6505] XFS (loop1): Quotacheck needed: Please wait. [ 139.059676][ T6505] XFS (loop1): Quotacheck: Done. [ 139.171809][ T4256] XFS (loop1): Unmounting Filesystem [ 139.408906][ T6532] loop2: detected capacity change from 0 to 32768 [ 139.441777][ T6532] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.820 (6532) [ 139.495930][ T6532] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 139.540617][ T6532] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 139.563539][ T6532] BTRFS info (device loop2): using free space tree [ 139.650528][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 139.661302][ T6547] IPVS: Error joining to the multicast group [ 139.782434][ T6536] loop3: detected capacity change from 0 to 40427 [ 139.814055][ T6536] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 139.821044][ T6536] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.856590][ T6536] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 139.868758][ T6536] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 139.880884][ T6532] BTRFS info (device loop2): enabling ssd optimizations [ 139.905708][ T6536] F2FS-fs (loop3): invalid crc value [ 139.994370][ T6536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.052296][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 140.097170][ T4255] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 140.113149][ T6536] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.128787][ T6536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.272996][ T6536] syz.3.827: attempt to access beyond end of device [ 140.272996][ T6536] loop3: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 140.346085][ T6588] syz.3.827: attempt to access beyond end of device [ 140.346085][ T6588] loop3: rw=2049, sector=53344, nr_sectors = 8 limit=40427 [ 140.504329][ T4254] syz-executor: attempt to access beyond end of device [ 140.504329][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.535611][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 140.574753][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 140.605547][ T5025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.622164][ T5025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.649555][ T4297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.782184][ T6603] tun0: tun_chr_ioctl cmd 1074025681 [ 140.797938][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 140.829296][ T6609] loop4: detected capacity change from 0 to 1024 [ 140.910624][ T6609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.935845][ T6609] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.094426][ T4297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.109254][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 141.256682][ T4297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.449648][ T6642] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 141.479767][ T6642] netlink: 'syz.3.860': attribute type 2 has an invalid length. [ 141.676143][ T26] audit: type=1326 audit(1751071078.992:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 141.698261][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.736990][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 141.760204][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 141.804547][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 141.814291][ T26] audit: type=1326 audit(1751071079.032:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 141.875072][ T6651] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.908827][ T26] audit: type=1326 audit(1751071079.032:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 141.931005][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.965140][ T6651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.092335][ T26] audit: type=1326 audit(1751071079.032:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 142.114547][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.148554][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 142.227886][ T26] audit: type=1326 audit(1751071079.032:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 142.230775][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 142.274271][ T26] audit: type=1326 audit(1751071079.042:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 142.351431][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 142.355203][ T26] audit: type=1326 audit(1751071079.032:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c438e929 code=0x7ffc0000 [ 142.367428][ T6653] loop4: detected capacity change from 0 to 8192 [ 142.384042][ T6661] loop2: detected capacity change from 0 to 64 [ 142.406776][ T6661] hfs: unable to locate alternate MDB [ 142.410798][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 142.419409][ T6661] hfs: continuing without an alternate MDB [ 142.429821][ T6651] dummy0 speed is unknown, defaulting to 1000 [ 142.449987][ T6661] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 142.481652][ T6653] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.579637][ T6653] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 142.617556][ T6653] REISERFS (device loop4): using ordered data mode [ 142.631600][ T6672] loop2: detected capacity change from 0 to 16 [ 142.663835][ T6653] reiserfs: using flush barriers [ 142.698866][ T6653] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.762509][ T6653] REISERFS (device loop4): checking transaction log (loop4) [ 142.789884][ T6653] REISERFS (device loop4): Using r5 hash to sort names [ 142.798879][ T6679] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 142.813534][ T6653] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 143.217374][ T6702] netlink: 'syz.0.891': attribute type 1 has an invalid length. [ 143.233442][ T6702] netlink: 'syz.0.891': attribute type 2 has an invalid length. [ 143.716839][ T6714] netlink: 244 bytes leftover after parsing attributes in process `syz.0.896'. [ 143.991953][ T6724] loop3: detected capacity change from 0 to 1024 [ 144.083888][ T6724] EXT4-fs: Ignoring removed nobh option [ 144.089491][ T6724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.138035][ T6724] EXT4-fs: Ignoring removed bh option [ 144.157367][ T6724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.221474][ T6724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.341533][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 144.408770][ T5025] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.604800][ T5025] usb 5-1: Using ep0 maxpacket: 32 [ 144.618510][ T5025] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 144.628436][ T6748] MPI: mpi too large (16392 bits) [ 144.661305][ T5025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.672434][ T5025] usb 5-1: config 0 descriptor?? [ 144.882976][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.890761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.902018][ T5025] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 144.916388][ T5025] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.919007][ T6742] loop3: detected capacity change from 0 to 32768 [ 144.954655][ T6750] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 144.956385][ T6742] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.983302][ T75] (kworker/u4:4,75,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 144.985304][ T6750] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table [ 145.007274][ T5025] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.007330][ T5025] usb 5-1: media controller created [ 145.056021][ T6742] (syz.3.909,6742,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 145.082208][ T5025] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.091934][ T6762] xt_bpf: check failed: parse error [ 145.143243][ T5025] az6027: usb out operation failed. (-71) [ 145.169629][ T5025] az6027: usb out operation failed. (-71) [ 145.192838][ T5025] stb0899_attach: Driver disabled by Kconfig [ 145.209782][ T5025] az6027: no front-end attached [ 145.209782][ T5025] [ 145.225182][ T5025] az6027: usb out operation failed. (-71) [ 145.231240][ T5025] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.234249][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 145.239978][ T5025] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 145.297711][ T5025] dvb-usb: schedule remote query interval to 400 msecs. [ 145.316874][ T5025] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.337279][ T5025] usb 5-1: USB disconnect, device number 12 [ 145.415828][ T5025] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 145.469647][ T6774] netlink: 56 bytes leftover after parsing attributes in process `syz.2.922'. [ 145.657766][ T5024] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.854381][ T5024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.874819][ T5024] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.908556][ T5024] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.937534][ T5024] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.954839][ T5024] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 145.966592][ T5024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.982002][ T5024] usb 2-1: config 0 descriptor?? [ 145.988979][ T6804] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 146.262385][ T6810] loop4: detected capacity change from 0 to 2048 [ 146.291378][ T6814] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 146.339104][ T6810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.375827][ T6810] EXT4-fs (loop4): shut down requested (0) [ 146.397525][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.405838][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.412579][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.420179][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.428512][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.435402][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.442131][ T5024] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 146.450224][ T5024] kye 0003:0458:5015.000D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 146.465814][ T5024] kye 0003:0458:5015.000D: tablet-enabling feature report not found [ 146.479059][ T5024] kye 0003:0458:5015.000D: tablet enabling failed [ 146.548167][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 146.599798][ T5025] usb 2-1: USB disconnect, device number 11 [ 146.662804][ T6831] loop3: detected capacity change from 0 to 512 [ 146.677962][ T6831] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 146.686168][ T6831] System zones: 0-2, 18-18, 34-35 [ 146.695895][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 146.695974][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 146.703656][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x40 [ 146.711061][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 146.723151][ T6831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.723823][ T4267] Bluetooth: hci3: Malformed LE Event: 0x02 [ 146.747371][ T6831] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.937625][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 147.352935][ T5025] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.427475][ T6869] binder: 6868:6869 ioctl c0046209 0 returned -22 [ 147.552965][ T5025] usb 4-1: Using ep0 maxpacket: 8 [ 147.559599][ T5025] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.581490][ T5025] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.593992][ T5025] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.607750][ T5025] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.614707][ T5025] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 147.625647][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.638216][ T5025] usb 4-1: config 0 descriptor?? [ 147.792892][ T5024] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.900168][ T6889] loop2: detected capacity change from 0 to 512 [ 147.930751][ T6889] EXT4-fs: Ignoring removed oldalloc option [ 147.940860][ T6889] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.956837][ T6889] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 147.967039][ T6889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c02c, mo2=0102] [ 147.975637][ T6889] System zones: 0-2, 18-18, 34-34 [ 147.994006][ T6889] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.971: iget: bad i_size value: 360287970189639680 [ 148.013458][ T5024] usb 5-1: Using ep0 maxpacket: 32 [ 148.020786][ T5024] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.030413][ T6889] EXT4-fs (loop2): Remounting filesystem read-only [ 148.038318][ T6889] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.971: couldn't read orphan inode 15 (err -117) [ 148.064388][ T5025] chicony 0003:04F2:1421.000E: unbalanced delimiter at end of report description [ 148.074560][ T6889] EXT4-fs (loop2): Remounting filesystem read-only [ 148.081108][ T6889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.096395][ T5024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.107849][ T5025] chicony 0003:04F2:1421.000E: Chicony hid parse failed: -22 [ 148.126120][ T5024] usb 5-1: config 0 descriptor?? [ 148.131277][ T6889] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.971: bg 0: block 80: padding at end of block bitmap is not set [ 148.131304][ T5025] chicony: probe of 0003:04F2:1421.000E failed with error -22 [ 148.168537][ T6889] EXT4-fs (loop2): Remounting filesystem read-only [ 148.224715][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 148.278609][ T4699] usb 4-1: USB disconnect, device number 8 [ 148.371403][ T5024] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 148.383690][ T5024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.413830][ T5024] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 148.435119][ T5024] usb 5-1: media controller created [ 148.480037][ T5024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.572833][ T5024] az6027: usb out operation failed. (-71) [ 148.591362][ T5024] az6027: usb out operation failed. (-71) [ 148.602266][ T5024] stb0899_attach: Driver disabled by Kconfig [ 148.618507][ T5024] az6027: no front-end attached [ 148.618507][ T5024] [ 148.626080][ T5024] az6027: usb out operation failed. (-71) [ 148.643638][ T5024] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 148.663781][ T5024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 148.684021][ T5024] dvb-usb: schedule remote query interval to 400 msecs. [ 148.697183][ T5024] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 148.713318][ T5024] usb 5-1: USB disconnect, device number 13 [ 148.745595][ T5024] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.352500][ T6942] device bond0 entered promiscuous mode [ 149.381746][ T6942] device bond_slave_0 entered promiscuous mode [ 149.391939][ T6942] device bond_slave_1 entered promiscuous mode [ 149.420371][ T6942] device bond0 left promiscuous mode [ 149.436746][ T6942] device bond_slave_0 left promiscuous mode [ 149.457068][ T6942] device bond_slave_1 left promiscuous mode [ 149.788486][ T6954] loop2: detected capacity change from 0 to 256 [ 149.867852][ T6954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 149.989284][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 150.517743][ T6990] loop4: detected capacity change from 0 to 64 [ 150.541227][ T6990] hfs: filesystem is marked locked, mounting read-only. [ 150.747052][ T6995] loop3: detected capacity change from 0 to 4096 [ 150.836137][ T26] audit: type=1800 audit(1751071088.152:30): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1022" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 151.028902][ T6982] loop2: detected capacity change from 0 to 32768 [ 151.101006][ T7007] loop3: detected capacity change from 0 to 1024 [ 151.173641][ T7007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.209098][ T26] audit: type=1800 audit(1751071088.522:31): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1028" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 151.304574][ T7007] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.1028: Allocating blocks 497-513 which overlap fs metadata [ 151.372370][ T7007] EXT4-fs (loop3): pa ffff8880757e92a0: logic 256, phys. 385, len 8 [ 151.381062][ T7007] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 151.411234][ T7021] input: syz0 as /devices/virtual/input/input22 [ 151.488156][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 152.081379][ T7025] loop2: detected capacity change from 0 to 32768 [ 152.430418][ T7063] loop3: detected capacity change from 0 to 256 [ 152.474061][ T7065] tap0: tun_chr_ioctl cmd 1074025678 [ 152.479400][ T7065] tap0: group set to 0 [ 152.676327][ T7075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.689521][ T7075] bond0: (slave bond1): Enslaving as an active interface with an up link [ 152.710569][ T7078] vxcan1: tx address claim with different name [ 153.316036][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1076'. [ 153.843954][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.893527][ T7106] loop2: detected capacity change from 0 to 40427 [ 153.912922][ T7106] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 153.938056][ T7106] F2FS-fs (loop2): invalid crc value [ 153.965379][ T7106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.078330][ T7106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.151648][ T7106] F2FS-fs (loop2) : inject dquot initialize in f2fs_dquot_initialize of f2fs_evict_inode+0x505/0x17c0 [ 154.324830][ T4255] syz-executor: attempt to access beyond end of device [ 154.324830][ T4255] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 154.367975][ T4255] syz-executor: attempt to access beyond end of device [ 154.367975][ T4255] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 154.572179][ T1102] kworker/u4:5: attempt to access beyond end of device [ 154.572179][ T1102] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 154.640537][ T5019] hid-generic 0005:16C0:05DF.000F: item fetching failed at offset 0/1 [ 154.675428][ T5019] hid-generic: probe of 0005:16C0:05DF.000F failed with error -22 [ 154.791512][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 154.801166][ T7177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1103'. [ 155.271883][ T4347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.420064][ T7186] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1107'. [ 155.452978][ T7186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 155.508662][ T4347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.692084][ T4347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.754439][ T7179] loop4: detected capacity change from 0 to 40427 [ 155.810042][ T7179] F2FS-fs (loop4): invalid crc value [ 155.817204][ T4347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.833791][ T7179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.877193][ T7179] F2FS-fs (loop4): Start checkpoint disabled! [ 155.905956][ T7179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 156.029590][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 156.063463][ T7199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1121'. [ 156.092969][ T7199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1121'. [ 156.114268][ T7199] device veth1_vlan left promiscuous mode [ 156.128009][ T33] kworker/u4:2: attempt to access beyond end of device [ 156.128009][ T33] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.171169][ T7199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1121'. [ 156.544923][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.555617][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.565815][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.594688][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.603882][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.611196][ T4259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.844778][ T7211] dummy0 speed is unknown, defaulting to 1000 [ 157.210569][ T7213] loop3: detected capacity change from 0 to 40427 [ 157.225092][ T7233] loop4: detected capacity change from 0 to 2048 [ 157.233492][ T7213] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 157.235067][ T7233] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.249768][ T7213] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 157.260755][ T7213] F2FS-fs (loop3): invalid crc value [ 157.279066][ T7236] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.295345][ T5019] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.351249][ T7213] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 157.379298][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 157.428535][ T7236] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 157.441839][ T7236] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 157.464697][ T7236] Remounting filesystem read-only [ 157.471460][ T4253] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 157.501164][ T7213] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 157.512903][ T7213] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.515608][ T5019] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.531334][ T5019] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.538080][ T5019] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 157.547371][ T5019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.563219][ T5019] usb 2-1: config 0 descriptor?? [ 157.610145][ T7248] loop4: detected capacity change from 0 to 512 [ 157.612475][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.631650][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.640401][ T7211] device bridge_slave_0 entered promiscuous mode [ 157.678586][ T4254] syz-executor: attempt to access beyond end of device [ 157.678586][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.686760][ T7248] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 157.708310][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.717526][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.725874][ T7211] device bridge_slave_1 entered promiscuous mode [ 157.747512][ T7248] EXT4-fs (loop4): 1 truncate cleaned up [ 157.761927][ T7248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.774948][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.910363][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 157.922684][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.002105][ T5019] kye 0003:0458:5013.0010: ignoring exceeding usage max [ 158.039373][ T5019] kye 0003:0458:5013.0010: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 158.071950][ T5019] kye 0003:0458:5013.0010: tablet-enabling feature report not found [ 158.097258][ T5019] kye 0003:0458:5013.0010: tablet enabling failed [ 158.266794][ T5019] usb 2-1: USB disconnect, device number 12 [ 158.286739][ T7211] team0: Port device team_slave_0 added [ 158.336162][ T4347] device hsr_slave_0 left promiscuous mode [ 158.354460][ T4347] device hsr_slave_1 left promiscuous mode [ 158.362283][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.369998][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.382314][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.402939][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.410987][ T4347] device bridge_slave_1 left promiscuous mode [ 158.420118][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.449754][ T4347] device bridge_slave_0 left promiscuous mode [ 158.457869][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.507668][ T4347] device veth1_macvtap left promiscuous mode [ 158.516689][ T4347] device veth0_macvtap left promiscuous mode [ 158.523096][ T4347] device veth1_vlan left promiscuous mode [ 158.529552][ T4347] device veth0_vlan left promiscuous mode [ 158.653239][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 159.114815][ T7293] autofs4:pid:7293:autofs_fill_super: could not open pipe file descriptor [ 159.249523][ T4347] bond0 (unregistering): (slave bond1): Releasing backup interface [ 159.271590][ T4347] bond1 (unregistering): Released all slaves [ 159.373032][ T7305] loop6: detected capacity change from 0 to 524287999 [ 159.380603][ C0] blk_print_req_error: 7 callbacks suppressed [ 159.380621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.396009][ C0] buffer_io_error: 7 callbacks suppressed [ 159.396024][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.422023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.431335][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.448459][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.457721][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.477436][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.486665][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.502788][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.511977][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.520453][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.529695][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.538038][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.547228][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.555425][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.564667][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.572523][ T7305] ldm_validate_partition_table(): Disk read failed. [ 159.584616][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.593858][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.602027][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.611212][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.627420][ T7305] Dev loop6: unable to read RDB block 0 [ 159.648417][ T7305] loop6: unable to read partition table [ 159.661078][ T7305] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 159.842569][ T7314] loop3: detected capacity change from 0 to 8192 [ 159.858522][ T7314] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.871931][ T7314] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 159.881933][ T7314] REISERFS (device loop3): using ordered data mode [ 159.888849][ T7314] reiserfs: using flush barriers [ 159.902012][ T7314] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.919421][ T7314] REISERFS (device loop3): checking transaction log (loop3) [ 159.933564][ T7314] REISERFS (device loop3): Using r5 hash to sort names [ 159.941522][ T7314] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 159.955512][ T7314] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 160.002163][ T7314] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 160.017065][ T7314] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 160.033301][ T7314] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 160.151981][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 160.235669][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 160.290151][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.353674][ T7319] loop3: detected capacity change from 0 to 64 [ 160.377190][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.736233][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 161.104769][ T4347] bond0 (unregistering): Released all slaves [ 161.198090][ T7211] team0: Port device team_slave_1 added [ 161.213382][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 161.223089][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 161.276308][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.286909][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.338374][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.404364][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.411347][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.439794][ T7331] mkiss: ax0: crc mode is auto. [ 161.485947][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.704259][ T7211] device hsr_slave_0 entered promiscuous mode [ 161.737349][ T7211] device hsr_slave_1 entered promiscuous mode [ 161.796046][ T7211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.822892][ T7211] Cannot create hsr debugfs directory [ 162.187859][ T7352] netlink: 'syz.4.1173': attribute type 3 has an invalid length. [ 162.236374][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 162.594297][ T7211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.645112][ T7211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.695692][ T7211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.715670][ T7211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.803235][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 162.849918][ T7373] loop4: detected capacity change from 0 to 4096 [ 162.858885][ T7379] Failed to get privilege flags for destination (handle=0x2:0x0) [ 163.056860][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.082283][ T7385] loop3: detected capacity change from 0 to 2048 [ 163.106292][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.121595][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.130586][ T7385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.163825][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.175239][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.196488][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.215360][ T7385] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 163.221677][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.237195][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.240366][ T7385] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 163.263281][ T7385] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.263281][ T7385] [ 163.278354][ T7385] EXT4-fs (loop3): Total free blocks count 0 [ 163.290583][ T7385] EXT4-fs (loop3): Free/Dirty block details [ 163.293677][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.312359][ T7385] EXT4-fs (loop3): free_blocks=2415919504 [ 163.328917][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.342269][ T7385] EXT4-fs (loop3): dirty_blocks=48 [ 163.346706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.347699][ T7385] EXT4-fs (loop3): Block reservation details [ 163.369852][ T7385] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 163.370235][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.383045][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.401601][ T7393] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 163.423085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.445113][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.478735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.497963][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.533675][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.605734][ T7211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.637145][ T7211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.677704][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.691996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.708947][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.736658][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.749808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.771101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.801982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.059709][ T7407] loop4: detected capacity change from 0 to 8192 [ 164.092560][ T7407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.133108][ T7407] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 164.151417][ T7399] loop3: detected capacity change from 0 to 32768 [ 164.157905][ T7407] REISERFS (device loop4): using ordered data mode [ 164.189081][ T7399] JBD2: Ignoring recovery information on journal [ 164.208513][ T7407] reiserfs: using flush barriers [ 164.238362][ T7407] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.293466][ T7407] REISERFS (device loop4): checking transaction log (loop4) [ 164.300918][ T7399] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 164.312362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.321023][ T7407] REISERFS (device loop4): Using rupasov hash to sort names [ 164.327919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.350994][ T7407] REISERFS (device loop4): using 3.5.x disk format [ 164.362203][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.378800][ T7407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.410319][ T7407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.449263][ T7407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 164.453974][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 164.466136][ T7407] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 164.883384][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 164.952967][ T5025] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 165.029619][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.040134][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.076962][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.084858][ T4297] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.096319][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.108415][ T7211] device veth0_vlan entered promiscuous mode [ 165.115996][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.125361][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.139847][ T7211] device veth1_vlan entered promiscuous mode [ 165.153290][ T5025] usb 2-1: Using ep0 maxpacket: 32 [ 165.160039][ T5025] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.177070][ T5025] usb 2-1: config 0 has no interface number 0 [ 165.186694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.192957][ T5025] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.201903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.205185][ T5025] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.223057][ T5025] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 165.231898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.236956][ T5025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.250266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.262694][ T7211] device veth0_macvtap entered promiscuous mode [ 165.270635][ T5025] usb 2-1: config 0 descriptor?? [ 165.275889][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 165.282981][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.297020][ T7211] device veth1_macvtap entered promiscuous mode [ 165.304180][ T4297] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 165.324040][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.331669][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.342102][ T4297] usb 5-1: config 0 descriptor?? [ 165.346219][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.365086][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.382104][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.392441][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.411010][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.421842][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.439988][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.458794][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.471947][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.492085][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.509203][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.519106][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.531522][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.546307][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.558650][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.569526][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.587528][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.598172][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.608164][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.618665][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.630074][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.655803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.679942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.693838][ T7211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.709024][ T7211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.718302][ T7211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.735055][ T7211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.770261][ T4297] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 165.790114][ T4297] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 165.807896][ T4297] appleir 0003:05AC:8241.0012: item fetching failed at offset 3/5 [ 165.817802][ T4297] appleir 0003:05AC:8241.0012: parse failed [ 165.824396][ T4297] appleir: probe of 0003:05AC:8241.0012 failed with error -22 [ 165.895120][ T7461] loop3: detected capacity change from 0 to 4096 [ 165.902426][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.917344][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.938471][ T5025] uclogic 0003:28BD:0094.0011: pen parameters not found [ 165.943631][ T7461] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 165.956222][ T5025] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 165.972920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.991322][ T7461] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 165.992112][ T5025] usb 5-1: USB disconnect, device number 14 [ 166.004864][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.019368][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.022534][ T7461] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 166.033851][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.064081][ T7461] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.097473][ T7461] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 166.111894][ T7461] ntfs: volume version 3.1. [ 166.116919][ T7461] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 166.125271][ T7461] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 166.138389][ T7461] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 166.220259][ T4297] usb 2-1: USB disconnect, device number 13 [ 166.230432][ T7467] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 166.293187][ T7469] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 166.321816][ T7469] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 166.740070][ T7483] loop4: detected capacity change from 0 to 4096 [ 166.795470][ T7483] ntfs: volume version 3.1. [ 166.863236][ T7477] loop5: detected capacity change from 0 to 32768 [ 166.888086][ T7477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1222 (7477) [ 166.920318][ T7477] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.950970][ T7477] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 166.970313][ T7477] BTRFS info (device loop5): setting nodatacow, compression disabled [ 166.993189][ T7477] BTRFS info (device loop5): enabling ssd optimizations [ 167.012921][ T7477] BTRFS info (device loop5): setting datacow [ 167.018965][ T7477] BTRFS info (device loop5): doing ref verification [ 167.044735][ T7477] BTRFS info (device loop5): force clearing of disk cache [ 167.051909][ T7477] BTRFS info (device loop5): turning off barriers [ 167.068611][ T7477] BTRFS info (device loop5): using spread ssd allocation scheme [ 167.088844][ T7477] BTRFS info (device loop5): using free space tree [ 167.151820][ T7483] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 167.218791][ T7483] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 167.316657][ T7477] BTRFS info (device loop5): rebuilding free space tree [ 167.559791][ T7211] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.896015][ T7508] loop4: detected capacity change from 0 to 32768 [ 168.269122][ T7521] dummy0 speed is unknown, defaulting to 1000 [ 168.451393][ T7517] loop5: detected capacity change from 0 to 32768 [ 168.465851][ T7517] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1231 (7517) [ 168.489402][ T7528] netlink: 'syz.0.1235': attribute type 11 has an invalid length. [ 168.501079][ T7517] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 168.502978][ T954] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.526708][ T7517] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 168.567186][ T7517] BTRFS info (device loop5): using free space tree [ 168.638626][ T7517] BTRFS info (device loop5): enabling ssd optimizations [ 168.716367][ T954] usb 4-1: Using ep0 maxpacket: 8 [ 168.730881][ T954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.765451][ T954] usb 4-1: config 0 has no interfaces? [ 168.777682][ T954] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 168.801947][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.842579][ T954] usb 4-1: config 0 descriptor?? [ 168.848685][ T7211] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.146872][ T954] usb 4-1: USB disconnect, device number 9 [ 169.900705][ T7573] loop5: detected capacity change from 0 to 2048 [ 169.911075][ T7573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.406240][ T7571] loop3: detected capacity change from 0 to 32768 [ 170.414548][ T7571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1250 (7571) [ 170.436172][ T7571] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.452212][ T7571] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 170.476588][ T7571] BTRFS info (device loop3): force clearing of disk cache [ 170.488633][ T7571] BTRFS info (device loop3): metadata ratio 0 [ 170.498919][ T7571] BTRFS info (device loop3): enabling ssd optimizations [ 170.511720][ T7571] BTRFS info (device loop3): using spread ssd allocation scheme [ 170.521935][ T7571] BTRFS info (device loop3): using free space tree [ 170.572348][ T7571] BTRFS info (device loop3): rebuilding free space tree [ 170.611196][ T7604] block nbd5: shutting down sockets [ 170.738755][ T75] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 170.914091][ T7613] loop5: detected capacity change from 0 to 2048 [ 170.921591][ T4254] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.953828][ T7613] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 170.961526][ T7613] UDF-fs: Scanning with blocksize 512 failed [ 171.044801][ T7613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.469796][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 171.571350][ T7624] loop4: detected capacity change from 0 to 4096 [ 171.620889][ T7624] __ntfs_error: 6 callbacks suppressed [ 171.620906][ T7624] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 171.649605][ T7624] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 171.698984][ T7624] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 171.750571][ T7624] ntfs: volume version 3.1. [ 171.762906][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.771841][ T7624] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 171.802938][ T7624] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 171.842997][ T7624] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 172.371455][ T7635] loop5: detected capacity change from 0 to 32768 [ 172.432700][ T7635] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 172.539314][ T7643] loop4: detected capacity change from 0 to 32768 [ 172.559095][ T7643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1274 (7643) [ 172.582626][ T7643] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.587816][ T7211] ocfs2: Unmounting device (7,5) on (node local) [ 172.593517][ T7643] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.608127][ T7643] BTRFS info (device loop4): force clearing of disk cache [ 172.617427][ T7643] BTRFS info (device loop4): metadata ratio 0 [ 172.636983][ T7643] BTRFS info (device loop4): enabling ssd optimizations [ 172.666423][ T7643] BTRFS info (device loop4): using spread ssd allocation scheme [ 172.692867][ T7643] BTRFS info (device loop4): using free space tree [ 172.918325][ T7643] BTRFS info (device loop4): rebuilding free space tree [ 173.111656][ T75] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 173.264575][ T4253] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.310614][ T7694] dummy0 speed is unknown, defaulting to 1000 [ 173.318100][ T7654] loop3: detected capacity change from 0 to 32768 [ 173.538759][ T7654] XFS (loop3): Mounting V5 Filesystem [ 173.657669][ T7654] XFS (loop3): Ending clean mount [ 173.676433][ T7709] device veth1_vlan left promiscuous mode [ 173.693666][ T7654] XFS (loop3): Quotacheck needed: Please wait. [ 173.714918][ T7709] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 173.742817][ T7709] netlink: 'syz.0.1290': attribute type 2 has an invalid length. [ 173.810215][ T7654] XFS (loop3): Quotacheck: Done. [ 173.902047][ T4254] XFS (loop3): Unmounting Filesystem [ 174.194987][ T6213] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.404936][ T6213] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.423163][ T6213] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.453843][ T6213] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.479194][ T6213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 174.501233][ T6213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 174.535088][ T6213] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.560074][ T6213] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.592894][ T6213] usb 6-1: Product: syz [ 174.597289][ T6213] usb 6-1: Manufacturer: syz [ 174.625588][ T6213] cdc_wdm 6-1:1.0: skipping garbage [ 174.630868][ T6213] cdc_wdm 6-1:1.0: skipping garbage [ 174.655717][ T6213] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 174.669403][ T6213] cdc_wdm 6-1:1.0: Unknown control protocol [ 174.813288][ T7740] block nbd3: shutting down sockets [ 174.827491][ T7743] serio: Serial port ptm0 [ 174.849638][ T5024] usb 6-1: USB disconnect, device number 2 [ 175.012300][ T7748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 175.029092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 175.289663][ T7758] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 175.433026][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 175.597468][ T7752] mmap: syz.3.1311 (7752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.862314][ T7782] netlink: 'syz.4.1323': attribute type 1 has an invalid length. [ 175.893974][ T4710] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.895172][ T7782] netlink: 'syz.4.1323': attribute type 2 has an invalid length. [ 175.991693][ T7770] loop5: detected capacity change from 0 to 32768 [ 176.016058][ T7770] JBD2: Ignoring recovery information on journal [ 176.069059][ T7770] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 176.105628][ T4710] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.128734][ T7770] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 176.129570][ T4710] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.148605][ T7770] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 176.169418][ T7770] OCFS2: File system is now read-only. [ 176.175581][ T7770] (syz.5.1319,7770,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 176.184086][ T7770] (syz.5.1319,7770,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 176.192530][ T7770] (syz.5.1319,7770,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 176.204230][ T7770] (syz.5.1319,7770,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 176.212345][ T7770] (syz.5.1319,7770,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 176.219230][ T4710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.243835][ T7770] (syz.5.1319,7770,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 176.251638][ T7770] (syz.5.1319,7770,0):ocfs2_symlink:1941 ERROR: status = -30 [ 176.267622][ T4710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.298035][ T4710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.302896][ T7770] (syz.5.1319,7770,0):ocfs2_symlink:2065 ERROR: status = -30 [ 176.339603][ T4710] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.356886][ T7797] loop3: detected capacity change from 0 to 4096 [ 176.364139][ T4710] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.372154][ T4710] usb 1-1: Product: syz [ 176.377788][ T7797] ntfs3: Unknown parameter '…àØ`/’”§´ÇÑØ”[‰iöÏSý}@' [ 176.389863][ T4710] usb 1-1: Manufacturer: syz [ 176.402815][ T4710] cdc_wdm 1-1:1.0: skipping garbage [ 176.408773][ T4710] cdc_wdm 1-1:1.0: skipping garbage [ 176.415009][ T4710] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 176.421287][ T4710] cdc_wdm 1-1:1.0: Unknown control protocol [ 176.581282][ T7211] ocfs2: Unmounting device (7,5) on (node local) [ 176.750363][ T4710] usb 1-1: USB disconnect, device number 11 [ 176.930771][ T7797] loop3: detected capacity change from 0 to 32768 [ 177.009029][ T7797] JBD2: Ignoring recovery information on journal [ 177.121481][ T7797] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 177.255681][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 177.325564][ T7804] loop4: detected capacity change from 0 to 40427 [ 177.344794][ T7804] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 177.352575][ T7804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.459814][ T7804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.560957][ T7804] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.565226][ T7826] tun0: tun_chr_ioctl cmd 2147767511 [ 177.579242][ T7804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.599730][ T7831] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1341'. [ 177.688195][ T26] audit: type=1800 audit(1751071115.002:34): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1334" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 177.760788][ T7835] loop5: detected capacity change from 0 to 128 [ 177.895179][ T7843] FAT-fs (loop5): error, corrupted directory (invalid i_start) [ 177.939009][ T7843] FAT-fs (loop5): Filesystem has been set read-only [ 177.960127][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 177.983048][ T7846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1349'. [ 178.785785][ T7851] loop3: detected capacity change from 0 to 32768 [ 178.839130][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 178.839130][ T7851] [ 178.851420][ T4710] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.889102][ T7851] xtLookup: xtSearch returned -5 [ 178.913245][ T7851] add_index: get/read_metapage failed! [ 178.923026][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 178.923026][ T7851] [ 178.953225][ T7851] xtLookup: xtSearch returned -5 [ 178.971164][ T7851] free_index: error reading directory table [ 178.988726][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 178.988726][ T7851] [ 179.015345][ T7851] xtLookup: xtSearch returned -5 [ 179.020421][ T7851] free_index: error reading directory table [ 179.026981][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 179.026981][ T7851] [ 179.037576][ T7851] xtLookup: xtSearch returned -5 [ 179.043603][ T7851] free_index: error reading directory table [ 179.049829][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 179.049829][ T7851] [ 179.060548][ T4710] usb 2-1: Using ep0 maxpacket: 8 [ 179.072603][ T4710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.086375][ T7851] xtLookup: xtSearch returned -5 [ 179.096123][ T7851] free_index: error reading directory table [ 179.102054][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 179.102054][ T7851] [ 179.121189][ T4710] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 179.131495][ T4710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.133059][ T7851] xtLookup: xtSearch returned -5 [ 179.152380][ T4710] usb 2-1: config 0 descriptor?? [ 179.172129][ T7851] free_index: error reading directory table [ 179.224426][ T7851] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 179.224426][ T7851] [ 179.262371][ T7851] xtLookup: xtSearch returned -5 [ 179.282976][ T7851] add_index: get/read_metapage failed! [ 179.336734][ T7888] binder: 7887:7888 ioctl c0046209 0 returned -22 [ 179.381814][ T4259] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 179.381905][ T4259] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 179.389980][ T4259] Bluetooth: hci0: unknown advertising packet type: 0x40 [ 179.397251][ T4259] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 179.404435][ T4259] Bluetooth: hci0: Malformed LE Event: 0x02 [ 180.259230][ T7892] loop4: detected capacity change from 0 to 131072 [ 180.284837][ T4710] kye 0003:0458:4018.0013: unbalanced collection at end of report description [ 180.295166][ T4710] kye 0003:0458:4018.0013: parse failed [ 180.300970][ T4710] kye: probe of 0003:0458:4018.0013 failed with error -22 [ 180.328111][ T7892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.367568][ T7892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.525203][ T4710] usb 2-1: USB disconnect, device number 14 [ 180.704470][ T5024] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.883072][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 180.889276][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 180.895459][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 180.895474][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 180.922798][ T5024] usb 1-1: Using ep0 maxpacket: 32 [ 180.929514][ T5024] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 180.949019][ T5024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.973649][ T5024] usb 1-1: config 0 descriptor?? [ 180.997173][ T7929] serio: Serial port ptm0 [ 181.076363][ T7923] loop5: detected capacity change from 0 to 32768 [ 181.139124][ T7923] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 181.168871][ T1102] (kworker/u4:5,1102,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 181.183098][ T5024] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 181.195308][ T5024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.206274][ T5024] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 181.214288][ T5024] usb 1-1: media controller created [ 181.235434][ T5024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.392806][ T5024] az6027: usb out operation failed. (-71) [ 181.399143][ T5024] az6027: usb out operation failed. (-71) [ 181.423111][ T5024] stb0899_attach: Driver disabled by Kconfig [ 181.429150][ T5024] az6027: no front-end attached [ 181.429150][ T5024] [ 181.459155][ T5024] az6027: usb out operation failed. (-71) [ 181.465220][ T5024] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 181.474493][ T5024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 181.509562][ T5024] dvb-usb: schedule remote query interval to 400 msecs. [ 181.551946][ T5024] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 181.591150][ T5024] usb 1-1: USB disconnect, device number 12 [ 181.737229][ T7923] (syz.5.1386,7923,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 181.750852][ T5024] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 181.790140][ T7923] (syz.5.1386,7923,0):ocfs2_orphan_del:2379 ERROR: status = -117 [ 181.838792][ T7923] (syz.5.1386,7923,0):ocfs2_orphan_del:2401 ERROR: status = -117 [ 181.869350][ T7923] (syz.5.1386,7923,0):ocfs2_remove_inode:676 ERROR: status = -117 [ 181.906520][ T7923] (syz.5.1386,7923,0):ocfs2_wipe_inode:821 ERROR: status = -117 [ 181.918468][ T7952] loop4: detected capacity change from 0 to 512 [ 181.949766][ T7923] (syz.5.1386,7923,0):ocfs2_delete_inode:1082 ERROR: status = -117 [ 182.030481][ T7952] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 182.049598][ T7952] System zones: 0-2, 18-18, 34-35 [ 182.071275][ T7952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.102505][ T7211] (syz-executor,7211,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 182.143201][ T7952] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.164197][ T7211] (syz-executor,7211,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 182.231223][ T7211] ocfs2: Unmounting device (7,5) on (node local) [ 182.457276][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 182.601849][ T7966] serio: Serial port ptm0 [ 182.693014][ T5024] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.890167][ T5024] usb 1-1: Using ep0 maxpacket: 32 [ 182.898079][ T5024] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.922343][ T5024] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.959962][ T5024] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 182.979578][ T5024] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 182.999770][ T5024] usb 1-1: Product: syz [ 183.022805][ T5024] usb 1-1: Manufacturer: syz [ 183.027451][ T5024] usb 1-1: SerialNumber: syz [ 183.058627][ T5024] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 183.307280][ T5024] usb 1-1: USB disconnect, device number 13 [ 183.327699][ T7995] loop5: detected capacity change from 0 to 1024 [ 183.353739][ T5024] appletouch 1-1:1.0: input: appletouch disconnected [ 183.400531][ T7995] hfsplus: xattr search failed [ 183.544694][ T7999] serio: Serial port ptm0 [ 183.644795][ T7989] loop3: detected capacity change from 0 to 32768 [ 183.717908][ T7989] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 183.732508][ T8005] loop4: detected capacity change from 0 to 2048 [ 183.736247][ T8008] loop5: detected capacity change from 0 to 64 [ 183.753507][ T4347] (kworker/u4:6,4347,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 183.785279][ T8005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.035196][ T7989] (syz.3.1410,7989,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 184.053529][ T7989] (syz.3.1410,7989,0):ocfs2_orphan_del:2379 ERROR: status = -117 [ 184.061544][ T7989] (syz.3.1410,7989,0):ocfs2_orphan_del:2401 ERROR: status = -117 [ 184.077330][ T7989] (syz.3.1410,7989,0):ocfs2_remove_inode:676 ERROR: status = -117 [ 184.087207][ T7989] (syz.3.1410,7989,0):ocfs2_wipe_inode:821 ERROR: status = -117 [ 184.103113][ T7989] (syz.3.1410,7989,0):ocfs2_delete_inode:1082 ERROR: status = -117 [ 184.173735][ T4254] (syz-executor,4254,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 184.203369][ T4254] (syz-executor,4254,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 184.232447][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 184.692942][ T8042] loop5: detected capacity change from 0 to 64 [ 184.737896][ T26] audit: type=1800 audit(1751071122.052:35): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1435" name="file2" dev="loop5" ino=19 res=0 errno=0 [ 289.802703][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 289.809702][ C1] rcu: 0-...!: (1 ticks this GP) idle=83bc/1/0x4000000000000000 softirq=22884/22884 fqs=6 [ 289.821686][ C1] (detected by 1, t=10502 jiffies, g=30257, q=14 ncpus=2) [ 289.828896][ C1] Sending NMI from CPU 1 to CPUs 0: [ 289.834111][ C0] NMI backtrace for cpu 0 [ 289.834144][ C0] CPU: 0 PID: 8044 Comm: syz.1.1436 Not tainted 6.1.142-syzkaller #0 [ 289.834159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.834173][ C0] RIP: 0010:advance_sched+0x62b/0x970 [ 289.834203][ C0] Code: 00 e8 79 12 86 f9 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 4c 8b 74 24 50 74 08 4c 89 e7 e8 ce 10 86 f9 4c 89 e8 31 d2 49 f7 34 24 <49> 89 c4 48 89 df be 04 00 00 00 e8 55 12 86 f9 48 89 d8 48 c1 e8 [ 289.834219][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000046 [ 289.834232][ C0] RAX: 000000000a000000 RBX: ffff88802b367320 RCX: ffffffff884c4247 [ 289.834243][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888044a622e0 [ 289.834252][ C0] RBP: ffff888044a62340 R08: dffffc0000000000 R09: ffffed100894c45d [ 289.834263][ C0] R10: ffffed100894c45d R11: 1ffff1100894c45c R12: ffff888044a622e0 [ 289.834274][ C0] R13: 0000000fa0000000 R14: ffff888044a62000 R15: 1856337d40000000 [ 289.834284][ C0] FS: 00007f345592b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 289.834297][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.834306][ C0] CR2: 000000110c43c6cc CR3: 000000002976d000 CR4: 00000000003506f0 [ 289.834319][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.834328][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.834336][ C0] Call Trace: [ 289.834342][ C0] [ 289.834355][ C0] __hrtimer_run_queues+0x554/0xd60 [ 289.834372][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 289.834388][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 289.834407][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 289.834428][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 289.834446][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 289.834470][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 289.834491][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 289.834506][ C0] [ 289.834510][ C0] [ 289.834515][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 289.834529][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 289.834558][ C0] Code: 74 05 e8 9e 58 6d f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 86 d3 3d f7 65 8b 05 57 94 e8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 289.834570][ C0] RSP: 0018:ffffc900057afb80 EFLAGS: 00000206 [ 289.834582][ C0] RAX: 7ca4bbc78a7a9900 RBX: 0000000000000a02 RCX: 7ca4bbc78a7a9900 [ 289.834592][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 289.834601][ C0] RBP: ffffc900057afc10 R08: dffffc0000000000 R09: fffffbfff2117249 [ 289.834612][ C0] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: dffffc0000000000 [ 289.834622][ C0] R13: ffff8880b8e2a580 R14: ffff8880b8e2a580 R15: 1ffff92000af5f70 [ 289.834641][ C0] ? _raw_spin_unlock+0x40/0x40 [ 289.834659][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 289.834679][ C0] clock_was_set+0x189/0x990 [ 289.834696][ C0] ? destroy_hrtimer_on_stack+0x20/0x20 [ 289.834709][ C0] ? memcpy+0x3c/0x60 [ 289.834724][ C0] ? timekeeping_update+0x3ec/0x460 [ 289.834741][ C0] do_settimeofday64+0x575/0x720 [ 289.834758][ C0] ? __xfrm_state_lookup+0x568/0x8c0 [ 289.834773][ C0] ? __x64_sys_clock_settime+0x223/0x270 [ 289.834793][ C0] ? get_device_system_crosststamp+0x8f0/0x8f0 [ 289.834810][ C0] ? __xfrm_state_lookup+0x568/0x8c0 [ 289.834825][ C0] ? security_settime64+0x77/0x90 [ 289.834842][ C0] ? do_sys_settimeofday64+0x15f/0x250 [ 289.834860][ C0] __x64_sys_clock_settime+0x223/0x270 [ 289.834879][ C0] ? lock_chain_count+0x20/0x20 [ 289.834897][ C0] ? exit_itimers+0x550/0x550 [ 289.834917][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 289.834931][ C0] do_syscall_64+0x4c/0xa0 [ 289.834949][ C0] ? clear_bhb_loop+0x60/0xb0 [ 289.834961][ C0] ? clear_bhb_loop+0x60/0xb0 [ 289.834975][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.834996][ C0] RIP: 0033:0x7f3454b8e929 [ 289.835013][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.835025][ C0] RSP: 002b:00007f345592b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 289.835038][ C0] RAX: ffffffffffffffda RBX: 00007f3454db5fa0 RCX: 00007f3454b8e929 [ 289.835048][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 289.835057][ C0] RBP: 00007f3454c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.835066][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.835074][ C0] R13: 0000000000000000 R14: 00007f3454db5fa0 R15: 00007ffd7e0d5f58 [ 289.835094][ C0] [ 289.835104][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g30257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 290.295440][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 290.305411][ C1] rcu: RCU grace-period kthread stack dump: [ 290.311295][ C1] task:rcu_preempt state:R running task stack:28096 pid:16 ppid:2 flags:0x00004000 [ 290.322078][ C1] Call Trace: [ 290.325354][ C1] [ 290.328287][ C1] __schedule+0x10e9/0x40d0 [ 290.332816][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 290.338721][ C1] schedule+0xb9/0x180 [ 290.342791][ C1] schedule_timeout+0x15c/0x280 [ 290.347646][ C1] ? console_conditional_schedule+0x40/0x40 [ 290.354241][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 290.360139][ C1] ? update_process_times+0x1b0/0x1b0 [ 290.365523][ C1] ? prepare_to_swait_event+0x335/0x350 [ 290.371082][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 290.375943][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 290.382095][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 290.387294][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 290.392055][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 290.397959][ C1] ? finish_swait+0xc3/0x1d0 [ 290.402560][ C1] rcu_gp_kthread+0x95/0x380 [ 290.407165][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 290.412283][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 290.418189][ C1] ? __kthread_parkme+0x162/0x1c0 [ 290.423230][ C1] kthread+0x29d/0x330 [ 290.427309][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 290.432422][ C1] ? kthread_blkcg+0xd0/0xd0 [ 290.437019][ C1] ret_from_fork+0x1f/0x30 [ 290.441453][ C1] [ 290.444471][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 290.450789][ C1] CPU: 1 PID: 46 Comm: kworker/u4:3 Not tainted 6.1.142-syzkaller #0 [ 290.458852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.468913][ C1] Workqueue: events_unbound toggle_allocation_gate [ 290.475512][ C1] RIP: 0010:smp_call_function_many_cond+0xe80/0x1270 [ 290.482194][ C1] Code: 1f 89 de 83 e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 de e5 0a 00 eb e5 44 89 [ 290.501871][ C1] RSP: 0018:ffffc90000b77800 EFLAGS: 00000293 [ 290.507943][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801e691dc0 [ 290.515917][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 290.523886][ C1] RBP: ffffc90000b77960 R08: dffffc0000000000 R09: fffffbfff2117249 [ 290.531862][ C1] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: 1ffff110171c85ad [ 290.539923][ C1] R13: ffff8880b8f3bb40 R14: 0000000000000000 R15: ffff8880b8e42d68 [ 290.547896][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 290.556828][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.563411][ C1] CR2: 00005555633035c8 CR3: 000000000c68e000 CR4: 00000000003506e0 [ 290.571408][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.579387][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.587360][ C1] Call Trace: [ 290.590639][ C1] [ 290.593577][ C1] ? text_poke_sync+0x20/0x20 [ 290.598263][ C1] ? smp_call_function_many+0x30/0x30 [ 290.603635][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 290.609095][ C1] ? text_poke+0x90/0x90 [ 290.613338][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 290.619497][ C1] ? text_poke_loc_init+0xd6/0x570 [ 290.624629][ C1] ? text_poke_sync+0x20/0x20 [ 290.629309][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 290.634425][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 290.639887][ C1] text_poke_bp_batch+0x2b0/0x7d0 [ 290.644924][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 290.650993][ C1] ? text_poke_loc_init+0x570/0x570 [ 290.656197][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 290.662361][ C1] text_poke_finish+0x16/0x30 [ 290.667042][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 290.673023][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 290.678929][ C1] static_key_enable+0x16/0x20 [ 290.683698][ C1] toggle_allocation_gate+0xb4/0x430 [ 290.688988][ C1] ? show_object+0xa0/0xa0 [ 290.693408][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 290.699399][ C1] ? read_lock_is_recursive+0x10/0x10 [ 290.704782][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 290.709993][ C1] ? process_one_work+0x7a1/0x1160 [ 290.715106][ C1] process_one_work+0x898/0x1160 [ 290.720059][ C1] ? worker_detach_from_pool+0x240/0x240 [ 290.725696][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 290.730776][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 290.736153][ C1] ? kthread_data+0x4b/0xc0 [ 290.740666][ C1] worker_thread+0xaa2/0x1250 [ 290.745422][ C1] kthread+0x29d/0x330 [ 290.749495][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 290.754532][ C1] ? kthread_blkcg+0xd0/0xd0 [ 290.759147][ C1] ret_from_fork+0x1f/0x30 [ 290.763583][ C1]