last executing test programs: 3m50.466764743s ago: executing program 0 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 3m49.897564692s ago: executing program 0 (id=509): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3m49.66696592s ago: executing program 0 (id=512): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 3m49.486511506s ago: executing program 0 (id=515): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m49.147150778s ago: executing program 0 (id=517): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x115) getdents64(r0, &(0x7f00000031c0)=""/4096, 0x1000) 3m48.50544703s ago: executing program 0 (id=520): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) shmdt(r1) 3m48.029323576s ago: executing program 32 (id=520): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) shmdt(r1) 4.631965002s ago: executing program 4 (id=2146): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) 3.046746726s ago: executing program 4 (id=2160): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="8ca10e91", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x14, 0x1, 0x3d, 0x1fe}}], 0x14}}], 0x1, 0x20004084) 2.889457311s ago: executing program 4 (id=2163): syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2.739126576s ago: executing program 3 (id=2166): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xcabd8245) 2.581232482s ago: executing program 3 (id=2168): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "00000000000000000000000000061000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 2.409105928s ago: executing program 3 (id=2170): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) 2.306275351s ago: executing program 4 (id=2171): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x5, 0x25, 0x1, 0x1, '\''}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, ':'}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.04540208s ago: executing program 2 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x40, 0x20, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.922617804s ago: executing program 1 (id=2174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1.898208745s ago: executing program 2 (id=2175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.75748189s ago: executing program 1 (id=2176): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x5, r1, r1, 0x1c, 0x3, 0x8}) 1.74225092s ago: executing program 3 (id=2177): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x0, 0x495, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 1.720551001s ago: executing program 2 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x58, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}], @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 1.628741154s ago: executing program 1 (id=2179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\xfe\xff\xff\x7f\x05\x00\x00\x00-control\x00') 1.529399168s ago: executing program 2 (id=2180): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000300)={[{@gid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@fmask={'fmask', 0x3d, 0x3fc}}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee01}}, {@dmask={'dmask', 0x3d, 0x100000000001}}, {@errors_remount}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0x7, 0x1532, &(0x7f0000004d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.413146102s ago: executing program 1 (id=2181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000100)={0x8, 0x0, [{0x0, 0x0, 0x7}, {0x400000b3, 0x0, 0x1}, {0x9d7, 0x0, 0x66}, {0x9a7, 0x0, 0x2000000f0a}, {0x809, 0x0, 0x3}, {0x879, 0x0, 0x8}, {0xada}, {0x827}]}) 1.309818975s ago: executing program 2 (id=2182): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000009c0), &(0x7f00000002c0)=0x8) 1.108712112s ago: executing program 3 (id=2183): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x2, 0x631b, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0x0, 0x58) 1.014101865s ago: executing program 1 (id=2184): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000884700001144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 956.486457ms ago: executing program 2 (id=2185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904"], 0x0) 819.786062ms ago: executing program 1 (id=2186): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c247-7ce8-eaab-dae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d62617461647630002c6f626a5f747970653d6e6f696e6c696e655f64656e7472792c7063723d303030303030303030303030303030be398250095263"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) fsync(r0) writev(r0, &(0x7f0000006b80)=[{&(0x7f0000005a40)='\r', 0x1}], 0x1) 501.391043ms ago: executing program 4 (id=2187): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4014, &(0x7f0000000800), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) 30.231329ms ago: executing program 3 (id=2188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 0s ago: executing program 4 (id=2189): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfb, 0xfa83eb850bd66ef}, 0xc) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2001413, 0x0, 0x1, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): e 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.491974][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.509729][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.519522][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.570139][ T5829] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 270.579276][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.602805][ T5829] usb 3-1: config 0 descriptor?? [ 270.847651][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.848639][ T5829] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 270.863200][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.886825][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1258'. [ 270.947454][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 270.954911][ T5829] usb 3-1: USB disconnect, device number 13 [ 270.976830][ T9] asix: probe of 4-1:0.188 failed with error -71 [ 270.986114][ T5829] usblp0: removed [ 271.022164][ T9] usb 4-1: USB disconnect, device number 16 [ 271.029991][ T788] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.115612][ T9631] loop1: detected capacity change from 0 to 256 [ 271.153323][ T9631] FAT-fs (loop1): Directory bread(block 64) failed [ 271.162450][ T9631] FAT-fs (loop1): Directory bread(block 65) failed [ 271.169150][ T9631] FAT-fs (loop1): Directory bread(block 66) failed [ 271.177405][ T9631] FAT-fs (loop1): Directory bread(block 67) failed [ 271.184626][ T9631] FAT-fs (loop1): Directory bread(block 68) failed [ 271.193062][ T9631] FAT-fs (loop1): Directory bread(block 69) failed [ 271.199775][ T9631] FAT-fs (loop1): Directory bread(block 70) failed [ 271.206347][ T9631] FAT-fs (loop1): Directory bread(block 71) failed [ 271.215548][ T9631] FAT-fs (loop1): Directory bread(block 72) failed [ 271.223195][ T9631] FAT-fs (loop1): Directory bread(block 73) failed [ 271.231518][ T788] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.246432][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.290947][ T788] usb 5-1: config 0 descriptor?? [ 271.313858][ T788] cp210x 5-1:0.0: cp210x converter detected [ 271.615960][ T9635] overlayfs: upper fs does not support tmpfile. [ 271.807360][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 271.954543][ T788] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 271.984161][ T788] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 272.005845][ T788] usb 5-1: cp210x converter now attached to ttyUSB0 [ 272.033479][ T788] usb 5-1: USB disconnect, device number 6 [ 272.048494][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.062510][ T788] cp210x 5-1:0.0: device disconnected [ 272.317653][ T9655] loop3: detected capacity change from 0 to 512 [ 272.344949][ T9656] loop2: detected capacity change from 0 to 2048 [ 272.378317][ T9656] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 272.410638][ T9655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.446153][ T9656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.705867][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.004114][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 273.026911][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 273.069725][ T9671] netlink: 'syz.4.1277': attribute type 18 has an invalid length. [ 273.761734][ T9684] loop1: detected capacity change from 0 to 256 [ 273.844010][ T9684] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 273.854081][ T9669] loop2: detected capacity change from 0 to 32768 [ 273.961138][ T9673] loop3: detected capacity change from 0 to 32768 [ 273.962625][ T9669] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.028798][ T9673] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.157402][ T9669] XFS (loop2): Ending clean mount [ 274.216494][ T9673] XFS (loop3): Ending clean mount [ 274.482997][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.508262][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.516291][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 274.529525][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 274.540060][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 275.273944][ T9708] loop4: detected capacity change from 0 to 32768 [ 275.321100][ T9708] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1287 (9708) [ 275.372778][ T9708] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.413606][ T9708] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 275.454101][ T9708] BTRFS info (device loop4): enabling auto defrag [ 275.480099][ T9708] BTRFS info (device loop4): force clearing of disk cache [ 275.517247][ T9708] BTRFS info (device loop4): turning off barriers [ 275.539790][ T9708] BTRFS info (device loop4): use no compression [ 275.549650][ T9708] BTRFS info (device loop4): disabling free space tree [ 275.567445][ T9708] BTRFS info (device loop4): turning on sync discard [ 275.662177][ T9728] loop2: detected capacity change from 0 to 512 [ 275.713116][ T9740] program syz.1.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.780565][ T9708] BTRFS info (device loop4): enabling ssd optimizations [ 275.823880][ T9708] BTRFS info (device loop4): rebuilding free space tree [ 275.888708][ T9708] BTRFS info (device loop4): disabling free space tree [ 275.909994][ T9708] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 275.943530][ T9708] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.026586][ T9708] BTRFS info (device loop4): checking UUID tree [ 276.470906][ T9760] loop2: detected capacity change from 0 to 128 [ 276.521890][ T9760] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 276.551637][ T7288] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.555968][ T9760] hpfs: filesystem error: improperly stopped [ 276.577257][ T9760] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 276.585873][ T9760] hpfs: You really don't want any checks? You are crazy... [ 276.600689][ T9760] hpfs: hpfs_map_sector(): read error [ 276.606359][ T9760] hpfs: code page support is disabled [ 276.619812][ T9760] hpfs: hpfs_map_4sectors(): unaligned read [ 276.626654][ T9760] hpfs: hpfs_map_4sectors(): unaligned read [ 276.632981][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 276.668602][ T9760] hpfs: filesystem error: unable to find root dir [ 276.757864][ T9760] hpfs: hpfs_map_4sectors(): unaligned read [ 276.797291][ T9760] hpfs: hpfs_map_sector(): read error [ 276.841758][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.863654][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.889524][ T23] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 276.935845][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.955141][ T9765] loop4: detected capacity change from 0 to 256 [ 276.955726][ T23] usb 2-1: config 0 descriptor?? [ 277.022529][ T9765] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 277.279915][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 277.317578][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 277.348489][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 277.445524][ T23] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 277.460052][ T23] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 277.484709][ T23] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 277.498227][ T23] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 277.515293][ T23] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 277.540896][ T23] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 277.847898][ T23] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 32: -71 [ 277.869846][ T23] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -71 [ 277.896162][ T9785] loop2: detected capacity change from 0 to 512 [ 277.909688][ T23] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense [ 277.918638][ T23] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 277.929012][ T9785] EXT4-fs: Ignoring removed i_version option [ 277.935185][ T9785] EXT4-fs: Ignoring removed oldalloc option [ 277.951054][ T23] playstation: probe of 0003:054C:0DF2.000C failed with error -71 [ 277.959688][ T9785] EXT4-fs (loop2): Test dummy encryption mode enabled [ 277.988872][ T9785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.009945][ T23] usb 2-1: USB disconnect, device number 15 [ 278.168484][ T9791] loop3: detected capacity change from 0 to 256 [ 278.228514][ T9791] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 278.414933][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.085419][ T9814] loop4: detected capacity change from 0 to 256 [ 279.150103][ T9814] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 279.644243][ T9832] loop2: detected capacity change from 0 to 16 [ 279.676577][ T9832] erofs: (device loop2): mounted with root inode @ nid 36. [ 279.710399][ T9832] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 279.742857][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 279.766828][ T9838] loop4: detected capacity change from 0 to 512 [ 279.852046][ T5767] blk_print_req_error: 10 callbacks suppressed [ 279.852064][ T5767] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.954153][ T9842] loop2: detected capacity change from 0 to 512 [ 279.959482][ T9844] loop3: detected capacity change from 0 to 512 [ 280.030111][ T9842] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1338: invalid indirect mapped block 10 (level 1) [ 280.062338][ T9842] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1338: invalid indirect mapped block 8 (level 1) [ 280.084441][ T9843] loop1: detected capacity change from 0 to 2048 [ 280.092380][ T9844] EXT4-fs (loop3): orphan cleanup on readonly fs [ 280.098904][ T9844] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #4: comm syz.3.1347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 280.130697][ T9844] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.1347: Bad quota inode: 4, type: 1 [ 280.140506][ T9843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.142211][ T9844] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 280.161351][ T9842] EXT4-fs (loop2): 1 truncate cleaned up [ 280.175352][ T9844] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 280.191218][ T9844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 280.197770][ T9842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.305552][ T9843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.315548][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.450185][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.477903][ T9843] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 5: comm syz.1.1337: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 280.534067][ T9843] EXT4-fs (loop1): Remounting filesystem read-only [ 280.647997][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.082858][ T9872] loop1: detected capacity change from 0 to 128 [ 281.260194][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 281.415338][ T9878] loop1: detected capacity change from 0 to 256 [ 281.467307][ T9878] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 282.089919][ T5829] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 282.157318][ T9889] loop2: detected capacity change from 0 to 256 [ 282.191630][ T9889] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 282.292773][ T5829] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.294240][ T9881] loop4: detected capacity change from 0 to 32768 [ 282.309751][ T5829] usb 2-1: config 0 has no interface number 0 [ 282.315912][ T5829] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 282.346676][ T5829] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 282.363137][ T5829] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.377161][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.400879][ T5829] usb 2-1: config 0 descriptor?? [ 282.403499][ T9881] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.409986][ T9883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.462869][ T5829] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 282.574960][ T9881] XFS (loop4): Ending clean mount [ 282.665351][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 282.681279][ T5157] usb 2-1: USB disconnect, device number 16 [ 282.762385][ T7288] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.225848][ T9910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 283.242479][ T9903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1361 (9903) [ 283.265026][ T9910] hpfs: filesystem error: improperly stopped [ 283.276642][ T9910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 283.314789][ T9903] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.325004][ T9910] hpfs: You really don't want any checks? You are crazy... [ 283.325431][ T9910] hpfs: hpfs_map_sector(): read error [ 283.368142][ T9903] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 283.393401][ T9910] hpfs: code page support is disabled [ 283.394929][ T9903] BTRFS info (device loop3): enabling auto defrag [ 283.399031][ T9910] hpfs: hpfs_map_4sectors(): unaligned read [ 283.406578][ T9903] BTRFS info (device loop3): force clearing of disk cache [ 283.419226][ T9903] BTRFS info (device loop3): turning off barriers [ 283.429160][ T9910] hpfs: hpfs_map_4sectors(): unaligned read [ 283.450051][ T9910] hpfs: filesystem error: unable to find root dir [ 283.486042][ T9903] BTRFS info (device loop3): use no compression [ 283.509807][ T9903] BTRFS info (device loop3): disabling free space tree [ 283.527003][ T9903] BTRFS info (device loop3): turning on sync discard [ 283.575572][ T9910] hpfs: hpfs_map_4sectors(): unaligned read [ 283.579744][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 283.589715][ T9910] hpfs: hpfs_map_sector(): read error [ 283.694478][ T9916] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 283.707625][ T9903] BTRFS info (device loop3): enabling ssd optimizations [ 283.723451][ T9916] Please update your kernel [ 283.763549][ T9903] BTRFS info (device loop3): rebuilding free space tree [ 283.781129][ T9903] BTRFS info (device loop3): disabling free space tree [ 283.788118][ T9903] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 283.819814][ T5767] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.830833][ T9903] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.912677][ T9903] BTRFS info (device loop3): checking UUID tree [ 283.997938][ T9936] gretap0: entered promiscuous mode [ 284.351424][ T5776] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.013586][ T9966] set_capacity_and_notify: 4 callbacks suppressed [ 285.013601][ T9966] loop4: detected capacity change from 0 to 2048 [ 285.039135][ T9966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.141563][ T9966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.271790][ T9966] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 5: comm syz.4.1381: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 285.359622][ T9966] EXT4-fs (loop4): Remounting filesystem read-only [ 285.512988][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.799312][ T9987] loop3: detected capacity change from 0 to 1764 [ 286.187952][ T9981] loop2: detected capacity change from 0 to 32768 [ 286.240503][ T9981] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.262339][ T9996] loop3: detected capacity change from 0 to 8192 [ 286.281477][ T9996] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.327039][ T9996] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 286.341353][ T9996] REISERFS (device loop3): using ordered data mode [ 286.348156][ T9996] reiserfs: using flush barriers [ 286.367623][ T9996] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.392036][ T9996] REISERFS (device loop3): checking transaction log (loop3) [ 286.410555][ T9981] XFS (loop2): Ending clean mount [ 286.709871][ T9996] REISERFS (device loop3): Using tea hash to sort names [ 286.727542][ T9996] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 286.756510][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 287.631202][ T5157] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 287.823127][ T5157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.845232][ T5157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.869346][ T5157] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.885950][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.902166][ T5157] usb 3-1: SerialNumber: syz [ 288.164653][ T5157] usb 3-1: 0:2 : does not exist [ 288.173655][T10047] pimreg: tun_chr_ioctl cmd 1074025677 [ 288.179429][T10047] pimreg: linktype set to 270 [ 288.223317][ T5157] usb 3-1: USB disconnect, device number 14 [ 288.255258][T10053] loop1: detected capacity change from 0 to 8 [ 288.295852][T10053] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 288.307207][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.323902][T10053] Please update your kernel [ 289.121815][T10055] loop4: detected capacity change from 0 to 32768 [ 289.210561][T10055] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.314859][T10055] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 289.321222][T10085] program syz.1.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.330088][T10055] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30 [ 289.366173][T10055] XFS (loop4): Ending clean mount [ 289.444433][ T7288] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.501800][ T788] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 289.712099][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.725996][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 289.749748][ T788] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 289.779289][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.814263][ T788] usb 4-1: config 0 descriptor?? [ 289.823927][ T42] kernel read not supported for file /vbi4 (pid: 42 comm: kworker/0:2) [ 289.834119][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 289.849965][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 289.870182][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 289.889401][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 289.918005][ T788] usb 4-1: media controller created [ 289.941870][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.966240][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 289.998413][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 290.021956][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 290.042200][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.058985][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 290.072434][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 290.076715][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.194852][ T788] usb 4-1: USB disconnect, device number 17 [ 290.288980][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 290.460206][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 290.659759][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 290.667171][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.678443][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.694169][ T42] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 290.700817][T10116] loop2: detected capacity change from 0 to 4096 [ 290.732992][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.761033][ T42] usb 2-1: config 0 descriptor?? [ 291.058495][T10100] loop1: detected capacity change from 0 to 2048 [ 291.081362][T10100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.149249][T10100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.279109][T10123] loop2: detected capacity change from 0 to 256 [ 291.396203][ T42] cherry 0003:046A:0027.000D: unknown main item tag 0x2 [ 291.413427][ T42] cherry 0003:046A:0027.000D: unknown main item tag 0x1 [ 291.435219][ T42] cherry 0003:046A:0027.000D: unknown main item tag 0x1 [ 291.455450][ T42] cherry 0003:046A:0027.000D: unknown main item tag 0x4 [ 291.498239][ T42] cherry 0003:046A:0027.000D: bogus close delimiter [ 291.519771][ T42] cherry 0003:046A:0027.000D: item 0 0 2 10 parsing failed [ 291.540696][ T42] cherry: probe of 0003:046A:0027.000D failed with error -22 [ 291.615054][ T42] usb 2-1: USB disconnect, device number 17 [ 292.113536][T10146] loop3: detected capacity change from 0 to 256 [ 292.154508][T10146] FAT-fs (loop3): Directory bread(block 64) failed [ 292.179739][T10146] FAT-fs (loop3): Directory bread(block 65) failed [ 292.197148][T10146] FAT-fs (loop3): Directory bread(block 66) failed [ 292.218932][T10146] FAT-fs (loop3): Directory bread(block 67) failed [ 292.234697][T10146] FAT-fs (loop3): Directory bread(block 68) failed [ 292.243441][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.243772][T10146] FAT-fs (loop3): Directory bread(block 69) failed [ 292.259356][T10146] FAT-fs (loop3): Directory bread(block 70) failed [ 292.272873][T10146] FAT-fs (loop3): Directory bread(block 71) failed [ 292.281955][T10146] FAT-fs (loop3): Directory bread(block 72) failed [ 292.288697][T10146] FAT-fs (loop3): Directory bread(block 73) failed [ 292.739719][ T28] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 292.810949][T10149] loop2: detected capacity change from 0 to 32768 [ 292.814418][T10150] loop4: detected capacity change from 0 to 32768 [ 292.862440][T10149] JBD2: Ignoring recovery information on journal [ 292.949428][T10149] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 292.965276][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 292.972470][ T28] usb 2-1: config index 0 descriptor too short (expected 26, got 18) [ 293.003299][ T28] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 293.012602][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.029870][ T28] usb 2-1: Product: syz [ 293.034127][ T28] usb 2-1: Manufacturer: syz [ 293.038757][ T28] usb 2-1: SerialNumber: syz [ 293.067272][ T28] usb 2-1: config 0 descriptor?? [ 293.124389][ T28] gspca_main: sq930x-2.14.0 probing 2770:930c [ 293.262982][T10149] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 293.263179][T10149] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 293.272082][T10158] loop3: detected capacity change from 0 to 512 [ 293.291854][T10149] OCFS2: Returning error to the calling process. [ 293.309975][T10149] (syz.2.1454,10149,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 293.336021][T10149] (syz.2.1454,10149,1):ocfs2_mknod:334 ERROR: status = -117 [ 293.364158][T10158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.383161][T10149] (syz.2.1454,10149,1):ocfs2_mknod:502 ERROR: status = -117 [ 293.404113][T10149] (syz.2.1454,10149,1):ocfs2_mkdir:659 ERROR: status = -117 [ 293.427528][T10158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 293.474499][T10158] System zones: 1-12 [ 293.479099][T10158] EXT4-fs (loop3): 1 truncate cleaned up [ 293.516219][T10158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.551021][T10149] syz.2.1454 (10149) used greatest stack depth: 18768 bytes left [ 293.674360][T10161] loop4: detected capacity change from 0 to 8192 [ 293.729126][T10161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 293.745474][T10161] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 293.750698][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.755025][T10161] REISERFS (device loop4): using ordered data mode [ 293.770842][T10161] reiserfs: using flush barriers [ 293.790059][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 293.805342][T10161] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 293.911097][ T28] gspca_sq930x: ucbus_write failed -71 [ 293.919177][T10161] REISERFS (device loop4): checking transaction log (loop4) [ 294.158558][T10161] REISERFS (device loop4): Using tea hash to sort names [ 294.160259][ T28] gspca_sq930x: Sensor ov9630 not yet treated [ 294.166075][T10161] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 294.192744][ T28] sq930x: probe of 2-1:0.0 failed with error -22 [ 294.223667][ T28] usb 2-1: USB disconnect, device number 18 [ 294.630157][ T5157] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 294.842668][ T5157] usb 3-1: Using ep0 maxpacket: 16 [ 294.860197][ T5157] usb 3-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 294.895771][ T5157] usb 3-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 294.940826][ T5157] usb 3-1: string descriptor 0 read error: -71 [ 294.962353][ T5157] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 295.005591][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.022331][ T5157] r8152-cfgselector 3-1: rejected 1 configuration due to insufficient available bus power [ 295.042895][ T5157] r8152-cfgselector 3-1: no configuration chosen from 1 choice [ 295.059682][ T5157] r8152-cfgselector 3-1: Unknown version 0x0000 [ 295.080343][ T5157] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 295.197505][T10196] loop3: detected capacity change from 0 to 256 [ 295.215615][T10196] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.253976][T10196] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.910091][ T5157] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 296.047409][T10212] loop1: detected capacity change from 0 to 32768 [ 296.089891][ T5157] usb 3-1: Using ep0 maxpacket: 32 [ 296.099514][ T5157] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.124169][ T5157] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 296.154330][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.170295][ T5157] usb 3-1: Product: syz [ 296.180225][ T5157] usb 3-1: Manufacturer: syz [ 296.189895][ T5157] usb 3-1: SerialNumber: syz [ 296.469635][ T28] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 296.625471][ T5157] usb 3-1: unit 0 not found! [ 296.657867][T10219] loop1: detected capacity change from 0 to 32768 [ 296.693712][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.714777][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.726331][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.765861][ T28] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 296.776682][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.789512][ T28] usb 5-1: config 0 descriptor?? [ 296.852771][ T5157] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 296.872571][ T5157] usb 3-1: unit 0 not found! [ 296.888207][ T5157] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 296.902231][ T5157] usb 3-1: unit 0 not found! [ 297.001807][ T5157] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 297.018370][ T5157] usb 3-1: USB disconnect, device number 16 [ 297.070892][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.254905][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.283630][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.298630][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.319287][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.334846][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.352906][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.369719][ T28] steelseries 0003:1038:1410.000E: unknown main item tag 0x0 [ 297.377919][ T28] steelseries 0003:1038:1410.000E: missing HID_OUTPUT_REPORT 0 [ 297.446170][T10224] loop1: detected capacity change from 0 to 256 [ 297.457111][T10224] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.500274][T10224] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.548035][ T5157] usb 5-1: USB disconnect, device number 7 [ 297.983949][T10240] loop1: detected capacity change from 0 to 512 [ 298.075757][T10240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.320432][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 298.333428][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.558557][T10250] loop1: detected capacity change from 0 to 1024 [ 298.652986][T10250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.775214][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.803559][T10237] loop3: detected capacity change from 0 to 40427 [ 298.835266][T10237] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 298.887475][T10237] F2FS-fs (loop3): invalid crc value [ 298.936331][T10237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 298.989784][ T28] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 299.060715][T10246] loop4: detected capacity change from 0 to 32768 [ 299.152756][T10237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 299.166715][T10246] syz.4.1496: attempt to access beyond end of device [ 299.166715][T10246] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 299.201382][T10246] lbmIODone: I/O error in JFS log [ 299.210004][T10246] *** Log Format Error ! *** [ 299.215144][T10246] lmLogInit: exit(-22) [ 299.221571][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 299.237175][ T28] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 299.249926][T10246] lmLogOpen: exit(-22) [ 299.271492][ T28] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 299.314480][ T28] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 299.356133][ T28] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 299.395228][T10246] syz.4.1496: attempt to access beyond end of device [ 299.395228][T10246] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 299.408336][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.426806][T10246] lbmIODone: I/O error in JFS log [ 299.438697][ T28] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.450395][T10246] *** Log Format Error ! *** [ 299.461988][ T28] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.470612][ T28] usb 3-1: Product: syz [ 299.474904][ T28] usb 3-1: Manufacturer: syz [ 299.476812][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 299.479517][ T28] usb 3-1: SerialNumber: syz [ 299.495868][ T28] usb 3-1: config 0 descriptor?? [ 299.504372][ T28] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.514986][T10262] netlink: 'syz.1.1502': attribute type 21 has an invalid length. [ 299.525390][T10246] lmLogInit: exit(-22) [ 299.536403][T10246] lmLogOpen: exit(-22) [ 299.541020][ T28] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 299.776726][T10264] loop1: detected capacity change from 0 to 512 [ 299.812439][ T28] usb 3-1: USB disconnect, device number 17 [ 299.818433][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 299.825060][T10264] EXT4-fs (loop1): bad geometry: block count 768 exceeds size of device (256 blocks) [ 299.848389][ T28] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 300.037408][T10267] loop1: detected capacity change from 0 to 64 [ 300.052474][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 300.071578][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 300.276114][T10270] syz.4.1507 (10270) used greatest stack depth: 18664 bytes left [ 301.083109][ T28] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 301.149767][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 301.191457][ T5829] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 301.283362][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.293753][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 301.302733][ T28] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 301.312123][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.325408][ T28] usb 3-1: config 0 descriptor?? [ 301.334305][ T28] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 301.340577][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 301.341946][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 301.351962][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.356710][ T28] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 301.371516][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.381990][ T42] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 301.386309][ T28] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 301.391552][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.398573][ T28] usb 3-1: media controller created [ 301.414528][ T788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.422211][ T42] usb 4-1: config 0 descriptor?? [ 301.431664][ T5829] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 301.446629][ T5829] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 301.457609][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.466214][ T5829] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 301.476697][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.490212][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.500647][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 301.506491][ T28] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 301.513632][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.526663][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 301.536053][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.547049][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 301.563178][ T5829] usb 5-1: config 0 descriptor?? [ 301.572209][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 301.578287][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.580131][ T28] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 301.610325][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.660158][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 301.668323][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 301.690325][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.692751][T10288] loop3: detected capacity change from 0 to 2048 [ 301.713781][ T788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.723670][T10288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.743384][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 301.750718][ T28] dvb-usb: error while querying for an remote control event. [ 301.760106][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 301.780650][ T788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 301.800701][ T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 301.818867][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.820633][T10288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.850642][ T28] usb 3-1: USB disconnect, device number 18 [ 301.859453][ T788] usb 2-1: config 0 descriptor?? [ 301.893308][ T52] Bluetooth: hci4: urb ffff88805eef2e00 submission failed (90) [ 301.914761][ T28] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 302.005426][ T5829] lg-g15 0003:046D:C225.000F: unknown main item tag 0x0 [ 302.020223][ T5829] lg-g15 0003:046D:C225.000F: unknown main item tag 0x0 [ 302.036373][ T5829] lg-g15 0003:046D:C225.000F: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0 [ 302.141449][ T5157] usb 2-1: USB disconnect, device number 19 [ 302.145212][T10296] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 302.182483][ T42] cherry 0003:046A:0027.0010: unknown main item tag 0x2 [ 302.182850][T10296] EXT4-fs (loop3): Remounting filesystem read-only [ 302.197429][ T42] cherry 0003:046A:0027.0010: unknown main item tag 0x1 [ 302.227107][ T42] cherry 0003:046A:0027.0010: unknown main item tag 0x1 [ 302.234547][ T42] cherry 0003:046A:0027.0010: unknown main item tag 0x4 [ 302.243900][ T42] cherry 0003:046A:0027.0010: bogus close delimiter [ 302.272465][ T28] usb 5-1: USB disconnect, device number 8 [ 302.287011][ T42] cherry 0003:046A:0027.0010: item 0 0 2 10 parsing failed [ 302.310618][ T42] cherry: probe of 0003:046A:0027.0010 failed with error -22 [ 302.397445][ T5829] usb 4-1: USB disconnect, device number 18 [ 302.520753][T10299] debugfs: Directory 'netdev:syzkaller0' with parent 'phy5' already present! [ 302.619310][T10301] loop2: detected capacity change from 0 to 1024 [ 302.729202][ T27] audit: type=1326 audit(1780663418.295:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 302.756164][ T27] audit: type=1326 audit(1780663418.295:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 302.782650][ T27] audit: type=1326 audit(1780663418.325:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 302.837422][ T27] audit: type=1326 audit(1780663418.325:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 302.942590][ T27] audit: type=1326 audit(1780663418.325:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 302.948828][T10305] loop2: detected capacity change from 0 to 512 [ 302.966889][ T27] audit: type=1326 audit(1780663418.325:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 303.000901][T10305] EXT4-fs: Ignoring removed nobh option [ 303.012602][T10305] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.026241][ T27] audit: type=1326 audit(1780663418.325:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 303.057626][ T27] audit: type=1326 audit(1780663418.355:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 303.092117][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.148843][ T27] audit: type=1326 audit(1780663418.355:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 303.186581][T10305] EXT4-fs (loop2): orphan cleanup on readonly fs [ 303.250885][T10305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 303.293204][ T27] audit: type=1326 audit(1780663418.355:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 303.326560][T10305] EXT4-fs (loop2): Remounting filesystem read-only [ 303.356874][T10305] EXT4-fs (loop2): 1 truncate cleaned up [ 303.382802][T10305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.784206][T10312] loop3: detected capacity change from 0 to 32768 [ 303.809685][ T5829] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.856253][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 303.869375][T10312] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 304.010231][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 304.033114][ T5829] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.075239][ T5829] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.116341][ T5829] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 304.146893][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.155737][ T5829] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 304.168927][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.194168][ T5829] usb 3-1: config 0 descriptor?? [ 304.223851][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 304.548347][T10323] loop1: detected capacity change from 0 to 32768 [ 304.615561][T10323] syz.1.1527: attempt to access beyond end of device [ 304.615561][T10323] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 304.644853][T10338] loop3: detected capacity change from 0 to 256 [ 304.665907][T10323] lbmIODone: I/O error in JFS log [ 304.694577][T10323] *** Log Format Error ! *** [ 304.721386][T10323] lmLogInit: exit(-22) [ 304.744938][T10323] lmLogOpen: exit(-22) [ 304.792220][T10338] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 304.812670][T10323] syz.1.1527: attempt to access beyond end of device [ 304.812670][T10323] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 304.863018][T10323] lbmIODone: I/O error in JFS log [ 304.868120][T10323] *** Log Format Error ! *** [ 304.880168][T10323] lmLogInit: exit(-22) [ 304.894732][T10323] lmLogOpen: exit(-22) [ 304.904936][ T42] usb 3-1: USB disconnect, device number 19 [ 305.116498][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 305.146228][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 305.257519][T10349] loop4: detected capacity change from 0 to 512 [ 305.336128][T10349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.456664][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 305.479681][T10355] netlink: 'syz.3.1537': attribute type 21 has an invalid length. [ 305.520247][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.546172][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.831585][T10366] loop3: detected capacity change from 0 to 64 [ 306.138970][T10376] loop4: detected capacity change from 0 to 1024 [ 306.161883][T10376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.201507][T10376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 306.231821][T10376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 306.250202][T10376] System zones: 0-1, 3-36 [ 306.282711][T10376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.481649][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.939405][T10373] loop2: detected capacity change from 0 to 32768 [ 307.004843][T10373] [ 307.004843][T10373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.004843][T10373] [ 307.054743][T10373] [ 307.054743][T10373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.054743][T10373] [ 307.090463][T10373] [ 307.090463][T10373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.090463][T10373] [ 307.145501][T10373] [ 307.145501][T10373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.145501][T10373] [ 307.162131][T10373] [ 307.162131][T10373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.162131][T10373] [ 307.228788][ T112] [ 307.228788][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.228788][ T112] [ 307.264243][T10391] [ 307.264243][T10391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.264243][T10391] [ 307.279392][T10391] [ 307.279392][T10391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.279392][T10391] [ 307.300283][T10391] [ 307.300283][T10391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.300283][T10391] [ 307.323980][T10391] [ 307.323980][T10391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.323980][T10391] [ 307.340998][T10391] [ 307.340998][T10391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.340998][T10391] [ 307.360079][ T113] [ 307.360079][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.360079][ T113] [ 307.408478][ T5781] [ 307.408478][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.408478][ T5781] [ 307.435619][ T5781] [ 307.435619][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.435619][ T5781] [ 307.587781][T10388] loop3: detected capacity change from 0 to 32768 [ 307.618103][T10388] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 307.630279][T10388] JBD2: Ignoring recovery information on journal [ 307.719235][T10388] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 307.810785][ T5157] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 307.863665][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 308.003579][ T5157] usb 5-1: Using ep0 maxpacket: 8 [ 308.025509][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 308.056856][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.088712][ T5157] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.099142][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 308.109470][ T5157] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 308.130274][ T5157] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 308.147689][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.170459][ T5157] usb 5-1: config 0 descriptor?? [ 308.204873][ T52] Bluetooth: hci4: urb ffff88806b37eb00 submission failed (90) [ 308.359751][ T5829] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 308.447307][ T5157] usb 5-1: USB disconnect, device number 9 [ 308.592095][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.603761][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.612978][ T5829] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 308.622095][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.642241][ T5829] usb 2-1: config 0 descriptor?? [ 308.657265][ T5829] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 308.669958][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 308.687494][T10404] loop2: detected capacity change from 0 to 40427 [ 308.695720][ T5829] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.714503][ T5829] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.725121][ T5829] usb 2-1: media controller created [ 308.731151][T10404] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 308.741942][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.754469][T10404] F2FS-fs (loop2): invalid crc value [ 308.770332][T10404] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.780534][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 308.796747][ T5829] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.816958][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 308.866746][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 308.885321][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.904396][ T5829] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.917577][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.925851][T10404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 309.059781][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 309.065601][ T5829] dvb-usb: error while querying for an remote control event. [ 309.097342][ T5829] usb 2-1: USB disconnect, device number 20 [ 309.166446][ T5829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 309.924849][T10432] loop1: detected capacity change from 0 to 1024 [ 309.939427][T10436] loop4: detected capacity change from 0 to 256 [ 309.952415][T10432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.977736][T10436] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 309.998760][T10432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.051225][T10432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 310.082802][T10432] System zones: 0-1, 3-36 [ 310.107936][T10432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.355925][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.473777][T10463] loop4: detected capacity change from 0 to 32768 [ 311.528933][T10463] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 311.608529][T10459] loop2: detected capacity change from 0 to 40427 [ 311.649512][T10459] F2FS-fs (loop2): heap/no_heap options were deprecated [ 311.657966][T10459] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 311.667806][T10459] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c [ 311.686391][T10459] F2FS-fs (loop2): invalid crc value [ 311.737059][T10459] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 311.795851][T10459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.896090][T10459] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 311.932845][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 312.026131][T10459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.058269][T10459] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 312.081221][ T7288] ocfs2: Unmounting device (7,4) on (node local) [ 312.162846][T10487] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_unlink+0x395/0x9e0 [ 312.196487][T10486] netlink: 'syz.3.1590': attribute type 20 has an invalid length. [ 312.202973][T10487] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 312.849660][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 313.049697][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 313.070700][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.099966][ T42] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.148489][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.168439][ T42] usb 2-1: config 0 descriptor?? [ 313.432139][ T42] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 313.658678][T10522] loop2: detected capacity change from 0 to 1024 [ 313.719740][ T42] usb 2-1: USB disconnect, device number 21 [ 314.120102][ T5157] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 314.277379][T10540] Bluetooth: MGMT ver 1.22 [ 314.304945][T10540] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 314.327392][ T5157] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 314.356115][ T5157] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 314.379192][T10542] loop2: detected capacity change from 0 to 256 [ 314.379473][ T5157] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 314.412903][T10542] exfat: Deprecated parameter 'namecase' [ 314.418717][T10542] exfat: Deprecated parameter 'namecase' [ 314.439511][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.448976][ T5157] usb 4-1: Product: syz [ 314.466322][ T5157] usb 4-1: Manufacturer: syz [ 314.475943][ T5157] usb 4-1: SerialNumber: syz [ 314.478615][T10542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 314.492158][ T5157] usb 4-1: config 0 descriptor?? [ 314.508803][T10527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.516674][T10527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.601307][T10544] loop1: detected capacity change from 0 to 8192 [ 314.784546][T10527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 314.830493][T10527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.273959][T10561] IPVS: fo: FWM 3 0x00000003 - no destination available [ 315.285262][ T42] IPVS: starting estimator thread 0... [ 315.389892][T10562] IPVS: using max 17 ests per chain, 40800 per kthread [ 315.511735][ T5157] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 315.545693][ T5157] usb 4-1: USB disconnect, device number 19 [ 315.831568][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.031205][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 316.051109][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.077910][ T42] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 316.087872][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.115702][ T42] usb 3-1: config 0 descriptor?? [ 316.556725][ T42] kye 0003:0458:0087.0012: unknown main item tag 0xd [ 316.588936][ T42] kye 0003:0458:0087.0012: unknown main item tag 0x1 [ 316.620400][ T42] kye 0003:0458:0087.0012: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 316.836122][ T5829] usb 3-1: USB disconnect, device number 20 [ 316.837374][T10605] syz.4.1641 uses obsolete (PF_INET,SOCK_PACKET) [ 317.344017][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.350719][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.968302][T10616] loop3: detected capacity change from 0 to 32768 [ 318.075128][T10616] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 318.075128][T10616] [ 318.107723][T10616] ialloc: diAlloc returned -5! [ 318.165845][T10620] loop1: detected capacity change from 0 to 32768 [ 318.301477][T10620] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 318.439164][T10620] XFS (loop1): Ending clean mount [ 318.689428][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 318.753582][T10626] loop2: detected capacity change from 0 to 32768 [ 318.854291][T10626] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.079676][ T5829] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 319.103626][T10626] XFS (loop2): Ending clean mount [ 319.231409][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.292239][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.310290][ T5829] usb 5-1: config 0 has no interface number 0 [ 319.316499][ T5829] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.329354][ T5829] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.339482][ T5829] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.374051][ T5829] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 319.409782][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.419705][ T5157] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 319.429079][ T5829] usb 5-1: config 0 descriptor?? [ 319.496899][T10659] loop2: detected capacity change from 0 to 128 [ 319.619732][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 319.630739][ T5157] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 319.658277][ T5157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.686297][ T5157] usb 2-1: Product: syz [ 319.704929][ T5157] usb 2-1: Manufacturer: syz [ 319.710114][ T5157] usb 2-1: SerialNumber: syz [ 319.903323][T10648] loop3: detected capacity change from 0 to 32768 [ 319.979825][T10648] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 320.078362][T10648] XFS (loop3): Ending clean mount [ 320.093044][ T5829] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0013/input/input23 [ 320.260361][ T5829] uclogic 0003:28BD:0042.0013: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 320.288224][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 320.305505][ T5829] usb 5-1: USB disconnect, device number 10 [ 320.418290][ T5767] udevd[5767]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 320.426742][T10673] fido_id[10673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 320.575729][ T5157] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 320.583748][ T5157] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 320.596057][ T5157] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 320.604796][ T5157] usb 2-1: clock source 0 is not valid, cannot use [ 320.613027][ T5157] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 320.620522][ T5157] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 320.652712][ T5157] usb 2-1: USB disconnect, device number 22 [ 320.697801][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.050645][T10684] loop2: detected capacity change from 0 to 256 [ 321.486006][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 321.591912][T10693] bond0: entered promiscuous mode [ 321.617136][T10693] bond_slave_0: entered promiscuous mode [ 321.623748][T10693] bond_slave_1: entered promiscuous mode [ 321.656595][T10697] loop2: detected capacity change from 0 to 512 [ 321.680975][T10693] team0: entered promiscuous mode [ 321.686082][T10693] team_slave_0: entered promiscuous mode [ 321.724858][T10693] team_slave_1: entered promiscuous mode [ 321.773833][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.786184][T10693] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 321.806909][T10693] Cannot create hsr debugfs directory [ 321.815582][T10693] hsr1: entered promiscuous mode [ 321.835325][T10693] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 321.884626][T10706] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 321.900746][T10697] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.995446][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 321.995462][ T27] audit: type=1800 audit(1780663437.565:87): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1673" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 322.140678][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.155482][T10712] loop4: detected capacity change from 0 to 256 [ 322.233413][T10712] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x726cdf83, utbl_chksum : 0xe619d30d) [ 322.401499][ T27] audit: type=1800 audit(1780663437.975:88): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1676" name="file1" dev="loop4" ino=1048652 res=0 errno=0 [ 323.114093][T10741] loop1: detected capacity change from 0 to 2048 [ 323.175581][T10741] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 323.230025][T10741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.279674][ T28] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 324.470290][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 324.507056][ T28] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 324.536580][T10751] loop1: detected capacity change from 0 to 40427 [ 324.540958][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.551491][T10751] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 324.570555][T10751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 324.587624][ T28] usb 5-1: Product: syz [ 324.598218][ T28] usb 5-1: Manufacturer: syz [ 324.606174][T10751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 324.609663][ T28] usb 5-1: SerialNumber: syz [ 324.651699][ T28] usb 5-1: config 0 descriptor?? [ 324.790322][T10751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 324.824655][T10751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 324.903945][ T28] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 325.531403][ T28] usb write operation failed. (-71) [ 325.562762][ T28] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 325.632723][ T28] dvbdev: DVB: registering new adapter (Terratec H7) [ 325.687576][ T28] usb 5-1: media controller created [ 325.727979][ T28] usb read operation failed. (-71) [ 325.761780][ T28] usb write operation failed. (-71) [ 325.784239][ T28] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 325.828692][ T28] usb 5-1: USB disconnect, device number 11 [ 326.188432][T10781] loop2: detected capacity change from 0 to 131072 [ 326.202109][T10781] F2FS-fs (loop2): Test dummy encryption mode enabled [ 326.229175][T10781] F2FS-fs (loop2): invalid crc value [ 326.270035][T10781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.331201][T10781] F2FS-fs (loop2): Start checkpoint disabled! [ 326.362885][T10781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 326.472273][T10802] loop3: detected capacity change from 0 to 512 [ 326.495045][T10802] EXT4-fs: Ignoring removed oldalloc option [ 326.520036][T10802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.544436][T10802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.568717][T10802] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 326.579791][T10802] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e041e118, mo2=0002] [ 326.587876][T10802] System zones: 0-1, 15-15, 18-18, 34-34 [ 326.661106][T10802] EXT4-fs (loop3): orphan cleanup on readonly fs [ 326.667609][T10802] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 326.681415][T10802] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 326.696523][T10802] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 326.736769][T10802] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1710: bg 0: block 40: padding at end of block bitmap is not set [ 326.792857][T10802] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 326.829763][T10802] EXT4-fs (loop3): 1 truncate cleaned up [ 326.837018][T10802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.013253][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.688144][T10835] loop2: detected capacity change from 0 to 64 [ 328.734971][T10835] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 328.812376][T10818] loop3: detected capacity change from 0 to 40427 [ 328.848400][T10818] F2FS-fs (loop3): invalid crc value [ 328.886281][T10818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 329.138460][T10818] F2FS-fs (loop3): Start checkpoint disabled! [ 329.239848][T10818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 329.567441][T10826] loop1: detected capacity change from 0 to 40427 [ 329.611075][T10826] F2FS-fs (loop1): invalid crc value [ 329.625297][T10826] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.679903][ T1094] kworker/u4:7: attempt to access beyond end of device [ 329.679903][ T1094] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 329.727378][ T1094] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 329.760650][ T1094] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 329.762495][T10826] F2FS-fs (loop1): Start checkpoint disabled! [ 329.805593][T10826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 330.708407][T10848] loop4: detected capacity change from 0 to 40427 [ 330.752893][T10848] F2FS-fs (loop4): invalid crc value [ 330.786721][T10848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 330.941331][T10848] F2FS-fs (loop4): Start checkpoint disabled! [ 330.998838][T10848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 331.026237][T10868] loop3: detected capacity change from 0 to 256 [ 331.060774][T10864] loop2: detected capacity change from 0 to 4096 [ 331.073739][T10868] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 331.618032][ T1094] kworker/u4:7: attempt to access beyond end of device [ 331.618032][ T1094] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 331.661928][ T1094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 331.671117][ T1094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 331.686432][ T1094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 332.730082][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 333.280414][T10897] loop4: detected capacity change from 0 to 40427 [ 333.308133][T10897] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 333.336632][T10897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 333.377321][T10897] F2FS-fs (loop4): invalid crc value [ 333.432569][T10897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.589015][T10928] pim6reg: entered allmulticast mode [ 333.622894][T10897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 333.639607][T10897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 334.511063][T10952] loop2: detected capacity change from 0 to 1024 [ 334.528957][T10954] loop3: detected capacity change from 0 to 2048 [ 334.583707][T10954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.110102][T10967] loop1: detected capacity change from 0 to 128 [ 335.166244][T10967] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.191038][T10967] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.406770][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.577560][T10978] loop1: detected capacity change from 0 to 64 [ 335.639747][ T27] audit: type=1800 audit(1780663451.205:89): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1783" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 335.989954][T10986] tun0: tun_chr_ioctl cmd 2147767511 [ 336.208948][T10993] loop2: detected capacity change from 0 to 128 [ 336.234842][ T27] audit: type=1326 audit(1780663451.805:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.327100][ T27] audit: type=1326 audit(1780663451.835:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.410452][ T27] audit: type=1326 audit(1780663451.835:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.481029][ T27] audit: type=1326 audit(1780663451.835:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.567128][ T27] audit: type=1326 audit(1780663451.835:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.592734][ T27] audit: type=1326 audit(1780663451.835:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.617531][ T27] audit: type=1326 audit(1780663451.845:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.648418][T11001] netlink: 'syz.4.1794': attribute type 1 has an invalid length. [ 336.649424][T11004] loop1: detected capacity change from 0 to 64 [ 336.665980][ T27] audit: type=1326 audit(1780663451.845:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.694390][ T27] audit: type=1326 audit(1780663451.845:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.2.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ff9ce59 code=0x7ffc0000 [ 336.734200][T11005] loop2: detected capacity change from 0 to 256 [ 336.905001][T11005] FAT-fs (loop2): Directory bread(block 64) failed [ 336.925299][T11005] FAT-fs (loop2): Directory bread(block 65) failed [ 336.944013][T11007] loop7: detected capacity change from 0 to 7 [ 336.959830][T11005] FAT-fs (loop2): Directory bread(block 66) failed [ 336.966422][T11005] FAT-fs (loop2): Directory bread(block 67) failed [ 336.992898][T11007] Dev loop7: unable to read RDB block 7 [ 337.010906][T11007] loop7: unable to read partition table [ 337.012335][T11005] FAT-fs (loop2): Directory bread(block 68) failed [ 337.038968][T11005] FAT-fs (loop2): Directory bread(block 69) failed [ 337.046394][T11005] FAT-fs (loop2): Directory bread(block 70) failed [ 337.053394][T11005] FAT-fs (loop2): Directory bread(block 71) failed [ 337.054597][T11007] loop7: partition table beyond EOD, [ 337.074234][T11005] FAT-fs (loop2): Directory bread(block 72) failed [ 337.074435][T11007] truncated [ 337.094386][T11005] FAT-fs (loop2): Directory bread(block 73) failed [ 337.105758][T11007] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 337.408458][T11020] loop3: detected capacity change from 0 to 256 [ 337.617486][T11024] loop1: detected capacity change from 0 to 128 [ 337.736161][T11024] syz.1.1805: attempt to access beyond end of device [ 337.736161][T11024] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 337.790963][T11024] syz.1.1805: attempt to access beyond end of device [ 337.790963][T11024] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 338.192374][T11039] loop1: detected capacity change from 0 to 64 [ 338.876098][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 339.093163][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.113926][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.144354][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.181275][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 339.201293][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 339.230614][ T9] usb 2-1: Product: syz [ 339.234861][ T9] usb 2-1: Manufacturer: syz [ 339.239504][ T9] usb 2-1: SerialNumber: syz [ 339.287878][T11066] loop4: detected capacity change from 0 to 64 [ 339.530064][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 339.673052][T11054] F2FS-fs (loop3): invalid crc value [ 339.689460][T11054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.810506][ T28] usb 2-1: USB disconnect, device number 23 [ 339.841648][ T28] usblp0: removed [ 339.900228][T11054] F2FS-fs (loop3): Start checkpoint disabled! [ 339.965292][T11054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 340.147373][T11072] set_capacity_and_notify: 1 callbacks suppressed [ 340.147391][T11072] loop4: detected capacity change from 0 to 8192 [ 340.180590][T11072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.227722][T11072] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 340.277369][T11072] REISERFS (device loop4): using ordered data mode [ 340.281248][ T1139] kworker/u4:8: attempt to access beyond end of device [ 340.281248][ T1139] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 340.284079][T11072] reiserfs: using flush barriers [ 340.305441][T11072] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.327470][T11072] REISERFS (device loop4): checking transaction log (loop4) [ 340.336323][ T1139] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 340.357349][ T1139] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 340.399778][ T1139] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 340.606850][T11072] REISERFS (device loop4): Using tea hash to sort names [ 340.660943][T11072] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 340.725837][T11083] loop2: detected capacity change from 0 to 256 [ 341.203016][T11093] loop2: detected capacity change from 0 to 2048 [ 341.220674][T11093] EXT4-fs: Ignoring removed i_version option [ 341.291558][T11093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.337197][T11093] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.432149][ T5829] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 341.483163][T11101] loop3: detected capacity change from 0 to 256 [ 341.649907][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 341.700923][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.720486][ T5829] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.754339][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.768237][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.786852][ T5829] usb 2-1: config 0 descriptor?? [ 341.825163][T11109] loop4: detected capacity change from 0 to 1024 [ 342.019209][ T5829] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 342.241944][ T5829] usb 2-1: USB disconnect, device number 24 [ 342.661887][T11111] loop2: detected capacity change from 0 to 32768 [ 342.728116][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 342.728132][ T27] audit: type=1800 audit(1780663458.295:111): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1842" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 343.524760][T11148] loop1: detected capacity change from 0 to 128 [ 343.532418][T11146] loop4: detected capacity change from 0 to 512 [ 343.572855][T11146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 343.621371][T11146] EXT4-fs (loop4): 1 truncate cleaned up [ 343.627848][T11146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.824622][T11146] EXT4-fs (loop4): shut down requested (2) [ 343.932532][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.090122][ T788] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 344.149329][T11162] loop4: detected capacity change from 0 to 1024 [ 344.162497][T11161] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 344.292348][ T788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.298174][T11166] loop1: detected capacity change from 0 to 16 [ 344.323846][ T788] usb 4-1: config 0 has no interface number 0 [ 344.326334][T11166] erofs: (device loop1): mounted with root inode @ nid 36. [ 344.344914][ T788] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.386483][ T788] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.429658][ T788] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.452477][T11166] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 46 [ 344.475477][ T788] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 344.514175][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.553826][ T788] usb 4-1: config 0 descriptor?? [ 344.668182][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 345.202903][ T788] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0014/input/input24 [ 345.245040][T11182] vivid-003: disconnect [ 345.258100][T11181] vivid-003: reconnect [ 345.270575][ T788] uclogic 0003:28BD:0042.0014: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 345.310472][ T788] usb 4-1: USB disconnect, device number 20 [ 345.574852][T11183] fido_id[11183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 345.637174][T11189] input: syz0 as /devices/virtual/input/input25 [ 346.214179][T11197] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.223811][T11197] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.232634][T11197] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.241794][T11197] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.642541][T11210] tap0: tun_chr_ioctl cmd 1074025677 [ 346.664702][T11210] tap0: linktype set to 780 [ 346.714796][T11214] loop3: detected capacity change from 0 to 256 [ 346.763014][T11214] exfat: Deprecated parameter 'utf8' [ 346.768412][T11214] exfat: Deprecated parameter 'namecase' [ 346.826865][T11214] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 347.390419][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 347.595198][ T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.614296][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.642152][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.668158][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.696122][ T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.719787][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.727837][ T42] usb 4-1: Product: syz [ 347.743511][ T42] usb 4-1: Manufacturer: syz [ 347.773400][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 347.778660][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 347.801659][ T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 347.817833][ T42] cdc_wdm 4-1:1.0: Unknown control protocol [ 348.123992][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.130904][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.139942][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.146590][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.153947][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.160588][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.167383][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.174025][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.180435][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.187065][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.193363][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.199987][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.206392][ T42] usb 4-1: USB disconnect, device number 21 [ 348.212471][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 348.212492][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 348.212509][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 348.361633][T11236] loop1: detected capacity change from 0 to 32768 [ 348.414045][T11236] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.618427][T11236] XFS (loop1): Ending clean mount [ 348.849247][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.908204][T11253] loop4: detected capacity change from 0 to 32768 [ 349.943880][T11253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1902 (11253) [ 349.988313][T11253] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.029031][T11253] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 350.069258][T11253] BTRFS info (device loop4): force clearing of disk cache [ 350.106502][T11253] BTRFS info (device loop4): force zlib compression, level 3 [ 350.109255][T11274] loop1: detected capacity change from 0 to 128 [ 350.139365][T11253] BTRFS info (device loop4): enabling auto defrag [ 350.163223][T11253] BTRFS info (device loop4): max_inline at 0 [ 350.171267][T11253] BTRFS info (device loop4): enabling disk space caching [ 350.192703][T11253] BTRFS info (device loop4): disk space caching is enabled [ 350.345952][ T27] audit: type=1326 audit(1780663465.915:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.409739][T11253] BTRFS info (device loop4): enabling ssd optimizations [ 350.416763][T11253] BTRFS info (device loop4): auto enabling async discard [ 350.452744][ T27] audit: type=1326 audit(1780663465.945:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.499947][T11253] BTRFS info (device loop4): rebuilding free space tree [ 350.534779][ T27] audit: type=1326 audit(1780663465.945:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.574925][T11253] BTRFS info (device loop4): disabling free space tree [ 350.582114][T11253] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 350.597033][T11253] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 350.613424][ T27] audit: type=1326 audit(1780663465.945:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.639231][ T27] audit: type=1326 audit(1780663465.945:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.665309][ T27] audit: type=1326 audit(1780663465.945:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.723833][ T27] audit: type=1326 audit(1780663465.955:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.789015][ T27] audit: type=1326 audit(1780663465.955:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.855286][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 350.893628][ T27] audit: type=1326 audit(1780663465.955:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 350.953755][ T27] audit: type=1326 audit(1780663465.955:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.3.1914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb6b9ce59 code=0x7ffc0000 [ 351.061810][ T7288] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.122453][T11310] loop1: detected capacity change from 0 to 128 [ 351.227066][T11310] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.263268][T11310] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.411067][T11310] fscrypt (loop1, inode 12): Unsupported encryption flags (0xea) [ 351.576969][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.661968][ T1082] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.690034][T11330] loop2: detected capacity change from 0 to 32768 [ 352.698321][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 352.741508][T11330] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 353.146089][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 353.246948][T11366] loop3: detected capacity change from 0 to 2048 [ 353.307358][T11366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.350512][T11366] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.529660][T11374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1942: bg 0: block 345: padding at end of block bitmap is not set [ 353.570507][T11368] loop4: detected capacity change from 0 to 4096 [ 353.588556][T11374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 353.619668][T11368] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 353.639827][T11374] EXT4-fs (loop3): This should not happen!! Data will be lost [ 353.639827][T11374] [ 353.771155][T11368] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 353.846335][T11368] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 353.878769][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 176 with error 28 [ 353.881275][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 353.910886][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 353.910886][ T12] [ 353.911253][T11378] netlink: 'syz.2.1946': attribute type 20 has an invalid length. [ 353.941860][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 353.949947][T11378] netlink: 'syz.2.1946': attribute type 21 has an invalid length. [ 353.958142][ T12] EXT4-fs (loop3): Free/Dirty block details [ 353.968276][ T12] EXT4-fs (loop3): free_blocks=0 [ 353.979900][ T12] EXT4-fs (loop3): dirty_blocks=176 [ 353.999334][ T12] EXT4-fs (loop3): Block reservation details [ 354.562246][T11392] loop2: detected capacity change from 0 to 64 [ 354.701241][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 354.707207][T11394] loop3: detected capacity change from 0 to 256 [ 355.228423][T11410] loop1: detected capacity change from 0 to 256 [ 355.287637][T11410] exfat: Deprecated parameter 'utf8' [ 355.355796][T11410] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 356.501415][T11408] loop2: detected capacity change from 0 to 131072 [ 356.518003][T11408] F2FS-fs (loop2): invalid crc value [ 356.584045][T11408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 356.646786][T11408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 356.779856][ T5829] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 356.998205][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 357.043638][ T5829] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 357.069744][ T5829] usb 5-1: config 0 has no interface number 0 [ 357.108365][ T5829] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 357.139585][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.159937][ T5829] usb 5-1: Product: syz [ 357.164413][ T5829] usb 5-1: Manufacturer: syz [ 357.169045][ T5829] usb 5-1: SerialNumber: syz [ 357.219841][ T5829] usb 5-1: config 0 descriptor?? [ 357.252204][ T5829] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 357.522183][ T5829] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 357.567861][ T5829] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 357.952217][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 357.968016][ T5829] usb 5-1: USB disconnect, device number 12 [ 357.995170][ T5829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 358.050734][ T5829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 358.090859][ T5829] quatech2 5-1:0.51: device disconnected [ 358.849172][T11447] loop3: detected capacity change from 0 to 40427 [ 358.867312][T11447] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 358.886448][T11447] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 358.927475][T11447] F2FS-fs (loop3): invalid crc value [ 358.948044][T11447] F2FS-fs (loop3): Found nat_bits in checkpoint [ 359.054804][T11447] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 359.119712][T11447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 359.183298][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 359.229208][T11447] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 359.402040][ T5829] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.439695][ T5829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.480705][ T5829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 359.495775][ T5829] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.509885][ T5829] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.529574][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.537685][ T5829] usb 3-1: Product: syz [ 359.542991][ T5829] usb 3-1: Manufacturer: syz [ 359.554909][ T5829] cdc_wdm 3-1:1.0: skipping garbage [ 359.570303][ T5829] cdc_wdm 3-1:1.0: skipping garbage [ 359.587995][ T5829] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 359.603545][ T5829] cdc_wdm 3-1:1.0: Unknown control protocol [ 359.894002][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.894373][ T9] usb 3-1: USB disconnect, device number 21 [ 359.900653][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.900674][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 359.901093][T11459] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 360.290715][T11486] pimreg: entered allmulticast mode [ 360.308195][T11486] pimreg: left allmulticast mode [ 360.408171][T11490] loop1: detected capacity change from 0 to 4096 [ 360.447392][T11490] __ntfs_warning: 3 callbacks suppressed [ 360.447468][T11490] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 360.452411][T11492] vxcan0: tx address claim with dest, not broadcast [ 360.505548][T11490] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 360.574542][T11490] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 360.608106][T11490] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 360.640534][T11490] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 360.659643][T11490] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 360.689750][T11490] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 360.698631][T11490] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 360.726494][T11494] loop3: detected capacity change from 0 to 2048 [ 360.734290][T11490] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 360.770711][T11490] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 360.825153][T11494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.851175][T11490] ntfs: volume version 3.1. [ 360.966793][T11494] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 361.019932][T11494] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 361.074220][T11494] EXT4-fs (loop3): This should not happen!! Data will be lost [ 361.074220][T11494] [ 361.095102][T11494] EXT4-fs (loop3): Total free blocks count 0 [ 361.103353][T11494] EXT4-fs (loop3): Free/Dirty block details [ 361.110294][T11494] EXT4-fs (loop3): free_blocks=2415919104 [ 361.116212][T11494] EXT4-fs (loop3): dirty_blocks=64 [ 361.123773][T11494] EXT4-fs (loop3): Block reservation details [ 361.130534][T11494] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 361.317647][ T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 361.971642][T11533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2013'. [ 362.073696][T11531] loop2: detected capacity change from 0 to 8192 [ 362.084817][T11535] loop1: detected capacity change from 0 to 64 [ 362.116683][T11531] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 362.149693][T11531] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 362.180850][T11531] REISERFS (device loop2): using ordered data mode [ 362.187429][T11531] reiserfs: using flush barriers [ 362.310834][T11531] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 362.391465][T11531] REISERFS (device loop2): checking transaction log (loop2) [ 362.451281][T11531] REISERFS (device loop2): Using r5 hash to sort names [ 362.484901][T11531] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 362.519031][T11531] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 362.590696][T11531] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 363.052627][T11555] program syz.4.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.200593][T11560] cifs: Bad value for 'source' [ 363.783642][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 363.793856][T11556] loop3: detected capacity change from 0 to 32768 [ 363.929850][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 364.419999][ T5829] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 364.631603][ T5829] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.644492][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.669572][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.689234][ T5829] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.731781][ T5829] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.741653][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.759775][ T5829] usb 2-1: Product: syz [ 364.764130][ T5829] usb 2-1: Manufacturer: syz [ 364.786244][ T5829] cdc_wdm 2-1:1.0: skipping garbage [ 364.799561][ T5829] cdc_wdm 2-1:1.0: skipping garbage [ 364.812223][ T5829] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 364.838669][ T5829] cdc_wdm 2-1:1.0: Unknown control protocol [ 365.100789][T11592] loop4: detected capacity change from 0 to 32768 [ 365.114219][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 365.114562][ T5829] usb 2-1: USB disconnect, device number 25 [ 365.120873][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 365.120896][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 365.121228][T11586] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 365.160459][T11592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2040 (11592) [ 365.168077][T11591] loop3: detected capacity change from 0 to 40427 [ 365.189043][T11592] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.208043][T11591] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 365.220131][T11592] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 365.225046][T11591] F2FS-fs (loop3): Image doesn't support compression [ 365.236991][T11591] F2FS-fs (loop3): Image doesn't support compression [ 365.238555][T11592] BTRFS info (device loop4): setting nodatasum [ 365.248407][T11591] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 365.264936][T11592] BTRFS info (device loop4): force zlib compression, level 3 [ 365.275186][T11592] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 365.286375][T11592] BTRFS info (device loop4): use lzo compression, level 0 [ 365.293638][T11591] F2FS-fs (loop3): invalid crc value [ 365.301013][T11592] BTRFS info (device loop4): turning on flush-on-commit [ 365.308361][T11592] BTRFS info (device loop4): enabling auto defrag [ 365.315753][T11592] BTRFS info (device loop4): max_inline at 4096 [ 365.323509][T11592] BTRFS info (device loop4): using free space tree [ 365.331272][T11591] F2FS-fs (loop3): Found nat_bits in checkpoint [ 365.436374][T11591] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 365.494730][T11592] BTRFS info (device loop4): enabling ssd optimizations [ 365.576956][T11591] syz.3.2041: attempt to access beyond end of device [ 365.576956][T11591] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.611171][T11591] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 365.629480][T11592] BTRFS error (device loop4: state M): unrecognized mount option 'inode_readahead_blks=0x0000000000800000' [ 365.713182][ T7288] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.322037][T11625] loop1: detected capacity change from 0 to 8192 [ 366.354378][T11625] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 366.426130][T11625] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 366.431034][T11628] loop3: detected capacity change from 0 to 128 [ 366.469864][T11625] REISERFS (device loop1): using ordered data mode [ 366.470375][T11628] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 366.476493][T11625] reiserfs: using flush barriers [ 366.514397][T11625] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 366.573207][T11625] REISERFS (device loop1): checking transaction log (loop1) [ 366.594254][T11625] REISERFS (device loop1): Using r5 hash to sort names [ 366.605262][T11628] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 366.605696][T11625] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 367.163501][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 367.335420][T11643] loop4: detected capacity change from 0 to 512 [ 367.368303][T11643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.406194][T11643] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2054: iget: bad i_size value: 38620345925642 [ 367.434103][T11643] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2054: couldn't read orphan inode 15 (err -117) [ 367.451078][T11643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.601643][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 367.662975][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 367.675341][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 367.675341][ T12] [ 367.685431][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 367.691564][ T12] EXT4-fs (loop4): Free/Dirty block details [ 367.697571][ T12] EXT4-fs (loop4): free_blocks=0 [ 367.702786][ T12] EXT4-fs (loop4): dirty_blocks=1 [ 367.707920][ T12] EXT4-fs (loop4): Block reservation details [ 367.714446][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 367.724226][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.516865][T11678] loop2: detected capacity change from 0 to 512 [ 368.574487][T11678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.612538][T11678] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 368.633130][T11678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 368.650171][T11678] System zones: 1-12 [ 368.657509][T11678] EXT4-fs (loop2): orphan cleanup on readonly fs [ 368.672349][T11678] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2067: invalid indirect mapped block 2 (level 2) [ 368.690306][T11655] loop1: detected capacity change from 0 to 32768 [ 368.692846][T11678] EXT4-fs (loop2): Remounting filesystem read-only [ 368.752315][T11655] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 368.752356][T11678] EXT4-fs (loop2): 1 truncate cleaned up [ 368.808939][T11678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 368.951331][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 368.980032][T11655] XFS (loop1): Ending clean mount [ 369.002171][T11693] loop3: detected capacity change from 0 to 164 [ 369.123671][T11693] Unsupported NM flag settings (240) [ 369.301867][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 369.768729][T11702] loop3: detected capacity change from 0 to 4096 [ 370.300622][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 370.454378][T11724] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 370.661374][T11729] loop4: detected capacity change from 0 to 1024 [ 370.772446][T11733] syz_tun: entered allmulticast mode [ 370.794043][T11732] syz_tun: left allmulticast mode [ 370.811165][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 370.811181][ T27] audit: type=1800 audit(1780663486.375:125): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2084" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 370.960535][ T1082] hfsplus: b-tree write err: -5, ino 3 [ 371.647026][T11745] loop2: detected capacity change from 0 to 128 [ 371.685152][T11735] loop3: detected capacity change from 0 to 40427 [ 371.705406][T11735] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 371.722974][T11735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 371.743909][T11745] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 371.762654][T11735] F2FS-fs (loop3): invalid crc value [ 371.807750][T11745] sysv_free_block: trying to free block not in datazone [ 371.973700][ T5781] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 372.034799][T11735] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 372.061624][T11735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 372.233342][T11735] syz.3.2087: attempt to access beyond end of device [ 372.233342][T11735] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 372.356348][ T5776] syz-executor: attempt to access beyond end of device [ 372.356348][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.382861][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 372.583383][T11759] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2096'. [ 372.700447][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 372.700502][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 373.285178][T11771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2102'. [ 373.304966][T11771] sch_fq: defrate 0 ignored. [ 373.609157][T11761] loop2: detected capacity change from 0 to 32768 [ 373.699809][T11761] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 373.737667][T11765] loop3: detected capacity change from 0 to 32768 [ 373.865945][T11761] XFS (loop2): Ending clean mount [ 373.886898][T11765] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.112873][T11796] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 374.113309][ T5781] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 374.379766][T11765] XFS (loop3): Ending clean mount [ 374.564880][T11805] loop4: detected capacity change from 0 to 128 [ 374.663553][T11805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.681784][T11805] ext4 filesystem being mounted at /404/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.740224][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.015438][ T7288] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.395130][T11817] loop3: detected capacity change from 0 to 128 [ 375.447598][T11817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.493492][T11817] ext4 filesystem being mounted at /534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.838656][T11810] loop2: detected capacity change from 0 to 32768 [ 375.862420][T11810] [ 375.862420][T11810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.862420][T11810] [ 375.885446][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.086147][ T43] [ 376.086147][ T43] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.086147][ T43] [ 376.120210][ T43] [ 376.120210][ T43] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.120210][ T43] [ 376.134494][T11833] loop1: detected capacity change from 0 to 16 [ 376.141332][ T5781] [ 376.141332][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.141332][ T5781] [ 376.155825][T11833] erofs: (device loop1): mounted with root inode @ nid 36. [ 376.175792][ T112] [ 376.175792][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.175792][ T112] [ 376.257547][ T5781] [ 376.257547][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 376.257547][ T5781] [ 376.278584][T11833] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 376.328710][T11835] loop3: detected capacity change from 0 to 128 [ 376.331228][T11833] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 376.346131][T11835] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 376.413327][T11835] hpfs: filesystem error: improperly stopped [ 376.419724][T11836] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 376.429710][T11833] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 376.440778][T11835] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 376.449284][T11835] hpfs: You really don't want any checks? You are crazy... [ 376.468064][T11835] hpfs: hpfs_map_sector(): read error [ 376.474902][T11836] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 376.476102][T11835] hpfs: code page support is disabled [ 376.498441][T11833] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 376.510694][T11835] hpfs: hpfs_map_4sectors(): unaligned read [ 376.518187][T11836] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 376.549881][T11835] hpfs: hpfs_map_4sectors(): unaligned read [ 376.555840][T11835] hpfs: filesystem error: unable to find root dir [ 376.713421][T11835] hpfs: hpfs_map_4sectors(): unaligned read [ 376.749952][T11835] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 376.870182][T11842] loop4: detected capacity change from 0 to 4096 [ 377.154508][T11849] loop1: detected capacity change from 0 to 256 [ 377.176563][T11849] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.338674][T11849] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.648771][T11863] loop3: detected capacity change from 0 to 1024 [ 377.731216][T11863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.823191][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 377.921408][T11863] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.2133: Attempting to read directory block (623) that is past i_size (638464) [ 377.943792][T11874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2134'. [ 377.979932][T11866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 378.093538][T11876] loop4: detected capacity change from 0 to 4096 [ 378.185949][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.254355][T11883] Cannot find add_set index 4 as target [ 378.785507][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792093][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.816867][T11888] loop3: detected capacity change from 0 to 8192 [ 378.895955][T11897] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.014287][T11901] batadv0: entered promiscuous mode [ 379.019940][T11888] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 379.038564][T11901] bond0: entered promiscuous mode [ 379.046015][T11902] loop1: detected capacity change from 0 to 512 [ 379.047052][T11901] bond_slave_0: entered promiscuous mode [ 379.058913][T11901] bond_slave_1: entered promiscuous mode [ 379.064793][T11888] Remounting filesystem read-only [ 379.095358][T11901] hsr2: entered allmulticast mode [ 379.107059][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.110493][T11901] batadv0: entered allmulticast mode [ 379.131535][T11901] bond0: entered allmulticast mode [ 379.136814][T11901] bond_slave_0: entered allmulticast mode [ 379.140530][T11902] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.144358][T11901] bond_slave_1: entered allmulticast mode [ 379.171384][T11901] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 379.199607][ T28] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 379.260951][T11901] batadv0: left promiscuous mode [ 379.300178][T11901] bond0: left promiscuous mode [ 379.305054][T11901] bond_slave_0: left promiscuous mode [ 379.322033][T11901] bond_slave_1: left promiscuous mode [ 379.355288][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.401152][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 379.426535][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.449197][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.461979][ T28] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.478946][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.496024][ T28] usb 5-1: Product: syz [ 379.509620][ T28] usb 5-1: Manufacturer: syz [ 379.514436][ T28] usb 5-1: SerialNumber: syz [ 379.761812][ T28] usb 5-1: 0:2 : does not exist [ 379.783161][ T28] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 379.838828][ T28] usb 5-1: USB disconnect, device number 13 [ 379.980722][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.158198][T11930] loop1: detected capacity change from 0 to 4096 [ 380.181261][T11930] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 380.724884][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 381.218347][T11962] Cannot find add_set index 4 as target [ 381.580498][ T5157] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 381.772544][T11976] loop3: detected capacity change from 0 to 512 [ 381.780130][ T5157] usb 5-1: Using ep0 maxpacket: 32 [ 381.801532][ T5157] usb 5-1: string descriptor 0 read error: -22 [ 381.821635][T11976] EXT4-fs: Ignoring removed nobh option [ 381.834569][ T5157] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 381.851976][T11976] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 381.862225][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.876792][T11976] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2177: attempt to clear invalid blocks 1 len 1 [ 381.922950][ T5157] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 381.950226][ T5157] usb 5-1: MIDIStreaming interface descriptor not found [ 381.954636][T11983] loop2: detected capacity change from 0 to 256 [ 381.978377][T11976] EXT4-fs (loop3): Remounting filesystem read-only [ 381.987233][T11983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 381.988406][T11976] EXT4-fs (loop3): 1 truncate cleaned up [ 382.051769][T11976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.293096][ T5829] usb 5-1: USB disconnect, device number 14 [ 382.349013][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.794239][ T788] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 382.984631][ T788] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 383.013869][T12000] loop4: detected capacity change from 0 to 512 [ 383.020456][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.046183][ T788] usb-storage 3-1:32.0: USB Mass Storage device detected [ 383.071225][T12000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.094330][ T788] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 383.125456][T12000] EXT4-fs (loop4): 1 truncate cleaned up [ 383.157491][T12000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.246891][T11996] loop3: detected capacity change from 0 to 32768 [ 383.266755][ T28] usb 3-1: USB disconnect, device number 22 [ 383.283551][T11996] [ 383.283551][T11996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 383.283551][T11996] [ 383.331337][T11998] loop1: detected capacity change from 0 to 40427 [ 383.374506][T11998] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 383.389626][T11998] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 383.417057][T11998] F2FS-fs (loop1): invalid crc value [ 383.423824][ T1082] [ 383.423824][ T1082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 383.423824][ T1082] [ 383.441350][ T7288] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.441927][ T1082] [ 383.441927][ T1082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 383.441927][ T1082] [ 383.461727][T11998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 383.463581][ T5776] [ 383.463581][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 383.463581][ T5776] [ 383.501003][ T5776] [ 383.501003][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 383.501003][ T5776] [ 383.539424][ T112] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 383.551351][ T112] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 383.559862][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 383.563181][T11998] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 383.567068][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.587479][ T112] RIP: 0010:lmLogSync+0x112/0x9f0 [ 383.592602][ T112] Code: b1 80 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ec f1 d8 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d0 f1 d8 fe 49 8b 3f e8 38 a0 ae fe [ 383.612262][ T112] RSP: 0018:ffffc90002cb7c40 EFLAGS: 00010202 [ 383.618377][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 383.626353][ T112] RDX: ffff8880197d8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 383.634336][ T112] RBP: ffffc90002cb7d48 R08: 0000000000000003 R09: 0000000000000000 [ 383.642320][ T112] R10: ffffc90002cb7ca0 R11: fffff52000596f98 R12: ffff88805cb91000 [ 383.650302][ T112] R13: ffffc90002cb7ca0 R14: ffff88802efb4838 R15: 0000000000000040 [ 383.658278][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 383.667222][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.673814][ T112] CR2: 00007ff77f9ec4b8 CR3: 00000000766d6000 CR4: 00000000003506e0 [ 383.681803][ T112] Call Trace: [ 383.685130][ T112] [ 383.688112][ T112] ? jfs_syncpt+0x25/0x90 [ 383.692499][ T112] ? lmWriteRecord+0x1ac0/0x1ac0 [ 383.697502][ T112] ? __rwlock_init+0x150/0x150 [ 383.702285][ T112] jfs_syncpt+0x7b/0x90 [ 383.706458][ T112] txEnd+0x2e5/0x520 [ 383.710365][ T112] jfs_lazycommit+0x5a4/0xa70 [ 383.715078][ T112] ? txFreelock+0x5a0/0x5a0 [ 383.719589][ T112] ? do_task_dead+0xd0/0xd0 [ 383.724123][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 383.729077][ T112] kthread+0x2fa/0x390 [ 383.733152][ T112] ? txFreelock+0x5a0/0x5a0 [ 383.737664][ T112] ? kthread_blkcg+0xd0/0xd0 [ 383.742260][ T112] ret_from_fork+0x48/0x80 [ 383.746703][ T112] ? kthread_blkcg+0xd0/0xd0 [ 383.751303][ T112] ret_from_fork_asm+0x11/0x20 [ 383.756107][ T112] [ 383.759130][ T112] Modules linked in: [ 383.791891][ T112] ---[ end trace 0000000000000000 ]--- [ 383.797502][ T112] RIP: 0010:lmLogSync+0x112/0x9f0 [ 383.802957][ T112] Code: b1 80 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ec f1 d8 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d0 f1 d8 fe 49 8b 3f e8 38 a0 ae fe [ 383.824464][ T112] RSP: 0018:ffffc90002cb7c40 EFLAGS: 00010202 [ 383.829614][T11998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 383.831142][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 383.858168][T12010] loop4: detected capacity change from 0 to 512 [ 383.869151][T12010] EXT4-fs: Ignoring removed nobh option [ 383.896312][ T112] RDX: ffff8880197d8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 383.906764][ T112] RBP: ffffc90002cb7d48 R08: 0000000000000003 R09: 0000000000000000 [ 383.915570][T11998] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x111c/0x40f0 [ 383.917538][ T112] R10: ffffc90002cb7ca0 R11: fffff52000596f98 R12: ffff88805cb91000 [ 383.940232][T12010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.953445][T12010] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.962867][ T112] R13: ffffc90002cb7ca0 R14: ffff88802efb4838 R15: 0000000000000040 [ 383.972011][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 384.022913][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.031545][ T112] CR2: 00007fe184353000 CR3: 0000000079a20000 CR4: 00000000003506e0 [ 384.040334][ T112] Kernel panic - not syncing: Fatal exception [ 384.046552][ T112] Kernel Offset: disabled [ 384.050873][ T112] Rebooting in 86400 seconds..