last executing test programs: 1m38.673866969s ago: executing program 3 (id=124): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1m38.433662222s ago: executing program 3 (id=128): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) 1m38.176171385s ago: executing program 3 (id=130): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)}, 0x20) unshare(0x2c020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 1m37.944769987s ago: executing program 3 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x0) 1m37.374739424s ago: executing program 3 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0xffffffff, 0x891, 0x6, 0xd6c1}]}) 1m36.907753359s ago: executing program 3 (id=140): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0x7) 1m36.384846625s ago: executing program 32 (id=140): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0x7) 1m25.915748082s ago: executing program 2 (id=195): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x5}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 1m25.616017385s ago: executing program 2 (id=197): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181042, 0x0) 1m25.336185468s ago: executing program 2 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m25.138459201s ago: executing program 2 (id=200): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000280)={[{@nogrpid}, {@bh}, {@bsdgroups}]}, 0x0, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 1m24.524483467s ago: executing program 2 (id=203): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007f8000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1m24.027832113s ago: executing program 2 (id=206): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002207000000f9e3ea7944d792bb4c5875d33350d6eafbede4a37cd10433"], 0x0}, 0x0) 1m23.534711668s ago: executing program 33 (id=206): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002207000000f9e3ea7944d792bb4c5875d33350d6eafbede4a37cd10433"], 0x0}, 0x0) 7.395830496s ago: executing program 1 (id=661): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 7.193490239s ago: executing program 1 (id=662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) 4.570701589s ago: executing program 0 (id=683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) setreuid(0xffffffffffffffff, 0xee01) unshare(0x20000400) 4.377962991s ago: executing program 0 (id=684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 4.216982473s ago: executing program 1 (id=687): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4066, 0xfe2}], 0x1, 0x2c0, 0x0) 4.122928834s ago: executing program 0 (id=688): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="200a96"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000003e80)={0x1c, &(0x7f0000000a40)={0x603799c389d253e7, 0x0, 0x28, "534d5f8c414e85ef8eaacabd7146ec0bab3ce86b29827921c395693f2e9e1e28727dc6ba428d5875"}, 0x0, 0x0}) 4.010902105s ago: executing program 1 (id=689): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) 3.413035902s ago: executing program 4 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000680)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3.268818523s ago: executing program 4 (id=693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="6631b4edf77a097c4f37642f35c2", 0x0, 0x4cce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.832651218s ago: executing program 4 (id=694): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x11a3, &(0x7f0000001280)="$eJzs209rHGUcB/BfYjS6MTH+iyYXH/Sil8Hk4EG8BElAsqAkWSERhAnZ6LLr7rKzh13xkLMnX4d49CaobyDvordQKO0lp05ptk2aNj20pVloP5/LfOE7A8+PgYFnmDn+6o9fmgdFdpD3Y3JiIia7EekkRYrJuO8wPvvvy1u/b+3sbqxWq2ubKa2vbi9/kVKa++jfH3776+P/+zPf/z33z3Qczf94fGPl2tHC0eLx7e2fG0VqFKnd6ac87XU6/XyvVU/7jaKZpfRdq54X9dRoF/Xehf6g1el2hylv789Wur16UaS8PUzN+jD1O6nfG6b8p7zRTlmWpdlK8Cxqf56UZRlRlq/Ga1GWZflGVGIm3ozZmIu3Yj7ejnfi3Xgv3o+F+CA+jMXTs8a9bgAAAAAAAAAAAAAAAAAAAHix+P8fAAAAAAAAAAAAAAAAAAAAxm9rZ3djtVpd20zp9Yjrh4PaoDY6jvr1b6prn6dT8+dX3RwMaq+c9cujPl3sp6Nyr1+5tJ+KTz8Z9Xe7r7+tPtQvxf7zHx8AAABeClk6c+n+Psse14/SA+8HHtnfL01d2Rg8pWL4azNvteo9QRCEszDuJxNX4fymj3slAAAAAAAAAAAAPImr+Jxw3DMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//+VQHgq") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'filter\x00', 0x2, [{}, {}]}, 0x48) 2.504134112s ago: executing program 5 (id=695): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 2.346771003s ago: executing program 1 (id=696): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 2.017310847s ago: executing program 4 (id=697): syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.863051069s ago: executing program 0 (id=698): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 1.714150171s ago: executing program 0 (id=699): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1.506096833s ago: executing program 5 (id=700): io_setup(0x7f, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_getevents(r0, 0x3, 0x3, &(0x7f0000000580)=[{}, {}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}]) 1.505921213s ago: executing program 4 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000), 0xff, 0x97f7, &(0x7f0000013c80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 1.356539565s ago: executing program 0 (id=702): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") open(&(0x7f0000000180)='./file1\x00', 0x60142, 0x102) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000001240)='./file1\x00', &(0x7f0000001340), &(0x7f00000002c0)=ANY=[@ANYBLOB="0501"], 0x51, 0x0) 1.172398937s ago: executing program 5 (id=703): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x1523, &(0x7f00000029c0)="$eJzs3AuYTlX7MPD7XmtthqSnSQ7DWuvePGmwDElySJJDkiSvJDklhCZJEhLjLGkIIcdJchhCcpjGpHE+H3JOkqRJkpCQZH3X9Oqrt97/29X//35f/7e5f9e1r2fds597Pfeee2aevfbM7C97jKrTrG7NJkQE/yP494ckAIgBgGEAcA0ABABQMbZibPb+PBKT/mcvwv69Hkj9sytgfybuf87G/c/ZuP85G/c/Z+P+52zc/5yN+5+zcf8Zy8l2zC1yLW85d+Pr/3916l/s4/f/v5CsslM+3VT2+p5/IIX7n7Nx/3M27n/Oxv3P2bj/ORv3/y9F/NEE7n/Oxv1nLCf771875t8d/BW2P/vrjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYznDB/0wBwE+PjDHGGGOMMcYY++vwuX8eX/R/ZiWMMcYYY4wxxhj7fwdBgAQFAeSC3BADeSAvXAX54GrID9dABK6FWLgOCsD1UBAKQWEoAnFQFIqBBgMWCEIoDiUgCjdASbgR4qEUlIYy4KAsJEA5KA83QQW4GSrCLVAJboXKUAWqQjW4DarD7VAD7oCacCfUgtpQB+rCXVAP7ob6cA80gHuhIdwHjeB+aAx/gybwADSFB6EZPATN4WFoAS2hFbSGNv+t/OegDzwPfaEfJEF/GAADYRAMhiEwFIbBCzAcXoQR8BIkw0gYBS/DaBgDY+EVGAfjYQK8ChNhEkyGKTAVpkEKvAbT4XWYAW/ATJgFs2EOpMJcmAdvwnxYAAvhLVgEb8NiWAJLYRmkwTuQDsshA96FFfAeZMJKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wPuwE3bBbtgDe2Ef7IcP4AB8CAfhIzgEH//B/PO/yu+JgIACBSpUmAtzYQzGYF7Mi/kwH+bH/BjBCMZiLBbAAlgQC2JhLIxxGIfFsBgaNEhIWByLYxSjWBJLYjzGY2ksjQ4dJmAClsebsAJWwIpYESthJayMVbAKVsNqWB2rYw2sgTWxJtbCWlgH6+BdeBfejfWxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2ApbYRtsg22xLbbDdtgBO2BH7IidsTMmYiJ2wS7YFbtiN+yG3bE79sAe2BN7YS98Dp/D5/F57Ie1RH8cgANwEA7CITgUh+ILOBxfxBfxJUzGkTgKX8aXcQyOxXM4DsfjBJyA1cUknIxTkMQ0TMEUnI7TcQbOwJk4C2fhHEzFuTgP5+F8XIAL8C1chG/j27gEl+AyTMM0TMflmIEZuALPYyauxFW4GtfgWlyD63EDrsdNuBk34VbcittxO76P7+Mu3IV7cA/uQwWAH+CH+CEm4yE8hIfxMB7BI3gUj2IWZuExPIbH8TiewBN4Ek/iKTyNZ/A0nsWzeA7P4wW8gBfxIl7CZ+I+b7qv1MZkEELEAIASuUQuESNiRF6RV+QT+UR+kV9ERETEilhRQBQQBUVBUVgUFnEiThQTxYQRRpAIRXFRXERFVJQUJUW8iBelRWnhhBMJIkGUF+VFBVFBVBS3iEriVlFZVBHtXTVRTVQXHVwNcYeoKWqKWqK2qCPqirqinqgn6ov6ooFoIBqKhqKRuF80Fv1xCD4gsjvTTIzE5mIUthAtRSvRWozBR0RbMRbbifaig3hMjMdx2Fm0dYniCdFFTMau4ikxBZ8W3cU07CGeFT1FL9FbPCf6iHaur+gnZmJ/MUDMwUFisBgihor5WFtkd6yOeEkki5FilHhZLMMxYqx4RYwT48UE8aqYKCaJyWKKmCqmiRTxmpguXhczxBtippglZos5IlXMFfPEm2K+WCAWirfEIvG2WCyWiKVimUgT74h0sVxkiHfFCvGeyBQrxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQ74udYpfYLfaIvWKf2C8+EAfEh+Kg+EgcEh+Lw+ITcUR8Ko6Kz0SW+FwcE1+I4+JLcUJ8JU6Kr8UpcVqcEd+Is+JbcU6cFxfEd+Ki+F5cEj+Iy8ILkCiFlFLJQOaSuWWMzCPzyqtkPnm1zC+vkRF5rYyV18kC8npZUBaShWURGSeLymJSSyOtJBnK4rKEjMobZMnGCCBLydKyjHSyrEyQ5WR5eZOsIG+WFeUtspK8VVaWVWRVWU3eJqvL22UNeYesKe+UtWRtWUfWlXfJevJuWV/eIxvIe2VDeZ9sJO+XjeXfZBP5gGwqH5TN5EOyefCwbCFbylaytWwjH5Ft5aOynWwvO8jHZEfZSXaWj8tE+YTsIp+UXeVTspt8WnaXz8ge8lnZU/aSveUP8rL0sq/sJ5NkfzlADpSD5GA5RA6Vw+QLcrh8UY6QL8lkOVKOki/L0XKMHCtfkePkeOn9q3KinCQnyylyqpwmU+Rrcrp8Xc6Qb8iZcpacLefIVDlXDrky08Jf5U+Qv81//Z/kj/jx1bfLHfJ9uVPukrvlHrlX7pP75X55QB6QB+VBeUgekoflYXlEHpFH5VGZJbPkMXlMHpfH5Ql5Qp6UJ+UpeVp+J7+RZ+W38pw8L8/L7+RFeVFeuvI5AIVKKKmUClQulVvFqDwqr7pK5VNXq/zqGhVR16pYdZ0qoK5XBVUhVVgVUXGqqCqmtDLKKlKhKq5KqKi6Aa+cUKjSqoxyqqxKUOX+SL4qqW5U8arUP+T/Xn1tVBvVVrVV7VQ71UF1UB1VR9VZdVaJKlF1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VZJKUgPUQDVIDVZD1FA1TL2ghqvhaoQaoZJVshqlRqnRarQaq8aqcWqcmqAmqIlqopqsJqupaqpKUSlqupquZqgZaqaaqWar2SpVpap5ap6ar+arhWqhWqQWqcVqsVqqlqo0labSVbrKUBlqhVqhMtVKtVKtVqvVWrVWrVfr1Ua1UW1Wm9VWtVVlqh1qh9qpdqrdarfaq/aq/Wq/OqAOqIPqoDqkDqnD6rA6oo6oo+qoylJZ6pg6po6r4+qEOqFOqpPqlDqlzqgz6qw6q86pc+qCuqAuqovqkrqkLqvL2ad9gQhEoAIV5ApyBTFBTJA3yBvkC/IF+YP8QSSIBLFBbFAguD4oGBQKCgdFgrigaFAs0IEJbEBBGBQPSgTR4IagZHBjEB+UCkoHZQIXlA0SgnJB+eCmoEJwc1AxuCWoFNwaVA6qBFWDasFtQfXg9qBGcEdQM7gzqBXUDuoEdYO7gnrB3UH94J6gQXBv0DC4L2gU3B80Dv4WNAkeCJoGDwbNgoeC5sHDQYugZdAqaB20+bfO7/25Qo+6vrqfTtL99QA9UA/Sg/UQPVQP0y/o4fpFPUK/pJP1SD1Kv6xH6zF6rH5Fj9Pj9QT9qp6oJ+nJeoqeqqfpFP2anq5f1zP0G3qmnqVn6zk6Vc/V8/Sber5eoBfqt/Qi/bZerJfopXqZTtPv6HS9XGfod/UK/Z7O1Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79Dv6516l96t9+i9ep/erz/QB/SH+qD+SB/SH+vD+hN9RH+qj+rPdJb+XB/TX+jj+kt9Qn+lT+qv9Sl9Wp/R3+iz+lt9Tp/XF/R3+qL+Xl/SP+jL2mef3Ge/vRtllMllcpkYE2Pymrwmn8ln8pv8JmIiJtbEmgKmgCloCprCprCJM3GmmClmspEhU9wUN1ETNSVNSRNv4k1pU9o440yCSTDlTXlTwVQwFU1FU8lUMpVNZVPVVDW3mdvM7eZ2c4e5w9xp7jS1TW1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PcNDctTAvTyrQybUwb09a0Ne1MO9PBdDAdTUfT2XQ2iSbRdDFdTFfT1XQz3Ux30930MD1MT9PT9Da9TR/Tx/Q1fU2SSTIDzAAzyAwyQ8wQM8wMM8PNcDPCjDDJJtmM8mBGm9FmrBlrxpnxZoJ51Uw0k8xkM8VMNdNMikkx0810M8PMMDPNTDPbzDapJtXMM/PMfDPfLDQLzSKzyCw2i81Ss9SkmTSTbtJNhskwK8wKk2kyzSqzyqwxa8w6s85sMBvMJrPJbDFbzDazzewwO8xOs9PsNrvNXrPX7Df7zQFzwBw0B80hc8gcNoc9Apij5qjJMlnmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YC6a780l84O5bLyJsXlsXnuVzWevtvntNfbXcWFbxMbZoraY1bagLfQPsbHWxttStvRPS0xbzsZnn2LaMtbZsjbBlrOVbRVb1Vazt9nq9nZb4zdxPXu3rW/vsQ0+87auvevn2N4bA/Y+28g+ZBvbh20T29I2ta1tM/uQbW4fti1sS9vKtrYdbSfb2T5uE+0Ttot98jdxul1uN9iNdpPdbA/YD+0F+509br+0F+33tq/tZ4fZF+xw+6IdYV+yyXbkb+IJ9lU70U6yk+0UO9VO+008286xqXaunWfftPPtgt/EafYdu8hm2MV2iV1ql/0YZ9eUYd+1K+x7NtOutKvsarvGrrXr7Pr/W+tqu9Vus9vtfvuB3Wl32d12j91r9/0YZx/HQfuRPWQ/tsfsF/aI/dQetSdslv38xzj7+E7Yr+xJ+7U9ZU/bM/Ybe9Z+a8/Z89nH77OP/Rv7g71svQVCEiRJUUC5KDfFUB7KS1dRPrqa8tM1FKFrKZauowJ0PRWkQlSYilAcFaVipMmQJaKQilMJitINVJJupHgqRaWpDDkqSwlUjsrTTVSBbqaKdAtVolupMlWhqlSNbqPqdDvVoDuoJt1Jtag21aG6dBfVo7upPt1DSRvupYZ0HzWi+6kx/Y2a0APUlB6kZvQQNaeHqQW1pFbUmtrQI9SWHqV21J460GPUkTpRZ3qcEukJ6kJPUld6irrR09SdnqEe9Cz1pF7Um56jPvQ89aV+lET9aQANpEE0mIbQUBpGL9BwepFG0EuUTCNpFL1Mo2kMAbxC42g8TaBXaSJNosk0habSNEqh12g6vU4z6A2aSbNoNs2hVJpL8+hNmk8LaCG9RYvobVpMS2gpLaM0eofSaTll0Lu0gt6jTFpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMOep920i7aTXtoL+2j/fQBHaA8V77hPqbD9AkdoU/pKH1GWfQ5HaMv6Dh9SSfoKzpJX9MpOk1n6Bs6S9/SOTpPF+g7ukjf0yX6gS6TJwgxFKEMVRiEucLcYUyYJ8wbXhXmC68O84fXhJHw2jA2vC4sEF4fFgwLhYXDImFcWDQsFurQhDakMAyLhyXCaHhDWDK8MYwPS4WlwzKhC8uGCWG5sHx4U1ghvDmsGN4SVgpvDSuHVcKH7q0W3hZWD28Pa4R3hDXDO8NaYe2wTlg3vCusF94d1g/vCRuE94YVwvvCRuH9IVz5f5Wm4YNhs/ChsHn4cNgibBm2CluHbcJHwrbho2G7sH3YIXws7Bh2CjuHj4eJ4RNhl/DJ392fFPYPB4QDw4Gh9/fIpdFl0bToO9H06PJoRvTd6Iroe9HM6Mroqujq6Jro2ui66ProhujG6Kbo5uiW6Nbotuj2qPd1c4NDJ5x0ygUul8vtYlwel9dd5fK5q11+d42LuGtdrLvOFXDXu4KukCvsirg4V9QVc9oZZx250BV3JRQAuJLuRhfvSrnSroxzrqxLcK1dG9fGtXWPunauvevgHnOPuU6uk3vcPe6ecF3ck66re8p1c0+77u4Z94x71vV0vVxv95zr4553fV0/l+SS3AA3wA1yg9wQN8QNc8PccDfcjXAjXLJLdqPcKDfajXZj3Vg3zo1zE9wEN9FNdJPdZDfVTXUpLsVNd9PdDDfDBQAw2812qS7VzXPz3Hw33y10C92i+EVusVvslrqlLs2luXSX7jJchlvhVrhMl+lWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uh9vhdrqdbrfb7fa6vW6/2+8OuAPuoDvoDrlD7rA77I64I+6o+8xluc/dMfeFO+6+dCfcV+6k+9qdcqfdGfeNO+u+defceXfBfecuuu/dJfeDu+y8S4m8FpkeeT0yI/JGZGZkVmR2ZE4kNTI3Mi/yZmR+ZEFkYeStyKLI25HFkSWRpZFlkbTIO5H0yPJIRuTdyIrIe5HMyMrIqsjqyJrIWgW+6M7QF/clfNTf4Ev6G328L+VL+zLe+bI+wZfz5f1NvoK/2Vf0t/hK/lZf2VfxVf3DvoVv6Vv51r6Nf8S39Y/6dr697+Af8x19J9/ZP+4T/RO+i3/Sd/VP+W7+ad/dP+N7+Gd9T9/L9/bP+T7+ed/X9/NJvr8f4Af6QX6wH+KH+mH+BT/cv+hH+Jd8sh/pR/mX/Wg/xo/1r/hxfryf4F/1E/0kP9lP8VP9NJ/iX/PT/et+hn/Dz/Sz/Gw/x6f6uX6ef9PP9wv8Qv+WX+Tf9ov9Er/UL/Np/h2f7pf7DP+uX+Hf85l+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sd/n2/0+/yu/0ev9fv8/v9B/6A/9Af9B/5Q/5jf9h/4o/4T/1R/5nP8p/7Y/4Lf9x/6U/4r/xJ/7U/5U/7M/4bf9Z/68/58/6C/85f9N/7S/4Hf9n7P/TXa7X/nZfQGWOMMcb+gwz8nf39/8nHspcj4sr4e+/91buKZP1yvwSALQX/Ph4s4jpGAOCJfj0e+GmrVSspKenKczMlBCWWAEDkVy9wJV4JHaATJEJ7KP9P6xssel2k35k/egtA3l/kxMDP8c/zf/JfzP/IYxPSK4UXYv/F/EsA4kv8nJO9Cv8pXgkdfrydQnuo8F/MX6jt79Sf59MUgHa/yMkHAO3y/Lr+hDHlACDxH57JGGOMMcYYY4z93WBRtdvvrZ+z1+dxv7gpYG74Of699TljjDHGGGOMMcb+fE/36v34I4mJ7bvx4D91APC/oowcPLjqf0cZf3zQ6V8858/+ycQYY4wxxhj7d/vlMvInef7MghhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsRzo/88N6hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc7f8EAAD//zvGNmk=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 887.16833ms ago: executing program 5 (id=704): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x1, 0x4e22, 0x9, 0x2, 0x20, 0x10, 0x2b}, {0x8000, 0x9, 0x0, 0x3ff, 0xff, 0x4, 0xe, 0x400}, {0x1, 0x7f, 0x726, 0xffff}, 0x2, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4d6, 0x33}, 0x2, @in6=@mcast2, 0x3503, 0x0, 0x0, 0x5, 0x5, 0x4, 0x6}}, 0xe8) syz_emit_ethernet(0xfed1, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 587.809374ms ago: executing program 5 (id=705): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f000015500001", 0x1b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 510.818884ms ago: executing program 5 (id=706): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x11a3, &(0x7f0000001280)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'filter\x00', 0x2, [{}, {}]}, 0x48) 383.107686ms ago: executing program 1 (id=707): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 4 (id=708): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) kernel console output (not intermixed with test programs): 0:50:50:50:50 [ 87.490686][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.527970][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.604187][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.648534][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.649315][ T5785] Bluetooth: hci3: command tx timeout [ 87.718233][ T5785] Bluetooth: hci0: command tx timeout [ 87.723737][ T5785] Bluetooth: hci1: command tx timeout [ 87.730287][ T5086] Bluetooth: hci2: command tx timeout [ 87.746620][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.778392][ T5851] syz.3.7[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.782654][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.907985][ T5851] loop3: detected capacity change from 0 to 1024 [ 87.943075][ T5851] ======================================================= [ 87.943075][ T5851] WARNING: The mand mount option has been deprecated and [ 87.943075][ T5851] and is ignored by this kernel. Remove the mand [ 87.943075][ T5851] option from the mount to silence this warning. [ 87.943075][ T5851] ======================================================= [ 88.053195][ T5851] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.096455][ T5851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.132208][ T5851] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.213948][ T5862] netlink: 508 bytes leftover after parsing attributes in process `syz.2.9'. [ 88.294387][ T5851] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.7: bg 0: block 112: padding at end of block bitmap is not set [ 88.500933][ T5869] loop2: detected capacity change from 0 to 16 [ 88.544244][ T5869] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.556673][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.654060][ T5869] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 88.688764][ T5869] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 88.711828][ T5869] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 88.723388][ T5872] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 88.753409][ T5869] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 88.783210][ T5872] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 88.797150][ T5872] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 88.880572][ T5878] loop3: detected capacity change from 0 to 512 [ 88.906139][ T5878] EXT4-fs: Ignoring removed orlov option [ 88.968870][ T5878] EXT4-fs (loop3): Test dummy encryption mode enabled [ 88.975732][ T5878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.003186][ T5878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.113471][ T5878] EXT4-fs (loop3): 1 truncate cleaned up [ 89.162119][ T5878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.220893][ T5888] loop1: detected capacity change from 0 to 512 [ 89.231117][ T5888] EXT4-fs: Invalid want_extra_isize 5 [ 89.264953][ T5769] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.331163][ T28] audit: type=1800 audit(1778234869.052:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 89.381428][ T5765] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 89.438815][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.497420][ T5891] netlink: 27 bytes leftover after parsing attributes in process `syz.0.21'. [ 89.613359][ T5765] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 89.638640][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 89.659496][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 89.685045][ T5765] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 89.694408][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.718454][ T5785] Bluetooth: hci3: command tx timeout [ 89.723782][ T5765] usb 3-1: config 0 descriptor?? [ 89.755376][ T5884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.797910][ T5785] Bluetooth: hci0: command tx timeout [ 89.803455][ T5086] Bluetooth: hci1: command tx timeout [ 89.807856][ T5790] Bluetooth: hci2: command tx timeout [ 90.026804][ T5901] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.212102][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.272177][ T5765] hkems 0003:2006:0118.0001: unknown main item tag 0x2 [ 90.290647][ T5765] hkems 0003:2006:0118.0001: invalid report_count 41914 [ 90.312833][ T5765] hkems 0003:2006:0118.0001: item 0 2 1 9 parsing failed [ 90.338632][ T5765] hkems 0003:2006:0118.0001: parse failed [ 90.345108][ T5765] hkems: probe of 0003:2006:0118.0001 failed with error -22 [ 90.583917][ T23] usb 3-1: USB disconnect, device number 2 [ 90.939968][ T5925] loop1: detected capacity change from 0 to 1024 [ 90.977291][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.105311][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.223310][ T5934] loop3: detected capacity change from 0 to 256 [ 91.325258][ T5939] loop2: detected capacity change from 0 to 64 [ 91.469990][ T5939] hfs: walked past end of dir [ 91.769396][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 91.801419][ T5947] loop2: detected capacity change from 0 to 256 [ 91.839444][ T5947] exfat: Deprecated parameter 'utf8' [ 91.844827][ T5947] exfat: Deprecated parameter 'utf8' [ 91.887273][ T5949] loop3: detected capacity change from 0 to 1024 [ 91.899342][ T5947] exfat: Deprecated parameter 'utf8' [ 91.920168][ T5947] exfat: Deprecated parameter 'utf8' [ 92.035806][ T5947] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 92.037035][ T5949] hfsplus: bad catalog entry type [ 92.090780][ T5955] loop0: detected capacity change from 0 to 512 [ 92.114605][ T5955] EXT4-fs: Ignoring removed nobh option [ 92.156935][ T5955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.226526][ T5955] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.270413][ T1132] hfsplus: b-tree write err: -5, ino 25 [ 92.276497][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 92.279821][ T5955] EXT4-fs (loop0): 1 truncate cleaned up [ 92.315210][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.328018][ T1132] hfsplus: b-tree write err: -5, ino 2 [ 92.333911][ T1132] hfsplus: b-tree write err: -5, ino 26 [ 92.544120][ T28] audit: type=1800 audit(1778234872.272:3): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 92.579111][ T5963] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 92.592061][ T5963] program syz.2.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.774292][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.257650][ T5960] loop3: detected capacity change from 0 to 32768 [ 93.257877][ T28] audit: type=1326 audit(1778234872.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.2.55" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5ab9cdd9 code=0x0 [ 93.331307][ T5960] JBD2: Ignoring recovery information on journal [ 93.445594][ T5960] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 93.620737][ T5964] loop1: detected capacity change from 0 to 32768 [ 93.663707][ T5964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.51 (5964) [ 93.702488][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 93.776924][ T5964] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.816954][ T5964] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.847749][ T5964] BTRFS info (device loop1): using free space tree [ 93.896288][ T5969] loop0: detected capacity change from 0 to 40427 [ 93.985704][ T5969] F2FS-fs (loop0): heap/no_heap options were deprecated [ 94.017799][ T5969] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 94.040679][ T5969] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77e8c [ 94.082136][ T5969] F2FS-fs (loop0): invalid crc value [ 94.135555][ T5964] BTRFS info (device loop1): enabling ssd optimizations [ 94.157663][ T5964] BTRFS info (device loop1): auto enabling async discard [ 94.172016][ T5969] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 94.248950][ T5969] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.410385][ T5969] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 94.481240][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 94.513520][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.574692][ T5969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.814995][ T5969] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 94.860177][ T6007] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 94.860177][ T6007] The task syz.2.61 (6007) triggered the difference, watch for misbehavior. [ 94.917197][ T5969] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1030 [ 94.959996][ T5769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5769) [ 95.043005][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'. [ 95.053846][ T5777] syz-executor: attempt to access beyond end of device [ 95.053846][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.109338][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.358515][ T6001] loop3: detected capacity change from 0 to 32768 [ 95.391829][ T6001] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.58 (6001) [ 95.449265][ T6001] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.487804][ T6001] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 95.496614][ T6001] BTRFS info (device loop3): enabling disk space caching [ 95.516346][ T6001] BTRFS info (device loop3): force clearing of disk cache [ 95.529836][ T6001] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.564400][ T6001] BTRFS info (device loop3): use zstd compression, level 3 [ 95.575050][ T6001] BTRFS info (device loop3): disk space caching is enabled [ 95.624551][ T6016] loop1: detected capacity change from 0 to 2048 [ 95.749255][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.907829][ T6001] BTRFS info (device loop3): enabling ssd optimizations [ 95.914961][ T6001] BTRFS info (device loop3): auto enabling async discard [ 95.966656][ T6001] BTRFS info (device loop3): rebuilding free space tree [ 96.096807][ T6001] BTRFS info (device loop3): disabling free space tree [ 96.151923][ T6001] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.193105][ T6001] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.194228][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.425369][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 96.745475][ T6054] loop1: detected capacity change from 0 to 512 [ 96.866412][ T5778] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.877823][ T6054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.026150][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.614283][ T6041] loop0: detected capacity change from 0 to 40427 [ 97.624632][ T6041] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 97.651898][ T6041] F2FS-fs (loop0): invalid crc value [ 97.694410][ T6041] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.858912][ T6041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.025554][ T6041] F2FS-fs (loop0): Can't flush 32769 in 0 for SEGS_PER_SEC 1 != 1 [ 98.121900][ T5777] syz-executor: attempt to access beyond end of device [ 98.121900][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.143452][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.319679][ T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.415069][ T6090] loop1: detected capacity change from 0 to 512 [ 98.440391][ T6090] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.467970][ T5819] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 98.518870][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.548114][ T968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 98.558710][ T1132] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.559954][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.587816][ T968] usb 4-1: config 0 descriptor?? [ 98.671470][ T5819] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 98.687880][ T5819] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 98.707991][ T5819] usb 3-1: config 0 has no interface number 0 [ 98.714797][ T5819] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 49352, setting to 8 [ 98.746766][ T5819] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 98.748767][ T6093] loop1: detected capacity change from 0 to 4096 [ 98.774028][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.819116][ T5819] usb 3-1: config 0 descriptor?? [ 98.821351][ T6097] netlink: 104 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.864870][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.910795][ T6086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.064731][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.310924][ T968] ath6kl: mismatched byte count 0 vs. expected 12 [ 99.346742][ T968] ath6kl: Failed to init ath6kl core: -22 [ 99.363834][ T968] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 99.576159][ T5819] usb 3-1: USB disconnect, device number 3 [ 99.607835][ T968] usb 4-1: USB disconnect, device number 2 [ 99.707818][ T6105] cgroup: Need name or subsystem set [ 100.332962][ T6112] loop0: detected capacity change from 0 to 32768 [ 100.756462][ T6125] loop2: detected capacity change from 0 to 4096 [ 100.898577][ T6125] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 101.772987][ T6135] loop3: detected capacity change from 0 to 8192 [ 101.875629][ T6129] loop1: detected capacity change from 0 to 32768 [ 102.009421][ T6129] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.224684][ T6129] XFS (loop1): Ending clean mount [ 102.458137][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.847113][ T6168] loop1: detected capacity change from 0 to 512 [ 102.857718][ T6168] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 102.906882][ T6168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.117: bg 0: block 104: invalid block bitmap [ 102.970232][ T6168] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 102.991379][ T6172] loop0: detected capacity change from 0 to 8192 [ 102.996300][ T6168] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.117: invalid indirect mapped block 1 (level 1) [ 103.037997][ T6168] EXT4-fs (loop1): 1 truncate cleaned up [ 103.038456][ T6172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.046131][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.057890][ T6172] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 103.080128][ T6172] REISERFS (device loop0): using ordered data mode [ 103.086686][ T6172] reiserfs: using flush barriers [ 103.101459][ T6172] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.129968][ T6172] REISERFS (device loop0): checking transaction log (loop0) [ 103.172436][ T6172] REISERFS (device loop0): Using rupasov hash to sort names [ 103.196745][ T6172] REISERFS (device loop0): using 3.5.x disk format [ 103.206021][ T6172] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.220290][ T6172] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.231922][ T6172] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.253873][ T6172] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 103.360985][ T28] audit: type=1800 audit(1778234883.102:5): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.117" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 103.546788][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.062070][ T6192] loop0: detected capacity change from 0 to 128 [ 104.120308][ T6192] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 104.299653][ T6192] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 104.350355][ T6175] loop2: detected capacity change from 0 to 32768 [ 104.625094][ T6204] loop3: detected capacity change from 0 to 512 [ 104.677840][ T6204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.707408][ T6204] EXT4-fs (loop3): 1 truncate cleaned up [ 104.731659][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.821509][ T6209] loop0: detected capacity change from 0 to 512 [ 104.864799][ T6209] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.136: inode has both inline data and extents flags [ 104.879258][ T6209] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.136: couldn't read orphan inode 15 (err -117) [ 104.907023][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.047671][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.127191][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.248530][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 105.266285][ T8] usb 2-1: config 0 has no interfaces? [ 105.290419][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.313110][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.325288][ T8] usb 2-1: Manufacturer: syz [ 105.342578][ T8] usb 2-1: config 0 descriptor?? [ 105.401660][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.524345][ T3540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.710445][ T3540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.743473][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 105.825631][ T5765] usb 2-1: USB disconnect, device number 2 [ 105.841566][ T3540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.964303][ T3540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.290356][ T6216] loop0: detected capacity change from 0 to 40427 [ 106.358817][ T6216] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 106.398485][ T6216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 106.432637][ T6216] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 106.468200][ T6216] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 106.524613][ T6216] F2FS-fs (loop0): Image doesn't support compression [ 106.553473][ T6216] F2FS-fs (loop0): invalid crc value [ 106.587108][ T6216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.859763][ T6216] F2FS-fs (loop0): Start checkpoint disabled! [ 106.914278][ T6216] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 106.937338][ T6216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 106.955833][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.968906][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.978427][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.996019][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.010914][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.029708][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.851687][ T6241] loop2: detected capacity change from 0 to 32768 [ 107.924926][ T6241] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.962639][ T1096] kworker/u4:7: attempt to access beyond end of device [ 107.962639][ T1096] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 108.017754][ T1096] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x630 [ 108.045740][ T1096] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.054275][ T1096] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.105412][ T6241] XFS (loop2): Ending clean mount [ 108.345173][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 108.399453][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.057677][ T5765] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.077799][ T5790] Bluetooth: hci1: command tx timeout [ 109.132092][ T3540] hsr_slave_0: left promiscuous mode [ 109.158262][ T3540] hsr_slave_1: left promiscuous mode [ 109.172656][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.190747][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.216231][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.229201][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.243369][ T3540] bridge_slave_1: left allmulticast mode [ 109.251629][ T3540] bridge_slave_1: left promiscuous mode [ 109.259056][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.270462][ T5765] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.282934][ T3540] bridge_slave_0: left allmulticast mode [ 109.287581][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.294357][ T3540] bridge_slave_0: left promiscuous mode [ 109.302694][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.314345][ T5765] usb 2-1: config 0 descriptor?? [ 109.393689][ T3540] veth1_macvtap: left promiscuous mode [ 109.401789][ T3540] veth0_macvtap: left promiscuous mode [ 109.408296][ T3540] veth1_vlan: left promiscuous mode [ 109.414055][ T3540] veth0_vlan: left promiscuous mode [ 109.425217][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.545746][ T5765] [drm] vendor descriptor length:6 data:06 5f 01 01 00 00 00 00 00 00 00 [ 109.555892][ T5765] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 109.756174][ T5765] [drm:udl_init] *ERROR* Selecting channel failed [ 109.799471][ T5765] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 109.807226][ T5765] [drm] Initialized udl on minor 2 [ 109.830061][ T5765] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 109.853735][ T5765] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 109.864424][ T788] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 109.883852][ T5765] usb 2-1: USB disconnect, device number 3 [ 109.907319][ T788] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 110.301587][ T3540] team0 (unregistering): Port device team_slave_1 removed [ 110.348008][ T3540] team0 (unregistering): Port device team_slave_0 removed [ 110.418634][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.548909][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.946991][ T3540] bond0 (unregistering): Released all slaves [ 111.047012][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 111.077050][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 111.097938][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 111.157782][ T5790] Bluetooth: hci1: command tx timeout [ 111.265781][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.276298][ T6307] loop1: detected capacity change from 0 to 1024 [ 111.293339][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.337793][ T6235] bridge_slave_0: entered allmulticast mode [ 111.345376][ T6235] bridge_slave_0: entered promiscuous mode [ 111.399942][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.407184][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.458721][ T6235] bridge_slave_1: entered allmulticast mode [ 111.487661][ T6235] bridge_slave_1: entered promiscuous mode [ 111.670919][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.713304][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.721309][ T6318] process 'syz.2.164' launched './file0' with NULL argv: empty string added [ 111.893107][ T6235] team0: Port device team_slave_0 added [ 111.939253][ T6235] team0: Port device team_slave_1 added [ 112.100643][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.123757][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.177717][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.229754][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.237436][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.313525][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.357695][ T968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.547597][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 112.555208][ T968] usb 3-1: config 0 has no interfaces? [ 112.584382][ T968] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.605336][ T968] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.630404][ T968] usb 3-1: Manufacturer: syz [ 112.654245][ T6235] hsr_slave_0: entered promiscuous mode [ 112.664409][ T968] usb 3-1: config 0 descriptor?? [ 112.829138][ T6235] hsr_slave_1: entered promiscuous mode [ 113.050857][ T6235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.072390][ T6235] Cannot create hsr debugfs directory [ 113.238918][ T5790] Bluetooth: hci1: command tx timeout [ 113.246959][ T6329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.511492][ T968] usb 3-1: USB disconnect, device number 4 [ 113.906102][ T6367] Bluetooth: MGMT ver 1.22 [ 114.081348][ T6235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.135591][ T6235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.158704][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.162555][ T6235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.201657][ T6377] loop2: detected capacity change from 0 to 1024 [ 114.232592][ T6235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.378743][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 114.428395][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.475804][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.505459][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.535774][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.587630][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.622136][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.630119][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.658384][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.680721][ T8] usb 2-1: Manufacturer: syz [ 114.728651][ T8] usb 2-1: config 0 descriptor?? [ 114.729713][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.875682][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.882939][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.058365][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.065599][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.130441][ T8] rc_core: IR keymap rc-hauppauge not found [ 115.136446][ T8] Registered IR keymap rc-empty [ 115.146857][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.173432][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.203587][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.207751][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.286758][ T6235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.319340][ T5790] Bluetooth: hci1: command tx timeout [ 115.328634][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.382781][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 115.442466][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.497845][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.558008][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.599190][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.640140][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'. [ 115.673998][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.759034][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.817720][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.862690][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.920498][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.978906][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.040436][ T8] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 116.060423][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.094164][ T8] usb 2-1: USB disconnect, device number 4 [ 116.103942][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.317114][ T6426] netlink: 'syz.2.193': attribute type 21 has an invalid length. [ 116.358975][ T6426] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.379445][ T6431] netlink: 'syz.2.193': attribute type 21 has an invalid length. [ 116.392909][ T6431] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 117.001560][ T6448] loop0: detected capacity change from 0 to 7 [ 117.012533][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.022330][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 117.039228][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.048473][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 117.120288][ T6448] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.126060][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.157338][ T6448] Buffer I/O error on dev loop0, logical block 0, async page read [ 117.174272][ T6235] veth0_vlan: entered promiscuous mode [ 117.178407][ T6448] ldm_validate_partition_table(): Disk read failed. [ 117.219545][ T6448] Dev loop0: unable to read RDB block 0 [ 117.224850][ T6235] veth1_vlan: entered promiscuous mode [ 117.245678][ T6448] loop0: unable to read partition table [ 117.268535][ T6448] loop0: partition table beyond EOD, truncated [ 117.307738][ T6448] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 117.339801][ T6235] veth0_macvtap: entered promiscuous mode [ 117.394621][ T6235] veth1_macvtap: entered promiscuous mode [ 117.411546][ T6457] loop2: detected capacity change from 0 to 512 [ 117.445632][ T6457] EXT4-fs: Ignoring removed bh option [ 117.469979][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.521757][ T6457] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.531615][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.565262][ T6457] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 117.573710][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.591773][ T6457] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 117.600439][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.641198][ T6457] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 117.651026][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.666835][ T6457] System zones: 0-2, 18-18, 34-35 [ 117.672137][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.689675][ T6457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.699252][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.715104][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.736353][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.746756][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.758244][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.772676][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.783770][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.796174][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.823799][ T6462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.847946][ T6235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.867044][ T6235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.886011][ T6235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.912537][ T6235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.989942][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.251962][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.278836][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.450569][ T308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.537406][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.563030][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.642939][ T308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.809240][ T308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.029213][ T308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.221411][ T6491] mmap: syz.1.210 (6491): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 119.300273][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 119.960118][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.974605][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.992675][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.006336][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.018999][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.020131][ T6509] loop4: detected capacity change from 0 to 2048 [ 120.047680][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.227914][ T6515] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.638237][ T6515] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 120.678297][ T6515] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 120.731856][ T6515] Remounting filesystem read-only [ 120.983379][ T6235] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 121.019573][ T6235] NILFS (loop4): discard dirty page: offset=57344, ino=15 [ 121.026818][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.068278][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.077837][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.085194][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.113165][ T6235] NILFS (loop4): discard dirty page: offset=61440, ino=15 [ 121.127791][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.157802][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.183300][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.197956][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.228533][ T6235] NILFS (loop4): discard dirty page: offset=65536, ino=15 [ 121.235826][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.281391][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.302786][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.349055][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.356366][ T6235] NILFS (loop4): discard dirty page: offset=69632, ino=15 [ 121.366337][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.373721][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.381565][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.390713][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.404924][ T6235] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 121.414179][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.423199][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.433812][ T6235] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 121.441257][ T6235] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 121.453249][ T6235] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 121.460266][ T6235] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 121.497739][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.521749][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.557725][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.566957][ T6235] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 121.596903][ T6235] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 121.625163][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.644635][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.665302][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.689207][ T6235] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 121.706184][ T6235] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 121.723949][ T6235] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 121.735868][ T6235] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 121.743449][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 121.771224][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.792314][ T6235] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 121.818003][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.826943][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.878681][ T6235] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 121.886073][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.913452][ T6235] NILFS (loop4): discard dirty page: offset=233472, ino=3 [ 121.967736][ T6235] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 121.975040][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.996815][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 122.012866][ T6235] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 122.117948][ T5790] Bluetooth: hci3: command tx timeout [ 122.178388][ T308] hsr_slave_0: left promiscuous mode [ 122.202425][ T308] hsr_slave_1: left promiscuous mode [ 122.237250][ T308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.257388][ T308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.338717][ T308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.346306][ T308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.424411][ T308] bridge_slave_1: left allmulticast mode [ 122.438341][ T308] bridge_slave_1: left promiscuous mode [ 122.444189][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.515504][ T308] bridge_slave_0: left allmulticast mode [ 122.529233][ T308] bridge_slave_0: left promiscuous mode [ 122.556222][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.696275][ T308] veth1_macvtap: left promiscuous mode [ 122.717786][ T308] veth0_macvtap: left promiscuous mode [ 122.744722][ T308] veth1_vlan: left promiscuous mode [ 122.764736][ T308] veth0_vlan: left promiscuous mode [ 123.055526][ T6550] loop4: detected capacity change from 0 to 32768 [ 123.095822][ T6550] (syz.4.219,6550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.125435][ T6550] (syz.4.219,6550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.204034][ T6542] loop1: detected capacity change from 0 to 40427 [ 123.226847][ T6550] JBD2: Ignoring recovery information on journal [ 123.242983][ T6542] F2FS-fs (loop1): invalid crc value [ 123.316436][ T6542] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.361291][ T6550] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.480280][ T6542] F2FS-fs (loop1): Start checkpoint disabled! [ 123.506615][ T6542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 123.835384][ T1132] kworker/u4:10: attempt to access beyond end of device [ 123.835384][ T1132] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 123.882327][ T1132] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 123.898137][ T1132] kworker/u4:10: attempt to access beyond end of device [ 123.898137][ T1132] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 123.929055][ T1132] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.032781][ T6235] ocfs2: Unmounting device (7,4) on (node local) [ 124.198712][ T5790] Bluetooth: hci3: command tx timeout [ 124.484657][ T6570] loop4: detected capacity change from 0 to 512 [ 124.708386][ T308] team0 (unregistering): Port device team_slave_1 removed [ 124.780069][ T308] team0 (unregistering): Port device team_slave_0 removed [ 124.868666][ T308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.884887][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 124.927439][ T308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.298633][ T308] bond0 (unregistering): Released all slaves [ 125.547400][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.556467][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.598372][ T6581] bridge0: entered allmulticast mode [ 125.626632][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.663800][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.687808][ T6510] bridge_slave_0: entered allmulticast mode [ 125.699544][ T6510] bridge_slave_0: entered promiscuous mode [ 125.729645][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.799512][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.806756][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.837779][ T6510] bridge_slave_1: entered allmulticast mode [ 125.855531][ T6510] bridge_slave_1: entered promiscuous mode [ 126.021184][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.086108][ T6593] loop4: detected capacity change from 0 to 1024 [ 126.095341][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.206562][ T6593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.216642][ T6598] loop0: detected capacity change from 0 to 2048 [ 126.253344][ T6510] team0: Port device team_slave_0 added [ 126.291267][ T5790] Bluetooth: hci3: command tx timeout [ 126.299650][ T6593] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.314612][ T6510] team0: Port device team_slave_1 added [ 126.495357][ T6598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.527791][ T6598] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.625171][ T6235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.652375][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.685810][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.713808][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.794243][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.834304][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.916802][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.971407][ T23] hid-generic 0005:4C4A:7FFF.0002: item fetching failed at offset 0/1 [ 126.984083][ T23] hid-generic: probe of 0005:4C4A:7FFF.0002 failed with error -22 [ 127.135179][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.163724][ T6510] hsr_slave_0: entered promiscuous mode [ 127.190302][ T6510] hsr_slave_1: entered promiscuous mode [ 127.216708][ T6510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.245122][ T6510] Cannot create hsr debugfs directory [ 127.297902][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.242'. [ 127.347908][ T28] audit: type=1326 audit(1778234907.082:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.417625][ T28] audit: type=1326 audit(1778234907.082:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.462494][ T28] audit: type=1326 audit(1778234907.132:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.490697][ T28] audit: type=1326 audit(1778234907.132:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.514447][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.532653][ T28] audit: type=1326 audit(1778234907.132:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.557343][ T28] audit: type=1326 audit(1778234907.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.581303][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.619079][ T28] audit: type=1326 audit(1778234907.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.643018][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.654568][ T28] audit: type=1326 audit(1778234907.142:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.678633][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.730849][ T6614] loop1: detected capacity change from 0 to 32768 [ 127.737451][ T28] audit: type=1326 audit(1778234907.152:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.761337][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.775779][ T6614] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.241 (6614) [ 127.814297][ T28] audit: type=1326 audit(1778234907.152:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0319cdd9 code=0x7ffc0000 [ 127.850843][ T6614] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.861428][ T6614] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 127.870540][ T6614] BTRFS info (device loop1): enabling auto defrag [ 127.890104][ T6614] BTRFS info (device loop1): use no compression [ 127.912701][ T6614] BTRFS info (device loop1): max_inline at 4096 [ 127.932315][ T6614] BTRFS info (device loop1): using free space tree [ 128.008744][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.015631][ T6614] BTRFS info (device loop1): enabling ssd optimizations [ 128.049344][ T6614] BTRFS info (device loop1): auto enabling async discard [ 128.058408][ T6510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.088077][ T6510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.114220][ T6510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.136679][ T6510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.198912][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 128.207465][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.237612][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.268064][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 128.277189][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.338846][ T9] usb 1-1: config 0 descriptor?? [ 128.357871][ T5790] Bluetooth: hci3: command tx timeout [ 128.484963][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.494147][ T5776] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.601751][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.653292][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.660552][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.729055][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.736267][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.805399][ T9] apple 0003:05AC:024B.0003: fixing up MacBook JIS keyboard report descriptor [ 128.879488][ T9] apple 0003:05AC:024B.0003: unknown global tag 0xe [ 128.886174][ T9] apple 0003:05AC:024B.0003: item 0 1 1 14 parsing failed [ 128.926354][ T9] apple 0003:05AC:024B.0003: parse failed [ 128.965787][ T9] apple: probe of 0003:05AC:024B.0003 failed with error -22 [ 129.002671][ T6502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (6502) [ 129.040792][ T9] usb 1-1: USB disconnect, device number 2 [ 129.940158][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.005741][ T6691] Bluetooth: MGMT ver 1.22 [ 130.527563][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.752235][ T788] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.771515][ T788] usb 1-1: config 0 has no interface number 0 [ 130.794711][ T788] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.807805][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.832835][ T788] usb 1-1: Product: syz [ 130.839558][ T788] usb 1-1: Manufacturer: syz [ 130.844247][ T788] usb 1-1: SerialNumber: syz [ 130.871145][ T788] usb 1-1: config 0 descriptor?? [ 130.936481][ T6510] veth0_vlan: entered promiscuous mode [ 130.976422][ T6510] veth1_vlan: entered promiscuous mode [ 131.100198][ T788] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 131.110091][ T6510] veth0_macvtap: entered promiscuous mode [ 131.142305][ T6510] veth1_macvtap: entered promiscuous mode [ 131.152775][ T788] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.188290][ T788] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 131.215075][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.226103][ T788] usb 1-1: media controller created [ 131.256505][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.287566][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.311284][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.337714][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.363229][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.397862][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.424195][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.454907][ T788] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 131.467872][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.499270][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.522442][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.552459][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.582935][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.612055][ T788] usb 1-1: USB disconnect, device number 3 [ 131.615045][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.656882][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.674288][ T6715] loop4: detected capacity change from 0 to 32768 [ 131.732640][ T6713] loop1: detected capacity change from 0 to 32768 [ 131.774013][ T6713] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.259 (6713) [ 131.775097][ T6510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.827080][ T6713] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.866884][ T6510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.870923][ T6713] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.902881][ T6510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.918014][ T6713] BTRFS info (device loop1): using free space tree [ 131.933611][ T6510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.037814][ T5785] Bluetooth: hci2: command 0x0401 tx timeout [ 132.037866][ T5790] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 132.093325][ T6713] BTRFS info (device loop1): enabling ssd optimizations [ 132.133858][ T6713] BTRFS info (device loop1): auto enabling async discard [ 132.299375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.327832][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.414567][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 132.414583][ T28] audit: type=1800 audit(1778234912.152:20): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.259" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 132.451625][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.536752][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.538900][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.597097][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.954285][ T5776] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.223094][ T6502] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (6502) [ 133.244625][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.257636][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.378797][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 133.428658][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.266'. [ 133.726301][ T6772] netlink: 'syz.4.269': attribute type 6 has an invalid length. [ 133.952493][ T6778] sctp: Trying to GSO but underlying device doesn't support it. [ 134.104514][ T6780] loop1: detected capacity change from 0 to 1764 [ 134.597287][ T6762] loop0: detected capacity change from 0 to 32768 [ 134.643669][ T6762] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.267 (6762) [ 134.683483][ T9] IPVS: starting estimator thread 0... [ 134.721136][ T6762] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 134.759110][ T6762] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.779414][ T6762] BTRFS info (device loop0): setting nodatacow, compression disabled [ 134.797723][ T6762] BTRFS info (device loop0): turning on flush-on-commit [ 134.806750][ T6762] BTRFS info (device loop0): using free space tree [ 134.827793][ T6795] IPVS: using max 20 ests per chain, 48000 per kthread [ 135.018087][ T6762] BTRFS info (device loop0): enabling ssd optimizations [ 135.025139][ T6762] BTRFS info (device loop0): auto enabling async discard [ 135.261207][ T6824] loop5: detected capacity change from 0 to 512 [ 135.394703][ T6824] EXT4-fs (loop5): 1 truncate cleaned up [ 135.423828][ T6824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.504694][ T5777] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 135.604922][ T6824] EXT4-fs (loop5): Online resizing not supported with sparse_super2 [ 135.793414][ T6510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.254433][ T6845] loop0: detected capacity change from 0 to 40427 [ 137.268082][ T6871] netlink: 11 bytes leftover after parsing attributes in process `syz.4.291'. [ 137.287324][ T6845] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 137.303075][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 137.318279][ T6845] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 137.340285][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 137.351359][ T6845] F2FS-fs (loop0): heap/no_heap options were deprecated [ 137.377316][ T6845] F2FS-fs (loop0): invalid crc value [ 137.400597][ T6845] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.605004][ T6845] F2FS-fs (loop0): Start checkpoint disabled! [ 137.645823][ T6845] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.656442][ T6845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 137.820485][ T6882] loop1: detected capacity change from 0 to 8192 [ 137.880117][ T6882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.919099][ T6845] syz.0.283: attempt to access beyond end of device [ 137.919099][ T6845] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 137.937661][ T6882] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 137.946982][ T6882] REISERFS (device loop1): using ordered data mode [ 137.953718][ T6882] reiserfs: using flush barriers [ 137.975629][ T6882] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.992543][ T6882] REISERFS (device loop1): checking transaction log (loop1) [ 138.039377][ T6882] REISERFS (device loop1): Using r5 hash to sort names [ 138.050946][ T6845] F2FS-fs (loop0): Remounting filesystem read-only [ 138.060559][ T6882] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 138.076611][ T6845] syz.0.283: attempt to access beyond end of device [ 138.076611][ T6845] loop0: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 138.094182][ T6845] F2FS-fs (loop0): Remounting filesystem read-only [ 139.055639][ T6883] loop4: detected capacity change from 0 to 40427 [ 139.109490][ T6883] F2FS-fs (loop4): invalid crc value [ 139.150547][ T6883] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.347779][ T6883] F2FS-fs (loop4): Start checkpoint disabled! [ 139.388636][ T6883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 139.562245][ T6923] loop5: detected capacity change from 0 to 64 [ 139.651623][ T6923] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 139.832488][ T6883] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 140.437521][ C1] sched: RT throttling activated [ 140.749749][ T6919] loop0: detected capacity change from 0 to 131072 [ 140.768116][ T6919] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 140.777637][ T6919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 140.798954][ T6919] F2FS-fs (loop0): invalid crc value [ 140.835436][ T6919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.899748][ T6919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.907621][ T6919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 141.153402][ T6942] loop5: detected capacity change from 0 to 512 [ 141.265022][ T28] audit: type=1800 audit(1778234921.002:21): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.310" name="file1" dev="loop5" ino=1048605 res=0 errno=0 [ 141.661646][ T6951] loop0: detected capacity change from 0 to 256 [ 141.755645][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.312'. [ 141.823393][ T6951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 142.118135][ T6960] program syz.5.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.699333][ T7001] loop1: detected capacity change from 0 to 256 [ 143.918087][ T7001] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 143.982346][ T7009] loop5: detected capacity change from 0 to 128 [ 144.043246][ T7009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 144.054008][ T6985] loop4: detected capacity change from 0 to 32768 [ 144.566252][ T1118] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 144.680136][ T7024] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 145.293178][ T7036] loop4: detected capacity change from 0 to 4096 [ 145.338820][ T7036] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 146.006964][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.220352][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 146.225426][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 146.259138][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.283703][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 146.334235][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 146.374411][ T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 146.397622][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.405706][ T8] usb 6-1: Product: syz [ 146.434857][ T8] usb 6-1: Manufacturer: syz [ 146.447612][ T8] usb 6-1: SerialNumber: syz [ 146.481130][ T8] usb 6-1: config 0 descriptor?? [ 146.765634][ T8] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 147.053393][ T968] usb 6-1: USB disconnect, device number 2 [ 147.321944][ T7098] netlink: 'syz.4.355': attribute type 8 has an invalid length. [ 147.350641][ T7098] sch_fq: defrate 0 ignored. [ 147.592653][ T7108] loop0: detected capacity change from 0 to 128 [ 147.678915][ T7111] loop1: detected capacity change from 0 to 16 [ 147.707457][ T7108] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.758709][ T7111] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.856000][ T28] audit: type=1800 audit(1778234927.592:22): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 148.515723][ T7106] loop4: detected capacity change from 0 to 32768 [ 148.628552][ T7106] syz.4.358: attempt to access beyond end of device [ 148.628552][ T7106] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 148.647853][ T7106] metapage_write_end_io: I/O error [ 148.656001][ T7106] ERROR: (device loop4): diWrite: ixpxd invalid [ 148.656001][ T7106] [ 148.687298][ T7106] ERROR: (device loop4): remounting filesystem as read-only [ 148.702104][ T7106] ERROR: (device loop4): txCommit: [ 148.702104][ T7106] [ 148.726631][ T7106] blkno = 8ed2c, nblocks = 1 [ 148.734621][ T7106] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 148.734621][ T7106] [ 148.887483][ T112] blkno = 8ed23, nblocks = 1 [ 148.892806][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 148.892806][ T112] [ 148.920034][ T112] blkno = 8ed2c, nblocks = 4 [ 148.925165][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 148.925165][ T112] [ 148.937239][ T7132] syz.0.368 (7132) used greatest stack depth: 20688 bytes left [ 148.973144][ T6235] syz-executor: attempt to access beyond end of device [ 148.973144][ T6235] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 149.003852][ T6235] metapage_write_end_io: I/O error [ 149.037823][ T6235] JFS: metapage_get_blocks failed [ 149.053930][ T6235] JFS: metapage_get_blocks failed [ 149.070004][ T6235] JFS: metapage_get_blocks failed [ 149.077021][ T6235] JFS: metapage_get_blocks failed [ 149.114688][ T6235] JFS: metapage_get_blocks failed [ 149.826626][ T7161] loop0: detected capacity change from 0 to 4096 [ 150.191280][ T7161] ntfs3: loop0: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 150.999056][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.207062][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.226434][ T8] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.243007][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.265003][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 151.284584][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 151.335811][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.367686][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.412905][ T8] usb 6-1: Product: syz [ 151.417161][ T8] usb 6-1: Manufacturer: syz [ 151.446655][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 151.458005][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 151.478554][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 151.484621][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 151.537449][ T7221] overlayfs: workdir and upperdir must be separate subtrees [ 151.688854][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 151.689177][ T8] usb 6-1: USB disconnect, device number 3 [ 151.695674][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 151.707630][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 151.718524][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.787655][ T5765] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.810952][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 151.927627][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 151.939752][ T27] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 151.953890][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.970368][ T27] usb 1-1: Product: syz [ 151.974706][ T27] usb 1-1: Manufacturer: syz [ 151.988376][ T27] usb 1-1: SerialNumber: syz [ 152.008023][ T5765] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 152.015724][ T5765] usb 2-1: can't read configurations, error -71 [ 152.018121][ T7232] loop4: detected capacity change from 0 to 164 [ 152.246158][ T27] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 152.290312][ T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.312483][ T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 152.324097][ T27] usb 1-1: media controller created [ 152.330132][ T7238] sctp: [Deprecated]: syz.4.400 (pid 7238) Use of int in max_burst socket option deprecated. [ 152.330132][ T7238] Use struct sctp_assoc_value instead [ 152.359375][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.607602][ T27] zl10353_read_register: readreg error (reg=127, ret==-110) [ 152.744131][ T27] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 152.759095][ T7246] Zero length message leads to an empty skb [ 152.778641][ T27] usb 1-1: USB disconnect, device number 4 [ 153.748293][ T7289] capability: warning: `syz.1.415' uses deprecated v2 capabilities in a way that may be insecure [ 153.874510][ T7291] loop5: detected capacity change from 0 to 2048 [ 153.940837][ T7291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.109779][ T7291] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 154.225300][ T7303] loop0: detected capacity change from 0 to 512 [ 154.283681][ T7303] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 154.418851][ T7303] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.421: bg 0: block 104: invalid block bitmap [ 154.564236][ T7303] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 154.601051][ T7303] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.421: invalid indirect mapped block 1 (level 1) [ 154.670694][ T7303] EXT4-fs (loop0): 1 truncate cleaned up [ 154.675076][ T28] audit: type=1326 audit(1778234934.412:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.4.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x0 [ 154.691005][ T7303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.918613][ T28] audit: type=1800 audit(1778234934.662:24): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 154.994546][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.263164][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 156.183971][ T7353] loop4: detected capacity change from 0 to 1024 [ 156.228934][ T7353] EXT4-fs: Ignoring removed orlov option [ 156.324321][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.488402][ T7353] EXT4-fs (loop4): shut down requested (2) [ 156.715152][ T6235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.742536][ T7343] loop0: detected capacity change from 0 to 131072 [ 156.766606][ T7343] F2FS-fs (loop0): invalid crc value [ 156.805410][ T7343] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.910104][ T7343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 156.955213][ T7372] loop5: detected capacity change from 0 to 1024 [ 156.962873][ T28] audit: type=1326 audit(1778234936.682:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 156.963927][ T7372] EXT4-fs: Ignoring removed bh option [ 157.033081][ T28] audit: type=1326 audit(1778234936.702:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.166855][ T7372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.187351][ T28] audit: type=1326 audit(1778234936.752:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.211936][ T28] audit: type=1326 audit(1778234936.822:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.316699][ T28] audit: type=1326 audit(1778234936.822:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.350358][ T7380] loop1: detected capacity change from 0 to 1024 [ 157.391296][ T7380] hfsplus: Filesystem is marked locked, mounting read-only. [ 157.452848][ T28] audit: type=1326 audit(1778234937.052:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.507967][ T7380] hfsplus: filesystem is marked locked, leaving read-only. [ 157.570697][ T6510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.583106][ T28] audit: type=1326 audit(1778234937.122:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 157.727165][ T28] audit: type=1326 audit(1778234937.152:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.4.442" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fd94839cdd9 code=0x7ffc0000 [ 158.507644][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.740240][ T23] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 158.801420][ T23] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 158.839229][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 158.899253][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.937626][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.945720][ T23] usb 5-1: Product: syz [ 158.979575][ T23] usb 5-1: Manufacturer: syz [ 158.984267][ T23] usb 5-1: SerialNumber: syz [ 159.048164][ T7398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.055539][ T7398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.119752][ T7409] loop1: detected capacity change from 0 to 8 [ 159.444648][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.504681][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.558528][ T5790] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 159.558636][ T5790] Bluetooth: hci1: adv larger than maximum supported [ 159.577556][ T5790] Bluetooth: hci1: Malformed LE Event: 0x0d [ 159.600240][ T7414] loop1: detected capacity change from 0 to 128 [ 159.663548][ T7414] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 159.680312][ T23] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 159.771598][ T7414] hpfs: filesystem error: improperly stopped [ 159.793916][ T23] usb 5-1: USB disconnect, device number 2 [ 159.826965][ T7414] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 159.857638][ T7414] hpfs: You really don't want any checks? You are crazy... [ 159.889526][ T7414] hpfs: hpfs_map_sector(): read error [ 159.925658][ T7414] hpfs: code page support is disabled [ 159.950843][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 159.998044][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 160.012618][ T7414] hpfs: filesystem error: unable to find root dir [ 160.081147][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 160.099714][ T7414] hpfs: hpfs_map_sector(): read error [ 160.119003][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 160.353940][ T7428] loop0: detected capacity change from 0 to 512 [ 160.424988][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.493758][ T5790] block nbd0: Receive control failed (result -32) [ 160.503924][ T7428] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.456: iget: bad extended attribute block 262144 [ 160.598440][ T7428] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.456: couldn't read orphan inode 15 (err -117) [ 160.713013][ T7428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.976115][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.994526][ T7442] loop4: detected capacity change from 0 to 128 [ 161.126168][ T7445] program syz.5.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.136389][ T7442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 161.195275][ T7442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.687663][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.892927][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 161.918475][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.956487][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.994664][ T7439] loop1: detected capacity change from 0 to 32768 [ 162.003840][ T9] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 162.018136][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.064373][ T9] usb 6-1: config 0 descriptor?? [ 162.094408][ T7439] [ 162.094408][ T7439] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.094408][ T7439] [ 162.231864][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 162.231880][ T28] audit: type=1800 audit(1778234941.972:35): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.458" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 162.251672][ T7439] [ 162.251672][ T7439] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.251672][ T7439] [ 162.287666][ T7439] [ 162.287666][ T7439] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.287666][ T7439] [ 162.337788][ T113] [ 162.337788][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.337788][ T113] [ 162.481541][ T5776] [ 162.481541][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.481541][ T5776] [ 162.497290][ T5776] [ 162.497290][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.497290][ T5776] [ 162.609438][ T9] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 162.784493][ T9] ntrig 0003:1B96:0008.0005: Firmware version: 2.15.24.29.0 (7f55 b00b) [ 162.989211][ T7476] overlayfs: missing 'lowerdir' [ 163.113399][ T5765] usb 6-1: USB disconnect, device number 4 [ 163.597891][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.794227][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.844096][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.898977][ T8] usb 2-1: config 0 descriptor?? [ 163.920674][ T8] cp210x 2-1:0.0: cp210x converter detected [ 164.342654][ T8] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 164.431690][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 164.442488][ T7510] loop5: detected capacity change from 0 to 2048 [ 164.559845][ T7514] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.770822][ T23] usb 2-1: USB disconnect, device number 7 [ 164.814741][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.833321][ T28] audit: type=1800 audit(1778234944.572:36): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.477" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 164.860729][ T5823] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.883156][ T23] cp210x 2-1:0.0: device disconnected [ 165.067674][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 165.115185][ T5823] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 165.155124][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.204254][ T5823] pvrusb2: Hardware description: Terratec Grabster AV400 [ 165.262337][ T5823] pvrusb2: ********** [ 165.266414][ T5823] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 165.300708][ T5823] pvrusb2: Important functionality might not be entirely working. [ 165.319250][ T5823] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 165.341216][ T5823] pvrusb2: ********** [ 165.413070][ T7525] loop4: detected capacity change from 0 to 2048 [ 165.458045][ T2323] pvrusb2: Invalid write control endpoint [ 165.512848][ T7525] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.551120][ T7525] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 165.625674][ T7525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.705186][ T7513] pvrusb2: Invalid write control endpoint [ 165.722036][ T2323] pvrusb2: Invalid write control endpoint [ 165.740824][ T23] usb 1-1: USB disconnect, device number 5 [ 165.760115][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.818079][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.846096][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.867990][ T2323] pvrusb2: Device being rendered inoperable [ 165.882339][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 165.894191][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 165.912532][ T2323] pvrusb2: Attached sub-driver cx25840 [ 165.928363][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 165.947604][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 166.190013][ T7538] loop1: detected capacity change from 0 to 8192 [ 166.230235][ T7538] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.291762][ T7544] mmap: syz.5.485 (7544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.317827][ T7538] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 166.327130][ T7538] REISERFS (device loop1): using ordered data mode [ 166.413161][ T7538] reiserfs: using flush barriers [ 166.433427][ T7538] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.499882][ T7538] REISERFS (device loop1): checking transaction log (loop1) [ 166.833648][ T7538] REISERFS (device loop1): Using tea hash to sort names [ 166.858095][ T7538] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 166.926067][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 167.004554][ T7563] ipvlan2: entered allmulticast mode [ 167.028377][ T7563] syz_tun: entered allmulticast mode [ 167.937591][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.971596][ T7586] loop4: detected capacity change from 0 to 128 [ 168.024513][ T7586] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.050383][ T7586] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.147714][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 168.188395][ T27] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 168.214084][ T27] usb 2-1: config 4 has no interface number 0 [ 168.235051][ T27] usb 2-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 168.255050][ T27] usb 2-1: config 4 interface 228 altsetting 12 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 168.277010][ T27] usb 2-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 168.297961][ T27] usb 2-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 168.326238][ T27] usb 2-1: config 4 interface 228 has no altsetting 0 [ 168.345300][ T27] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 168.366176][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.395651][ T27] usb 2-1: Product: syz [ 168.400572][ T27] usb 2-1: Manufacturer: syz [ 168.409261][ T6235] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.414448][ T27] usb 2-1: SerialNumber: syz [ 168.649614][ T7568] loop5: detected capacity change from 0 to 40427 [ 168.737139][ T7568] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 168.785747][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 168.811340][ T7568] F2FS-fs (loop5): invalid crc value [ 168.858505][ T7568] F2FS-fs (loop5): Found nat_bits in checkpoint [ 169.078478][ T7568] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.145131][ T27] snd-usb-audio: probe of 2-1:4.228 failed with error -12 [ 169.211420][ T27] usb 2-1: USB disconnect, device number 8 [ 169.329010][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.469524][ T6510] syz-executor: attempt to access beyond end of device [ 169.469524][ T6510] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.495822][ T6510] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 169.680526][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 170.578156][ T7612] loop4: detected capacity change from 0 to 32768 [ 170.667811][ T7612] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.734184][ T7612] XFS (loop4): Ending clean mount [ 170.872904][ T7623] loop1: detected capacity change from 0 to 32768 [ 170.940330][ T7623] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.502 (7623) [ 171.030664][ T7623] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.041163][ T7623] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.050841][ T7623] BTRFS info (device loop1): enabling auto defrag [ 171.057419][ T7623] BTRFS info (device loop1): use no compression [ 171.078271][ T7623] BTRFS info (device loop1): max_inline at 4096 [ 171.084665][ T7623] BTRFS info (device loop1): using free space tree [ 171.122572][ T6235] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 171.162148][ T7628] loop0: detected capacity change from 0 to 32768 [ 171.289637][ T7623] BTRFS info (device loop1): enabling ssd optimizations [ 171.310934][ T7623] BTRFS info (device loop1): auto enabling async discard [ 171.321216][ T7628] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.517800][ T7628] XFS (loop0): Ending clean mount [ 171.845999][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.940651][ T5776] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.677865][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 172.686986][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 172.989907][ T7706] loop5: detected capacity change from 0 to 64 [ 173.107581][ T7706] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 173.214906][ T7712] tipc: Started in network mode [ 173.221912][ T7712] tipc: Node identity ac14140f, cluster identity 4711 [ 173.309085][ T7712] tipc: New replicast peer: 255.255.255.255 [ 173.371532][ T7712] tipc: Enabled bearer , priority 10 [ 174.063295][ T7742] loop4: detected capacity change from 0 to 256 [ 174.077466][ T7742] exfat: Deprecated parameter 'namecase' [ 174.127856][ T7742] exfat: Deprecated parameter 'namecase' [ 174.188051][ T7742] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 174.342239][ T7748] loop5: detected capacity change from 0 to 512 [ 174.429409][ T5823] tipc: Node number set to 2886997007 [ 174.438957][ T7748] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 174.480621][ T7748] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 174.535943][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 174.558961][ T7748] EXT4-fs (loop5): 1 truncate cleaned up [ 174.566146][ T7748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.755297][ T7748] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 174.814193][ T5790] Bluetooth: hci0: hcon ffff8880307a8000 sent 0 < count 137 [ 174.822843][ T7748] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 174.946442][ T6510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.951980][ T7730] loop1: detected capacity change from 0 to 40427 [ 174.976792][ T7730] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 175.028697][ T7730] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x724 [ 175.099360][ T7730] F2FS-fs (loop1): invalid crc value [ 175.159078][ T7730] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.295806][ T7730] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 175.368542][ T7730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.512707][ T7730] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 175.598021][ T7774] block device autoloading is deprecated and will be removed. [ 175.643694][ T7774] syz.5.528: attempt to access beyond end of device [ 175.643694][ T7774] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.677658][ T27] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 175.688922][ T5776] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200 [ 175.803779][ T7785] loop0: detected capacity change from 0 to 256 [ 175.898406][ T28] audit: type=1800 audit(1778234955.632:37): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.531" name="file1" dev="loop0" ino=1048610 res=0 errno=0 [ 175.944393][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.976341][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.994818][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.011149][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.079503][ T27] usb 5-1: config 0 descriptor?? [ 176.116534][ T27] hub 5-1:0.0: USB hub found [ 176.364740][ T27] hub 5-1:0.0: 1 port detected [ 176.415865][ T7789] loop5: detected capacity change from 0 to 8192 [ 176.495283][ T7789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.546115][ T7789] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 176.617973][ T7789] REISERFS (device loop5): using ordered data mode [ 176.641236][ T7789] reiserfs: using flush barriers [ 176.688529][ T7789] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.762474][ T7789] REISERFS (device loop5): checking transaction log (loop5) [ 176.807267][ T7789] REISERFS (device loop5): Using r5 hash to sort names [ 176.839907][ T27] usb 5-1: USB disconnect, device number 3 [ 176.840835][ T7789] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 177.084846][ T7802] loop1: detected capacity change from 0 to 8192 [ 177.145271][ T7802] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.183625][ T7802] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 177.201424][ T7802] REISERFS (device loop1): using ordered data mode [ 177.211456][ T7802] reiserfs: using flush barriers [ 177.227606][ T7802] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.328338][ T7802] REISERFS (device loop1): checking transaction log (loop1) [ 177.362427][ T7802] REISERFS (device loop1): Using r5 hash to sort names [ 177.384983][ T7802] REISERFS (device loop1): using 3.5.x disk format [ 177.713383][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.919483][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 177.931239][ T788] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 177.934421][ T7828] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.959833][ T788] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 177.975878][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.997599][ T788] usb 1-1: Product: syz [ 178.008181][ T788] usb 1-1: Manufacturer: syz [ 178.012872][ T788] usb 1-1: SerialNumber: syz [ 178.036447][ T7828] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.038200][ T788] usb 1-1: config 0 descriptor?? [ 178.114705][ T788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 178.154999][ T788] usb 1-1: setting power ON [ 178.169705][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 178.203354][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.240216][ T788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 178.259164][ T788] usb 1-1: media controller created [ 178.343803][ T7815] dvb-usb: bulk message failed: -22 (3/0) [ 178.352751][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.377629][ T7815] dvb-usb: bulk message failed: -22 (3/0) [ 178.406623][ T7846] dvb-usb: bulk message failed: -22 (4/0) [ 178.457590][ T7846] cxusb: i2c read failed [ 178.464292][ T788] usb 1-1: selecting invalid altsetting 6 [ 178.482075][ T788] usb 1-1: digital interface selection failed (-22) [ 178.500144][ T7828] syz.1.542 (7828) used greatest stack depth: 20048 bytes left [ 178.513459][ T788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 178.541791][ T788] usb 1-1: setting power OFF [ 178.559955][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 178.579124][ T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 178.598753][ T788] (NULL device *): no alternate interface [ 178.745213][ T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 178.813744][ T788] usb 1-1: USB disconnect, device number 6 [ 179.398564][ T7868] loop5: detected capacity change from 0 to 512 [ 179.463238][ T7840] loop4: detected capacity change from 0 to 32768 [ 179.480071][ T7871] loop9: detected capacity change from 0 to 7 [ 179.526236][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.535636][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.568529][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.577953][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.586707][ T7872] loop1: detected capacity change from 0 to 4096 [ 179.589537][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.602392][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.640550][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.649829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.658916][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.668175][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.677922][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.687143][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.695416][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.704693][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.715459][ T7840] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.718509][ T7871] ldm_validate_partition_table(): Disk read failed. [ 179.740486][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.749747][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.760186][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.769409][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.777571][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.786737][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.795317][ T7871] Dev loop9: unable to read RDB block 0 [ 179.848267][ T7871] loop9: unable to read partition table [ 179.868753][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 179.900307][ T7871] loop9: partition table beyond EOD, truncated [ 179.904601][ T7885] macvlan2: entered allmulticast mode [ 179.906640][ T7871] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 179.918483][ T7885] vlan0: entered allmulticast mode [ 179.975709][ T7885] veth0_vlan: entered allmulticast mode [ 180.081075][ T7840] XFS (loop4): Ending clean mount [ 180.119550][ T7872] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 180.216455][ T7890] ntfs3: loop1: ino=9, attr_set_size [ 180.395276][ T6235] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 180.450367][ T7894] loop5: detected capacity change from 0 to 128 [ 180.593530][ T7894] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 180.676892][ T7898] loop1: detected capacity change from 0 to 16 [ 180.726400][ T7898] erofs: (device loop1): mounted with root inode @ nid 36. [ 180.771913][ T7894] sysv_free_block: trying to free block not in datazone [ 180.908563][ T6510] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 181.141194][ T9] Process accounting resumed [ 181.529262][ T7915] loop1: detected capacity change from 0 to 1024 [ 181.558109][ T7915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.587773][ T7915] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.631972][ T7915] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 181.648074][ T7915] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.655679][ T7915] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.565: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.689259][ T7915] EXT4-fs (loop1): Remounting filesystem read-only [ 181.762864][ T7915] EXT4-fs (loop1): 1 orphan inode deleted [ 181.800488][ T7915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.063978][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.363090][ T7906] loop4: detected capacity change from 0 to 40427 [ 182.385944][ T7906] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 182.432462][ T7906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 182.463544][ T7906] F2FS-fs (loop4): heap/no_heap options were deprecated [ 182.492023][ T7906] F2FS-fs (loop4): invalid crc value [ 182.567352][ T7906] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.671540][ T7906] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 182.687998][ T7906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.922816][ T7940] loop0: detected capacity change from 0 to 512 [ 182.953137][ T7906] syz.4.557: attempt to access beyond end of device [ 182.953137][ T7906] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.971562][ T7906] F2FS-fs (loop4): Remounting filesystem read-only [ 182.981886][ T7906] syz.4.557: attempt to access beyond end of device [ 182.981886][ T7906] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 182.999625][ T7906] F2FS-fs (loop4): Remounting filesystem read-only [ 183.062998][ T7940] FAT-fs (loop0): FAT read failed (blocknr 128) [ 183.189155][ T7948] loop1: detected capacity change from 0 to 256 [ 183.256639][ T7948] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 184.206587][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 184.270676][ T7967] netlink: 'syz.5.582': attribute type 1 has an invalid length. [ 184.296464][ T7962] EXT4-fs: Ignoring removed bh option [ 184.303448][ T7967] netlink: 'syz.5.582': attribute type 2 has an invalid length. [ 184.314695][ T7962] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.347898][ T7962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.457448][ T7962] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.581: inode has both inline data and extents flags [ 184.568457][ T7962] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.581: couldn't read orphan inode 15 (err -117) [ 184.600109][ T7962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.753552][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.994228][ T7980] set_capacity_and_notify: 2 callbacks suppressed [ 184.994244][ T7980] loop4: detected capacity change from 0 to 8192 [ 185.214383][ T7997] loop5: detected capacity change from 0 to 1024 [ 185.490919][ T8005] hfsplus: b-tree write err: -5, ino 2 [ 185.712207][ T34] hfsplus: b-tree write err: -5, ino 25 [ 185.722876][ T34] hfsplus: b-tree write err: -5, ino 4 [ 185.734731][ T34] hfsplus: b-tree write err: -5, ino 2 [ 185.750562][ T34] hfsplus: b-tree write err: -5, ino 23 [ 186.424745][ T8020] loop1: detected capacity change from 0 to 1024 [ 186.436573][ T28] audit: type=1400 audit(1778234966.172:38): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A2020203133206B420A5368617265645F436C65616E3A2020202020202020203234206B420A5368617265645F44697274793A2020202020202020203430206B420A507269766174655F436C65616E3A20202020202020202030206B420A507269766174655F44697274793A20202020202020202030206B420A5265666572656E6365643A20202020202020202020203634206B420A416E6F6E796D6F75733A2020202020202020202020202030206B420A4B534D3A2020202020202020202020202020202020202030206B420A4C617A79467265653A pid=8018 comm="syz.5.598" [ 186.824408][ T8026] program syz.4.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.869022][ T8012] loop0: detected capacity change from 0 to 32768 [ 186.982649][ T8012] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.058022][ T8028] loop5: detected capacity change from 0 to 4096 [ 187.073403][ T8028] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 187.121403][ T8012] XFS (loop0): Ending clean mount [ 187.179101][ T8012] XFS (loop0): Quotacheck needed: Please wait. [ 187.361277][ T8028] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 187.434346][ T8028] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 187.473540][ T8028] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 187.504903][ T8012] XFS (loop0): Quotacheck: Done. [ 187.644093][ T8044] hub 1-0:1.0: USB hub found [ 187.675340][ T8044] hub 1-0:1.0: 1 port detected [ 187.684286][ T8028] ntfs: volume version 3.1. [ 187.817282][ T8048] Illegal XDP return value 4182439681 on prog (id 34) dev N/A, expect packet loss! [ 187.902497][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 188.387023][ T1132] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 188.432666][ T6510] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 188.805279][ T8058] netlink: 104 bytes leftover after parsing attributes in process `syz.5.611'. [ 188.955656][ T8053] loop4: detected capacity change from 0 to 32768 [ 189.062195][ T8053] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 189.265527][ T8053] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.410951][ T8053] (syz.4.610,8053,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 189.634993][ T6235] ocfs2: Unmounting device (7,4) on (node local) [ 189.981803][ T8060] loop1: detected capacity change from 0 to 32768 [ 190.002131][ T8060] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.612 (8060) [ 190.062476][ T8060] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 190.088858][ T8060] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 190.128613][ T8060] BTRFS info (device loop1): setting nodatacow, compression disabled [ 190.157948][ T8060] BTRFS info (device loop1): turning on flush-on-commit [ 190.178952][ T8060] BTRFS info (device loop1): using free space tree [ 190.369570][ T8060] BTRFS info (device loop1): enabling ssd optimizations [ 190.376777][ T8060] BTRFS info (device loop1): auto enabling async discard [ 190.633232][ T8103] input: syz0 as /devices/virtual/input/input7 [ 190.750155][ T5776] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 190.761674][ T8106] pim6reg: entered allmulticast mode [ 190.829774][ T8104] pim6reg: left allmulticast mode [ 190.944973][ T8109] loop5: detected capacity change from 0 to 1024 [ 190.968090][ T6502] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (6502) [ 191.046411][ T8109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.081674][ T8109] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.244465][ T8109] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.627: lblock 0 mapped to illegal pblock 0 (length 1) [ 191.348231][ T8109] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 191.383379][ T8109] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.383379][ T8109] [ 191.664945][ T6510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.799785][ T8128] loop4: detected capacity change from 0 to 256 [ 191.839857][ T8128] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 191.902378][ T8128] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 191.951442][ T8132] loop5: detected capacity change from 0 to 256 [ 192.005821][ T28] audit: type=1800 audit(1778234971.742:39): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.634" name="file2" dev="loop4" ino=1048614 res=0 errno=0 [ 192.009044][ T8132] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.239940][ T28] audit: type=1800 audit(1778234971.982:40): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.633" name="file1" dev="loop5" ino=1048615 res=0 errno=0 [ 192.280651][ T8136] loop1: detected capacity change from 0 to 512 [ 192.299395][ T28] audit: type=1800 audit(1778234971.982:41): pid=8132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.633" name="file1" dev="loop5" ino=1048615 res=0 errno=0 [ 192.336128][ T8139] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 192.351980][ T8136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.418711][ T8139] FAT-fs (loop5): Filesystem has been set read-only [ 192.495452][ T8139] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 192.510704][ T8139] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 192.629777][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.333187][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:1) [ 193.510691][ T8162] loop0: detected capacity change from 0 to 4096 [ 193.537853][ T8162] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 194.015394][ T8172] loop4: detected capacity change from 0 to 64 [ 194.144254][ T28] audit: type=1800 audit(1778234973.882:42): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.650" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 194.234644][ T28] audit: type=1800 audit(1778234973.942:43): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.650" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 194.259804][ T8172] Trying to free block not in datazone [ 194.497753][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 194.680243][ T8186] loop1: detected capacity change from 0 to 2048 [ 194.687213][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698029][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.752413][ T8186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.328069][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.540888][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 195.546173][ T8203] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 195.579357][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.590527][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 195.599939][ T9] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 195.617710][ T9] usb 5-1: Product: syz [ 195.621966][ T9] usb 5-1: Manufacturer: syz [ 195.626626][ T9] usb 5-1: SerialNumber: syz [ 195.652582][ T9] usb 5-1: config 0 descriptor?? [ 195.676107][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 195.794319][ T27] usb 2-1: config 0 has no interfaces? [ 195.802973][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 195.813139][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.857253][ T27] usb 2-1: config 0 descriptor?? [ 195.938163][ T8209] loop5: detected capacity change from 0 to 128 [ 195.962327][ T8209] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.995199][ T8209] hpfs: filesystem error: improperly stopped [ 196.005035][ T8211] dvmrp6: entered allmulticast mode [ 196.013050][ T8209] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 196.023171][ T8209] hpfs: You really don't want any checks? You are crazy... [ 196.033348][ T8209] hpfs: hpfs_map_sector(): read error [ 196.039835][ T8209] hpfs: code page support is disabled [ 196.045603][ T8209] hpfs: hpfs_map_4sectors(): unaligned read [ 196.052058][ T8209] hpfs: hpfs_map_4sectors(): unaligned read [ 196.058406][ T8209] hpfs: filesystem error: unable to find root dir [ 196.130857][ T8209] hpfs: hpfs_map_4sectors(): unaligned read [ 196.148099][ T8209] hpfs: hpfs_map_sector(): read error [ 196.166226][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.194049][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.222273][ T27] usb 2-1: USB disconnect, device number 9 [ 196.322451][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 196.621306][ T9] usb 5-1: USB disconnect, device number 4 [ 196.734813][ T8225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.673'. [ 196.751331][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 196.775640][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 196.840847][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.872778][ T8229] loop0: detected capacity change from 0 to 256 [ 196.906010][ T8229] FAT-fs (loop0): Directory bread(block 64) failed [ 196.913056][ T8229] FAT-fs (loop0): Directory bread(block 65) failed [ 196.921713][ T8229] FAT-fs (loop0): Directory bread(block 66) failed [ 196.930141][ T8229] FAT-fs (loop0): Directory bread(block 67) failed [ 196.937071][ T8229] FAT-fs (loop0): Directory bread(block 68) failed [ 196.946507][ T8229] FAT-fs (loop0): Directory bread(block 69) failed [ 196.976946][ T8229] FAT-fs (loop0): Directory bread(block 70) failed [ 196.986265][ T8229] FAT-fs (loop0): Directory bread(block 71) failed [ 197.010244][ T8229] FAT-fs (loop0): Directory bread(block 72) failed [ 197.019792][ T8229] FAT-fs (loop0): Directory bread(block 73) failed [ 197.038772][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 197.058668][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.087217][ T27] usb 2-1: config 0 has no interface number 0 [ 197.107725][ T27] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.117456][ T27] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.144614][ T27] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.164931][ T27] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.181417][ T27] usb 2-1: config 0 interface 1 has no altsetting 0 [ 197.200729][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 197.213284][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.228537][ T27] usb 2-1: config 0 descriptor?? [ 197.548143][ T8] usb 2-1: USB disconnect, device number 10 [ 197.760637][ T8244] loop5: detected capacity change from 0 to 4096 [ 197.804188][ T8246] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.975273][ T8244] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 198.341485][ T8252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 198.647637][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.849603][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 198.867221][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.887635][ T27] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.908050][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.917765][ T27] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 198.937136][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.945632][ T27] usb 1-1: Product: syz [ 198.955526][ T27] usb 1-1: Manufacturer: syz [ 198.966559][ T27] usb 1-1: SerialNumber: syz [ 198.980442][ T8256] loop5: detected capacity change from 0 to 32768 [ 198.990682][ T27] usb 1-1: config 0 descriptor?? [ 199.078165][ T8256] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.308126][ T8261] loop1: detected capacity change from 0 to 40427 [ 199.328597][ T8261] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 199.353366][ T8261] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 199.381042][ T8256] XFS (loop5): Ending clean mount [ 199.390014][ T8261] F2FS-fs (loop1): invalid crc value [ 199.415384][ T8256] XFS (loop5): Quotacheck needed: Please wait. [ 199.443298][ T27] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 199.570463][ T8256] XFS (loop5): Quotacheck: Done. [ 199.691155][ T8261] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 199.713373][ T8261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.890601][ T27] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 199.908047][ T27] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 199.950496][ T27] gs_usb: probe of 1-1:0.0 failed with error -71 [ 199.958541][ T6510] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.965420][ T27] usb 1-1: USB disconnect, device number 7 [ 200.058833][ T5776] syz-executor: attempt to access beyond end of device [ 200.058833][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.073967][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 200.146027][ T8285] loop4: detected capacity change from 0 to 8192 [ 201.307184][ T8308] loop5: detected capacity change from 0 to 256 [ 201.854530][ T8313] netlink: 48 bytes leftover after parsing attributes in process `syz.5.705'. [ 201.982598][ T8300] loop4: detected capacity change from 0 to 32768 [ 202.081401][ T8306] loop0: detected capacity change from 0 to 32768 [ 202.090971][ T8300] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.142876][ T8326] loop1: detected capacity change from 0 to 1024 [ 202.168705][ T8306] JBD2: Ignoring recovery information on journal [ 202.184848][ T8300] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 202.290760][ T8300] XFS (loop4): Ending clean mount [ 202.302625][ T8306] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 202.335288][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.354900][ T6235] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.428033][ T8326] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.505377][ T8332] [ 202.507791][ T8332] ====================================================== [ 202.514836][ T8332] WARNING: possible circular locking dependency detected [ 202.521878][ T8332] syzkaller #0 Not tainted [ 202.526316][ T8332] ------------------------------------------------------ [ 202.533353][ T8332] syz.0.702/8332 is trying to acquire lock: [ 202.539273][ T8332] ffff88805dd59818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba4/0x13e0 [ 202.551490][ T8332] [ 202.551490][ T8332] but task is already holding lock: [ 202.558896][ T8332] ffff88805dd5a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 202.568415][ T8332] [ 202.568415][ T8332] which lock already depends on the new lock. [ 202.568415][ T8332] [ 202.578921][ T8332] [ 202.578921][ T8332] the existing dependency chain (in reverse order) is: [ 202.587948][ T8332] [ 202.587948][ T8332] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 202.595955][ T8332] down_read+0x46/0x2e0 [ 202.600649][ T8332] ocfs2_init_acl+0x30a/0x770 [ 202.605878][ T8332] ocfs2_mknod+0x140f/0x2300 [ 202.611005][ T8332] ocfs2_mkdir+0x196/0x430 [ 202.616057][ T8332] vfs_mkdir+0x296/0x440 [ 202.620832][ T8332] do_mkdirat+0x1dc/0x450 [ 202.625699][ T8332] __x64_sys_mkdirat+0x89/0xa0 [ 202.631019][ T8332] do_syscall_64+0x55/0xa0 [ 202.635965][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.642395][ T8332] [ 202.642395][ T8332] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 202.651015][ T8332] down_read+0x46/0x2e0 [ 202.655797][ T8332] ocfs2_start_trans+0x3a8/0x6f0 [ 202.661276][ T8332] ocfs2_modify_bh+0xe4/0x4c0 [ 202.666551][ T8332] ocfs2_local_read_info+0x1445/0x1800 [ 202.672553][ T8332] dquot_load_quota_sb+0x757/0xb80 [ 202.678319][ T8332] dquot_load_quota_inode+0x2dc/0x5d0 [ 202.684225][ T8332] ocfs2_enable_quotas+0x1c9/0x490 [ 202.689879][ T8332] ocfs2_fill_super+0x417d/0x5010 [ 202.695435][ T8332] mount_bdev+0x221/0x2d0 [ 202.700298][ T8332] legacy_get_tree+0xea/0x180 [ 202.705628][ T8332] vfs_get_tree+0x8c/0x280 [ 202.710586][ T8332] do_new_mount+0x24b/0xa40 [ 202.715644][ T8332] __se_sys_mount+0x2e7/0x3d0 [ 202.721285][ T8332] do_syscall_64+0x55/0xa0 [ 202.726237][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.732661][ T8332] [ 202.732661][ T8332] -> #2 (sb_internal#7){.+.+}-{0:0}: [ 202.740155][ T8332] ocfs2_start_trans+0x2a9/0x6f0 [ 202.745634][ T8332] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 202.751890][ T8332] ocfs2_dismount_volume+0x1e5/0x8a0 [ 202.757718][ T8332] generic_shutdown_super+0x134/0x2b0 [ 202.763714][ T8332] kill_block_super+0x44/0x90 [ 202.768923][ T8332] deactivate_locked_super+0x97/0x100 [ 202.774824][ T8332] cleanup_mnt+0x43b/0x4d0 [ 202.779768][ T8332] task_work_run+0x1d4/0x260 [ 202.784903][ T8332] exit_to_user_mode_loop+0xe6/0x110 [ 202.790734][ T8332] exit_to_user_mode_prepare+0xee/0x180 [ 202.796897][ T8332] syscall_exit_to_user_mode+0x1a/0x50 [ 202.802885][ T8332] do_syscall_64+0x61/0xa0 [ 202.807828][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.814253][ T8332] [ 202.814253][ T8332] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 202.824780][ T8332] down_write+0x97/0x200 [ 202.829555][ T8332] __ocfs2_flush_truncate_log+0x352/0x1130 [ 202.835900][ T8332] ocfs2_flush_truncate_log+0x4f/0x60 [ 202.841807][ T8332] ocfs2_sync_fs+0x11d/0x330 [ 202.846925][ T8332] sync_filesystem+0x1c2/0x220 [ 202.852217][ T8332] ocfs2_remount+0x119/0xb80 [ 202.857334][ T8332] reconfigure_super+0x21e/0x8a0 [ 202.862805][ T8332] vfs_fsconfig_locked+0x16c/0x320 [ 202.868453][ T8332] __se_sys_fsconfig+0x70d/0x850 [ 202.873924][ T8332] do_syscall_64+0x55/0xa0 [ 202.878868][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.885295][ T8332] [ 202.885295][ T8332] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 202.895823][ T8332] __lock_acquire+0x2df1/0x7d40 [ 202.901212][ T8332] lock_acquire+0x19e/0x420 [ 202.906245][ T8332] down_write+0x97/0x200 [ 202.911021][ T8332] ocfs2_xattr_set+0xba4/0x13e0 [ 202.916409][ T8332] __vfs_setxattr+0x431/0x470 [ 202.921625][ T8332] __vfs_setxattr_noperm+0x12d/0x5e0 [ 202.927454][ T8332] vfs_setxattr+0x16b/0x2f0 [ 202.932501][ T8332] path_setxattr+0x3f3/0x5d0 [ 202.937624][ T8332] __x64_sys_setxattr+0xbb/0xd0 [ 202.943016][ T8332] do_syscall_64+0x55/0xa0 [ 202.947963][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.954392][ T8332] [ 202.954392][ T8332] other info that might help us debug this: [ 202.954392][ T8332] [ 202.964635][ T8332] Chain exists of: [ 202.964635][ T8332] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 202.964635][ T8332] [ 202.981606][ T8332] Possible unsafe locking scenario: [ 202.981606][ T8332] [ 202.989060][ T8332] CPU0 CPU1 [ 202.994429][ T8332] ---- ---- [ 202.999807][ T8332] lock(&oi->ip_xattr_sem); [ 203.004581][ T8332] lock(&journal->j_trans_barrier); [ 203.012393][ T8332] lock(&oi->ip_xattr_sem); [ 203.019513][ T8332] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 203.026807][ T8332] [ 203.026807][ T8332] *** DEADLOCK *** [ 203.026807][ T8332] [ 203.034951][ T8332] 3 locks held by syz.0.702/8332: [ 203.039999][ T8332] #0: ffff888078240418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 203.049257][ T8332] #1: ffff88805dd5a658 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 203.059719][ T8332] #2: ffff88805dd5a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 203.069746][ T8332] [ 203.069746][ T8332] stack backtrace: [ 203.075735][ T8332] CPU: 1 PID: 8332 Comm: syz.0.702 Not tainted syzkaller #0 [ 203.083112][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.093213][ T8332] Call Trace: [ 203.096501][ T8332] [ 203.099531][ T8332] dump_stack_lvl+0x18c/0x250 [ 203.104234][ T8332] ? load_image+0x420/0x420 [ 203.108775][ T8332] ? show_regs_print_info+0x20/0x20 [ 203.113999][ T8332] ? print_circular_bug+0x12b/0x1a0 [ 203.119224][ T8332] check_noncircular+0x2fc/0x400 [ 203.124194][ T8332] ? look_up_lock_class+0x75/0x140 [ 203.129364][ T8332] ? print_deadlock_bug+0x5d0/0x5d0 [ 203.134592][ T8332] ? lockdep_lock+0xf5/0x230 [ 203.139195][ T8332] ? lockdep_unlock+0x146/0x2e0 [ 203.144060][ T8332] ? _find_first_zero_bit+0xd3/0x100 [ 203.149446][ T8332] __lock_acquire+0x2df1/0x7d40 [ 203.154422][ T8332] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 203.160791][ T8332] ? _raw_spin_unlock+0x40/0x40 [ 203.165738][ T8332] ? verify_lock_unused+0x140/0x140 [ 203.170967][ T8332] ? stack_trace_save+0xaa/0x100 [ 203.175935][ T8332] lock_acquire+0x19e/0x420 [ 203.180460][ T8332] ? ocfs2_xattr_set+0xba4/0x13e0 [ 203.185521][ T8332] ? __might_sleep+0xe0/0xe0 [ 203.190161][ T8332] ? read_lock_is_recursive+0x20/0x20 [ 203.195562][ T8332] ? _raw_spin_unlock+0x28/0x40 [ 203.200470][ T8332] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 203.206211][ T8332] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 203.211772][ T8332] down_write+0x97/0x200 [ 203.216112][ T8332] ? ocfs2_xattr_set+0xba4/0x13e0 [ 203.221150][ T8332] ? down_read_killable+0x340/0x340 [ 203.226447][ T8332] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 203.231921][ T8332] ocfs2_xattr_set+0xba4/0x13e0 [ 203.236807][ T8332] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 203.242541][ T8332] ? __lock_acquire+0x1347/0x7d40 [ 203.247669][ T8332] ? verify_lock_unused+0x140/0x140 [ 203.252887][ T8332] ? end_current_label_crit_section+0x170/0x170 [ 203.259142][ T8332] ? apparmor_capable+0x137/0x1a0 [ 203.264189][ T8332] ? bpf_lsm_capable+0x9/0x10 [ 203.269158][ T8332] ? security_capable+0x89/0xb0 [ 203.274123][ T8332] ? capable+0x88/0xe0 [ 203.278208][ T8332] ? ocfs2_xattr_security_get+0x40/0x40 [ 203.283767][ T8332] __vfs_setxattr+0x431/0x470 [ 203.288462][ T8332] __vfs_setxattr_noperm+0x12d/0x5e0 [ 203.293761][ T8332] vfs_setxattr+0x16b/0x2f0 [ 203.298281][ T8332] ? xattr_permission+0x470/0x470 [ 203.303324][ T8332] ? __mnt_want_write+0x223/0x2a0 [ 203.308380][ T8332] ? path_setxattr+0x3a1/0x5d0 [ 203.313186][ T8332] path_setxattr+0x3f3/0x5d0 [ 203.317808][ T8332] ? simple_xattrs_free+0x150/0x150 [ 203.323038][ T8332] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 203.329036][ T8332] ? lock_chain_count+0x20/0x20 [ 203.333898][ T8332] __x64_sys_setxattr+0xbb/0xd0 [ 203.338761][ T8332] do_syscall_64+0x55/0xa0 [ 203.343184][ T8332] ? clear_bhb_loop+0x40/0x90 [ 203.347874][ T8332] ? clear_bhb_loop+0x40/0x90 [ 203.352574][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.358481][ T8332] RIP: 0033:0x7f0d0319cdd9 [ 203.362904][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.382548][ T8332] RSP: 002b:00007f0d04049028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 203.391157][ T8332] RAX: ffffffffffffffda RBX: 00007f0d03416090 RCX: 00007f0d0319cdd9 [ 203.399151][ T8332] RDX: 00002000000002c0 RSI: 0000200000001340 RDI: 0000200000001240 [ 203.407220][ T8332] RBP: 00007f0d03232d69 R08: 0000000000000000 R09: 0000000000000000 [ 203.415199][ T8332] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000 [ 203.423179][ T8332] R13: 00007f0d03416128 R14: 00007f0d03416090 R15: 00007fffb2a42b18 [ 203.431171][ T8332] [ 203.466446][ T8331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 203.485478][ T8320] loop5: detected capacity change from 0 to 8192 [ 203.618138][ T1118] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 203.637311][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 203.654407][ T1118] EXT4-fs (loop1): This should not happen!! Data will be lost [ 203.654407][ T1118] [ 203.667434][ T1118] EXT4-fs (loop1): Total free blocks count 0 [ 203.675875][ T1118] EXT4-fs (loop1): Free/Dirty block details [ 203.683876][ T1118] EXT4-fs (loop1): free_blocks=0 [ 203.690262][ T1118] EXT4-fs (loop1): dirty_blocks=16 [ 203.695413][ T1118] EXT4-fs (loop1): Block reservation details [ 203.702381][ T1118] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 203.711928][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.998485][ T5790] Bluetooth: hci2: command 0x0401 tx timeout [ 206.998546][ T5785] Bluetooth: hci0: command 0x0406 tx timeout