last executing test programs: 3.740027956s ago: executing program 1 (id=1675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.628778426s ago: executing program 1 (id=1677): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 2.466273399s ago: executing program 3 (id=1697): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@init_itable}]}, 0x82, 0x48f, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 2.310825262s ago: executing program 2 (id=1690): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r0, 0x1, 0x70bd2d, 0x25dfdbbc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a2dc176d40eeb09eb2e9a7f3890704f66a145e15b83b44d5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="876a531347511fd5b96bc99581a53da2f4abe1a30797e8507a6ad3fbae8d41b4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d64a6652a8a1dc6e"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) 2.242008509s ago: executing program 2 (id=1692): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2a00000, &(0x7f0000000440)=ANY=[], 0x1, 0x6224, &(0x7f0000007240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x26) 1.710448515s ago: executing program 1 (id=1698): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 1.675298658s ago: executing program 3 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.549241856s ago: executing program 2 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}]]}, 0x24}}, 0x0) 1.478290594s ago: executing program 1 (id=1702): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 1.34911011s ago: executing program 3 (id=1704): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpgid(0x0, 0x0) 1.322869176s ago: executing program 2 (id=1705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x6, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048000) 1.160389527s ago: executing program 2 (id=1707): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x1, 0x101a, r1, 0x0) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) 1.044815956s ago: executing program 0 (id=1708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000eaffffffb704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 960.204781ms ago: executing program 2 (id=1709): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), &(0x7f0000000400)=ANY=[], 0x2d, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)=@v2={0x3, 0x1, 0x6, 0x200, 0x48, "0217da9f14114d569667a6a65ee6d098c463eb32aed7c2b812fd6acf660a70b66aed9c6b392b5b30f40067053c7b1ca0984fc777d3caffc6fba0125a675feecf88cf5dd291f64df8"}, 0x51, 0x0) 892.874089ms ago: executing program 0 (id=1710): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x2, 0x0, 0x3}) 756.986585ms ago: executing program 0 (id=1711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x0, 0x7, 0x3, 0x1, 0x4, 0x5}]}) 475.387385ms ago: executing program 0 (id=1712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 383.151979ms ago: executing program 1 (id=1713): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x15a, &(0x7f0000003180)="$eJzs2rFK81AUB/DzwYdKwcXRqVCpgjZJE62rjuLm7lBqbhq8MSURpH0BcRIUroMvIfgEPoFkEjddivgSkdtcNI0Wsthb4f9b+ofTJicn9E6nEYVBk8UNoo3e1cFwKQqDasvZ7rAma1Nmj4iqMiRpemPQNy+f9SQl44cv6LXynn3W1jyxf8F87tq6WwIAAAAAAAAAAAAAAAAAAAAAgJLqFRUqXRGcM5+7zVw17g+O25y7UUy0oKlDvepVtcNFTPBbOR9nbBTrMu/I5IvdSNat8d9fq7DaFfy1OF/zNOiZcX/Q8IO253ruiW07LWvTsrZsc3Qts3jF+p3qiZL03sqtkxmPh46s5/bNnsvsm6n3/3/ZF5dnxbt9vX+EKQaiCaV/9Ds3fdP+yH8pPM1l/45Z6UdDWCx5fM6+0fk3JKJ5p/Ygzz+jE/IjVZzGOPU+PgBM8hEAAP//oTc3XQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 383.034419ms ago: executing program 3 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000082, 0x0, 0x82}]}) 255.724006ms ago: executing program 0 (id=1715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYRESDEC], 0x31) 193.491605ms ago: executing program 0 (id=1716): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x20, 0xe, 0x49, "911c2746421cb752bbc56294904bab2a776f40388d314d839c9b5c51fb314f4a23ef467379cb509899650889ee07795b3b87fa17188280c77fa7b54aafc3576dbf2143ba8c5acbd1c1"}, 0x0, 0x0, 0x0, 0x0}) 81.589425ms ago: executing program 3 (id=1717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x4c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 70.832463ms ago: executing program 3 (id=1718): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=1719): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x101481b, &(0x7f0000000940), 0x1, 0x4ed, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): uct=2, SerialNumber=3 [ 151.404546][ T8] usb 3-1: Product: syz [ 151.409847][ T8] usb 3-1: Manufacturer: syz [ 151.417052][ T8] usb 3-1: SerialNumber: syz [ 151.425674][ T8] usb 3-1: config 0 descriptor?? [ 151.438220][ T8] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 151.451670][ T8] em28xx 3-1:0.132: Video interface 132 found: [ 151.491849][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 151.576741][ T7856] loop1: detected capacity change from 0 to 2048 [ 151.607742][ T7856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.864053][ T8] em28xx 3-1:0.132: chip ID is em2765 [ 152.031424][ T7864] loop0: detected capacity change from 0 to 256 [ 152.057045][ T7864] exfat: Deprecated parameter 'namecase' [ 152.072984][ T7864] exfat: Deprecated parameter 'namecase' [ 152.107923][ T7864] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 152.271605][ T8] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 152.294338][ T8] em28xx 3-1:0.132: board has no eeprom [ 152.315331][ T7862] loop1: detected capacity change from 0 to 32768 [ 152.334431][ T7862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.805 (7862) [ 152.352847][ T7862] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.363832][ T7862] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 152.373051][ T8] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 152.381032][ T7862] BTRFS info (device loop1): allowing degraded mounts [ 152.388696][ T8] em28xx 3-1:0.132: analog set to bulk mode. [ 152.395027][ T7862] BTRFS info (device loop1): enabling auto defrag [ 152.401508][ T7862] BTRFS info (device loop1): using free space tree [ 152.408886][ T5804] em28xx 3-1:0.132: Registering V4L2 extension [ 152.422825][ T8] usb 3-1: USB disconnect, device number 11 [ 152.452557][ T8] em28xx 3-1:0.132: Disconnecting em28xx [ 152.546335][ T7862] BTRFS info (device loop1): enabling ssd optimizations [ 152.587767][ T7862] BTRFS info (device loop1): auto enabling async discard [ 152.679311][ T5804] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 152.694452][ T5804] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 152.712363][ T5804] em28xx 3-1:0.132: No AC97 audio processor [ 152.756043][ T5804] usb 3-1: Decoder not found [ 152.760678][ T5804] em28xx 3-1:0.132: failed to create media graph [ 152.784288][ T5804] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 152.805937][ T5804] em28xx 3-1:0.132: Remote control support is not available for this card. [ 152.820815][ T8] em28xx 3-1:0.132: Closing input extension [ 152.829106][ T5762] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.847503][ T8] em28xx 3-1:0.132: Freeing device [ 153.050754][ T7893] loop0: detected capacity change from 0 to 1024 [ 153.222430][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 153.240482][ T11] hfsplus: b-tree write err: -5, ino 25 [ 153.276291][ T11] hfsplus: b-tree write err: -5, ino 4 [ 153.282245][ T11] hfsplus: b-tree write err: -5, ino 2 [ 153.289023][ T11] hfsplus: b-tree write err: -5, ino 17 [ 153.365685][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 153.785942][ T7913] loop0: detected capacity change from 0 to 512 [ 153.808339][ T7913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.823844][ T7913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.857987][ T7913] EXT4-fs (loop0): 1 truncate cleaned up [ 153.865207][ T7913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.925055][ T7906] loop2: detected capacity change from 0 to 32768 [ 153.983118][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 153.983132][ T27] audit: type=1800 audit(1773070058.651:29): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.815" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 154.020621][ T7909] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 154.099824][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.516532][ T7922] loop5: detected capacity change from 0 to 7 [ 154.564270][ T7922] support for the xor transformation has been removed. [ 155.003181][ T7936] loop1: detected capacity change from 0 to 4096 [ 155.021488][ T7936] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 155.157681][ T7936] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 155.189304][ T7936] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 155.233417][ T7936] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 155.279250][ T7936] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 155.316211][ T7936] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.355561][ T7936] ntfs: volume version 3.1. [ 155.362080][ T7936] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 155.394443][ T7936] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 155.414823][ T7927] loop0: detected capacity change from 0 to 32768 [ 155.428341][ T7936] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 155.840304][ T7955] loop2: detected capacity change from 0 to 512 [ 155.848761][ T7955] EXT4-fs: inline encryption not supported [ 155.875121][ T7955] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.899778][ T7955] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.944434][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.981247][ T7955] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.005804][ T7955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.012198][ T7955] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.837: inode #13: comm syz.2.837: iget: illegal inode # [ 156.033057][ T7955] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.837: couldn't read orphan inode 13 (err -117) [ 156.049001][ T7955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.082420][ T7955] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 156.124225][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 156.126083][ T7955] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.837: Abort forced by user [ 156.131171][ T23] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 156.147604][ T23] usb 2-1: config 0 has no interface number 0 [ 156.153822][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.171855][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.175661][ T7955] EXT4-fs (loop2): Remounting filesystem read-only [ 156.194324][ T23] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 156.213702][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.216659][ T7955] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 156.226896][ T23] usb 2-1: config 0 descriptor?? [ 156.305328][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.674663][ T23] hid (null): unknown global tag 0xd [ 156.908199][ T8] usb 2-1: USB disconnect, device number 9 [ 157.813901][ T7986] loop0: detected capacity change from 0 to 2048 [ 157.929723][ T7986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.536819][ T7997] loop3: detected capacity change from 0 to 32768 [ 158.569915][ T7997] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.660016][ T8006] loop1: detected capacity change from 0 to 32768 [ 158.677636][ T8006] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.858 (8006) [ 158.696891][ T8006] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 158.709842][ T8006] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 158.726697][ T8006] BTRFS info (device loop1): using free space tree [ 158.737768][ T7997] XFS (loop3): Ending clean mount [ 158.761816][ T7997] XFS (loop3): Quotacheck needed: Please wait. [ 158.795413][ T5804] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 158.806973][ T5804] XFS (loop3): Unmount and run xfs_repair [ 158.812827][ T5804] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 158.822088][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 158.831346][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 158.840674][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 158.850018][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 158.859327][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 158.868602][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 158.878188][ T8006] BTRFS info (device loop1): enabling ssd optimizations [ 158.879858][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 158.891532][ T8006] BTRFS info (device loop1): auto enabling async discard [ 158.908054][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 158.917334][ T3504] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 158.961692][ T7997] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 159.002869][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 159.002881][ T27] audit: type=1800 audit(1773070063.671:30): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.858" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 159.139880][ T5762] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 159.383004][ T5804] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 159.425131][ T5804] XFS (loop3): Unmount and run xfs_repair [ 159.446916][ T5804] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 159.464884][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 159.473775][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 159.514269][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 159.541522][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 159.574172][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 159.583069][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.614269][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.623160][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.658315][ T3504] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 159.699098][ T3504] XFS (loop3): page discard on page ffffea0001580000, inode 0x244b, pos 2048. [ 159.734031][ T5752] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 159.754286][ T5752] XFS (loop3): Unmount and run xfs_repair [ 159.761730][ T5752] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 159.773451][ T5752] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 159.782527][ T5752] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 159.799776][ T5752] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 159.810829][ T5752] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 159.822986][ T5752] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 159.833432][ T5752] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.846672][ T5752] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.857246][ T5752] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.870094][ T3504] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 159.908032][ T3504] XFS (loop3): page discard on page ffffea0001570000, inode 0x244b, pos 1048576. [ 159.937920][ T5752] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 159.970390][ T5752] XFS (loop3): Unmount and run xfs_repair [ 159.982271][ T5752] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 159.992013][ T5752] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 160.001526][ T5752] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 160.028355][ T5752] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 160.037985][ T5752] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 160.039014][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 160.051164][ T5752] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 160.069170][ T5752] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.078536][ T5752] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.092130][ T5752] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.102749][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 160.117094][ T3504] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 160.131722][ T3504] XFS (loop3): page discard on page ffffea0001afe880, inode 0x244b, pos 2097152. [ 160.146853][ T786] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 160.160131][ T786] XFS (loop3): Unmount and run xfs_repair [ 160.168188][ T786] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 160.178037][ T786] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 160.188905][ T786] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 160.198012][ T786] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 160.207053][ T786] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 160.216120][ T786] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 160.225205][ T786] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.234266][ T786] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.243264][ T786] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.252295][ T3504] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 160.263829][ T3504] XFS (loop3): page discard on page ffffea0001afe8c0, inode 0x244b, pos 2101248. [ 160.281525][ T5763] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.324556][ T8043] loop0: detected capacity change from 0 to 32768 [ 160.425115][ T8043] JBD2: Ignoring recovery information on journal [ 160.563338][ T8043] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.603697][ T8048] loop2: detected capacity change from 0 to 40427 [ 160.638731][ T8048] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 160.660404][ T8048] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.689385][ T8048] F2FS-fs (loop2): invalid crc value [ 160.710823][ T27] audit: type=1800 audit(1773070065.391:31): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.862" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 160.764307][ T8048] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.920716][ T8048] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.931401][ T8048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 160.933380][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 161.118812][ T5765] syz-executor: attempt to access beyond end of device [ 161.118812][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.135712][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.174243][ T5752] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.191888][ T8066] loop3: detected capacity change from 0 to 256 [ 161.209798][ T8066] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 161.374740][ T5752] usb 2-1: Using ep0 maxpacket: 16 [ 161.396471][ T5752] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.415599][ T5752] usb 2-1: config 0 has no interface number 0 [ 161.421753][ T5752] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.443349][ T5752] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.464252][ T5752] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 161.473742][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.496429][ T5752] usb 2-1: config 0 descriptor?? [ 161.968518][ T8078] loop0: detected capacity change from 0 to 128 [ 162.136200][ T5752] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000A/input/input17 [ 162.263143][ T5752] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000A/input/input18 [ 162.329254][ T5752] uclogic 0003:28BD:0071.000A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 162.370395][ T8074] loop2: detected capacity change from 0 to 32768 [ 162.384506][ T5752] usb 2-1: USB disconnect, device number 10 [ 162.451212][ T8085] fido_id[8085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 162.468392][ T8074] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.756240][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 162.872777][ T8082] loop0: detected capacity change from 0 to 32768 [ 162.922200][ T8082] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.244249][ T8082] XFS (loop0): Ending clean mount [ 163.262226][ T8082] XFS (loop0): Quotacheck needed: Please wait. [ 163.304301][ T8107] program syz.2.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.324249][ T5804] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 163.351122][ T5804] XFS (loop0): Unmount and run xfs_repair [ 163.360944][ T5804] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 163.385482][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 163.404227][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 163.413117][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 163.434672][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 163.446315][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 163.474219][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.479972][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 163.483086][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.531796][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.542957][ T3504] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 163.574551][ T8082] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 163.574690][ T8111] loop2: detected capacity change from 0 to 4096 [ 163.680405][ T8114] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.849809][ T8118] loop1: detected capacity change from 0 to 164 [ 163.874997][ T5804] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 163.900581][ T5804] XFS (loop0): Unmount and run xfs_repair [ 163.918149][ T8118] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 163.934491][ T5804] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 163.962262][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 163.994784][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 164.020483][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 164.046924][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 164.062944][ T8122] loop2: detected capacity change from 0 to 16 [ 164.064494][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 164.102715][ T8122] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.114056][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.144175][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.160467][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.194506][ T1131] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 164.229673][ T1131] XFS (loop0): page discard on page ffffea000158c000, inode 0x244b, pos 2048. [ 164.255712][ T23] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 164.267019][ T23] XFS (loop0): Unmount and run xfs_repair [ 164.272798][ T23] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 164.280834][ T23] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 164.290948][ T23] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 164.299876][ T23] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 164.308953][ T23] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 164.317923][ T23] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 164.326814][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.335735][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.346464][ T23] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.355473][ T1131] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 164.369542][ T1131] XFS (loop0): page discard on page ffffea00014fc000, inode 0x244b, pos 1048576. [ 164.380761][ T5804] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 164.394102][ T5804] XFS (loop0): Unmount and run xfs_repair [ 164.399895][ T5804] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 164.407476][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 164.418870][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 164.427822][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 164.436704][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 164.445637][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 164.452471][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 164.454622][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.454638][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.454650][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.481334][ T1131] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 164.504793][ T1131] XFS (loop0): page discard on page ffffea00015849c0, inode 0x244b, pos 2097152. [ 164.519505][ T5804] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 164.530720][ T5826] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.541567][ T5804] XFS (loop0): Unmount and run xfs_repair [ 164.564226][ T5804] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 164.594259][ T5804] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 164.603250][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 164.617725][ T5804] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 164.627150][ T5804] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 164.636591][ T5804] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 164.645652][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.672165][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.681233][ T5804] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.694350][ T1131] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 164.712096][ T1131] XFS (loop0): page discard on page ffffea00015f4540, inode 0x244b, pos 2101248. [ 164.724759][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.735370][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 164.742145][ T5826] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 164.751634][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.784873][ T5826] usb 3-1: config 0 descriptor?? [ 164.795836][ T5826] gspca_main: sunplus-2.14.0 probing 041e:400b [ 164.992001][ T8135] loop0: detected capacity change from 0 to 128 [ 165.017849][ T8135] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.036601][ T8135] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.131635][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.608640][ T5826] gspca_sunplus: reg_w_riv err -71 [ 165.613866][ T5826] sunplus: probe of 3-1:0.0 failed with error -71 [ 165.643976][ T5826] usb 3-1: USB disconnect, device number 12 [ 165.660561][ T8154] loop0: detected capacity change from 0 to 4096 [ 165.692950][ T8156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.255868][ T8163] loop0: detected capacity change from 0 to 131072 [ 167.274453][ T8163] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 167.284204][ T8163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 167.295576][ T8163] F2FS-fs (loop0): invalid crc value [ 167.306088][ T8163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.354730][ T8163] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 167.361807][ T8163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 167.946833][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 168.364207][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.554344][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 168.572948][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 168.594835][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 168.618960][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.639247][ T23] usb 4-1: config 0 descriptor?? [ 168.663310][ T23] gspca_main: sunplus-2.14.0 probing 041e:400b [ 168.829766][ T8219] loop2: detected capacity change from 0 to 2048 [ 168.887671][ T8219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.450049][ T8226] loop0: detected capacity change from 0 to 32768 [ 169.487480][ T8226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.931 (8226) [ 169.501652][ T23] gspca_sunplus: reg_w_riv err -71 [ 169.514580][ T23] sunplus: probe of 4-1:0.0 failed with error -71 [ 169.535556][ T23] usb 4-1: USB disconnect, device number 9 [ 169.576244][ T8226] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.583671][ T8224] loop1: detected capacity change from 0 to 32768 [ 169.589835][ T8226] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.634304][ T8226] BTRFS info (device loop0): allowing degraded mounts [ 169.641318][ T8226] BTRFS info (device loop0): enabling auto defrag [ 169.654034][ T8226] BTRFS info (device loop0): using free space tree [ 169.738710][ T8226] BTRFS info (device loop0): enabling ssd optimizations [ 169.769594][ T8226] BTRFS info (device loop0): auto enabling async discard [ 169.870810][ T8248] loop2: detected capacity change from 0 to 512 [ 169.992419][ T8248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.033660][ T8248] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.060188][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.103513][ T8248] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.935: corrupted xattr block 33: bad e_name length [ 170.127235][ T8248] EXT4-fs error (device loop2): ext4_get_inode_usage:888: inode #15: comm syz.2.935: corrupted xattr block 33: bad e_name length [ 170.181670][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'. [ 170.245594][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.823575][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 170.905536][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 171.004804][ T8262] loop3: detected capacity change from 0 to 32768 [ 171.015394][ T8262] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.943 (8262) [ 171.038171][ T8262] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.048519][ T8262] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.058241][ T8262] BTRFS info (device loop3): using free space tree [ 171.126269][ T8262] BTRFS info (device loop3): enabling ssd optimizations [ 171.138457][ T8262] BTRFS info (device loop3): auto enabling async discard [ 171.430084][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.954'. [ 171.585069][ T5763] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.156771][ T8292] loop2: detected capacity change from 0 to 32768 [ 172.519515][ T8300] loop1: detected capacity change from 0 to 32768 [ 172.531649][ T8307] loop3: detected capacity change from 0 to 512 [ 172.540764][ T8307] EXT4-fs: inline encryption not supported [ 172.554302][ T8307] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.561194][ T8300] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 172.571630][ T8307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.584421][ T8307] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.607449][ T8300] JBD2: Ignoring recovery information on journal [ 172.646822][ T8307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 172.653395][ T8307] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.955: inode #13: comm syz.3.955: iget: illegal inode # [ 172.661485][ T8300] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 172.676840][ T8307] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.955: couldn't read orphan inode 13 (err -117) [ 172.691059][ T8307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 172.835421][ T8307] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 172.872617][ T8307] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.955: Abort forced by user [ 172.918181][ T8307] EXT4-fs (loop3): Remounting filesystem read-only [ 172.927718][ T8307] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 173.046342][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 173.077565][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.339639][ T8318] loop2: detected capacity change from 0 to 4096 [ 173.531718][ T27] audit: type=1800 audit(1773070078.201:32): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.961" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 173.594193][ T27] audit: type=1800 audit(1773070078.201:33): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.961" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 173.972693][ T8338] loop1: detected capacity change from 0 to 2048 [ 173.999999][ T8338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.260234][ T8336] loop3: detected capacity change from 0 to 32768 [ 174.283214][ T8336] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.968 (8336) [ 174.327496][ T8336] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.341351][ T8336] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 174.367709][ T8336] BTRFS info (device loop3): using free space tree [ 174.436933][ T8336] BTRFS info (device loop3): enabling ssd optimizations [ 174.457336][ T8336] BTRFS info (device loop3): auto enabling async discard [ 174.504286][ T8340] loop1: detected capacity change from 0 to 32768 [ 174.567806][ T8340] JBD2: Ignoring recovery information on journal [ 174.612939][ T27] audit: type=1800 audit(1773070079.281:34): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.968" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 174.688008][ T8340] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.777697][ T5763] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.838841][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 174.912261][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 174.933068][ T27] audit: type=1800 audit(1773070079.601:35): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.969" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 175.085583][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 175.112801][ T8367] netlink: 'syz.0.973': attribute type 21 has an invalid length. [ 175.121726][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 175.144538][ T8367] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 175.152439][ T8367] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.973'. [ 175.201878][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 175.594234][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.639018][ T8383] loop0: detected capacity change from 0 to 16 [ 175.653105][ T8383] erofs: (device loop0): mounted with root inode @ nid 36. [ 175.706646][ T8381] loop1: detected capacity change from 0 to 4096 [ 175.785549][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 175.829283][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.849089][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.875017][ T23] usb 3-1: config 0 descriptor?? [ 176.111475][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.123492][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.138267][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.171819][ T23] usb 3-1: media controller created [ 176.203808][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.313511][ T23] az6027: usb out operation failed. (-71) [ 176.345437][ T23] az6027: usb out operation failed. (-71) [ 176.351204][ T23] stb0899_attach: Driver disabled by Kconfig [ 176.371041][ T23] az6027: no front-end attached [ 176.371041][ T23] [ 176.377425][ T8404] loop0: detected capacity change from 0 to 8 [ 176.388876][ T23] az6027: usb out operation failed. (-71) [ 176.406876][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.430127][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 176.476068][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 176.483389][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.535477][ T23] usb 3-1: USB disconnect, device number 13 [ 176.957875][ T8398] loop3: detected capacity change from 0 to 40427 [ 176.986183][ T8398] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 177.027953][ T8398] F2FS-fs (loop3): invalid crc value [ 177.050844][ T8398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.260689][ T8398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.549854][ T8407] loop1: detected capacity change from 0 to 131072 [ 177.577045][ T8407] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 177.587559][ T8407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 177.597481][ T5763] syz-executor: attempt to access beyond end of device [ 177.597481][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.613458][ T8407] F2FS-fs (loop1): invalid crc value [ 177.632441][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 177.645613][ T8407] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.702959][ T8407] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 177.710094][ T8407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 177.721315][ T8420] ptrace attach of "./syz-executor exec"[5764] was attempted by ""[8420] [ 177.730310][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 177.830386][ T8424] loop2: detected capacity change from 0 to 128 [ 177.876585][ T8424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.014449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.200393][ T1131] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.859210][ T8458] loop3: detected capacity change from 0 to 256 [ 180.035128][ T8458] exfat: Deprecated parameter 'namecase' [ 180.137987][ T8458] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 180.183511][ T8456] loop1: detected capacity change from 0 to 40427 [ 180.273121][ T8456] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 180.287933][ T8456] F2FS-fs (loop1): invalid crc value [ 180.386971][ T8467] loop3: detected capacity change from 0 to 1024 [ 180.465677][ T8456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.501814][ T8456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.634493][ T5762] syz-executor: attempt to access beyond end of device [ 180.634493][ T5762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.679855][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 180.839958][ T8476] loop2: detected capacity change from 0 to 512 [ 180.975898][ T8476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.168647][ T8483] tap0: tun_chr_ioctl cmd 1074025681 [ 181.205931][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 181.450002][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.016570][ T8494] loop1: detected capacity change from 0 to 32768 [ 182.061421][ T8494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1024 (8494) [ 182.160371][ T8494] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.192610][ T8494] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 182.222380][ T8494] BTRFS info (device loop1): using free space tree [ 182.352142][ T8500] loop2: detected capacity change from 0 to 40427 [ 182.372926][ T8500] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 182.391653][ T8500] F2FS-fs (loop2): invalid crc value [ 182.398691][ T8494] BTRFS info (device loop1): enabling ssd optimizations [ 182.422673][ T8500] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.443123][ T8494] BTRFS info (device loop1): auto enabling async discard [ 182.494402][ T8500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.629322][ T5765] syz-executor: attempt to access beyond end of device [ 182.629322][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.664786][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 182.856967][ T5762] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.879923][ T8510] loop0: detected capacity change from 0 to 32768 [ 182.941480][ T8534] loop3: detected capacity change from 0 to 512 [ 183.061702][ T8534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.092714][ T8510] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 183.137640][ T8510] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.361903][ T8510] XFS (loop0): Ending clean mount [ 183.403231][ T8510] XFS (loop0): Quotacheck needed: Please wait. [ 183.436873][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 183.455559][ T8] XFS (loop0): Unmount and run xfs_repair [ 183.463469][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 183.472386][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 183.480572][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.482749][ T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 183.530739][ T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 183.558154][ T8] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 183.595740][ T8] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 183.597080][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 183.624463][ T8] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 183.633876][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.654228][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.679651][ T65] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 183.726892][ T8551] use of bytesused == 0 is deprecated and will be removed in the future, [ 183.736416][ T8510] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 183.749200][ T8551] use the actual size instead. [ 183.829169][ T27] audit: type=1800 audit(1773070088.501:36): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1031" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 183.860466][ T27] audit: type=1800 audit(1773070088.521:37): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1031" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 183.922599][ T5764] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.168127][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'. [ 184.304564][ T5766] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.429104][ T8] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 184.456235][ T8] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 184.469274][ T8] hid-generic 0004:0004:FFFF0001.000B: unknown main item tag 0x0 [ 184.492486][ T8] hid-generic 0004:0004:FFFF0001.000B: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 184.511792][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 184.526194][ T5766] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 184.547566][ T5766] usb 3-1: config 179 has no interface number 0 [ 184.553895][ T5766] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 184.585823][ T5766] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 184.620853][ T5766] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.638282][ T8580] fido_id[8580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.654406][ T5766] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 184.677128][ T5766] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 184.693859][ T5766] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 184.707463][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.732172][ T8561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.753390][ T5801] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.833351][ T8586] netlink: 'syz.1.1052': attribute type 14 has an invalid length. [ 184.944350][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 184.982144][ T5801] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 184.991000][ T8588] loop1: detected capacity change from 0 to 256 [ 184.993513][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.049309][ T5801] usb 4-1: Product: syz [ 185.053514][ T5801] usb 4-1: Manufacturer: syz [ 185.079816][ T5801] usb 4-1: SerialNumber: syz [ 185.248580][ T5766] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 185.336432][ T5801] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 185.375712][ T5801] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.413508][ T8582] loop0: detected capacity change from 0 to 40427 [ 185.420392][ T5801] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 185.454515][ T5801] usb 4-1: media controller created [ 185.489828][ T8582] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 185.523881][ T8582] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 185.551083][ T8] usb 3-1: USB disconnect, device number 14 [ 185.557134][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.557185][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 185.560077][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.586052][ T8] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 185.637460][ T8582] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.760563][ T5801] zl10353_read_register: readreg error (reg=127, ret==-71) [ 185.782175][ T8582] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 185.789854][ T8582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.852903][ T5801] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 185.891988][ T5801] usb 4-1: USB disconnect, device number 10 [ 185.920874][ T27] audit: type=1800 audit(1773070090.591:38): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1049" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 185.942943][ T5764] syz-executor: attempt to access beyond end of device [ 185.942943][ T5764] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.981818][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 186.263953][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'. [ 186.400748][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 186.410215][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 186.458805][ T8609] netlink: 'syz.2.1061': attribute type 14 has an invalid length. [ 187.135376][ T5766] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.251886][ T8623] loop3: detected capacity change from 0 to 40427 [ 187.260797][ T8623] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 187.268454][ T8623] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.287334][ T8623] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.314295][ T5801] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 187.326034][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 187.357449][ T5766] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.372254][ T5766] usb 1-1: config 179 has no interface number 0 [ 187.380372][ T5766] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 187.392972][ T8623] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.392985][ T5766] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 187.404517][ T8623] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.411730][ T5766] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.430969][ T5766] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 187.463079][ T5766] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.484657][ T5766] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 187.497360][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.498101][ T27] audit: type=1800 audit(1773070092.171:39): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1068" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 187.515064][ T8624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.525783][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 187.553104][ T5801] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 187.566250][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.575481][ T5763] syz-executor: attempt to access beyond end of device [ 187.575481][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.587122][ T5801] usb 3-1: Product: syz [ 187.593850][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 187.623808][ T5801] usb 3-1: Manufacturer: syz [ 187.629441][ T5801] usb 3-1: SerialNumber: syz [ 187.741827][ T8641] loop1: detected capacity change from 0 to 256 [ 187.803253][ T8641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 187.892902][ T5801] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 187.916587][ T5766] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input22 [ 187.955092][ T5801] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.004505][ T5801] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 188.024236][ T5801] usb 3-1: media controller created [ 188.167671][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.260814][ T23] usb 1-1: USB disconnect, device number 10 [ 188.260925][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 188.275566][ T23] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.275704][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 188.305312][ T5801] zl10353_read_register: readreg error (reg=127, ret==-32) [ 188.425199][ T5801] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 188.455164][ T5801] usb 3-1: USB disconnect, device number 15 [ 188.471716][ T8645] loop3: detected capacity change from 0 to 256 [ 188.896892][ T8657] loop3: detected capacity change from 0 to 64 [ 189.144736][ T5763] hfs: node 4:3 still has 1 user(s)! [ 189.249704][ T8666] loop2: detected capacity change from 0 to 1024 [ 189.260511][ T8668] loop3: detected capacity change from 0 to 256 [ 189.309040][ T8668] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 189.359508][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.501244][ T8661] loop1: detected capacity change from 0 to 40427 [ 189.505259][ T27] audit: type=1800 audit(1773070094.171:40): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1088" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 189.531265][ T8661] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 189.568759][ T8661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 189.632437][ T8661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.683399][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.705984][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 189.757700][ T8661] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 189.791272][ T8661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.974561][ T27] audit: type=1800 audit(1773070094.641:41): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1084" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 190.071958][ T5762] syz-executor: attempt to access beyond end of device [ 190.071958][ T5762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.098785][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 190.705480][ T8713] loop2: detected capacity change from 0 to 64 [ 190.848025][ T5765] hfs: node 4:3 still has 1 user(s)! [ 190.916754][ T8718] ip6tnl1: entered allmulticast mode [ 191.004262][ T5766] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.173074][ T8709] loop0: detected capacity change from 0 to 32768 [ 191.214507][ T5766] usb 2-1: Using ep0 maxpacket: 16 [ 191.220834][ T8709] (syz.0.1105,8709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.232492][ T5766] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 191.250745][ T8709] (syz.0.1105,8709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.264215][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.277614][ T5766] usb 2-1: Product: syz [ 191.282569][ T5766] usb 2-1: Manufacturer: syz [ 191.297627][ T5766] usb 2-1: SerialNumber: syz [ 191.329125][ T8709] JBD2: Ignoring recovery information on journal [ 191.371092][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 191.397213][ T8709] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 191.456742][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 191.456761][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 191.462870][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 191.556748][ T5766] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 191.586855][ T5766] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.605389][ T5766] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 191.614017][ T5766] usb 2-1: media controller created [ 191.640639][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.862365][ T27] audit: type=1800 audit(1773070096.531:42): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file0" dev="loop0" ino=16979 res=0 errno=0 [ 191.896836][ T8742] loop2: detected capacity change from 0 to 128 [ 191.910843][ T5766] zl10353_read_register: readreg error (reg=127, ret==-110) [ 191.946463][ T8709] syz.0.1105 (8709) used greatest stack depth: 18768 bytes left [ 192.054958][ T5766] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 192.082336][ T8744] sctp: [Deprecated]: syz.3.1118 (pid 8744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.082336][ T8744] Use struct sctp_sack_info instead [ 192.086563][ T5766] usb 2-1: USB disconnect, device number 11 [ 192.112922][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 192.335499][ T8746] loop0: detected capacity change from 0 to 64 [ 192.411570][ T5764] hfs: node 4:3 still has 1 user(s)! [ 192.784859][ T8765] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1126'. [ 192.793939][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1126'. [ 193.322404][ T8779] loop3: detected capacity change from 0 to 1024 [ 193.470325][ T8779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.592989][ T27] audit: type=1800 audit(1773070098.261:43): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1134" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 193.750467][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.843432][ T8769] loop0: detected capacity change from 0 to 131072 [ 193.855329][ T8769] F2FS-fs (loop0): invalid crc value [ 193.890178][ T8769] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.944030][ T8769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 194.067568][ T8799] ip6tnl1: entered allmulticast mode [ 194.171130][ T8805] program syz.1.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.501664][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.508264][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.721914][ T8819] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1147'. [ 194.734068][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1147'. [ 194.969577][ T8829] loop3: detected capacity change from 0 to 128 [ 195.605357][ T8846] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1157'. [ 195.632930][ T8846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1157'. [ 195.832711][ T8832] loop2: detected capacity change from 0 to 32768 [ 195.894510][ T8832] (syz.2.1151,8832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.937660][ T8832] (syz.2.1151,8832,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.992165][ T8832] JBD2: Ignoring recovery information on journal [ 196.045525][ T8832] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 196.178801][ T8860] loop1: detected capacity change from 0 to 4096 [ 196.287481][ T27] audit: type=1800 audit(1773070100.961:44): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1151" name="file0" dev="loop2" ino=16979 res=0 errno=0 [ 196.322359][ T8860] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 196.535114][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 196.917087][ T8885] program syz.2.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.091423][ T8888] nbd0: detected capacity change from 0 to 127 [ 197.123112][ T5769] block nbd0: Receive control failed (result -104) [ 197.594955][ T8908] loop1: detected capacity change from 0 to 64 [ 197.647470][ T27] audit: type=1800 audit(1773070102.321:45): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1182" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 197.797589][ T8918] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1185'. [ 198.186747][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.254319][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.374226][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 198.380816][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.392027][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 198.401233][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.411272][ T23] usb 2-1: config 0 descriptor?? [ 198.434388][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 198.442010][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.469895][ T8] usb 3-1: config 4 interface 0 has no altsetting 0 [ 198.480058][ T8] usb 3-1: string descriptor 0 read error: -22 [ 198.486839][ T8] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 198.503137][ T8] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 198.519392][ T8] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 198.540859][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.560825][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 198.572572][ T8] usb 3-1: media controller created [ 198.598727][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.838661][ T23] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 199.396174][ T5804] usb 2-1: USB disconnect, device number 12 [ 199.946873][ T8] usb 3-1: USB disconnect, device number 16 [ 200.258225][ T8953] loop3: detected capacity change from 0 to 131072 [ 200.301724][ T8953] F2FS-fs (loop3): invalid crc value [ 200.326806][ T8953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.374001][ T8953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 200.434389][ T964] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.498895][ T8965] nbd1: detected capacity change from 0 to 127 [ 200.533545][ T5769] block nbd1: Receive control failed (result -104) [ 200.634832][ T964] usb 1-1: Using ep0 maxpacket: 32 [ 200.647787][ T964] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 200.674233][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.682275][ T964] usb 1-1: Product: syz [ 200.717884][ T964] usb 1-1: Manufacturer: syz [ 200.722537][ T964] usb 1-1: SerialNumber: syz [ 200.745643][ T964] usb 1-1: config 0 descriptor?? [ 200.928572][ T8974] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1206'. [ 200.990658][ T964] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 201.330877][ T8985] loop2: detected capacity change from 0 to 64 [ 201.378553][ T27] audit: type=1800 audit(1773070106.051:46): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1211" name="file2" dev="loop2" ino=21 res=0 errno=0 [ 201.519989][ T964] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 201.732593][ T8993] nbd2: detected capacity change from 0 to 127 [ 201.752508][ T5769] block nbd2: Receive control failed (result -104) [ 201.974418][ T964] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 201.980654][ T964] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 202.043012][ T9004] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1217'. [ 202.057990][ T27] audit: type=1326 audit(1773070106.721:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.1.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c679c799 code=0x0 [ 202.212769][ T5752] usb 1-1: USB disconnect, device number 11 [ 202.903007][ T9025] loop0: detected capacity change from 0 to 256 [ 203.478838][ T9049] loop3: detected capacity change from 0 to 24 [ 203.489287][ T9049] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 203.534303][ T9049] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 203.703792][ T9052] loop2: detected capacity change from 0 to 512 [ 203.741845][ T9052] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 203.772965][ T9052] EXT4-fs (loop2): invalid journal inode [ 203.793443][ T9052] EXT4-fs (loop2): can't get journal size [ 203.894897][ T9052] EXT4-fs (loop2): 1 truncate cleaned up [ 203.903078][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.053458][ T9041] loop1: detected capacity change from 0 to 32768 [ 204.107425][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.130130][ T9041] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.271472][ T9041] XFS (loop1): Ending clean mount [ 204.327796][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.655254][ T964] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 204.706867][ T9085] loop3: detected capacity change from 0 to 2048 [ 204.729124][ T9085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.845132][ T964] usb 3-1: Using ep0 maxpacket: 16 [ 204.874924][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.901514][ T964] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 204.925270][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.937549][ T964] usb 3-1: config 0 descriptor?? [ 205.252281][ T9101] loop0: detected capacity change from 0 to 64 [ 205.363296][ T964] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 205.389699][ T9103] loop0: detected capacity change from 0 to 512 [ 205.399752][ T9103] FAT-fs (loop0): Directory bread(block 199916) failed [ 205.412342][ T9103] FAT-fs (loop0): Directory bread(block 199917) failed [ 205.420244][ T9103] FAT-fs (loop0): Directory bread(block 199918) failed [ 205.431784][ T9103] FAT-fs (loop0): Directory bread(block 199919) failed [ 205.501926][ T9103] FAT-fs (loop0): Directory bread(block 199920) failed [ 205.509292][ T9103] FAT-fs (loop0): Directory bread(block 199921) failed [ 205.516799][ T9103] FAT-fs (loop0): Directory bread(block 199922) failed [ 205.524594][ T9103] FAT-fs (loop0): Directory bread(block 199923) failed [ 205.592222][ T9103] FAT-fs (loop0): Directory bread(block 199916) failed [ 205.628510][ T9103] FAT-fs (loop0): Directory bread(block 199917) failed [ 205.841618][ T786] usb 3-1: USB disconnect, device number 17 [ 206.074630][ T9123] tipc: Started in network mode [ 206.080086][ T9123] tipc: Node identity ff, cluster identity 4711 [ 206.088740][ T9123] tipc: Enabling of bearer rejected, failed to enable media [ 206.229944][ T9129] loop3: detected capacity change from 0 to 2048 [ 206.255230][ T9129] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 206.275579][ T9129] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 206.324655][ T9129] UDF-fs: Scanning with blocksize 512 failed [ 206.399475][ T9129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.459432][ T9136] binder: 9134:9136 ioctl c018620c 200000000000 returned -22 [ 206.623748][ T9144] loop0: detected capacity change from 0 to 256 [ 206.645986][ T9144] exfat: Deprecated parameter 'namecase' [ 206.651974][ T9144] exfat: Deprecated parameter 'utf8' [ 206.748535][ T9144] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 207.582072][ T9161] loop0: detected capacity change from 0 to 64 [ 207.614959][ T9164] exfat: Deprecated parameter 'utf8' [ 207.638363][ T9164] exfat: Deprecated parameter 'namecase' [ 207.664400][ T9164] exfat: Deprecated parameter 'utf8' [ 207.705444][ T9164] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 208.314040][ T9188] set_capacity_and_notify: 1 callbacks suppressed [ 208.314055][ T9188] loop1: detected capacity change from 0 to 128 [ 208.328880][ T9188] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.364216][ T9188] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.459740][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.553472][ T9194] erspan0: entered promiscuous mode [ 208.825960][ T9204] loop2: detected capacity change from 0 to 128 [ 209.014282][ T5804] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.208827][ T5804] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 209.221927][ T9217] loop2: detected capacity change from 0 to 2048 [ 209.228905][ T5804] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 209.245782][ T5804] usb 4-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 209.261499][ T5804] usb 4-1: config 220 has no interface number 2 [ 209.269755][ T5804] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.287523][ T5804] usb 4-1: config 220 interface 0 has no altsetting 0 [ 209.294696][ T9217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.334185][ T5804] usb 4-1: config 220 interface 76 has no altsetting 0 [ 209.344414][ T5804] usb 4-1: config 220 interface 1 has no altsetting 0 [ 209.354395][ T5804] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.363574][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.372845][ T5804] usb 4-1: Product: syz [ 209.380619][ T5804] usb 4-1: Manufacturer: syz [ 209.385461][ T5804] usb 4-1: SerialNumber: syz [ 209.423629][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.604848][ T5804] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 209.611282][ T5804] usb 4-1: No valid video chain found. [ 209.633837][ T5804] usb 4-1: selecting invalid altsetting 0 [ 209.663981][ T9211] loop0: detected capacity change from 0 to 32768 [ 209.673415][ T5804] usb 4-1: selecting invalid altsetting 0 [ 209.684572][ T5804] usbtest: probe of 4-1:220.1 failed with error -22 [ 209.701733][ T5804] usb 4-1: USB disconnect, device number 11 [ 209.718239][ T9211] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1305 (9211) [ 209.771912][ T9211] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 209.813831][ T9211] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.839347][ T9211] BTRFS info (device loop0): force zlib compression, level 3 [ 209.851500][ T9219] loop1: detected capacity change from 0 to 32768 [ 209.863393][ T9211] BTRFS info (device loop0): force clearing of disk cache [ 209.882190][ T9211] BTRFS info (device loop0): setting nodatasum [ 209.896732][ T9219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1309 (9219) [ 209.900127][ T9211] BTRFS info (device loop0): use zlib compression, level 3 [ 209.934911][ T9211] BTRFS info (device loop0): allowing degraded mounts [ 209.962714][ T9219] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.980454][ T9211] BTRFS info (device loop0): enabling disk space caching [ 209.987577][ T9219] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 209.987640][ T9219] BTRFS info (device loop1): force clearing of disk cache [ 209.987660][ T9219] BTRFS info (device loop1): metadata ratio 0 [ 209.987679][ T9219] BTRFS info (device loop1): enabling ssd optimizations [ 209.987692][ T9219] BTRFS info (device loop1): using spread ssd allocation scheme [ 209.987706][ T9219] BTRFS info (device loop1): using free space tree [ 210.063392][ T9211] BTRFS info (device loop0): disk space caching is enabled [ 210.098595][ T9219] BTRFS info (device loop1): auto enabling async discard [ 210.121325][ T9219] BTRFS info (device loop1): rebuilding free space tree [ 210.289755][ T9211] BTRFS info (device loop0): enabling ssd optimizations [ 210.323719][ T9211] BTRFS info (device loop0): auto enabling async discard [ 210.362976][ T9211] BTRFS info (device loop0): rebuilding free space tree [ 210.385181][ T9211] BTRFS info (device loop0): disabling free space tree [ 210.402816][ T9211] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.423248][ T5762] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.434423][ T9211] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.511715][ T27] audit: type=1800 audit(1773070115.181:48): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1305" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 210.654745][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.667008][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.676931][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.686962][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.696889][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.706848][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.718577][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.728503][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.738446][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.748371][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 210.940951][ T5764] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 211.054605][ T9262] loop3: detected capacity change from 0 to 32768 [ 211.112394][ T9262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1312 (9262) [ 211.175397][ T9262] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.232682][ T9262] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 211.267329][ T9262] BTRFS info (device loop3): turning on sync discard [ 211.274060][ T9262] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 211.336066][ T9262] BTRFS info (device loop3): use zstd compression, level 3 [ 211.344468][ T9262] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 211.414166][ T9262] BTRFS info (device loop3): trying to use backup root at mount time [ 211.422288][ T9262] BTRFS info (device loop3): enabling auto defrag [ 211.477107][ T9262] BTRFS info (device loop3): using free space tree [ 211.565643][ T9275] loop1: detected capacity change from 0 to 4096 [ 211.573275][ T9281] loop2: detected capacity change from 0 to 1024 [ 211.590089][ T9281] hfsplus: invalid length 32517 has been corrected to 255 [ 211.669916][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 211.733209][ T9262] BTRFS error (device loop3): failed to load root extent [ 211.755119][ T9281] hfsplus: invalid length 32517 has been corrected to 255 [ 211.784019][ T9262] BTRFS warning (device loop3): try to load backup roots slot 1 [ 211.804681][ T9281] hfsplus: invalid length 32517 has been corrected to 255 [ 211.830845][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 211.834823][ T9281] hfsplus: b-tree write err: -5, ino 2 [ 211.899288][ T9262] BTRFS warning (device loop3): couldn't read tree root [ 211.924387][ T9262] BTRFS warning (device loop3): try to load backup roots slot 2 [ 211.948820][ T11] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 212.014359][ T9262] BTRFS warning (device loop3): couldn't read tree root [ 212.026529][ T9298] loop0: detected capacity change from 0 to 128 [ 212.046056][ T9262] BTRFS warning (device loop3): try to load backup roots slot 3 [ 212.105313][ T9262] BTRFS info (device loop3): enabling ssd optimizations [ 212.113822][ T9300] loop1: detected capacity change from 0 to 256 [ 212.115578][ T11] hfsplus: b-tree write err: -5, ino 4 [ 212.127033][ T11] hfsplus: b-tree write err: -5, ino 2 [ 212.134601][ T9262] BTRFS info (device loop3): rebuilding free space tree [ 212.254692][ T9262] BTRFS info (device loop3): checking UUID tree [ 212.469157][ T5763] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.572990][ T9312] bridge_slave_0: invalid flags given to default FDB implementation [ 212.677201][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1326'. [ 212.718153][ T11] hfsplus: b-tree write err: -5, ino 25 [ 212.724005][ T11] hfsplus: b-tree write err: -5, ino 4 [ 212.749112][ T11] hfsplus: b-tree write err: -5, ino 2 [ 213.167859][ T9326] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 213.182159][ T9328] program syz.1.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.203496][ T9326] ; already mounted read-only [ 213.211644][ T9326] hpfs: filesystem error: improperly stopped [ 213.243827][ T9326] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 213.270758][ T9326] hpfs: You really don't want any checks? You are crazy... [ 213.280164][ T9326] hpfs: hpfs_map_sector(): read error [ 213.288777][ T9326] hpfs: code page support is disabled [ 213.297312][ T9326] hpfs: hpfs_map_4sectors(): unaligned read [ 213.308942][ T9326] hpfs: hpfs_map_4sectors(): unaligned read [ 213.316538][ T9326] hpfs: filesystem error: unable to find root dir [ 213.360524][ T9326] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 213.595155][ T9334] erspan0: entered promiscuous mode [ 213.713338][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'. [ 213.963658][ T9351] set_capacity_and_notify: 3 callbacks suppressed [ 213.963672][ T9351] loop2: detected capacity change from 0 to 128 [ 214.007029][ T9351] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 214.028668][ T9351] hpfs: filesystem error: improperly stopped [ 214.050679][ T9351] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 214.071258][ T9351] hpfs: You really don't want any checks? You are crazy... [ 214.080703][ T9351] hpfs: hpfs_map_sector(): read error [ 214.087263][ T9351] hpfs: code page support is disabled [ 214.092775][ T9351] hpfs: hpfs_map_4sectors(): unaligned read [ 214.100268][ T9351] hpfs: hpfs_map_4sectors(): unaligned read [ 214.114386][ T9351] hpfs: filesystem error: unable to find root dir [ 214.182357][ T9351] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 214.345218][ T9363] program syz.0.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.447231][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1350'. [ 214.566161][ T9359] loop3: detected capacity change from 0 to 32768 [ 214.587242][ T9359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1348 (9359) [ 214.613155][ T9359] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.643997][ T9359] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 214.661342][ T9359] BTRFS info (device loop3): force clearing of disk cache [ 214.671557][ T9359] BTRFS info (device loop3): metadata ratio 0 [ 214.678229][ T9367] erspan0: entered promiscuous mode [ 214.678418][ T9359] BTRFS info (device loop3): enabling ssd optimizations [ 214.693288][ T9359] BTRFS info (device loop3): using spread ssd allocation scheme [ 214.701814][ T9359] BTRFS info (device loop3): using free space tree [ 214.869182][ T9359] BTRFS info (device loop3): auto enabling async discard [ 214.923816][ T9359] BTRFS info (device loop3): rebuilding free space tree [ 215.221873][ T5763] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.722826][ T9412] loop1: detected capacity change from 0 to 1024 [ 215.819922][ T9416] loop3: detected capacity change from 0 to 1024 [ 215.914474][ T9416] hfsplus: invalid length 32517 has been corrected to 255 [ 215.925349][ T11] hfsplus: b-tree write err: -5, ino 25 [ 215.931329][ T11] hfsplus: b-tree write err: -5, ino 4 [ 215.977402][ T11] hfsplus: b-tree write err: -5, ino 2 [ 216.013190][ T9416] hfsplus: invalid length 32517 has been corrected to 255 [ 216.027191][ T9402] loop0: detected capacity change from 0 to 32768 [ 216.060978][ T9416] hfsplus: invalid length 32517 has been corrected to 255 [ 216.083627][ T9416] hfsplus: b-tree write err: -5, ino 2 [ 216.093816][ T9402] [ 216.093816][ T9402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.093816][ T9402] [ 216.119019][ T42] wlan1: Trigger new scan to find an IBSS to join [ 216.173366][ T11] hfsplus: b-tree write err: -5, ino 4 [ 216.183340][ T42] ERROR: (device loop0): diWrite: ixpxd invalid [ 216.183340][ T42] [ 216.183979][ T11] hfsplus: b-tree write err: -5, ino 2 [ 216.214031][ T42] ERROR: (device loop0): remounting filesystem as read-only [ 216.234187][ T42] ERROR: (device loop0): txCommit: [ 216.234187][ T42] [ 216.241706][ T42] jfs_write_inode: jfs_commit_inode failed! [ 216.268291][ T5764] [ 216.268291][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.268291][ T5764] [ 216.288485][ T5764] [ 216.288485][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.288485][ T5764] [ 217.507265][ T9445] loop3: detected capacity change from 0 to 32768 [ 217.531249][ T9445] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1382 (9445) [ 217.580362][ T9445] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 217.607921][ T9445] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 217.634225][ T9445] BTRFS info (device loop3): force zlib compression, level 3 [ 217.649738][ T9445] BTRFS info (device loop3): force clearing of disk cache [ 217.664518][ T9445] BTRFS info (device loop3): setting nodatasum [ 217.684224][ T9445] BTRFS info (device loop3): use zlib compression, level 3 [ 217.692552][ T9446] loop0: detected capacity change from 0 to 32768 [ 217.711209][ T9445] BTRFS info (device loop3): allowing degraded mounts [ 217.734951][ T9445] BTRFS info (device loop3): enabling disk space caching [ 217.749509][ T27] audit: type=1800 audit(1773070122.421:49): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1383" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 217.752303][ T9445] BTRFS info (device loop3): disk space caching is enabled [ 217.884592][ T786] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 217.930253][ T9445] BTRFS info (device loop3): enabling ssd optimizations [ 217.954287][ T9445] BTRFS info (device loop3): auto enabling async discard [ 217.982816][ T9445] BTRFS info (device loop3): rebuilding free space tree [ 218.043477][ T9445] BTRFS info (device loop3): disabling free space tree [ 218.058731][ T9445] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.071991][ T9445] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.096259][ T786] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 218.105675][ T786] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 218.124252][ T786] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 218.144181][ T786] usb 2-1: config 220 has no interface number 2 [ 218.160494][ T27] audit: type=1800 audit(1773070122.831:50): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1382" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 218.189027][ T786] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 218.202983][ T786] usb 2-1: config 220 interface 0 has no altsetting 0 [ 218.211351][ T786] usb 2-1: config 220 interface 76 has no altsetting 0 [ 218.218768][ T786] usb 2-1: config 220 interface 1 has no altsetting 0 [ 218.229857][ T786] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 218.244967][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.265505][ T786] usb 2-1: Product: syz [ 218.274338][ T786] usb 2-1: Manufacturer: syz [ 218.284255][ T786] usb 2-1: SerialNumber: syz [ 218.397697][ T5763] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 218.549164][ T786] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 218.575636][ T786] usb 2-1: No valid video chain found. [ 218.581218][ T786] usb 2-1: selecting invalid altsetting 0 [ 218.609184][ T786] usb 2-1: selecting invalid altsetting 0 [ 218.624259][ T786] usbtest: probe of 2-1:220.1 failed with error -22 [ 218.664155][ T786] usb 2-1: USB disconnect, device number 13 [ 218.905426][ T9472] loop3: detected capacity change from 0 to 2048 [ 218.945065][ T9472] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.969871][ T9472] NILFS (loop3): mounting unchecked fs [ 219.010710][ T5917] udevd[5917]: incorrect nilfs2 checksum on /dev/loop3 [ 219.023278][ T9472] NILFS (loop3): recovery complete [ 219.033992][ T9475] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.441133][ T9485] macsec0: entered promiscuous mode [ 219.542682][ T9487] loop3: detected capacity change from 0 to 256 [ 220.471919][ T9497] loop3: detected capacity change from 0 to 32768 [ 220.539563][ T9497] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.591413][ T9517] loop1: detected capacity change from 0 to 4096 [ 220.655255][ T9497] XFS (loop3): Ending clean mount [ 220.663837][ T9524] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.686316][ T9526] loop0: detected capacity change from 0 to 256 [ 220.956171][ T5763] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.054519][ T4368] wlan1: Trigger new scan to find an IBSS to join [ 221.532889][ T9536] loop1: detected capacity change from 0 to 4096 [ 221.561102][ T9536] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 221.619087][ T9536] ntfs3: loop1: Inode r=19 is not in use! [ 221.638841][ T9536] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.658144][ T9531] loop0: detected capacity change from 0 to 40427 [ 221.660893][ T9536] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 221.677003][ T9531] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 221.703007][ T9531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.762976][ T9531] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.862235][ T9531] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.874418][ T9531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.993174][ T65] wlan1: Creating new IBSS network, BSSID e6:19:c3:90:c9:88 [ 222.422695][ T9551] loop3: detected capacity change from 0 to 512 [ 222.525423][ T9551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.719043][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.734520][ T9561] loop1: detected capacity change from 0 to 128 [ 222.769658][ T9561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.811335][ T9563] loop2: detected capacity change from 0 to 256 [ 222.848891][ T9561] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.900369][ T9563] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 223.120705][ T5762] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.282162][ T9576] netlink: 'syz.1.1424': attribute type 25 has an invalid length. [ 223.301849][ T9576] netlink: 'syz.1.1424': attribute type 28 has an invalid length. [ 223.469996][ T9584] loop2: detected capacity change from 0 to 1024 [ 223.526296][ T27] audit: type=1800 audit(1773070128.201:51): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1429" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 223.582795][ T27] audit: type=1800 audit(1773070128.201:52): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1429" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 223.616121][ T3504] hfsplus: b-tree write err: -5, ino 25 [ 223.622002][ T3504] hfsplus: b-tree write err: -5, ino 4 [ 223.632005][ T3504] hfsplus: b-tree write err: -5, ino 2 [ 223.642444][ T3504] hfsplus: b-tree write err: -5, ino 20 [ 223.899344][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 223.919117][ T9601] ip6gre1: entered promiscuous mode [ 223.934516][ T9601] ip6gre1: entered allmulticast mode [ 223.944268][ T3504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.963003][ T3504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.972690][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.042691][ T9605] program syz.0.1438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.364494][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.478995][ T5766] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 224.675739][ T5766] usb 3-1: config 0 has no interfaces? [ 224.681298][ T5766] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 224.704148][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.726113][ T5766] usb 3-1: config 0 descriptor?? [ 224.894431][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.940658][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.959922][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.969794][ T5752] usb 3-1: USB disconnect, device number 18 [ 225.306799][ T9633] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.333579][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.344222][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.359257][ T9633] bridge0: entered allmulticast mode [ 225.554228][ T5752] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 225.650547][ T9647] loop0: detected capacity change from 0 to 1764 [ 225.734200][ T5766] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.736359][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.760557][ T5752] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 225.770333][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.770715][ T9649] loop0: detected capacity change from 0 to 16 [ 225.781106][ T5752] usb 3-1: config 0 descriptor?? [ 225.826857][ T5769] Bluetooth: hci4: urb ffff88802c7ed000 submission failed (2) [ 225.847144][ T9649] erofs: (device loop0): mounted with root inode @ nid 36. [ 225.915928][ T5766] usb 2-1: Using ep0 maxpacket: 32 [ 225.928167][ T5766] usb 2-1: string descriptor 0 read error: -22 [ 225.934712][ T5766] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 225.943942][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.976230][ T5766] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.988559][ T5766] usb 2-1: MIDIStreaming interface descriptor not found [ 226.020524][ T5752] usb 3-1: USB disconnect, device number 19 [ 226.220761][ T28] usb 2-1: USB disconnect, device number 14 [ 226.328214][ T9659] program syz.0.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.861045][ T9673] loop0: detected capacity change from 0 to 8 [ 227.083532][ T9681] loop0: detected capacity change from 0 to 16 [ 227.115661][ T9681] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 227.157728][ T24] block nbd0: Possible stuck request ffff888022160000: control (read@0,1024B). Runtime 30 seconds [ 227.171782][ T24] block nbd0: Possible stuck request ffff888022160200: control (read@1024,1024B). Runtime 30 seconds [ 227.183436][ T24] block nbd0: Possible stuck request ffff888022160400: control (read@2048,1024B). Runtime 30 seconds [ 227.195796][ T24] block nbd0: Possible stuck request ffff888022160600: control (read@3072,1024B). Runtime 30 seconds [ 227.351006][ T9685] loop1: detected capacity change from 0 to 512 [ 227.400011][ T9685] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 227.463116][ T9685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.479651][ T9685] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 227.494303][ T9685] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 227.536941][ T9685] EXT4-fs (loop1): 1 truncate cleaned up [ 227.566873][ T9685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.678136][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.790050][ T5752] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.986226][ T5752] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.009898][ T5752] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.038425][ T5752] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.070436][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.110577][ T9691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.147396][ T5752] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 228.230410][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 228.334458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.470050][ T9716] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.487595][ T5766] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 228.541678][ T23] usb 1-1: USB disconnect, device number 12 [ 228.648667][ T9718] netlink: 'syz.1.1487': attribute type 7 has an invalid length. [ 228.659221][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 228.684612][ T5766] usb 3-1: Using ep0 maxpacket: 16 [ 228.691932][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.707786][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.727716][ T5766] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.751292][ T5766] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.759461][ T9724] sctp: [Deprecated]: syz.1.1490 (pid 9724) Use of int in max_burst socket option deprecated. [ 228.759461][ T9724] Use struct sctp_assoc_value instead [ 228.761085][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.810126][ T5766] usb 3-1: config 0 descriptor?? [ 228.979240][ T9730] Bluetooth: MGMT ver 1.22 [ 229.283352][ T5766] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input23 [ 229.331304][ T5766] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 229.601274][ T5766] usb 3-1: USB disconnect, device number 20 [ 229.727925][ T9750] loop1: detected capacity change from 0 to 1024 [ 229.960391][ T65] hfsplus: b-tree write err: -5, ino 3 [ 230.378178][ T9764] loop0: detected capacity change from 0 to 256 [ 230.425243][ T9764] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 230.470041][ T9767] loop2: detected capacity change from 0 to 256 [ 230.500355][ T9767] exfat: Deprecated parameter 'utf8' [ 230.507233][ T9768] loop1: detected capacity change from 0 to 512 [ 230.537495][ T9767] exfat: Deprecated parameter 'utf8' [ 230.542886][ T9767] exfat: Deprecated parameter 'utf8' [ 230.622765][ T9768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.626785][ T9767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 230.654210][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 230.880292][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.974894][ T1169] block nbd1: Possible stuck request ffff888022228000: control (read@0,1024B). Runtime 30 seconds [ 230.985682][ T1169] block nbd1: Possible stuck request ffff888022228200: control (read@1024,1024B). Runtime 30 seconds [ 230.997751][ T1169] block nbd1: Possible stuck request ffff888022228400: control (read@2048,1024B). Runtime 30 seconds [ 231.009003][ T1169] block nbd1: Possible stuck request ffff888022228600: control (read@3072,1024B). Runtime 30 seconds [ 231.175773][ T9775] loop0: detected capacity change from 0 to 8192 [ 231.253358][ T9775] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.294470][ T9775] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 231.304071][ T9775] REISERFS (device loop0): using ordered data mode [ 231.311150][ T9775] reiserfs: using flush barriers [ 231.404286][ T9775] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.445967][ T9775] REISERFS (device loop0): checking transaction log (loop0) [ 231.558036][ T9791] loop1: detected capacity change from 0 to 64 [ 231.665600][ T9775] REISERFS (device loop0): Using tea hash to sort names [ 231.708443][ T9775] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 232.276041][ T24] block nbd2: Possible stuck request ffff888022288000: control (read@0,1024B). Runtime 30 seconds [ 232.287623][ T24] block nbd2: Possible stuck request ffff888022288200: control (read@1024,1024B). Runtime 30 seconds [ 232.300199][ T24] block nbd2: Possible stuck request ffff888022288400: control (read@2048,1024B). Runtime 30 seconds [ 232.312349][ T24] block nbd2: Possible stuck request ffff888022288600: control (read@3072,1024B). Runtime 30 seconds [ 232.396697][ T9770] loop3: detected capacity change from 0 to 40427 [ 232.477682][ T9770] F2FS-fs (loop3): invalid crc value [ 232.547563][ T9770] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.865150][ T9770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.075671][ T5763] syz-executor: attempt to access beyond end of device [ 233.075671][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.127928][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 233.180632][ T9828] loop1: detected capacity change from 0 to 8192 [ 233.253012][ T9836] loop2: detected capacity change from 0 to 256 [ 234.348170][ T9843] loop2: detected capacity change from 0 to 32768 [ 234.361569][ T9848] loop1: detected capacity change from 0 to 32768 [ 234.394432][ T9843] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.476346][ T9846] loop0: detected capacity change from 0 to 40427 [ 234.488429][ T9846] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 234.504206][ T9846] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.523200][ T9843] XFS (loop2): Ending clean mount [ 234.543212][ T9846] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.747685][ T9846] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 234.776713][ T9846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.827037][ T5765] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 235.046354][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.136044][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 235.255093][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 235.270100][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 235.278914][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.299593][ T28] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.310530][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.337631][ T28] usb 2-1: Product: syz [ 235.344880][ T28] usb 2-1: Manufacturer: syz [ 235.349524][ T28] usb 2-1: SerialNumber: syz [ 235.363948][ T9874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1547'. [ 235.370665][ T28] usb 2-1: config 0 descriptor?? [ 235.387492][ T28] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.404558][ T28] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 236.104409][ T5766] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 236.310822][ T5766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.321428][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 236.337524][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.353338][ T5766] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 236.359838][ T9880] loop2: detected capacity change from 0 to 131072 [ 236.380457][ T5766] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.384771][ T9880] F2FS-fs (loop2): invalid crc value [ 236.406668][ T9880] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.406862][ T5766] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.423840][ T5766] usb 4-1: Manufacturer: syz [ 236.433027][ T5766] usb 4-1: config 0 descriptor?? [ 236.447981][ T28] em28xx 2-1:0.0: chip ID is em2874 [ 236.459782][ T9880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 236.735553][ T28] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 236.743698][ T28] em28xx 2-1:0.0: board has no eeprom [ 236.773046][ T9891] loop0: detected capacity change from 0 to 4096 [ 236.807333][ T5766] rc_core: IR keymap rc-hauppauge not found [ 236.816561][ T5082] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 236.833310][ T5766] Registered IR keymap rc-empty [ 236.844297][ T28] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 236.844485][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.862368][ T28] em28xx 2-1:0.0: dvb set to bulk mode. [ 236.885917][ T23] em28xx 2-1:0.0: Binding DVB extension [ 236.915043][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.922696][ T28] usb 2-1: USB disconnect, device number 15 [ 236.945884][ T28] em28xx 2-1:0.0: Disconnecting em28xx [ 236.955295][ T5766] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 237.006208][ T5766] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 237.042925][ T23] em28xx 2-1:0.0: Registering input extension [ 237.044313][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.104368][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.134591][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.144770][ T23] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 237.159448][ T23] Registered IR keymap rc-empty [ 237.171204][ T23] rc rc1: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 237.174463][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.204790][ T23] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input25 [ 237.245527][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.255352][ T23] em28xx 2-1:0.0: Input extension successfully initialized [ 237.270928][ T28] em28xx 2-1:0.0: Closing input extension [ 237.296055][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.344499][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.357906][ T28] em28xx 2-1:0.0: Freeing device [ 237.374330][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.384241][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.443487][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.494641][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.534436][ T5766] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.565837][ T5766] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 237.605053][ T5766] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.648034][ T5766] usb 4-1: USB disconnect, device number 12 [ 237.663072][ T9901] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1558'. [ 238.154299][ T5804] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 238.268051][ T9924] loop3: detected capacity change from 0 to 1024 [ 238.285810][ T9926] loop1: detected capacity change from 0 to 2048 [ 238.321039][ T9926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.336271][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 238.360223][ T5804] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 238.389401][ T5804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.435084][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.465424][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.468244][ T4368] hfsplus: b-tree write err: -5, ino 8 [ 238.497274][ T5804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.519620][ T5804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.559598][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.693141][ T9930] loop3: detected capacity change from 0 to 256 [ 238.723546][ T9932] batadv_slave_1: entered allmulticast mode [ 238.747218][ T9932] batadv_slave_1: left allmulticast mode [ 238.769016][ T9921] loop0: detected capacity change from 0 to 32768 [ 238.781507][ T9930] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 238.844527][ T5804] usb 3-1: GET_CAPABILITIES returned 0 [ 238.857878][ T5804] usbtmc 3-1:16.0: can't read capabilities [ 238.927237][ T9934] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 239.045015][ T9910] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 239.076488][ T5804] usb 3-1: USB disconnect, device number 21 [ 239.112746][ T9940] loop1: detected capacity change from 0 to 64 [ 239.231276][ T9940] hfs: request for non-existent node 131072 in B*Tree [ 239.237108][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 239.250587][ T9940] hfs: request for non-existent node 131072 in B*Tree [ 239.402932][ T9946] loop0: detected capacity change from 0 to 512 [ 239.430207][ T9946] EXT4-fs: Ignoring removed oldalloc option [ 239.483379][ T9946] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1580: Parent and EA inode have the same ino 15 [ 239.552287][ T9946] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1580: Parent and EA inode have the same ino 15 [ 239.577852][ T5766] kernel write not supported for file /dsp (pid: 5766 comm: kworker/0:3) [ 239.631347][ T9946] EXT4-fs (loop0): 1 orphan inode deleted [ 239.665349][ T9946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.691734][ T9956] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 239.739023][ T9946] EXT4-fs error (device loop0): ext4_rename:3859: inode #15: comm syz.0.1580: target of rename is already freed [ 239.901424][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.013514][ T9967] loop1: detected capacity change from 0 to 128 [ 240.320631][ T9975] program syz.1.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.345213][ T9979] program syz.3.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.506640][ T9986] loop1: detected capacity change from 0 to 256 [ 240.536122][ T9986] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.550283][ T9986] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 240.639650][ T9986] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 240.742883][ T9990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.772993][ T9990] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 240.783236][ T9990] REISERFS (device loop3): using ordered data mode [ 240.792180][ T9990] reiserfs: using flush barriers [ 240.800800][ T9990] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.820547][ T9992] hfsplus: bad catalog entry type [ 240.827552][ T9990] REISERFS (device loop3): checking transaction log (loop3) [ 240.908410][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 240.919568][ T5082] Bluetooth: hci1: Injecting HCI hardware error event [ 240.930550][ T5769] Bluetooth: hci1: hardware error 0x00 [ 240.979317][ T65] hfsplus: b-tree write err: -5, ino 25 [ 241.008135][ T65] hfsplus: b-tree write err: -5, ino 4 [ 241.024297][ T9990] REISERFS (device loop3): Using tea hash to sort names [ 241.031623][ T9990] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 241.034230][ T65] hfsplus: b-tree write err: -5, ino 2 [ 241.558311][T10005] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 241.567237][T10005] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 241.578387][T10005] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 241.598098][T10005] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 241.916520][T10013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1606'. [ 242.016372][T10017] set_capacity_and_notify: 2 callbacks suppressed [ 242.016387][T10017] loop3: detected capacity change from 0 to 1024 [ 242.057022][T10017] EXT4-fs: Ignoring removed nobh option [ 242.066401][T10017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.152544][T10017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 242.157641][T10019] loop1: detected capacity change from 0 to 128 [ 242.185434][T10017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.294060][T10019] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 242.355298][T10019] hpfs: filesystem error: improperly stopped [ 242.361343][T10019] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 242.406406][T10019] hpfs: You really don't want any checks? You are crazy... [ 242.406751][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.414003][T10019] hpfs: hpfs_map_sector(): read error [ 242.478381][T10019] hpfs: code page support is disabled [ 242.483987][T10019] hpfs: hpfs_map_4sectors(): unaligned read [ 242.500983][T10019] hpfs: hpfs_map_4sectors(): unaligned read [ 242.523277][T10019] hpfs: filesystem error: unable to find root dir [ 242.633212][T10019] hpfs: hpfs_map_4sectors(): unaligned read [ 242.673874][T10019] hpfs: hpfs_map_sector(): read error [ 242.737170][T10031] loop2: detected capacity change from 0 to 8192 [ 242.810776][T10031] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.844216][T10031] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 242.881088][T10031] REISERFS (device loop2): using ordered data mode [ 242.913842][T10031] reiserfs: using flush barriers [ 242.924448][T10031] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.941453][T10031] REISERFS (device loop2): checking transaction log (loop2) [ 242.983173][T10038] loop0: detected capacity change from 0 to 512 [ 243.051039][T10038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.052955][T10041] loop3: detected capacity change from 0 to 256 [ 243.070987][ T5769] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 243.135679][T10038] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.147297][T10031] REISERFS (device loop2): Using tea hash to sort names [ 243.198953][T10031] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 243.338753][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.453303][T10048] loop0: detected capacity change from 0 to 136 [ 243.575461][T10048] rock: directory entry would overflow storage [ 243.606798][T10048] rock: sig=0x4f50, size=4, remaining=3 [ 243.626819][T10048] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 244.231669][T10062] loop2: detected capacity change from 0 to 512 [ 244.273492][T10052] loop3: detected capacity change from 0 to 32768 [ 244.280294][T10062] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 244.368902][T10052] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.372656][T10062] EXT4-fs (loop2): 1 truncate cleaned up [ 244.396350][T10062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.489623][T10052] XFS (loop3): Ending clean mount [ 244.517544][T10062] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1625: invalid indirect mapped block 4294901760 (level 0) [ 244.555043][T10062] EXT4-fs (loop2): Remounting filesystem read-only [ 244.636434][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.654805][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.808653][T10085] loop0: detected capacity change from 0 to 64 [ 244.823313][T10083] loop2: detected capacity change from 0 to 128 [ 245.652501][T10087] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.737873][T10110] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.770560][T10087] XFS (loop1): Ending clean mount [ 245.810435][T10110] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.831613][T10093] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 245.836030][T10087] XFS (loop1): Quotacheck needed: Please wait. [ 245.849477][T10093] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 245.931517][T10093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 245.975265][T10087] XFS (loop1): Quotacheck: Done. [ 246.095551][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.110233][ T27] audit: type=1326 audit(1773070150.791:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.0.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e29f9c799 code=0x7fc00000 [ 246.174850][T10093] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 246.204263][T10093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.246622][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.324373][T10120] ISOFS: unable to read i-node block [ 246.374557][T10120] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 246.551501][ T3504] hfsplus: b-tree write err: -5, ino 3 [ 247.046599][T10124] read_mapping_page failed! [ 247.052749][T10124] ERROR: (device loop3): txCommit: [ 247.052749][T10124] [ 247.370867][T10140] set_capacity_and_notify: 6 callbacks suppressed [ 247.370882][T10140] loop2: detected capacity change from 0 to 2048 [ 247.454531][T10140] loop2: p1 < > p3 [ 247.485568][T10140] loop2: p3 size 134217728 extends beyond EOD, truncated [ 247.737770][T10146] loop3: detected capacity change from 0 to 4096 [ 247.883074][ T9867] udevd[9867]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 247.899905][ T5917] udevd[5917]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 248.178138][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 248.256448][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 248.499652][T10164] loop3: detected capacity change from 0 to 512 [ 248.526317][T10164] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 248.533085][T10166] loop2: detected capacity change from 0 to 24 [ 248.544532][T10164] EXT4-fs (loop3): invalid journal inode [ 248.570508][T10166] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 248.577488][T10164] EXT4-fs (loop3): can't get journal size [ 248.607139][T10166] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 248.646454][T10164] EXT4-fs (loop3): 1 truncate cleaned up [ 248.653459][T10164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.821400][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.041927][T10182] loop3: detected capacity change from 0 to 256 [ 249.175184][ T786] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 249.376594][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 249.389075][ T786] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.407525][ T786] usb 3-1: config 0 has no interface number 0 [ 249.429623][ T786] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.457956][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.486590][ T786] usb 3-1: Product: syz [ 249.490807][ T786] usb 3-1: Manufacturer: syz [ 249.512479][ T786] usb 3-1: SerialNumber: syz [ 249.533621][ T786] usb 3-1: config 0 descriptor?? [ 249.557629][ T786] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.588902][T10199] input: syz1 as /devices/virtual/input/input26 [ 249.745227][T10204] loop0: detected capacity change from 0 to 2048 [ 249.762900][T10204] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 249.780684][ T786] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.792257][T10204] NILFS (loop0): mounting unchecked fs [ 249.822994][ T786] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.861035][T10204] NILFS (loop0): recovery complete [ 249.878229][T10207] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.908213][ T28] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 250.118788][ T28] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.130686][ T28] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.141244][ T28] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.151423][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.174363][T10200] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 250.198086][ T28] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 250.262995][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.264303][ T8] usb 3-1: USB disconnect, device number 22 [ 250.319916][T10215] program syz.3.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.333402][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.391773][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.439774][ T8] quatech2 3-1:0.51: device disconnected [ 250.737564][ T28] usb 2-1: USB disconnect, device number 16 [ 250.740858][T10225] loop3: detected capacity change from 0 to 512 [ 250.828072][T10225] EXT4-fs (loop3): 1 truncate cleaned up [ 250.837035][T10225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.967311][ T27] audit: type=1800 audit(1773070155.641:54): pid=10225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1697" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 251.042104][T10225] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1697: bg 0: block 465: padding at end of block bitmap is not set [ 251.124799][T10225] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 251.170131][T10225] EXT4-fs (loop3): This should not happen!! Data will be lost [ 251.170131][T10225] [ 251.204168][T10225] EXT4-fs (loop3): Total free blocks count 0 [ 251.224186][T10225] EXT4-fs (loop3): Free/Dirty block details [ 251.230287][T10225] EXT4-fs (loop3): free_blocks=0 [ 251.260324][T10225] EXT4-fs (loop3): dirty_blocks=10 [ 251.274200][T10225] EXT4-fs (loop3): Block reservation details [ 251.284803][T10225] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 251.406743][T10232] loop2: detected capacity change from 0 to 32768 [ 251.473811][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.019058][ T1131] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.829368][T10280] loop1: detected capacity change from 0 to 24 [ 252.853510][T10266] loop2: detected capacity change from 0 to 32768 [ 252.861106][T10280] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 252.910167][T10280] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 252.965456][T10266] JBD2: Ignoring recovery information on journal [ 253.085744][T10266] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.203844][T10293] [ 253.206208][T10293] ====================================================== [ 253.213248][T10293] WARNING: possible circular locking dependency detected [ 253.220290][T10293] syzkaller #0 Not tainted [ 253.224711][T10293] ------------------------------------------------------ [ 253.231730][T10293] syz.2.1709/10293 is trying to acquire lock: [ 253.237796][T10293] ffff88805b1fdf58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 253.251038][T10293] [ 253.251038][T10293] but task is already holding lock: [ 253.255760][T10292] loop1: detected capacity change from 0 to 512 [ 253.258378][T10293] ffff88805b302378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 253.274121][T10293] [ 253.274121][T10293] which lock already depends on the new lock. [ 253.274121][T10293] [ 253.284527][T10293] [ 253.284527][T10293] the existing dependency chain (in reverse order) is: [ 253.293531][T10293] [ 253.293531][T10293] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 253.301342][T10293] down_read+0x46/0x2e0 [ 253.306010][T10293] ocfs2_init_acl+0x30a/0x770 [ 253.311192][T10293] ocfs2_mknod+0x140f/0x2300 [ 253.316290][T10293] ocfs2_mkdir+0x196/0x430 [ 253.321213][T10293] vfs_mkdir+0x296/0x440 [ 253.325978][T10293] do_mkdirat+0x1dc/0x450 [ 253.330830][T10293] __x64_sys_mkdirat+0x89/0xa0 [ 253.336125][T10293] do_syscall_64+0x55/0xa0 [ 253.341055][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.347549][T10293] [ 253.347549][T10293] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 253.356067][T10293] down_read+0x46/0x2e0 [ 253.360736][T10293] ocfs2_start_trans+0x3a8/0x6f0 [ 253.366181][T10293] ocfs2_symlink+0x114f/0x2700 [ 253.371452][T10293] vfs_symlink+0x138/0x2b0 [ 253.376383][T10293] do_symlinkat+0x1ba/0x400 [ 253.381395][T10293] __x64_sys_symlinkat+0x99/0xb0 [ 253.386840][T10293] do_syscall_64+0x55/0xa0 [ 253.391857][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.398258][T10293] [ 253.398258][T10293] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 253.405730][T10293] ocfs2_start_trans+0x2a9/0x6f0 [ 253.411171][T10293] ocfs2_symlink+0x114f/0x2700 [ 253.416458][T10293] vfs_symlink+0x138/0x2b0 [ 253.421396][T10293] do_symlinkat+0x1ba/0x400 [ 253.426401][T10293] __x64_sys_symlinkat+0x99/0xb0 [ 253.431843][T10293] do_syscall_64+0x55/0xa0 [ 253.436767][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.443173][T10293] [ 253.443173][T10293] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 253.453685][T10293] down_write+0x97/0x200 [ 253.458441][T10293] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 253.465111][T10293] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 253.471955][T10293] ocfs2_mknod+0xebb/0x2300 [ 253.476962][T10293] ocfs2_create+0x196/0x430 [ 253.481992][T10293] path_openat+0x12a0/0x3230 [ 253.487103][T10293] do_filp_open+0x1f5/0x430 [ 253.492137][T10293] do_sys_openat2+0x134/0x1d0 [ 253.497337][T10293] __x64_sys_openat+0x139/0x160 [ 253.502701][T10293] do_syscall_64+0x55/0xa0 [ 253.507634][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.514050][T10293] [ 253.514050][T10293] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 253.524582][T10293] __lock_acquire+0x2df1/0x7d40 [ 253.529942][T10293] lock_acquire+0x19e/0x420 [ 253.534950][T10293] down_write+0x97/0x200 [ 253.539699][T10293] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 253.546104][T10293] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 253.552949][T10293] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 253.559185][T10293] ocfs2_xattr_set+0xc3f/0x13e0 [ 253.564547][T10293] __vfs_setxattr+0x431/0x470 [ 253.569731][T10293] __vfs_setxattr_noperm+0x12d/0x5e0 [ 253.575537][T10293] vfs_setxattr+0x16b/0x2f0 [ 253.580570][T10293] path_setxattr+0x3f3/0x5d0 [ 253.585681][T10293] __x64_sys_setxattr+0xbb/0xd0 [ 253.591041][T10293] do_syscall_64+0x55/0xa0 [ 253.595971][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.602373][T10293] [ 253.602373][T10293] other info that might help us debug this: [ 253.602373][T10293] [ 253.612601][T10293] Chain exists of: [ 253.612601][T10293] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 253.612601][T10293] [ 253.629560][T10293] Possible unsafe locking scenario: [ 253.629560][T10293] [ 253.637185][T10293] CPU0 CPU1 [ 253.642534][T10293] ---- ---- [ 253.647907][T10293] lock(&oi->ip_xattr_sem); [ 253.652488][T10293] lock(&journal->j_trans_barrier); [ 253.660281][T10293] lock(&oi->ip_xattr_sem); [ 253.667403][T10293] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 253.674682][T10293] [ 253.674682][T10293] *** DEADLOCK *** [ 253.674682][T10293] [ 253.682808][T10293] 3 locks held by syz.2.1709/10293: [ 253.687988][T10293] #0: ffff888031ed2418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 253.697212][T10293] #1: ffff88805b302658 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 253.707641][T10293] #2: ffff88805b302378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 253.717544][T10293] [ 253.717544][T10293] stack backtrace: [ 253.723427][T10293] CPU: 0 PID: 10293 Comm: syz.2.1709 Not tainted syzkaller #0 [ 253.730875][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.740928][T10293] Call Trace: [ 253.744201][T10293] [ 253.747211][T10293] dump_stack_lvl+0x18c/0x250 [ 253.751883][T10293] ? load_image+0x400/0x400 [ 253.756380][T10293] ? show_regs_print_info+0x20/0x20 [ 253.761580][T10293] ? print_circular_bug+0x12b/0x1a0 [ 253.766769][T10293] check_noncircular+0x2fc/0x400 [ 253.771690][T10293] ? print_deadlock_bug+0x5d0/0x5d0 [ 253.776960][T10293] ? lockdep_lock+0xf5/0x230 [ 253.781536][T10293] ? _find_first_zero_bit+0xd3/0x100 [ 253.786806][T10293] __lock_acquire+0x2df1/0x7d40 [ 253.791651][T10293] ? __lock_acquire+0x7d40/0x7d40 [ 253.796660][T10293] ? verify_lock_unused+0x140/0x140 [ 253.801845][T10293] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 253.807552][T10293] ? do_raw_spin_lock+0x11f/0x2c0 [ 253.812562][T10293] ? mutex_unlock+0x10/0x10 [ 253.817054][T10293] lock_acquire+0x19e/0x420 [ 253.821544][T10293] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 253.827602][T10293] ? ocfs2_get_system_file_inode+0x202/0x850 [ 253.833571][T10293] ? __might_sleep+0xe0/0xe0 [ 253.838170][T10293] ? read_lock_is_recursive+0x20/0x20 [ 253.843543][T10293] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 253.849689][T10293] ? verify_lock_unused+0x140/0x140 [ 253.854878][T10293] down_write+0x97/0x200 [ 253.859108][T10293] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 253.865173][T10293] ? down_read_killable+0x340/0x340 [ 253.870360][T10293] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 253.876249][T10293] ? mark_lock+0x94/0x320 [ 253.880566][T10293] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 253.886529][T10293] ? lock_chain_count+0x20/0x20 [ 253.891361][T10293] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 253.897243][T10293] ? lockdep_hardirqs_on+0x98/0x150 [ 253.902433][T10293] ? ocfs2_block_group_search+0x470/0x470 [ 253.908139][T10293] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 253.914016][T10293] ? _raw_spin_unlock+0x40/0x40 [ 253.918853][T10293] ? stack_trace_save+0xaa/0x100 [ 253.923777][T10293] ? stack_trace_snprint+0xf0/0xf0 [ 253.928877][T10293] ? __stack_depot_save+0x560/0x630 [ 253.934062][T10293] ? kasan_set_track+0x5f/0x70 [ 253.938813][T10293] ? kasan_set_track+0x4e/0x70 [ 253.943557][T10293] ? __kasan_kmalloc+0x8f/0xa0 [ 253.948306][T10293] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 253.954797][T10293] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 253.960593][T10293] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 253.965612][T10293] ? __vfs_setxattr+0x431/0x470 [ 253.970455][T10293] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 253.975896][T10293] ? vfs_setxattr+0x16b/0x2f0 [ 253.980557][T10293] ? path_setxattr+0x3f3/0x5d0 [ 253.985305][T10293] ? __x64_sys_setxattr+0xbb/0xd0 [ 253.990317][T10293] ? do_syscall_64+0x55/0xa0 [ 253.994915][T10293] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.000996][T10293] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 254.007322][T10293] ? ocfs2_init_steal_slots+0x160/0x160 [ 254.012858][T10293] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 254.018526][T10293] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 254.024148][T10293] ? ocfs2_xattr_set+0xc05/0x13e0 [ 254.029160][T10293] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 254.035214][T10293] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 254.041452][T10293] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 254.047333][T10293] ? down_write+0x16e/0x200 [ 254.051820][T10293] ? down_read_killable+0x340/0x340 [ 254.057024][T10293] ? up_write+0x1c3/0x410 [ 254.061340][T10293] ocfs2_xattr_set+0xc3f/0x13e0 [ 254.066188][T10293] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 254.071898][T10293] ? __lock_acquire+0x1347/0x7d40 [ 254.076908][T10293] ? verify_lock_unused+0x140/0x140 [ 254.082094][T10293] ? aa_get_newest_label+0xfd/0x5c0 [ 254.087278][T10293] ? end_current_label_crit_section+0x170/0x170 [ 254.093507][T10293] ? evm_protected_xattr_common+0x170/0x190 [ 254.099395][T10293] ? ocfs2_xattr_security_get+0x40/0x40 [ 254.104928][T10293] __vfs_setxattr+0x431/0x470 [ 254.109592][T10293] __vfs_setxattr_noperm+0x12d/0x5e0 [ 254.114865][T10293] vfs_setxattr+0x16b/0x2f0 [ 254.119375][T10293] ? xattr_permission+0x470/0x470 [ 254.124419][T10293] ? __mnt_want_write+0x223/0x2a0 [ 254.129444][T10293] ? path_setxattr+0x3a1/0x5d0 [ 254.134200][T10293] path_setxattr+0x3f3/0x5d0 [ 254.138790][T10293] ? simple_xattrs_free+0x150/0x150 [ 254.143987][T10293] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 254.150043][T10293] ? lock_chain_count+0x20/0x20 [ 254.154881][T10293] __x64_sys_setxattr+0xbb/0xd0 [ 254.159720][T10293] do_syscall_64+0x55/0xa0 [ 254.164129][T10293] ? clear_bhb_loop+0x40/0x90 [ 254.168796][T10293] ? clear_bhb_loop+0x40/0x90 [ 254.173466][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.179346][T10293] RIP: 0033:0x7f05cd79c799 [ 254.183767][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.203366][T10293] RSP: 002b:00007f05ce592028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 254.211768][T10293] RAX: ffffffffffffffda RBX: 00007f05cda16090 RCX: 00007f05cd79c799 [ 254.219728][T10293] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 00002000000001c0 [ 254.227686][T10293] RBP: 00007f05cd832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 254.235647][T10293] R10: 000000000000002d R11: 0000000000000246 R12: 0000000000000000 [ 254.243611][T10293] R13: 00007f05cda16128 R14: 00007f05cda16090 R15: 00007fffc8970b28 [ 254.251581][T10293] [ 254.267663][ T5766] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.275666][T10292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 254.285883][T10292] System zones: 1-12 [ 254.290295][T10292] EXT4-fs (loop1): orphan cleanup on readonly fs [ 254.296853][T10292] EXT4-fs (loop1): ext4_process_orphan: truncating inode 11 to 99999999 bytes [ 254.307512][T10292] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.1719: invalid block [ 254.320156][T10292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1719: invalid indirect mapped block 8 (level 2) [ 254.335399][T10292] EXT4-fs (loop1): 1 truncate cleaned up [ 254.342014][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 254.342057][T10292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 254.410698][T10292] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 5: comm syz.1.1719: lblock 0 mapped to illegal pblock 5 (length 1) [ 254.426047][T10292] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1719: error -117 reading directory block [ 254.442125][T10292] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 5: comm syz.1.1719: lblock 0 mapped to illegal pblock 5 (length 1) [ 254.458043][T10292] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1719: error -117 reading directory block [ 254.496891][ T5766] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.506457][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.515714][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.533623][ T5766] usb 1-1: config 0 descriptor?? [ 254.548231][ T5766] cp210x 1-1:0.0: cp210x converter detected [ 254.946611][ T5766] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 254.957655][ T5766] usb 1-1: cp210x converter now attached to ttyUSB0 [ 255.157748][ T23] usb 1-1: USB disconnect, device number 13 [ 255.168215][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.176990][ T23] cp210x 1-1:0.0: device disconnected [ 255.294308][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.936477][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.942861][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.216457][ T24] block nbd0: Possible stuck request ffff888022160000: control (read@0,1024B). Runtime 60 seconds [ 257.227918][ T24] block nbd0: Possible stuck request ffff888022160200: control (read@1024,1024B). Runtime 60 seconds [ 257.239304][ T24] block nbd0: Possible stuck request ffff888022160400: control (read@2048,1024B). Runtime 60 seconds [ 257.250333][ T24] block nbd0: Possible stuck request ffff888022160600: control (read@3072,1024B). Runtime 60 seconds [ 258.687813][ T5137] udevd[5137]: worker [5757] /devices/virtual/block/nbd0 is taking a long time [ 261.074186][ T1169] block nbd1: Possible stuck request ffff888022228000: control (read@0,1024B). Runtime 60 seconds [ 261.085295][ T1169] block nbd1: Possible stuck request ffff888022228200: control (read@1024,1024B). Runtime 60 seconds [ 261.096324][ T1169] block nbd1: Possible stuck request ffff888022228400: control (read@2048,1024B). Runtime 60 seconds [ 261.107327][ T1169] block nbd1: Possible stuck request ffff888022228600: control (read@3072,1024B). Runtime 60 seconds [ 261.702051][ T5137] udevd[5137]: worker [6347] /devices/virtual/block/nbd1 is taking a long time [ 262.335083][ T24] block nbd2: Possible stuck request ffff888022288000: control (read@0,1024B). Runtime 60 seconds [ 262.346356][ T24] block nbd2: Possible stuck request ffff888022288200: control (read@1024,1024B). Runtime 60 seconds [ 262.357546][ T24] block nbd2: Possible stuck request ffff888022288400: control (read@2048,1024B). Runtime 60 seconds [ 262.368511][ T24] block nbd2: Possible stuck request ffff888022288600: control (read@3072,1024B). Runtime 60 seconds