last executing test programs: 1m20.817922508s ago: executing program 3 (id=813): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001e40)='./file0\x00', 0x800, &(0x7f0000000400)={[{@discard}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {}, {@umask={'umask', 0x3d, 0xc63}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x1, 0x154a, &(0x7f0000001e80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 1m20.283132258s ago: executing program 3 (id=817): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x30) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m19.981264324s ago: executing program 3 (id=820): r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 1m18.078830129s ago: executing program 3 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x1) 1m17.937510102s ago: executing program 3 (id=853): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 1m17.430934491s ago: executing program 3 (id=859): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4073, 0xfe9}], 0x1) 1m16.96313383s ago: executing program 32 (id=859): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4073, 0xfe9}], 0x1) 3.463021506s ago: executing program 0 (id=1440): io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) 3.194928241s ago: executing program 5 (id=1443): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@nombcache}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@norecovery}, {@init_itable}, {@noquota}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) getdents64(r0, 0x0, 0x0) 3.035019493s ago: executing program 4 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="7e0033008000e100ffffffffffff0802110000005050505050500020230100000601010101010000018c"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 2.880668527s ago: executing program 5 (id=1446): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1004009, &(0x7f0000000600)=ANY=[], 0x0, 0x1517, &(0x7f0000003940)="$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") r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000080008000e00000000ff", 0x24) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8003, &(0x7f00000001c0)={[{@oldalloc}, {@nodelalloc}, {@nouser_xattr}, {@nodiscard}, {@nojournal_checksum}]}, 0x40, 0x658, &(0x7f0000000980)="$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") 2.620493211s ago: executing program 1 (id=1448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @random="d78f0c4662b5", @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @local, {[], @ni={0xcd, 0x0, 0x0, 0x0, 0x6, 0x8}}}}}}, 0x0) 2.400330435s ago: executing program 4 (id=1449): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x101c) 2.343031406s ago: executing program 0 (id=1450): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x3}, 0x10) 2.309778757s ago: executing program 0 (id=1451): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002040), 0x103a81) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) 2.253636038s ago: executing program 1 (id=1452): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x40000) 2.215478389s ago: executing program 5 (id=1453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.997946053s ago: executing program 0 (id=1454): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 1.997569973s ago: executing program 4 (id=1455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)='|r', 0x2}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) 1.951034424s ago: executing program 1 (id=1456): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x2000, 0x90}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.785711707s ago: executing program 0 (id=1458): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4008000) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x6, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="8fff", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.708540598s ago: executing program 1 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa20, 0xfff9, 0x81, 0xe, 0x8, 0x7, 0xaa, 0x5]}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.65105197s ago: executing program 4 (id=1460): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x100) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.58598052s ago: executing program 0 (id=1461): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.486563093s ago: executing program 4 (id=1463): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 1.463435773s ago: executing program 1 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.389064535s ago: executing program 2 (id=1465): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000800)=[{r0, 0x1021}, {r0, 0x2452}], 0x2, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x7) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.372657735s ago: executing program 1 (id=1466): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40000, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='./file0\x00') 1.258950167s ago: executing program 4 (id=1467): syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRESDEC], 0xfd, 0x554e, &(0x7f000000b080)="$eJzs3E1vG1UXAODjpGnTj7dvhFiw60gVUiLVVp1+CHYFWvEhWlUFFqzAsV3Lre2JYtcNXXXBErHgnyCQWLHkN7BgzQ6xALFDAnnuuDRQpEpxYpI8jzQ+M3euz5xrRZHOjOUAjqyV7LdfKnE2TkbEYkSciSj2K+VWuJbCSxFxLiIWntoq5fiTgeMRcSoizk6Sp5yV8tQXF8bnr/z8zq/ffn/i2Okvv/lhfqsG5u3liOhvpv2H/RTzTor3yvHGuFvE/uVxGdOJ3nI638/T+MP2RpHhYWM6r1HES500P998MJzEu71GcxI73bvF+OYgXXA47kzzFG+419gqjlvtjSJ2h3kRO4/Sdbcfpf9tj4ajlKdV5vukSB+j0TSm8fZ2O61n834Rm4NROZ7y5q329iSOy1heLpp5r1XUsbGLD/o/7t3u4MF2Nm5vDbv5ILtSq79Sq1+t1rfyVnvUvlxt9FtXL2ernd5kWnXUbvSvdfK802vXmnl/LVvtNJvVej1bvd7e6DYGWb1eu1S7WL2yVu5dyN689UHWa2Wrk/h6d/Bg1O0Ns7v5VpbesZat1y69upadr2fv3byd3b5z48bN2+9/dP3DW6/dfPuNctLxstZqvfK4KCtbXb+4vl6tX6yu19cO//qflPVpWfQM1w+7Upl3AQAHj/4fmId/9v/Lz93/9++Xx8/s/7fuROx9/x/6/5k4UP3vtKyj2v/vwfphV/T/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH1o9LX71V7Kyk49Pl+P/KoRfK40pELETEH8+wGMd35Fws8yz9y/ylv9XwXSWKDJNrnCi3UxFxrdx+//9efwoAAABweH39+NznqVtPLyvzLoj9lG7aLJz5eEb5liNiaeWnGWVbmLy8OKNkxd/3sdieUbbiBtbyjJKlW27HZpXtuSzuCMtPhUoKC/taDgAAsC92dgL724UAAACwnz6bdwHMRyWmjzKnz4KLb97/9UDw5I4jAAAA4ACqzLsAAAAAYM8V/b/f/wMAAIDDLf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc795OzNBDGAfht+Sr4LxLjwp1XcQfH8AguXRoO4CU4gAvO4AU4A+48gqGGzohgWGA6beOX50nK0An8mCGweGeSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCF9b3ZNfH73pW/Ose2nzGwAAACAWw7Nbt09Wab757n/Ze56ne+riKgjon2bOy5q91k8ucqc5Zzmz8u+Xtb6zV9j+BbRJZw+Y56vZxHxPl8/Xw35DQAAAMDjtt9sV6laTw/LqQfEmNKiTf3iQ6G8KiKa5Y9CafUp702hsO73/RCfCqV1C1iLQmFpye2hVNpdur/7edVucdFUqalvvu08yGJzBwAARjS7asatQgAAABjTx6kHwDSq+L2Ved4KnKcmb+89vboDAAAA/kPV1AMAAAAABtfV//98/t8Nd5z/1zr/DwAAAKaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSIdmt95vtqu+Oce2nzKzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pDMNADEBVt81nF3z/wwaB7xAC74GNbDGLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN7os05Gr1+Sb3+u9RgN/1YzydaqYW/VcHSg4ezAfHobAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNm5n9Y4yjAA4M/u7GxNqxij5BARBQ96sem2tvYmHpTgwY8ghHRbo1v/tDnYUsRcvEnOvYgeRQQl3vodem6hl3rrIYcK4nFl/iXTNuImtDPb5PeDd95nhsm8zzsLIc+8kwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrWeztxkm1mi7hbHrt1/9pK1t9+qM/c2LizkLUs7jSZ9NPhlfpOZ769RAAAADg8kqq+j4i76eZS1ndn8/o/rc7Jav4fnyviqp5/uO6v+qr2z9ofv997aXug2WKc7KLnV0fDE4+m0ntys5xuz//vGb38zufPXpL8A+l+uP7iVprfz873N2++38/DI01kCwDsx/GqL4Pq76GsH7SZGACHRq9WeFf1fzLbbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATdhaj2NV3ImIhd5OnLl9/9rKbv2NjTsLVTtz/fpGfLtzzewSaUScXx0NTzQ6m+l2+crVz5ZHo+GlxxDMlNec8KdejYjHOPqegnerVD+e4OSIFjLcT/DPEx6i1/YE9xd0yw97WvJpPUhigpNb+oUEAMCBlZYtq+vvpptL2bHOXMT4pwfr/zdqcUxY/9/75Myt+lj1+n/Q2Ayn3+LaxS8XL1+5+tbqxeULwwvDz98+OXhncOrs6dNnF/NnJYuemAAAALBn4/F4vL3TL1tW1ydl/d+de3T9/2gtjgnr/69+GHxTHzhR/+9qZ9Gv7UwAAAAOtxde+/uvzi7HO/1+fL28tnZpUGy3908W2xZS3bMjZauv/ydzbWcFAAAANGFrvfPA+v+5WhwTrv8/+/PLv9avmUTETLn+f3zli9G55qYz1Zr4l+O25wgAAEC7ZspWX/9P8/f/u9uvPHQj4s3Xi7j4GsBjEfHf9X9a1v/JB9/9Uh+r/v7/qSYnOU3KL+jrzhf3I+/nI3rzbScGAADAQfZM2bJi/890c+nT345+1Pf+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//3hkvlw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000000900003806b64aa23c"]) 1.218319958s ago: executing program 5 (id=1468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x3, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 1.188622628s ago: executing program 2 (id=1469): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) 1.044169301s ago: executing program 5 (id=1470): r0 = epoll_create(0x4) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000000}) 967.031802ms ago: executing program 2 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r1, @ANYBLOB="08000a000400000008000800860600001400060002000000080000000100000008000000140002"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) 798.894375ms ago: executing program 5 (id=1472): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) syz_usb_disconnect(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x1006) 723.955897ms ago: executing program 2 (id=1473): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 251.877266ms ago: executing program 2 (id=1474): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f27, 0x5) 0s ago: executing program 2 (id=1475): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close(0x3) kernel console output (not intermixed with test programs): 632][ T5547] device veth0_macvtap entered promiscuous mode [ 143.403379][ T5547] device veth1_macvtap entered promiscuous mode [ 143.487484][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.535500][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.584728][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.615063][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.643943][ T5821] loop2: detected capacity change from 0 to 32768 [ 143.664426][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.706065][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.720907][ T5821] read_mapping_page failed! [ 143.737786][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.758599][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.785806][ T5826] loop3: detected capacity change from 0 to 40427 [ 143.788641][ T5821] ERROR: (device loop2): txCommit: [ 143.788641][ T5821] [ 143.828932][ T5826] F2FS-fs (loop3): invalid crc value [ 143.841783][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.853234][ T5826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.903679][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.921927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.966440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.993479][ T4322] read_mapping_page failed! [ 143.998356][ T4322] ERROR: (device loop2): txCommit: [ 143.998356][ T4322] [ 144.008036][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.041346][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.069045][ T4322] jfs_write_inode: jfs_commit_inode failed! [ 144.069173][ T5826] F2FS-fs (loop3): Start checkpoint disabled! [ 144.098594][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.148685][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.171004][ T5826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.218756][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.268618][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.319154][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.350288][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.388755][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.430708][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.454366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.505644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.523321][ T5840] loop1: detected capacity change from 0 to 32768 [ 144.537867][ T5547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.567335][ T5547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.586750][ T5547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.627793][ T5547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.642075][ T4339] kworker/u4:7: attempt to access beyond end of device [ 144.642075][ T4339] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.784713][ T5840] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.890953][ T5840] (syz.1.580,5840,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 145.000907][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.032688][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.062186][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.111491][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.144797][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.172162][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.222632][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 145.879029][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.914790][ T5899] loop2: detected capacity change from 0 to 64 [ 146.068542][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 146.077507][ T26] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 146.138655][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.155353][ T26] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 146.188694][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.211712][ T26] usb 5-1: config 0 descriptor?? [ 146.350277][ T5911] loop2: detected capacity change from 0 to 512 [ 146.441998][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.602: inode has both inline data and extents flags [ 146.474218][ T5881] loop3: detected capacity change from 0 to 40427 [ 146.503698][ T5881] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 146.510707][ T5881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.535668][ T5916] loop1: detected capacity change from 0 to 512 [ 146.549642][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.602: couldn't read orphan inode 15 (err -117) [ 146.562380][ T5881] F2FS-fs (loop3): invalid crc value [ 146.579023][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.600318][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.644391][ T26] sony 0003:054C:024B.0008: unknown main item tag 0x1 [ 146.651297][ T27] audit: type=1800 audit(1784208432.847:220): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.602" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 146.667156][ T26] sony 0003:054C:024B.0008: global environment stack underflow [ 146.706095][ T5916] EXT4-fs: Ignoring removed nobh option [ 146.719579][ T26] sony 0003:054C:024B.0008: item 0 2 1 11 parsing failed [ 146.727175][ T26] sony 0003:054C:024B.0008: parse failed [ 146.778743][ T26] sony: probe of 0003:054C:024B.0008 failed with error -22 [ 146.791923][ T5881] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.798615][ T5916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.841639][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.887869][ T5916] EXT4-fs (loop1): 1 truncate cleaned up [ 146.938984][ T5916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.963408][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 146.983824][ T5910] loop0: detected capacity change from 0 to 32768 [ 147.109222][ T5910] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.152680][ T5910] (syz.0.601,5910,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 147.159497][ T5881] syz.3.592: attempt to access beyond end of device [ 147.159497][ T5881] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 147.243803][ T5925] loop2: detected capacity change from 0 to 512 [ 147.276760][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 147.310539][ T5925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.337365][ T5547] ocfs2: Unmounting device (7,0) on (node local) [ 147.451511][ T5925] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.604: bad orphan inode 131083 [ 147.454950][ T4279] syz-executor: attempt to access beyond end of device [ 147.454950][ T4279] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 147.540707][ T4279] syz-executor: attempt to access beyond end of device [ 147.540707][ T4279] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 147.559833][ T4279] syz-executor: attempt to access beyond end of device [ 147.559833][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 147.563716][ T5925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.736616][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 148.146631][ T5949] loop2: detected capacity change from 0 to 256 [ 148.717273][ T5968] input: syz1 as /devices/virtual/input/input14 [ 148.727541][ T4318] usb 5-1: USB disconnect, device number 8 [ 150.058527][ T5783] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.170414][ T7] kernel write not supported for file /input/mice (pid: 7 comm: kworker/0:0) [ 150.241674][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.267808][ T5783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.290031][ T5783] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.317698][ T6009] loop2: detected capacity change from 0 to 512 [ 150.338666][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.346724][ T5783] usb 4-1: SerialNumber: syz [ 150.369411][ T6009] EXT4-fs: Ignoring removed bh option [ 150.441645][ T6009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.470053][ T6009] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.586723][ T5783] usb 4-1: 0:2 : does not exist [ 150.607840][ T5783] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 150.619603][ T5996] loop4: detected capacity change from 0 to 40427 [ 150.639163][ T5783] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 150.647270][ T5996] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 150.683021][ T5996] F2FS-fs (loop4): invalid crc value [ 150.688701][ T5783] usb 4-1: USB disconnect, device number 7 [ 150.745588][ T5996] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.787871][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 150.858117][ T5996] F2FS-fs (loop4): recover fsync data on readonly fs [ 150.859519][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.892987][ T5996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.980539][ T4623] udevd[4623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.102577][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 151.128644][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.156015][ T7] usb 1-1: Product: syz [ 151.165181][ T7] usb 1-1: Manufacturer: syz [ 151.174161][ T7] usb 1-1: SerialNumber: syz [ 151.469157][ T7] rtl8150 1-1:1.0: couldn't reset the device [ 151.489203][ T7] rtl8150: probe of 1-1:1.0 failed with error -5 [ 151.523819][ T7] usb 1-1: USB disconnect, device number 6 [ 151.745194][ T6050] loop2: detected capacity change from 0 to 128 [ 151.774628][ T6049] loop3: detected capacity change from 0 to 512 [ 152.192588][ T6062] loop2: detected capacity change from 0 to 8 [ 152.220095][ T6061] loop0: detected capacity change from 0 to 512 [ 152.305647][ T6061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.339102][ T6061] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.430067][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 152.687716][ T6077] sctp: [Deprecated]: syz.0.664 (pid 6077) Use of int in max_burst socket option. [ 152.687716][ T6077] Use struct sctp_assoc_value instead [ 153.081771][ T6068] loop3: detected capacity change from 0 to 32768 [ 153.141333][ T6068] JBD2: Ignoring recovery information on journal [ 153.208044][ T6068] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.400531][ T6095] loop4: detected capacity change from 0 to 512 [ 153.416051][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 153.458828][ T4279] ocfs2: Unmounting device (7,3) on (node local) [ 153.728924][ T1180] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.921309][ T1180] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.939714][ T1180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.973416][ T1180] usb 2-1: config 0 descriptor?? [ 154.004673][ T1180] cp210x 2-1:0.0: cp210x converter detected [ 154.383456][ T6123] loop3: detected capacity change from 0 to 256 [ 154.418107][ T6123] exfat: Deprecated parameter 'utf8' [ 154.424341][ T1180] usb 2-1: cp210x converter now attached to ttyUSB0 [ 154.454998][ T6123] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 154.627066][ T1180] usb 2-1: USB disconnect, device number 6 [ 154.650914][ T1180] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.684185][ T1180] cp210x 2-1:0.0: device disconnected [ 154.903767][ T6137] loop4: detected capacity change from 0 to 2048 [ 154.936160][ T6137] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.997696][ T6140] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.130345][ T6140] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 155.170062][ T6140] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 155.208797][ T6140] Remounting filesystem read-only [ 155.317433][ T4280] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 155.689302][ T6159] netlink: 'syz.0.696': attribute type 6 has an invalid length. [ 155.975725][ T6171] loop2: detected capacity change from 0 to 512 [ 156.045382][ T6171] EXT4-fs: Ignoring removed nobh option [ 156.080765][ T6171] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.100320][ T6173] loop4: detected capacity change from 0 to 1024 [ 156.105226][ T6177] program syz.3.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.132842][ T6171] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.146336][ T6171] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 156.176754][ T6171] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.702: attempt to clear invalid blocks 2 len 1 [ 156.209492][ T6171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 156.267532][ T6173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.309510][ T6171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.702: invalid indirect mapped block 1819239214 (level 0) [ 156.320557][ T6173] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.704: directory missing '..' [ 156.330099][ T6171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.702: invalid indirect mapped block 1819239214 (level 1) [ 156.402635][ T6171] EXT4-fs (loop2): 1 truncate cleaned up [ 156.418587][ T6171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.456096][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 156.525834][ T6171] EXT4-fs: Ignoring removed nobh option [ 156.584709][ T6171] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.599238][ T6171] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 156.659919][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.752197][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 156.806429][ T6195] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 156.878662][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 156.886000][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.895176][ T6199] can0: slcan on ttyS3. [ 156.973206][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.004453][ T26] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 157.034343][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.087914][ T26] usb 4-1: config 0 descriptor?? [ 157.128232][ T6206] device erspan0 entered promiscuous mode [ 157.146036][ T6209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.718'. [ 157.164446][ T6198] can0 (unregistered): slcan off ttyS3. [ 157.511954][ T26] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 157.525617][ T26] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 157.545019][ T26] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 157.564395][ T26] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 157.579440][ T26] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 157.601698][ T26] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 157.623758][ T4317] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.710978][ T26] corsair 0003:1B1C:1B02.0009: Read invalid backlight brightness: 54. [ 157.840661][ T4317] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.858560][ T4317] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.922385][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.925309][ T26] usb 4-1: USB disconnect, device number 8 [ 157.952536][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 157.982655][ T6227] fido_id[6227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 158.022182][ T4317] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.038785][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.067161][ T4317] usb 3-1: Product: syz [ 158.086210][ T4317] usb 3-1: Manufacturer: syz [ 158.146594][ T4317] cdc_wdm 3-1:1.0: skipping garbage [ 158.154566][ T4317] cdc_wdm 3-1:1.0: skipping garbage [ 158.178305][ T4317] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 158.202098][ T4317] cdc_wdm 3-1:1.0: Unknown control protocol [ 158.233239][ T6233] set_capacity_and_notify: 1 callbacks suppressed [ 158.233254][ T6233] loop0: detected capacity change from 0 to 256 [ 158.245500][ T6222] loop1: detected capacity change from 0 to 32768 [ 158.267952][ T6218] loop4: detected capacity change from 0 to 40427 [ 158.289658][ T6218] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 158.300764][ T6233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 158.322647][ T6222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.722 (6222) [ 158.331689][ T6218] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.404877][ T6218] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 158.419906][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.426863][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.435502][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.442142][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.448654][ T6218] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 158.457458][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.464114][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.480980][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.487652][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.503571][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.510253][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.520373][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.527025][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.534332][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.540964][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.553776][ T6218] F2FS-fs (loop4): invalid crc value [ 158.560240][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 158.566882][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 158.574487][ T6222] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.585226][ T4317] usb 3-1: USB disconnect, device number 4 [ 158.591974][ T6222] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 158.622072][ T6222] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 158.648537][ T6218] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.678512][ T6222] BTRFS info (device loop1): trying to use backup root at mount time [ 158.708691][ T6222] BTRFS info (device loop1): enabling ssd optimizations [ 158.717588][ T6222] BTRFS info (device loop1): using spread ssd allocation scheme [ 158.755007][ T6222] BTRFS info (device loop1): use no compression [ 158.783573][ T6222] BTRFS info (device loop1): turning off barriers [ 158.799761][ T6218] F2FS-fs (loop4): Start checkpoint disabled! [ 158.822926][ T6222] BTRFS info (device loop1): disabling tree log [ 158.840575][ T6222] BTRFS info (device loop1): using free space tree [ 158.858099][ T6218] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.866716][ T6218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 158.992411][ T6218] syz.4.720: attempt to access beyond end of device [ 158.992411][ T6218] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 159.399454][ T5619] kworker/u4:8: attempt to access beyond end of device [ 159.399454][ T5619] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.484102][ T6270] loop2: detected capacity change from 0 to 512 [ 159.505255][ T27] audit: type=1800 audit(1784208445.707:221): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.722" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 159.621829][ T6271] loop0: detected capacity change from 0 to 4096 [ 159.692147][ T4270] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.784714][ T6275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.893906][ T6279] loop2: detected capacity change from 0 to 2048 [ 160.004785][ T6279] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.041735][ T6279] NILFS (loop2): mounting unchecked fs [ 160.166682][ T6279] NILFS (loop2): recovery complete [ 160.207187][ T4623] udevd[4623]: incorrect nilfs2 checksum on /dev/loop2 [ 160.246650][ T6287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.741401][ T6315] loop4: detected capacity change from 0 to 128 [ 160.793112][ T27] audit: type=1800 audit(1784208446.997:222): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.738" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 160.849510][ T6315] syz.4.738: attempt to access beyond end of device [ 160.849510][ T6315] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 160.905903][ T6318] loop3: detected capacity change from 0 to 2048 [ 160.952118][ T6318] loop3: p3 < > p4 < > [ 160.957471][ T6318] loop3: partition table partially beyond EOD, truncated [ 160.988993][ T6318] loop3: p3 start 4284289 is beyond EOD, truncated [ 161.664328][ T6345] input: syz1 as /devices/virtual/input/input15 [ 162.038058][ T6352] tmpfs: Bad value for 'gid' [ 162.183805][ T6356] loop2: detected capacity change from 0 to 512 [ 162.267233][ T6364] loop3: detected capacity change from 0 to 1024 [ 162.280730][ T6356] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 162.335332][ T6364] hfsplus: failed to load root directory [ 162.681251][ T6369] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 162.704248][ T6369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.712779][ T6407] set_capacity_and_notify: 1 callbacks suppressed [ 163.712794][ T6407] loop0: detected capacity change from 0 to 4096 [ 163.779438][ T6407] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 163.810734][ T6419] loop2: detected capacity change from 0 to 128 [ 163.871920][ T27] audit: type=1800 audit(1784208450.077:223): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.786" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 163.901984][ T6419] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 163.963337][ T6419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.709785][ T6441] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 164.849152][ T6437] loop4: detected capacity change from 0 to 8192 [ 164.908674][ T6437] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.934393][ T6437] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 164.990205][ T6437] REISERFS (device loop4): using ordered data mode [ 164.996768][ T6437] reiserfs: using flush barriers [ 165.092087][ T6437] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.150325][ T6437] REISERFS (device loop4): checking transaction log (loop4) [ 165.197720][ T6437] REISERFS (device loop4): Using r5 hash to sort names [ 165.232435][ T6437] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 165.397397][ T6443] loop1: detected capacity change from 0 to 32768 [ 165.408227][ T6437] overlayfs: upper fs needs to support d_type. [ 165.439018][ T6437] overlayfs: upper fs does not support tmpfile. [ 165.465873][ T6437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.490220][ T6437] overlayfs: failed to set xattr on upper [ 165.532050][ T6437] overlayfs: ...falling back to index=off,metacopy=off. [ 165.542283][ T6443] ea_get: invalid extended attribute [ 165.548174][ T27] audit: type=1800 audit(1784208451.747:224): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.793" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 165.589994][ T6437] overlayfs: failed to resolve './cgroup': -2 [ 165.802228][ T6457] hsr0: VLAN not yet supported [ 165.954792][ T6445] loop3: detected capacity change from 0 to 32768 [ 166.085312][ T27] audit: type=1800 audit(1784208452.287:225): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.794" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 166.475029][ T6474] loop2: detected capacity change from 0 to 4096 [ 166.494361][ T6474] ntfs: (device loop2): parse_options(): The disable_sparse option requires a boolean argument. [ 166.738628][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.930842][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.965606][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.981472][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.024238][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 167.045000][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 167.083180][ T6490] loop2: detected capacity change from 0 to 256 [ 167.096244][ T7] usb 5-1: Product: syz [ 167.097529][ T6491] loop3: detected capacity change from 0 to 256 [ 167.100977][ T7] usb 5-1: Manufacturer: syz [ 167.125821][ T6490] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 167.151954][ T7] usb 5-1: SerialNumber: syz [ 167.171711][ T6491] exfat: Deprecated parameter 'utf8' [ 167.203906][ T6491] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 167.253403][ T6491] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 167.369669][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.816'. [ 167.392736][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.396134][ T6472] loop1: detected capacity change from 0 to 40427 [ 167.454316][ T6472] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 167.514196][ T6472] F2FS-fs (loop1): invalid crc value [ 167.539825][ T6472] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.622109][ T7] usb 5-1: USB disconnect, device number 9 [ 167.653885][ T7] usblp0: removed [ 167.724463][ T6472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.947025][ T4270] syz-executor: attempt to access beyond end of device [ 167.947025][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 168.108603][ T5783] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 168.304607][ T5783] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.323046][ T5783] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.353965][ T5783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.377458][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 168.422575][ T5783] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.455364][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.480532][ T5783] usb 4-1: Product: syz [ 168.492767][ T5783] usb 4-1: Manufacturer: syz [ 168.518232][ T5783] cdc_wdm 4-1:1.0: skipping garbage [ 168.527945][ T5783] cdc_wdm 4-1:1.0: skipping garbage [ 168.551375][ T5783] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 168.557340][ T5783] cdc_wdm 4-1:1.0: Unknown control protocol [ 168.683773][ T6534] 9p: Unknown Cache mode readahead [ 168.766188][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.772861][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.779446][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.786078][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.792568][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.799197][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.826994][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.833659][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.840232][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.846874][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.856203][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.862855][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.870043][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.876677][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.886364][ T14] usb 4-1: USB disconnect, device number 9 [ 169.481528][ T6562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.845'. [ 169.557261][ T6566] loop0: detected capacity change from 0 to 512 [ 169.660097][ T6566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.807613][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 169.819205][ T6572] loop2: detected capacity change from 0 to 4096 [ 169.833394][ T6572] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 169.926356][ T6572] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 169.939178][ T6572] ntfs3: loop2: Failed to load $Extend. [ 170.212518][ T27] audit: type=1326 audit(1784208456.417:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.856" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b6fb9de59 code=0x0 [ 170.395892][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.484724][ T6592] loop0: detected capacity change from 0 to 128 [ 170.522945][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.596748][ T6592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 170.635032][ T6592] hpfs: filesystem error: improperly stopped [ 170.652344][ T6592] hpfs: You really don't want any checks? You are crazy... [ 170.680202][ T6592] hpfs: hpfs_map_sector(): read error [ 170.694621][ T6592] hpfs: code page support is disabled [ 170.702944][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.719222][ T6592] hpfs: hpfs_map_4sectors(): unaligned read [ 170.737774][ T6592] hpfs: hpfs_map_4sectors(): unaligned read [ 170.752022][ T6592] hpfs: filesystem error: unable to find root dir [ 170.830382][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.943681][ T6595] loop4: detected capacity change from 0 to 4096 [ 170.978993][ T6595] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 171.089056][ T4274] Bluetooth: hci0: command 0x0405 tx timeout [ 171.102753][ T6595] ntfs: volume version 3.1. [ 171.237140][ T6595] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 171.317274][ T6595] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 171.523213][ T6603] loop0: detected capacity change from 0 to 1024 [ 171.827745][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.849066][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.857838][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.871136][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.878928][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.886676][ T6615] loop4: detected capacity change from 0 to 512 [ 171.894530][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.027108][ T6615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.081787][ T6615] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.468970][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 172.817362][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 173.259405][ T6656] loop1: detected capacity change from 0 to 4096 [ 173.516469][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.588649][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.596978][ T6610] device bridge_slave_0 entered promiscuous mode [ 173.779391][ T9] device hsr_slave_0 left promiscuous mode [ 173.792594][ T9] device hsr_slave_1 left promiscuous mode [ 173.838834][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.846319][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.859307][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.866767][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.945203][ T9] device bridge_slave_1 left promiscuous mode [ 173.952423][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.970314][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 173.992055][ T9] device bridge_slave_0 left promiscuous mode [ 174.008700][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.124770][ T9] device veth1_macvtap left promiscuous mode [ 174.134554][ T9] device veth0_macvtap left promiscuous mode [ 174.144694][ T9] device veth1_vlan left promiscuous mode [ 174.171757][ T9] device veth0_vlan left promiscuous mode [ 174.809475][ T6691] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.816507][ T6691] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.208001][ T6689] loop1: detected capacity change from 0 to 32768 [ 175.227672][ T6689] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.891 (6689) [ 175.274611][ T6689] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 175.287631][ T6689] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.297526][ T6689] BTRFS info (device loop1): using free space tree [ 175.396102][ T6689] BTRFS info (device loop1): enabling ssd optimizations [ 175.446955][ T27] audit: type=1800 audit(1784208461.647:227): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 175.551110][ T6689] BTRFS info (device loop1): balance: start -sconvert=raid0,soft,drange=1580..7 [ 175.564571][ T6689] BTRFS info (device loop1): balance: ended with status: 0 [ 175.666475][ T4270] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 175.927546][ T5469] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 11 /dev/loop1 scanned by udevd (5469) [ 176.041212][ T9] team0 (unregistering): Port device team_slave_1 removed [ 176.063173][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 176.107767][ T9] team0 (unregistering): Port device team_slave_0 removed [ 176.195692][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.259056][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.573275][ T9] bond0 (unregistering): Released all slaves [ 176.662902][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.670100][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.677835][ T6610] device bridge_slave_1 entered promiscuous mode [ 176.731309][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.819341][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.908121][ T6610] team0: Port device team_slave_0 added [ 176.940533][ T6610] team0: Port device team_slave_1 added [ 177.021689][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.052179][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.134462][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.178960][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.218525][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.348558][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.542339][ T6610] device hsr_slave_0 entered promiscuous mode [ 177.607711][ T6610] device hsr_slave_1 entered promiscuous mode [ 177.628165][ T6610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.648393][ T6610] Cannot create hsr debugfs directory [ 177.858532][ T125] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 178.053357][ T125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.082498][ T125] usb 2-1: string descriptor 0 read error: -22 [ 178.106997][ T125] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 178.128525][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 178.151805][ T6610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.160759][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.249516][ T6610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.275910][ T6610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.313301][ T6610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.502561][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.551252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.610890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.631671][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.669345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.696424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.729610][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.736790][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.775856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.818706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.858029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.888186][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.895398][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.949824][ T6787] can0: slcan on ttyS3. [ 178.958863][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.003962][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.052510][ T14] usb 2-1: USB disconnect, device number 7 [ 179.068689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.115620][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.188819][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.208350][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.228903][ T6786] can0 (unregistered): slcan off ttyS3. [ 179.253294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.287808][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.307663][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.335171][ T6780] loop2: detected capacity change from 0 to 32768 [ 179.361712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.382390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.399113][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.410821][ T6780] ea_get: invalid extended attribute [ 179.417793][ T6785] loop4: detected capacity change from 0 to 32768 [ 179.425300][ T27] audit: type=1800 audit(1784208465.627:228): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.913" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 179.456758][ T6780] ea_get: invalid extended attribute [ 179.499385][ T6785] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 179.499385][ T6785] [ 179.542634][ T6785] ERROR: (device loop4): remounting filesystem as read-only [ 180.187856][ T6814] loop4: detected capacity change from 0 to 512 [ 180.208615][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 180.288896][ T4313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.335604][ T6814] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 180.482273][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.509656][ T4313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.518084][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.535908][ T4313] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 180.564740][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.574287][ T4313] usb 3-1: can't read configurations, error -71 [ 180.788125][ T6803] loop1: detected capacity change from 0 to 40427 [ 180.835133][ T6803] F2FS-fs (loop1): invalid crc value [ 180.857393][ T6803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.950839][ T125] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.990793][ T6803] F2FS-fs (loop1): Start checkpoint disabled! [ 181.059122][ T6803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 181.148546][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 181.157591][ T125] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 181.188711][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.196794][ T125] usb 1-1: Product: syz [ 181.251254][ T125] usb 1-1: Manufacturer: syz [ 181.255986][ T125] usb 1-1: SerialNumber: syz [ 181.315853][ T6841] can0: slcan on ttyS3. [ 181.369585][ T6843] loop4: detected capacity change from 0 to 512 [ 181.428699][ T6839] can0 (unregistered): slcan off ttyS3. [ 181.457662][ T9] kworker/u4:0: attempt to access beyond end of device [ 181.457662][ T9] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.472307][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.509270][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.523892][ T125] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 181.539166][ T125] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.550064][ T125] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 181.568845][ T125] usb 1-1: media controller created [ 181.599882][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.616884][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.623388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.665631][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.694781][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.716706][ T6610] device veth0_vlan entered promiscuous mode [ 181.740515][ T6610] device veth1_vlan entered promiscuous mode [ 181.787134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.796254][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.806928][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.822320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.837647][ T6610] device veth0_macvtap entered promiscuous mode [ 181.862321][ T6610] device veth1_macvtap entered promiscuous mode [ 181.893806][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.906836][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.910375][ T125] zl10353_read_register: readreg error (reg=127, ret==-110) [ 181.929497][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.944599][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.975044][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.987368][ T125] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 182.008111][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.030845][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.040804][ T125] usb 1-1: USB disconnect, device number 7 [ 182.051789][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.070183][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.079787][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.089441][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.097656][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.112418][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.124653][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.136464][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.146721][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.167402][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.177564][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.198464][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.208348][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.219947][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.231298][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.240023][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.249096][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.261576][ T6610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.272602][ T6610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.281944][ T6610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.293190][ T6610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.376397][ T5619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.396359][ T5619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.415695][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.436024][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.444410][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.452593][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.635856][ T6858] program syz.4.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.938687][ T22] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 183.120543][ T22] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.133042][ T22] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 183.146011][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.157565][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 183.176047][ T22] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.185680][ T22] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.195378][ T22] usb 6-1: Product: syz [ 183.199977][ T22] usb 6-1: Manufacturer: syz [ 183.209618][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 183.215004][ T22] cdc_wdm 6-1:1.0: skipping garbage [ 183.223873][ T22] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 183.230275][ T22] cdc_wdm 6-1:1.0: Unknown control protocol [ 183.248756][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 183.441468][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 183.448148][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 183.454991][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 183.461630][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 183.472828][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 183.479484][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 183.485919][ T4318] usb 6-1: USB disconnect, device number 2 [ 184.507403][ T6926] loop2: detected capacity change from 0 to 512 [ 184.535386][ T6917] loop4: detected capacity change from 0 to 8192 [ 184.574174][ T6917] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.618636][ T6917] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 184.666074][ T6926] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 184.695093][ T6917] REISERFS (device loop4): using ordered data mode [ 184.707778][ T6928] loop0: detected capacity change from 0 to 4096 [ 184.714765][ T6926] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 184.735511][ T6928] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 184.759631][ T6917] reiserfs: using flush barriers [ 184.767413][ T6917] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.788745][ T6926] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.934: Failed to acquire dquot type 1 [ 184.823444][ T6928] ntfs: volume version 3.1. [ 184.834428][ T6926] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.934: bg 0: block 495: padding at end of block bitmap is not set [ 184.869111][ T6917] REISERFS (device loop4): checking transaction log (loop4) [ 184.908752][ T6928] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 184.922553][ T6926] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 184.958759][ T6928] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 184.974109][ T6926] EXT4-fs (loop2): 1 truncate cleaned up [ 184.993854][ T6926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.048061][ T6926] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.124908][ T6917] REISERFS (device loop4): Using tea hash to sort names [ 185.142987][ T6917] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 185.203138][ T6926] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 185.253094][ T6941] loop1: detected capacity change from 0 to 512 [ 185.329700][ T6941] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 185.391412][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 185.697580][ T6950] loop0: detected capacity change from 0 to 512 [ 185.771102][ T6952] loop1: detected capacity change from 0 to 2048 [ 185.814878][ T6952] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 185.837777][ T6950] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.937: inode has both inline data and extents flags [ 185.978862][ T6950] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.937: couldn't read orphan inode 15 (err -117) [ 186.032123][ T6950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.156209][ T27] audit: type=1800 audit(1784208472.357:229): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.937" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 186.360043][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 186.683276][ T6973] loop0: detected capacity change from 0 to 2048 [ 186.763849][ T6973] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.799108][ T6948] loop2: detected capacity change from 0 to 32768 [ 186.885008][ T6948] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 186.906914][ T6948] JBD2: Ignoring recovery information on journal [ 186.952802][ T5469] udevd[5469]: incorrect nilfs2 checksum on /dev/loop0 [ 186.957681][ T6979] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.042088][ T6948] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.069707][ T6979] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 187.128500][ T6979] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 187.174605][ T6979] Remounting filesystem read-only [ 187.294795][ T5547] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 187.310729][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 187.376508][ T6985] loop5: detected capacity change from 0 to 16 [ 187.474740][ T6985] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 187.758642][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 187.898215][ T6974] loop1: detected capacity change from 0 to 32768 [ 188.047419][ T6974] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.264213][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 188.308614][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.317641][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.966'. [ 188.508503][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 188.524417][ T4318] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 188.548955][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.557005][ T4318] usb 3-1: Product: syz [ 188.576371][ T4318] usb 3-1: Manufacturer: syz [ 188.585892][ T4318] usb 3-1: SerialNumber: syz [ 188.597866][ T4318] usb 3-1: config 0 descriptor?? [ 189.036429][ T4318] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 189.061524][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.110800][ T4318] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.134885][ T4318] usb 3-1: media controller created [ 189.158865][ T7020] loop4: detected capacity change from 0 to 32768 [ 189.210283][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.244482][ T7020] JBD2: Ignoring recovery information on journal [ 189.325196][ T7020] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.341183][ T4318] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 189.398673][ T4318] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 189.529645][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 189.551280][ T4318] usb 3-1: USB disconnect, device number 7 [ 189.644253][ T4318] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 189.648140][ T7028] loop5: detected capacity change from 0 to 32768 [ 189.794431][ T7028] XFS (loop5): Mounting V5 Filesystem [ 189.847334][ T7036] loop0: detected capacity change from 0 to 32768 [ 189.923679][ T7028] XFS (loop5): Ending clean mount [ 189.933072][ T7036] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 190.020875][ T7036] (syz.0.973,7036,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 190.030834][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.126435][ T5547] ocfs2: Unmounting device (7,0) on (node local) [ 190.232688][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 190.241388][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 165, changing to 7 [ 190.294470][ T26] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 190.304035][ T6610] XFS (loop5): Unmounting Filesystem [ 190.333326][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.345240][ T26] usb 5-1: Product: syz [ 190.351887][ T26] usb 5-1: Manufacturer: syz [ 190.372387][ T26] usb 5-1: SerialNumber: syz [ 190.602278][ T26] usb 5-1: Can't get UAC3 power state for id 10 [ 190.624552][ T26] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 190.632446][ T26] usb 5-1: 0:3 : does not exist [ 190.652853][ T26] usb 5-1: 0:4 : does not exist [ 190.659776][ T26] usb 5-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 190.739504][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 190.757567][ T26] usb 5-1: USB disconnect, device number 10 [ 190.847336][ T7073] program syz.1.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.931144][ T7075] loop1: detected capacity change from 0 to 512 [ 190.982719][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.010578][ T7075] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.986: inode has both inline data and extents flags [ 191.024953][ T7075] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.986: couldn't read orphan inode 15 (err -117) [ 191.040113][ T7075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 191.057071][ T27] audit: type=1800 audit(1784208477.257:230): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.986" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 191.174068][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 191.474570][ T7071] loop0: detected capacity change from 0 to 32768 [ 191.868728][ T4317] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.059744][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 192.069613][ T4317] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 192.108200][ T7096] sctp: [Deprecated]: syz.1.993 (pid 7096) Use of int in max_burst socket option. [ 192.108200][ T7096] Use struct sctp_assoc_value instead [ 192.124078][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.165211][ T4317] pvrusb2: Hardware description: Terratec Grabster AV400 [ 192.206625][ T4317] pvrusb2: ********** [ 192.218708][ T4317] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 192.251461][ T4317] pvrusb2: Important functionality might not be entirely working. [ 192.264807][ T4317] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 192.278625][ T4317] pvrusb2: ********** [ 192.370309][ T2310] pvrusb2: Invalid write control endpoint [ 192.449193][ T125] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.520213][ T2310] pvrusb2: Invalid write control endpoint [ 192.526326][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 192.541427][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 192.549661][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 192.561306][ T2310] pvrusb2: Device being rendered inoperable [ 192.575875][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 192.586667][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 192.592324][ T7089] pvrusb2: Attempted to execute control transfer when device not ok [ 192.622375][ T4317] usb 3-1: USB disconnect, device number 8 [ 192.624584][ T2310] pvrusb2: Attached sub-driver cx25840 [ 192.643272][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 192.655808][ T125] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.665518][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.684440][ T125] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.700198][ T125] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.736205][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.764680][ T125] usb 6-1: SerialNumber: syz [ 192.933991][ T7102] loop1: detected capacity change from 0 to 40427 [ 192.966857][ T7102] F2FS-fs (loop1): invalid crc value [ 193.008201][ T7108] loop4: detected capacity change from 0 to 4096 [ 193.012448][ T125] usb 6-1: 0:2 : does not exist [ 193.018632][ T7102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 193.066533][ T7108] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 193.074247][ T125] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 193.122257][ T125] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 193.191115][ T7108] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 193.218163][ T125] usb 6-1: USB disconnect, device number 3 [ 193.257617][ T7102] F2FS-fs (loop1): Start checkpoint disabled! [ 193.302084][ T5469] udevd[5469]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.360658][ T7108] ntfs3: loop4: ino=5, "/" directory corrupted [ 193.380163][ T7102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 193.511559][ T4280] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 193.529641][ T7102] F2FS-fs (loop1): Skipping Checkpoint. Checkpoints currently disabled. [ 193.535576][ T4280] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 194.382266][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685838][ T7130] loop2: detected capacity change from 0 to 32768 [ 194.789999][ T7158] loop5: detected capacity change from 0 to 512 [ 194.882679][ T7130] XFS (loop2): Mounting V5 Filesystem [ 195.013712][ T7130] XFS (loop2): Ending clean mount [ 195.238341][ T4273] XFS (loop2): Unmounting Filesystem [ 195.329834][ T7137] loop4: detected capacity change from 0 to 40427 [ 195.367814][ T7137] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 195.378175][ T7171] loop5: detected capacity change from 0 to 512 [ 195.379014][ T7137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 195.455488][ T7137] F2FS-fs (loop4): invalid crc value [ 195.489644][ T7137] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 195.713125][ T7137] F2FS-fs (loop4): recover fsync data on readonly fs [ 195.751607][ T7137] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 195.934572][ T7173] loop2: detected capacity change from 0 to 2048 [ 195.993307][ T7173] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 196.114039][ T7176] loop5: detected capacity change from 0 to 512 [ 196.253580][ T7176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 196.328679][ T7176] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.448711][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 196.448721][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 196.660838][ T6610] EXT4-fs (loop5): unmounting filesystem. [ 196.778759][ T4313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.835738][ T7184] loop2: detected capacity change from 0 to 32768 [ 196.866119][ T7184] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 196.981121][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 196.988586][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 197.003183][ T4313] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 197.040499][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.098586][ T4313] usb 2-1: config 0 descriptor?? [ 197.126470][ T5469] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 197.129547][ T4313] gspca_main: sunplus-2.14.0 probing 041e:400b [ 197.363215][ T7191] loop0: detected capacity change from 0 to 256 [ 197.408989][ T7214] program syz.5.1031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.938294][ T4313] gspca_sunplus: reg_r err -71 [ 197.959267][ T4313] sunplus: probe of 2-1:0.0 failed with error -71 [ 198.013317][ T4313] usb 2-1: USB disconnect, device number 8 [ 198.133882][ T7206] loop2: detected capacity change from 0 to 32768 [ 198.160093][ T7206] gfs2: Invalid block size shift [ 198.360086][ T7235] loop0: detected capacity change from 0 to 512 [ 198.501954][ T7235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1039: bg 0: block 393: padding at end of block bitmap is not set [ 198.608851][ T7235] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 198.646340][ T7235] EXT4-fs (loop0): 2 truncates cleaned up [ 198.658726][ T7235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 198.797808][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 198.835761][ T7244] loop5: detected capacity change from 0 to 64 [ 199.473546][ T7242] loop1: detected capacity change from 0 to 32768 [ 199.496017][ T7240] loop2: detected capacity change from 0 to 32768 [ 199.560617][ T7240] JBD2: Ignoring recovery information on journal [ 199.561063][ T7242] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 199.600774][ T7242] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 199.627220][ T7242] JBD2: Ignoring recovery information on journal [ 199.681890][ T7264] loop4: detected capacity change from 0 to 4096 [ 199.719863][ T7240] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 199.746075][ T7242] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 199.770849][ T7270] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.812154][ T7261] syz.4.1051: attempt to access beyond end of device [ 199.812154][ T7261] loop4: rw=0, sector=67108864, nr_sectors = 2 limit=4096 [ 199.888785][ T7261] syz.4.1051: attempt to access beyond end of device [ 199.888785][ T7261] loop4: rw=0, sector=131070, nr_sectors = 2 limit=4096 [ 199.940364][ T7261] NILFS (loop4): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=0, cno=0, offset=0, blocknr=0, vblocknr=0 [ 200.006373][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 200.059204][ T7261] NILFS (loop4): error -2 preparing GC: cannot read source blocks [ 200.082718][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 200.847337][ T7293] loop4: detected capacity change from 0 to 4096 [ 200.914934][ T7299] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.434881][ T7312] device wlan0 entered promiscuous mode [ 201.511968][ T7315] loop5: detected capacity change from 0 to 2048 [ 201.528107][ T7312] device wlan0 left promiscuous mode [ 201.611618][ T7315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.611703][ T7319] loop0: detected capacity change from 0 to 1024 [ 201.925430][ T6610] EXT4-fs (loop5): unmounting filesystem. [ 201.974509][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 202.114737][ T7340] loop5: detected capacity change from 0 to 16 [ 202.179596][ T7340] erofs: (device loop5): mounted with root inode @ nid 36. [ 202.400380][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 202.483157][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.803841][ T7407] set_capacity_and_notify: 2 callbacks suppressed [ 203.803856][ T7407] loop2: detected capacity change from 0 to 512 [ 203.960303][ T7407] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1101: inode has both inline data and extents flags [ 204.019667][ T7407] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1101: couldn't read orphan inode 15 (err -117) [ 204.058658][ T7407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.156017][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 204.278521][ T5783] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 204.468648][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 204.477217][ T5783] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 204.488324][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.506037][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 204.534026][ T5783] usb 2-1: config 0 descriptor?? [ 204.554822][ T7433] loop0: detected capacity change from 0 to 256 [ 204.770694][ T7439] loop5: detected capacity change from 0 to 64 [ 204.783357][ T5783] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 204.809002][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.839865][ T5783] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 204.854986][ T7441] binder: 7440:7441 ioctl 40046205 0 returned -22 [ 204.900533][ T5783] usb 2-1: media controller created [ 204.927536][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.013385][ T5783] az6027: usb out operation failed. (-71) [ 205.031033][ T5783] az6027: usb out operation failed. (-71) [ 205.046342][ T5783] stb0899_attach: Driver disabled by Kconfig [ 205.063232][ T5783] az6027: no front-end attached [ 205.063232][ T5783] [ 205.124297][ T5783] az6027: usb out operation failed. (-71) [ 205.147238][ T5783] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 205.186190][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 205.229954][ T5783] dvb-usb: schedule remote query interval to 400 msecs. [ 205.248090][ T5783] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 205.286033][ T5783] usb 2-1: USB disconnect, device number 9 [ 205.302200][ T7454] loop5: detected capacity change from 0 to 2048 [ 205.399296][ T5783] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 205.434594][ T7454] loop5: p2 p3 p7 [ 205.527880][ T3637] loop5: p2 p3 p7 [ 205.746112][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 205.785633][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 205.914762][ T5469] udevd[5469]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 205.927122][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 206.221432][ T7483] loop4: detected capacity change from 0 to 512 [ 206.276959][ T7479] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1124'. [ 206.317160][ T7483] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.334743][ T7483] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 206.431252][ T7483] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1123: corrupted inode contents [ 206.466272][ T7483] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #15: comm syz.4.1123: mark_inode_dirty error [ 206.492255][ T7483] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1123: corrupted inode contents [ 206.536107][ T7483] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2947: inode #15: comm syz.4.1123: mark_inode_dirty error [ 206.594426][ T7483] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.1123: mark inode dirty (error -117) [ 206.660560][ T7483] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 206.691092][ T7483] EXT4-fs (loop4): 1 orphan inode deleted [ 206.704589][ T7483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.016710][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 207.246242][ T7486] loop1: detected capacity change from 0 to 32768 [ 207.376210][ T7486] JBD2: Ignoring recovery information on journal [ 207.469747][ T7486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 207.484917][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 207.502253][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 207.672198][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 208.010733][ T7531] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1140'. [ 208.316011][ T7544] loop1: detected capacity change from 0 to 64 [ 208.445052][ T7544] hfs: bad catalog entry type 0 [ 208.688737][ T4317] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 208.917642][ T4317] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.957375][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.990244][ T4317] usb 1-1: config 0 descriptor?? [ 209.035086][ T4317] cp210x 1-1:0.0: cp210x converter detected [ 209.244724][ T7581] overlayfs: filesystem on './file0' not supported as upperdir [ 209.405658][ T4317] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 209.451586][ T4317] usb 1-1: cp210x converter now attached to ttyUSB0 [ 209.488916][ T5783] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 209.632144][ T7592] loop4: detected capacity change from 0 to 4096 [ 209.638704][ T4318] usb 1-1: USB disconnect, device number 8 [ 209.651677][ T7592] EXT4-fs: inline encryption not supported [ 209.676046][ T7592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.678711][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.692928][ T5783] usb 3-1: Using ep0 maxpacket: 32 [ 209.708521][ T5783] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 209.715748][ T7592] EXT4-fs (loop4): Test dummy encryption mode enabled [ 209.747969][ T5783] usb 3-1: config 0 has no interface number 0 [ 209.774551][ T7592] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 209.788776][ T7592] System zones: 0-5 [ 209.840399][ T5783] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.863546][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.876721][ T4318] cp210x 1-1:0.0: device disconnected [ 209.923880][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.968520][ T5783] usb 3-1: Product: syz [ 209.972747][ T5783] usb 3-1: Manufacturer: syz [ 209.997914][ T5783] usb 3-1: SerialNumber: syz [ 210.044499][ T5783] usb 3-1: config 0 descriptor?? [ 210.076731][ T5783] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.114567][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 210.166708][ T7586] loop1: detected capacity change from 0 to 32768 [ 210.279785][ T5783] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.338834][ T5783] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 210.697520][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 210.727663][ T7621] loop0: detected capacity change from 0 to 128 [ 210.734352][ T4318] usb 3-1: USB disconnect, device number 9 [ 210.758915][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 210.820679][ T7623] loop4: detected capacity change from 0 to 2048 [ 210.821644][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 210.880879][ T7625] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.899015][ T7621] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 210.930125][ T4318] quatech2 3-1:0.51: device disconnected [ 210.990125][ T7621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.096866][ T27] audit: type=1800 audit(1784208497.297:231): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1173" name="file1" dev="loop4" ino=2097152 res=0 errno=0 [ 211.109940][ T7627] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 223 already freed [ 211.316391][ T7627] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 211.394189][ T7633] loop0: detected capacity change from 0 to 16 [ 211.432697][ T7633] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.369577][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 212.416664][ T7666] device bond0 entered promiscuous mode [ 212.453688][ T7666] device bond_slave_0 entered promiscuous mode [ 212.471545][ T7666] device bond_slave_1 entered promiscuous mode [ 212.492678][ T7666] device bond0 left promiscuous mode [ 212.500622][ T7666] device bond_slave_0 left promiscuous mode [ 212.518664][ T7666] device bond_slave_1 left promiscuous mode [ 212.573854][ T7669] loop2: detected capacity change from 0 to 8192 [ 212.600990][ T7669] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.615103][ T7669] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 212.624828][ T7669] REISERFS (device loop2): using ordered data mode [ 212.631757][ T7669] reiserfs: using flush barriers [ 212.638046][ T7669] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.655171][ T7669] REISERFS (device loop2): checking transaction log (loop2) [ 212.666065][ T7669] REISERFS (device loop2): Using r5 hash to sort names [ 212.676815][ T7669] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 212.728496][ T22] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 212.830899][ T7681] netem: change failed [ 212.920745][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 212.938858][ T22] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 212.975905][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.993265][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 213.033503][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.068332][ T22] usb 5-1: config 0 descriptor?? [ 213.290494][ T7697] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 213.494744][ T7704] input: syz0 as /devices/virtual/input/input17 [ 213.535307][ T22] wacom 0003:056A:032F.000A: ignoring exceeding usage max [ 213.581918][ T22] wacom 0003:056A:032F.000A: hidraw0: USB HID v0.0c Device [HID 056a:032f] on usb-dummy_hcd.4-1/input0 [ 213.730724][ T4313] usb 5-1: USB disconnect, device number 11 [ 213.731017][ T7710] loop5: detected capacity change from 0 to 2048 [ 213.798324][ T7710] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 213.935179][ T7712] fido_id[7712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 214.319286][ T7698] loop0: detected capacity change from 0 to 32768 [ 214.386250][ T7698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1198 (7698) [ 214.483406][ T7698] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.514413][ T7698] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 214.527665][ T7698] BTRFS info (device loop0): setting nodatasum [ 214.540077][ T7698] BTRFS info (device loop0): force zlib compression, level 3 [ 214.547842][ T7698] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 214.561946][ T7698] BTRFS info (device loop0): use lzo compression, level 0 [ 214.572853][ T7698] BTRFS info (device loop0): turning on flush-on-commit [ 214.586173][ T7698] BTRFS info (device loop0): enabling auto defrag [ 214.595229][ T7698] BTRFS info (device loop0): max_inline at 4096 [ 214.631431][ T7698] BTRFS info (device loop0): force zlib compression, level 3 [ 214.646774][ T7698] BTRFS info (device loop0): using free space tree [ 214.753422][ T7737] loop1: detected capacity change from 0 to 2048 [ 214.833784][ T7737] loop1: p2 p3 p7 [ 214.861084][ T7698] BTRFS info (device loop0): enabling ssd optimizations [ 215.254179][ T7762] loop5: detected capacity change from 0 to 1024 [ 215.294972][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 215.295160][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 215.309245][ T5469] udevd[5469]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 215.330416][ T7766] loop2: detected capacity change from 0 to 16 [ 215.331317][ T7766] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 215.404525][ T5547] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.460355][ T5466] udevd[5466]: incorrect cramfs checksum on /dev/loop2 [ 215.521291][ T5469] udevd[5469]: incorrect cramfs checksum on /dev/loop2 [ 215.863127][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1220'. [ 215.864697][ T7776] loop5: detected capacity change from 0 to 128 [ 216.259684][ T6308] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.397522][ T7792] loop4: detected capacity change from 0 to 2048 [ 216.399209][ T7794] use of bytesused == 0 is deprecated and will be removed in the future, [ 216.435880][ T7794] use the actual size instead. [ 216.462530][ T6308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.476511][ T6308] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.490765][ T7797] loop5: detected capacity change from 0 to 128 [ 216.502671][ T7792] loop4: p2 p3 p7 [ 216.507702][ T6308] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.521461][ T6308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.591802][ T7780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.767031][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 216.845452][ T7802] device bond0 entered promiscuous mode [ 216.865708][ T7806] loop5: detected capacity change from 0 to 512 [ 216.870819][ T4316] usb 1-1: USB disconnect, device number 9 [ 216.900229][ T7802] device bond_slave_0 entered promiscuous mode [ 216.935764][ T7802] device bond_slave_1 entered promiscuous mode [ 216.945143][ T7806] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.961722][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1231: corrupted inode contents [ 217.004692][ T7802] device bond0 left promiscuous mode [ 217.011906][ T7802] device bond_slave_0 left promiscuous mode [ 217.030636][ T7804] udevd[7804]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 217.064202][ T7806] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1231: mark_inode_dirty error [ 217.068745][ T7802] device bond_slave_1 left promiscuous mode [ 217.096083][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 217.125113][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 217.141224][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1231: corrupted inode contents [ 217.198778][ T7806] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2947: inode #15: comm syz.5.1231: mark_inode_dirty error [ 217.252146][ T7806] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1231: mark inode dirty (error -117) [ 217.285660][ T7806] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 217.336574][ T7806] EXT4-fs (loop5): 1 orphan inode deleted [ 217.359403][ T7806] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 217.447637][ T7821] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 217.481972][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 217.573304][ T7825] loop2: detected capacity change from 0 to 64 [ 217.594777][ T6610] EXT4-fs (loop5): unmounting filesystem. [ 217.776451][ T7832] loop0: detected capacity change from 0 to 2048 [ 217.887636][ T7832] loop0: p2 p3 p7 [ 217.951449][ T7838] loop1: detected capacity change from 0 to 512 [ 218.052087][ T7838] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.086740][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1249'. [ 218.096777][ T7838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.205977][ T7841] device bond0 entered promiscuous mode [ 218.236212][ T7841] device bond_slave_0 entered promiscuous mode [ 218.243136][ T7841] device bond_slave_1 entered promiscuous mode [ 218.252819][ T7841] device bond0 left promiscuous mode [ 218.258622][ T7841] device bond_slave_0 left promiscuous mode [ 218.264870][ T7841] device bond_slave_1 left promiscuous mode [ 218.337400][ T7838] EXT4-fs (loop1): 1 truncate cleaned up [ 218.347868][ T7838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.446997][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 218.483211][ T7804] udevd[7804]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 219.010655][ T7843] F2FS-fs (loop4): invalid crc value [ 219.020831][ T7843] F2FS-fs (loop4): Found nat_bits in checkpoint [ 219.065196][ T7843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.438840][ T7838] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 219.463102][ T7838] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #2: block 13: comm syz.1.1247: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 219.482359][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.677781][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 220.277244][ T7853] set_capacity_and_notify: 1 callbacks suppressed [ 220.277259][ T7853] loop0: detected capacity change from 0 to 32768 [ 220.326605][ T7865] loop5: detected capacity change from 0 to 32768 [ 220.515478][ T7853] XFS (loop0): Mounting V5 Filesystem [ 220.527180][ T7865] XFS (loop5): Mounting V5 Filesystem [ 220.574427][ T7870] loop4: detected capacity change from 0 to 131072 [ 220.593339][ T7870] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 220.602856][ T7870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.612126][ T7870] F2FS-fs (loop4): invalid crc value [ 220.645796][ T7865] XFS (loop5): Ending clean mount [ 220.658549][ T7853] XFS (loop0): Ending clean mount [ 220.703983][ T7865] XFS (loop5): User initiated shutdown received. [ 220.711799][ T7870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.717235][ T7890] loop1: detected capacity change from 0 to 1024 [ 220.767748][ T7867] loop2: detected capacity change from 0 to 32768 [ 220.791055][ T7865] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 220.811193][ T7870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.818323][ T7870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 220.856093][ T7870] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 220.924143][ T7890] hfsplus: keylen 65060 too large [ 220.949357][ T7865] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 220.978622][ T7890] hfsplus: xattr search failed [ 221.028116][ T5547] XFS (loop0): Unmounting Filesystem [ 221.090373][ T6610] XFS (loop5): Unmounting Filesystem [ 221.636342][ T7897] loop2: detected capacity change from 0 to 2048 [ 221.747868][ T7898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.827729][ T27] audit: type=1800 audit(1784208508.027:232): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1270" name="file1" dev="loop2" ino=2097152 res=0 errno=0 [ 221.849128][ T7897] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 223 already freed [ 221.889118][ T7897] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 222.447879][ T7914] loop2: detected capacity change from 0 to 16 [ 222.486666][ T7914] erofs: (device loop2): mounted with root inode @ nid 36. [ 222.496333][ T7913] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 222.550896][ T7914] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 222.558560][ T7913] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 222.608686][ T7913] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 223.114142][ T7929] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 223.121349][ T7929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.157583][ T7929] vhci_hcd vhci_hcd.0: Device attached [ 223.253856][ T7910] loop5: detected capacity change from 0 to 40427 [ 223.294708][ T7910] F2FS-fs (loop5): invalid crc value [ 223.310080][ T7910] F2FS-fs (loop5): Found nat_bits in checkpoint [ 223.420893][ T125] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 223.426100][ T7910] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 223.438614][ T4314] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 223.459947][ T7910] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 223.491818][ T7910] F2FS-fs (loop5): Start checkpoint disabled! [ 223.531975][ T7910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 223.639709][ T7923] loop0: detected capacity change from 0 to 40427 [ 223.650299][ T4314] usb 5-1: config 7 interface 0 has no altsetting 0 [ 223.672700][ T4314] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=d5.27 [ 223.693807][ T7923] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 223.723532][ T7923] F2FS-fs (loop0): invalid crc value [ 223.732864][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.750625][ T7923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.782407][ T4314] usb 5-1: Product: syz [ 223.818492][ T4314] usb 5-1: Manufacturer: syz [ 223.830538][ T4314] usb 5-1: SerialNumber: syz [ 223.853920][ T7923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.956092][ T7936] loop2: detected capacity change from 0 to 40427 [ 224.008521][ T7936] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 224.028505][ T7936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 224.090569][ T7930] vhci_hcd: unknown pdu 1 [ 224.098931][ T7936] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 224.105168][ T4314] au0828: au0828: Device initialization failed. [ 224.112079][ T4293] vhci_hcd: stop threads [ 224.119819][ T4293] vhci_hcd: release socket [ 224.129161][ T7936] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 224.159072][ T4293] vhci_hcd: disconnect device [ 224.167080][ T4314] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 224.167075][ T7936] F2FS-fs (loop2): invalid crc value [ 224.174930][ T4314] usb 5-1: USB disconnect, device number 12 [ 224.217909][ T7936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.268341][ T5547] syz-executor: attempt to access beyond end of device [ 224.268341][ T5547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.373207][ T7936] F2FS-fs (loop2): Start checkpoint disabled! [ 224.497412][ T7936] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 224.535613][ T7936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 224.673866][ T27] audit: type=1800 audit(1784208510.877:233): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1275" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 224.936310][ T32] kworker/u4:2: attempt to access beyond end of device [ 224.936310][ T32] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 225.017445][ T7961] loop4: p1 p3 p4 [ 225.017445][ T7961] p1: [ 225.054720][ T7961] loop4: p4 size 589824 extends beyond EOD, truncated [ 225.077361][ T7963] hfs: bad catalog entry type 0 [ 225.454709][ T7967] set_capacity_and_notify: 2 callbacks suppressed [ 225.454724][ T7967] loop0: detected capacity change from 0 to 512 [ 225.504204][ T5469] udevd[5469]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 225.504622][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 225.518238][ T7804] udevd[7804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 225.527433][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 225.657543][ T7967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.684087][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 225.684255][ T7804] udevd[7804]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 225.697668][ T4623] udevd[4623]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 225.708013][ T5469] udevd[5469]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 225.742934][ T7967] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.224527][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 226.751953][ T7981] loop2: detected capacity change from 0 to 131072 [ 226.772907][ T7981] F2FS-fs (loop2): invalid crc value [ 226.805308][ T7981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.850674][ T7981] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 226.865967][ T7981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 227.191727][ T8004] loop0: detected capacity change from 0 to 4096 [ 227.225943][ T8004] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 227.288178][ T8004] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 227.618053][ T8012] loop4: detected capacity change from 0 to 8192 [ 227.706381][ T8012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.746928][ T8012] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 227.747057][ T8012] REISERFS (device loop4): using ordered data mode [ 227.747067][ T8012] reiserfs: using flush barriers [ 227.750550][ T8012] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.750933][ T8012] REISERFS (device loop4): checking transaction log (loop4) [ 227.754461][ T8012] REISERFS (device loop4): Using r5 hash to sort names [ 227.754783][ T8012] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 227.793849][ T8020] loop0: detected capacity change from 0 to 128 [ 227.898249][ T7804] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.323758][ T8029] loop4: detected capacity change from 0 to 128 [ 228.355983][ T8030] netlink: 'syz.5.1305': attribute type 3 has an invalid length. [ 228.369950][ T8010] loop2: detected capacity change from 0 to 32768 [ 228.425103][ T8030] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1305'. [ 228.449130][ T8006] loop1: detected capacity change from 0 to 40427 [ 228.469617][ T8010] XFS (loop2): Mounting V5 Filesystem [ 228.507492][ T8006] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.536090][ T125] vhci_hcd: vhci_device speed not set [ 228.610808][ T8006] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.616592][ T8010] XFS (loop2): Ending clean mount [ 228.631579][ T8006] F2FS-fs (loop1): invalid crc value [ 228.695079][ T8006] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 228.819670][ T4273] XFS (loop2): Unmounting Filesystem [ 228.898723][ T6289] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 229.021919][ T8006] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 229.057319][ T8006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.136648][ T6289] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.157303][ T6289] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.212408][ T6289] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.234177][ T8006] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 229.240801][ T6289] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.263637][ T6289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.310370][ T6289] usb 5-1: Product: syz [ 229.329803][ T6289] usb 5-1: Manufacturer: syz [ 229.334485][ T6289] usb 5-1: SerialNumber: syz [ 229.366731][ T8044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.386365][ T6289] cdc_mbim 5-1:1.0: skipping garbage [ 230.080895][ T8066] loop5: detected capacity change from 0 to 1024 [ 230.113564][ T8068] loop2: detected capacity change from 0 to 512 [ 230.173649][ T8066] hfsplus: keylen 65060 too large [ 230.184525][ T6289] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 230.194843][ T8066] hfsplus: xattr search failed [ 230.211362][ T6289] cdc_mbim 5-1:1.0: bind() failure [ 230.252491][ T6289] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 230.253783][ T8068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.281790][ T6289] cdc_ncm 5-1:1.1: bind() failure [ 230.292364][ T6289] usb 5-1: USB disconnect, device number 13 [ 230.365696][ T8068] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.579112][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 230.758628][ T8085] loop0: detected capacity change from 0 to 2048 [ 230.795101][ T8086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.811121][ T27] audit: type=1800 audit(1784208517.017:234): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1324" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 230.884462][ T8088] loop4: detected capacity change from 0 to 2048 [ 230.929938][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.979767][ T6289] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.104841][ T8079] loop5: detected capacity change from 0 to 32768 [ 231.143422][ T8079] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1321 (8079) [ 231.178513][ T6289] usb 3-1: Using ep0 maxpacket: 8 [ 231.185377][ T6289] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 231.231918][ T6289] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 231.256502][ T6289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.310907][ T6289] usb 3-1: config 0 descriptor?? [ 231.326001][ T8079] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 231.387610][ T8079] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 231.428177][ T8079] BTRFS info (device loop5): using free space tree [ 231.528422][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.569180][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.672250][ T8079] BTRFS info (device loop5): enabling ssd optimizations [ 231.868074][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 231.885989][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x1 [ 231.897095][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x4 [ 231.940240][ T6610] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 231.951789][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 231.969879][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 231.994417][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.008053][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.079114][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.109875][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x2 [ 232.143799][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.180125][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.212393][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.247696][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.281592][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x2 [ 232.301063][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.350087][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.380619][ T6289] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 232.385401][ T8095] loop1: detected capacity change from 0 to 40427 [ 232.391879][ T6289] hid_mf 0003:0079:1801.000B: item fetching failed at offset 43/44 [ 232.423406][ T8095] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 232.428132][ T6289] hid_mf 0003:0079:1801.000B: HID parse failed. [ 232.452481][ T6289] hid_mf: probe of 0003:0079:1801.000B failed with error -22 [ 232.474740][ T8095] F2FS-fs (loop1): invalid crc value [ 232.494865][ T6289] usb 3-1: USB disconnect, device number 10 [ 232.554558][ T8095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 232.744702][ T8095] F2FS-fs (loop1): recover fsync data on readonly fs [ 232.787366][ T8095] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 232.837023][ T8095] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 232.904740][ T8095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 233.082229][ T8095] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 233.239008][ T4317] kernel write not supported for file /bluetooth/6lowpan_control (pid: 4317 comm: kworker/0:8) [ 233.313134][ T8140] loop0: detected capacity change from 0 to 256 [ 233.601785][ T8147] tap0: tun_chr_ioctl cmd 2148553947 [ 234.092965][ T125] kernel write not supported for file /admmidi2 (pid: 125 comm: kworker/0:2) [ 234.146179][ T4317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.326838][ T8180] loop1: detected capacity change from 0 to 128 [ 234.338611][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 234.352296][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.376829][ T8180] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 234.405191][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.425650][ T8180] hpfs: filesystem error: improperly stopped [ 234.439707][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.451013][ T8180] hpfs: You really don't want any checks? You are crazy... [ 234.465050][ T4317] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 234.478048][ T8180] hpfs: hpfs_map_sector(): read error [ 234.488325][ T8180] hpfs: code page support is disabled [ 234.495661][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.509765][ T8180] hpfs: hpfs_map_4sectors(): unaligned read [ 234.527950][ T4317] usb 1-1: config 0 descriptor?? [ 234.535481][ T8180] hpfs: hpfs_map_4sectors(): unaligned read [ 234.557879][ T8180] hpfs: filesystem error: unable to find root dir [ 234.960173][ T4317] hid (null): unknown global tag 0xe [ 235.149623][ T8178] loop2: detected capacity change from 0 to 40427 [ 235.217898][ T8178] F2FS-fs (loop2): invalid crc value [ 235.227576][ T4317] usb 1-1: USB disconnect, device number 10 [ 235.241868][ T8178] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 235.352354][ T8178] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 235.363834][ T8178] F2FS-fs (loop2): Start checkpoint disabled! [ 235.388244][ T8178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 235.470328][ T4322] kworker/u4:5: attempt to access beyond end of device [ 235.470328][ T4322] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.535305][ T8226] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1372'. [ 236.556569][ T8227] loop5: detected capacity change from 0 to 512 [ 236.603321][ T8227] EXT4-fs (loop5): 1 truncate cleaned up [ 236.613155][ T8227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.686528][ T27] audit: type=1800 audit(1784208522.887:235): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1371" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 236.842893][ T6610] EXT4-fs (loop5): unmounting filesystem. [ 237.166890][ T8248] program syz.5.1380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.170243][ T4317] kernel read not supported for file /video9 (pid: 4317 comm: kworker/0:8) [ 237.316487][ T8254] loop0: detected capacity change from 0 to 512 [ 237.340083][ T8254] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 237.364697][ T8254] UDF-fs: Scanning with blocksize 512 failed [ 237.408109][ T8254] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 237.464915][ T8254] UDF-fs: Scanning with blocksize 1024 failed [ 237.477601][ T8254] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 237.501549][ T8254] UDF-fs: Scanning with blocksize 2048 failed [ 237.513087][ T8254] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 237.536310][ T8254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.558258][ T27] audit: type=1800 audit(1784208523.757:236): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1382" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 237.685206][ T6310] kernel write not supported for file /sequencer (pid: 6310 comm: kworker/1:16) [ 237.838304][ T8266] loop0: detected capacity change from 0 to 1024 [ 237.875916][ T8266] EXT4-fs: inline encryption not supported [ 237.955871][ T8266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.978730][ T8266] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.053415][ T8266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1389: bg 0: block 112: padding at end of block bitmap is not set [ 238.101530][ T5619] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:8: lblock 3 mapped to illegal pblock 3 (length 3) [ 238.185585][ T5619] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 238.243464][ T5619] EXT4-fs (loop0): This should not happen!! Data will be lost [ 238.243464][ T5619] [ 238.279135][ T8260] loop5: detected capacity change from 0 to 40427 [ 238.289089][ T5619] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 2) [ 238.326450][ T8260] F2FS-fs (loop5): invalid crc value [ 238.350756][ T5619] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 238.376113][ T8260] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.413575][ T5619] EXT4-fs (loop0): This should not happen!! Data will be lost [ 238.413575][ T5619] [ 238.461105][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 238.564165][ T8260] F2FS-fs (loop5): Start checkpoint disabled! [ 238.620107][ T8260] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 238.707775][ T8260] syz.5.1386: attempt to access beyond end of device [ 238.707775][ T8260] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.002497][ T4293] kworker/u4:4: attempt to access beyond end of device [ 239.002497][ T4293] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 239.448400][ C0] sched: RT throttling activated [ 239.956776][ T8304] loop4: detected capacity change from 0 to 512 [ 240.024313][ T8304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.134606][ T8304] EXT4-fs (loop4): 1 truncate cleaned up [ 240.152197][ T8286] loop1: detected capacity change from 0 to 262144 [ 240.162331][ T8286] F2FS-fs (loop1): invalid crc value [ 240.177288][ T8286] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.177337][ T8304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.220349][ T8286] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 240.368830][ T27] audit: type=1800 audit(1784208526.577:237): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1405" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 240.582134][ T8298] loop5: detected capacity change from 0 to 32768 [ 240.691373][ T8298] XFS (loop5): Mounting V5 Filesystem [ 240.741325][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 240.813883][ T8298] XFS (loop5): Ending clean mount [ 240.909600][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 241.039413][ T6610] XFS (loop5): Unmounting Filesystem [ 241.083365][ T8333] loop0: detected capacity change from 0 to 1024 [ 241.321317][ T8337] loop4: detected capacity change from 0 to 4096 [ 241.355323][ T8337] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.440445][ T8337] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 241.499182][ T8337] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 241.559063][ T8337] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 241.633848][ T8337] ntfs: volume version 3.1. [ 241.777689][ T8319] loop2: detected capacity change from 0 to 32768 [ 241.886632][ T4293] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 241.913754][ T8319] XFS (loop2): Mounting V5 Filesystem [ 242.008680][ T4293] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 242.073658][ T8319] XFS (loop2): Ending clean mount [ 242.094487][ T4280] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 242.313477][ T8358] loop0: detected capacity change from 0 to 2048 [ 242.353709][ T8364] loop1: detected capacity change from 0 to 64 [ 242.426112][ T8358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 242.435380][ T4273] XFS (loop2): Unmounting Filesystem [ 242.463918][ T8358] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.476705][ T8369] loop4: detected capacity change from 0 to 2048 [ 242.485656][ T8369] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.521373][ T8369] NILFS (loop4): mounting unchecked fs [ 242.668508][ T8369] NILFS (loop4): recovery complete [ 242.704819][ T8376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.765831][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 242.899222][ T8378] loop1: detected capacity change from 0 to 512 [ 242.922493][ T8378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.961240][ T8378] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.002538][ T8378] EXT4-fs (loop1): 1 truncate cleaned up [ 243.008363][ T8378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.033167][ T8383] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1428'. [ 243.116225][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 243.508968][ T8398] loop0: detected capacity change from 0 to 128 [ 243.614750][ T8398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.634330][ T8398] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.765706][ T8398] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 243.915458][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 243.983044][ T8405] loop0: detected capacity change from 0 to 128 [ 243.996999][ T8405] EXT4-fs: inline encryption not supported [ 244.016462][ T8405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 244.053650][ T8405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.076890][ T8405] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.136646][ T8400] loop4: detected capacity change from 0 to 32768 [ 244.233882][ T5547] EXT4-fs (loop0): unmounting filesystem. [ 244.341047][ T8400] XFS (loop4): Mounting V5 Filesystem [ 244.458830][ T8400] XFS (loop4): Ending clean mount [ 244.553811][ T8429] loop5: detected capacity change from 0 to 512 [ 244.594186][ T8400] XFS (loop4): User initiated shutdown received. [ 244.605391][ T8400] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 244.625024][ T8400] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 244.639328][ T8127] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 244.649448][ T8429] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 244.696965][ T8429] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 244.705761][ T4280] XFS (loop4): Unmounting Filesystem [ 244.715326][ T8429] EXT4-fs (loop5): 1 truncate cleaned up [ 244.721650][ T8429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 244.768798][ T8429] EXT4-fs (loop5): shut down requested (1) [ 244.842070][ T6610] EXT4-fs (loop5): unmounting filesystem. [ 244.861381][ T8127] usb 3-1: Using ep0 maxpacket: 32 [ 244.883337][ T8127] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.929177][ T8127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.949706][ T8127] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.002394][ T8127] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 245.016927][ T8437] loop5: detected capacity change from 0 to 256 [ 245.028442][ T8127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.040399][ T8127] usb 3-1: Product: syz [ 245.045535][ T8437] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.045793][ T8127] usb 3-1: Manufacturer: syz [ 245.072831][ T8437] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 245.085748][ T8127] usb 3-1: SerialNumber: syz [ 245.108173][ T8437] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d) [ 245.150179][ T8437] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00) [ 245.176485][ T8437] exFAT-fs (loop5): failed to initialize root inode [ 245.210867][ T8439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.225766][ T8439] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.289259][ T8437] EXT4-fs: Ignoring removed oldalloc option [ 245.295228][ T8437] ext4: Unknown parameter 'nouser_xattr' [ 245.321705][ T7804] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.357948][ T8127] usb 3-1: 0:2 : does not exist [ 245.425760][ T8127] usb 3-1: USB disconnect, device number 11 [ 245.497781][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 245.602698][ T8447] hfsplus: bad catalog entry type [ 245.690073][ T4623] udevd[4623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.887162][ T8456] rock: directory entry would overflow storage [ 245.896318][ T8456] rock: sig=0x4654, size=5, remaining=4 [ 246.060237][ T8463] Bluetooth: MGMT ver 1.22 [ 246.478568][ T125] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 246.591760][ T27] audit: type=1326 audit(1784208532.797:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 246.678835][ T27] audit: type=1326 audit(1784208532.827:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 246.695908][ T125] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.759491][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.767537][ T125] usb 1-1: Product: syz [ 246.776406][ T27] audit: type=1326 audit(1784208532.827:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 246.801504][ T125] usb 1-1: Manufacturer: syz [ 246.806947][ T125] usb 1-1: SerialNumber: syz [ 246.842783][ T125] usb 1-1: config 0 descriptor?? [ 246.857667][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1471'. [ 246.888480][ T27] audit: type=1326 audit(1784208532.827:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 246.932999][ T27] audit: type=1326 audit(1784208532.827:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 246.957040][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.007081][ T27] audit: type=1326 audit(1784208532.827:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.051875][ T27] audit: type=1326 audit(1784208532.827:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.075922][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.094189][ T1180] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 247.111081][ T1180] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 247.132774][ T1180] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 247.139987][ T8480] set_capacity_and_notify: 4 callbacks suppressed [ 247.140002][ T8480] loop1: detected capacity change from 0 to 32768 [ 247.156964][ T27] audit: type=1326 audit(1784208532.827:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.232489][ T8480] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 247.259656][ T125] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 247.269177][ T125] usb 1-1: Firmware version (0.0) predates our first public release. [ 247.277300][ T125] usb 1-1: Please update to version 0.2 or newer [ 247.286024][ T8482] loop4: detected capacity change from 0 to 40427 [ 247.307634][ T8482] F2FS-fs (loop4): invalid crc value [ 247.310619][ T8480] JBD2: Ignoring recovery information on journal [ 247.347368][ T8496] fido_id[8496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.359671][ T27] audit: type=1326 audit(1784208532.827:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.401505][ T8482] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 247.445313][ T8480] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 247.488986][ T27] audit: type=1326 audit(1784208532.827:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.514284][ T27] audit: type=1326 audit(1784208532.827:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.538326][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.544849][ T27] audit: type=1326 audit(1784208532.837:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.570223][ T27] audit: type=1326 audit(1784208532.837:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.2.1469" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6fb9de59 code=0x7ffc0000 [ 247.594222][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.659687][ T125] usb 1-1: USB disconnect, device number 11 [ 247.711414][ T8482] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 247.729756][ T8480] [ 247.732142][ T8480] ====================================================== [ 247.739170][ T8480] WARNING: possible circular locking dependency detected [ 247.746202][ T8480] syzkaller #0 Not tainted [ 247.750607][ T8480] ------------------------------------------------------ [ 247.757621][ T8480] syz.1.1466/8480 is trying to acquire lock: [ 247.763592][ T8480] ffff888054b2b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x266/0x980 [ 247.774548][ T8480] [ 247.774548][ T8480] but task is already holding lock: [ 247.781900][ T8480] ffff88802a5454e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 247.792161][ T8480] [ 247.792161][ T8480] which lock already depends on the new lock. [ 247.792161][ T8480] [ 247.802548][ T8480] [ 247.802548][ T8480] the existing dependency chain (in reverse order) is: [ 247.811551][ T8480] [ 247.811551][ T8480] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 247.820059][ T8480] down_read+0x42/0x2d0 [ 247.824741][ T8480] ocfs2_start_trans+0x3a4/0x6f0 [ 247.830195][ T8480] ocfs2_mknod+0x1273/0x2580 [ 247.835299][ T8480] ocfs2_create+0x1b6/0x4b0 [ 247.840312][ T8480] path_openat+0x11b9/0x2f10 [ 247.845419][ T8480] do_filp_open+0x1ee/0x420 [ 247.850437][ T8480] do_sys_openat2+0x14b/0x4f0 [ 247.855626][ T8480] __x64_sys_open+0x11b/0x140 [ 247.860816][ T8480] do_syscall_64+0x4c/0xa0 [ 247.865746][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.872148][ T8480] [ 247.872148][ T8480] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 247.879615][ T8480] ocfs2_start_trans+0x2a5/0x6f0 [ 247.885069][ T8480] ocfs2_write_begin_nolock+0x20c2/0x4590 [ 247.891301][ T8480] ocfs2_write_begin+0x1b7/0x310 [ 247.896759][ T8480] generic_perform_write+0x2fa/0x5c0 [ 247.902560][ T8480] __generic_file_write_iter+0x148/0x2a0 [ 247.908715][ T8480] ocfs2_file_write_iter+0x1731/0x1fc0 [ 247.914689][ T8480] vfs_write+0x482/0x9a0 [ 247.919465][ T8480] ksys_write+0x14d/0x260 [ 247.924326][ T8480] do_syscall_64+0x4c/0xa0 [ 247.929291][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.935719][ T8480] [ 247.935719][ T8480] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 247.944494][ T8480] __lock_acquire+0x2d18/0x7c40 [ 247.949868][ T8480] lock_acquire+0x1bb/0x4a0 [ 247.954886][ T8480] down_read+0x42/0x2d0 [ 247.959550][ T8480] ocfs2_read_virt_blocks+0x266/0x980 [ 247.965433][ T8480] ocfs2_read_dir_block+0xd1/0x4f0 [ 247.971056][ T8480] ocfs2_dir_foreach_blk+0x274/0x1a80 [ 247.976947][ T8480] ocfs2_dir_foreach+0x16d/0x1c0 [ 247.982402][ T8480] ocfs2_empty_dir+0x105/0x650 [ 247.987682][ T8480] ocfs2_rename+0x217d/0x3930 [ 247.992969][ T8480] vfs_rename+0xd57/0x10f0 [ 247.997896][ T8480] do_renameat2+0x8ac/0xc80 [ 248.002932][ T8480] __x64_sys_rename+0x82/0x90 [ 248.008130][ T8480] do_syscall_64+0x4c/0xa0 [ 248.013068][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.019492][ T8480] [ 248.019492][ T8480] other info that might help us debug this: [ 248.019492][ T8480] [ 248.029707][ T8480] Chain exists of: [ 248.029707][ T8480] &ocfs2_file_ip_alloc_sem_key --> sb_internal#4 --> &journal->j_trans_barrier [ 248.029707][ T8480] [ 248.044566][ T8480] Possible unsafe locking scenario: [ 248.044566][ T8480] [ 248.052021][ T8480] CPU0 CPU1 [ 248.057372][ T8480] ---- ---- [ 248.062726][ T8480] lock(&journal->j_trans_barrier); [ 248.068003][ T8480] lock(sb_internal#4); [ 248.074760][ T8480] lock(&journal->j_trans_barrier); [ 248.082551][ T8480] lock(&ocfs2_file_ip_alloc_sem_key); [ 248.088096][ T8480] [ 248.088096][ T8480] *** DEADLOCK *** [ 248.088096][ T8480] [ 248.096248][ T8480] 7 locks held by syz.1.1466/8480: [ 248.101353][ T8480] #0: ffff88806662c460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 248.110584][ T8480] #1: ffff888049c85f48 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: do_renameat2+0x43c/0xc80 [ 248.121028][ T8480] #2: ffff888054b2b488 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: vfs_rename+0x865/0x10f0 [ 248.131371][ T8480] #3: ffff888049c81808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_lookup_lock_orphan_dir+0xe9/0x2d0 [ 248.144752][ T8480] #4: ffff88806662c650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_rename+0x1a42/0x3930 [ 248.154141][ T8480] #5: ffff88802a5454e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0 [ 248.164846][ T8480] #6: ffff888058c06990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 248.174490][ T8480] [ 248.174490][ T8480] stack backtrace: [ 248.180381][ T8480] CPU: 0 PID: 8480 Comm: syz.1.1466 Not tainted syzkaller #0 [ 248.187739][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 248.197793][ T8480] Call Trace: [ 248.201067][ T8480] [ 248.203989][ T8480] dump_stack_lvl+0x188/0x24e [ 248.208665][ T8480] ? load_image+0x410/0x410 [ 248.213160][ T8480] ? show_regs_print_info+0x12/0x12 [ 248.218352][ T8480] ? print_circular_bug+0x12b/0x1a0 [ 248.223550][ T8480] check_noncircular+0x296/0x330 [ 248.228515][ T8480] ? add_chain_block+0x9b0/0x9b0 [ 248.233447][ T8480] ? _find_first_zero_bit+0xd2/0x100 [ 248.238732][ T8480] ? add_lock_to_list+0x191/0x280 [ 248.243753][ T8480] __lock_acquire+0x2d18/0x7c40 [ 248.248620][ T8480] ? __bfs+0x27a/0x560 [ 248.252687][ T8480] ? verify_lock_unused+0x140/0x140 [ 248.257883][ T8480] ? check_path+0x21/0x40 [ 248.262214][ T8480] ? check_noncircular+0x189/0x330 [ 248.267337][ T8480] ? add_chain_block+0x9b0/0x9b0 [ 248.272293][ T8480] lock_acquire+0x1bb/0x4a0 [ 248.276791][ T8480] ? ocfs2_read_virt_blocks+0x266/0x980 [ 248.282334][ T8480] ? __might_sleep+0xd0/0xd0 [ 248.286914][ T8480] ? __lock_acquire+0x138a/0x7c40 [ 248.291944][ T8480] ? read_lock_is_recursive+0x10/0x10 [ 248.297316][ T8480] down_read+0x42/0x2d0 [ 248.301476][ T8480] ? ocfs2_read_virt_blocks+0x266/0x980 [ 248.307026][ T8480] ocfs2_read_virt_blocks+0x266/0x980 [ 248.312503][ T8480] ? ocfs2_validate_dx_leaf+0x200/0x200 [ 248.318046][ T8480] ? ocfs2_seek_data_hole_offset+0x990/0x990 [ 248.324030][ T8480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.330009][ T8480] ? __lock_acquire+0x7c40/0x7c40 [ 248.335032][ T8480] ? lock_chain_count+0x20/0x20 [ 248.339878][ T8480] ocfs2_read_dir_block+0xd1/0x4f0 [ 248.344989][ T8480] ? ocfs2_check_dir_trailer+0x220/0x220 [ 248.350705][ T8480] ? __lock_acquire+0x7c40/0x7c40 [ 248.355756][ T8480] ? stack_trace_save+0xa6/0xf0 [ 248.360603][ T8480] ? read_lock_is_recursive+0x10/0x10 [ 248.365972][ T8480] ocfs2_dir_foreach_blk+0x274/0x1a80 [ 248.371348][ T8480] ? ocfs2_dir_foreach+0x1c0/0x1c0 [ 248.376509][ T8480] ? jbd2__journal_start+0x5a0/0x5a0 [ 248.381788][ T8480] ocfs2_dir_foreach+0x16d/0x1c0 [ 248.386728][ T8480] ? ocfs2_recalc_free_list+0x4b0/0x4b0 [ 248.392274][ T8480] ? ocfs2_empty_dir+0xbe/0x650 [ 248.397142][ T8480] ocfs2_empty_dir+0x105/0x650 [ 248.401900][ T8480] ? ocfs2_check_dir_for_entry+0x450/0x450 [ 248.407720][ T8480] ? jbd2__journal_start+0x38e/0x5a0 [ 248.413013][ T8480] ? jbd2_journal_start+0x26/0x30 [ 248.418059][ T8480] ? ocfs2_start_trans+0x4d9/0x6f0 [ 248.423184][ T8480] ? ocfs2_empty_dir+0x650/0x650 [ 248.428135][ T8480] ? ocfs2_recovery_exit+0x50/0x50 [ 248.433273][ T8480] ? trace_ocfs2_rename_over_existing+0xa8/0x250 [ 248.439599][ T8480] ocfs2_rename+0x217d/0x3930 [ 248.444280][ T8480] ? ocfs2_mknod+0x2580/0x2580 [ 248.449060][ T8480] ? is_bpf_text_address+0x22/0x2a0 [ 248.454250][ T8480] ? kernel_text_address+0x9c/0xd0 [ 248.459357][ T8480] ? __kernel_text_address+0x9/0x30 [ 248.464551][ T8480] ? stack_trace_save+0xf0/0xf0 [ 248.469421][ T8480] ? stack_trace_save+0xa6/0xf0 [ 248.474276][ T8480] ? stack_trace_snprint+0xe0/0xe0 [ 248.479411][ T8480] ? check_noncircular+0x189/0x330 [ 248.484524][ T8480] ? add_chain_block+0x9b0/0x9b0 [ 248.489482][ T8480] ? lockdep_unlock+0x142/0x2e0 [ 248.494391][ T8480] ? lockdep_lock+0x1f0/0x1f0 [ 248.499164][ T8480] ? __lock_acquire+0x28d6/0x7c40 [ 248.504198][ T8480] ? verify_lock_unused+0x140/0x140 [ 248.509395][ T8480] ? verify_lock_unused+0x140/0x140 [ 248.514609][ T8480] ? rwsem_write_trylock+0x135/0x1c0 [ 248.519884][ T8480] ? clear_nonspinnable+0x60/0x60 [ 248.524913][ T8480] ? bpf_lsm_inode_permission+0x5/0x10 [ 248.530369][ T8480] ? take_dentry_name_snapshot+0x3f/0xf0 [ 248.536020][ T8480] ? ocfs2_mknod+0x2580/0x2580 [ 248.540786][ T8480] vfs_rename+0xd57/0x10f0 [ 248.545247][ T8480] ? __ia32_sys_link+0x90/0x90 [ 248.550009][ T8480] ? bpf_lsm_path_rename+0x5/0x10 [ 248.555027][ T8480] ? security_path_rename+0x178/0x200 [ 248.560400][ T8480] do_renameat2+0x8ac/0xc80 [ 248.564902][ T8480] ? fsnotify_move+0x4e0/0x4e0 [ 248.569654][ T8480] ? __check_object_size+0x4f6/0xa70 [ 248.574930][ T8480] ? strncpy_from_user+0x1dc/0x340 [ 248.580035][ T8480] ? getname_flags+0x206/0x500 [ 248.584788][ T8480] __x64_sys_rename+0x82/0x90 [ 248.589459][ T8480] do_syscall_64+0x4c/0xa0 [ 248.593877][ T8480] ? clear_bhb_loop+0x60/0xb0 [ 248.598554][ T8480] ? clear_bhb_loop+0x60/0xb0 [ 248.603226][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.609130][ T8480] RIP: 0033:0x7fc5c3b9de59 [ 248.613542][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.633164][ T8480] RSP: 002b:00007fc5c4ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 248.641659][ T8480] RAX: ffffffffffffffda RBX: 00007fc5c3e25fa0 RCX: 00007fc5c3b9de59 [ 248.649648][ T8480] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000280 [ 248.657700][ T8480] RBP: 00007fc5c3c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 248.665660][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.673646][ T8480] R13: 00007fc5c3e26038 R14: 00007fc5c3e25fa0 R15: 00007ffe1e76f928 [ 248.681612][ T8480] [ 248.701422][ T8482] F2FS-fs (loop4): Start checkpoint disabled! [ 248.760924][ T8482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 248.825211][ T5619] kworker/u4:8: attempt to access beyond end of device [ 248.825211][ T5619] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.896122][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 252.768465][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 252.774538][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 255.810182][ T1278] ieee802154 phy0 wpan0: encryption failed: -22