last executing test programs: 2m42.476776136s ago: executing program 0 (id=118): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x48001) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x8, 0x2, 0xc000, 0x6, 'syz0\x00', 0xfffffffa}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x48001) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x8, 0x4, 0x7, 0x6, 'syz0\x00', 0x9}, 0x2, 0x20, 0x5, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 2m42.275533771s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x14, r1, 0x7}, 0x14}}, 0x0) 2m42.008147157s ago: executing program 0 (id=120): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2m41.778814352s ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m41.699764994s ago: executing program 0 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x8001, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x2}}, 0x30) 2m41.063001359s ago: executing program 0 (id=129): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xc, &(0x7f0000000480)="9c9fbafe", 0x4) 2m40.569122121s ago: executing program 32 (id=129): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xc, &(0x7f0000000480)="9c9fbafe", 0x4) 1m33.010862648s ago: executing program 3 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.696539566s ago: executing program 3 (id=575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 1m32.566774058s ago: executing program 3 (id=578): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x1ff, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m32.023797961s ago: executing program 3 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 1m31.812483626s ago: executing program 3 (id=589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x3, 0x67e, 0x2, 0x1, 0xe0}, &(0x7f00000000c0)=0x14) 1m31.345901987s ago: executing program 3 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m30.958124466s ago: executing program 33 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.687049737s ago: executing program 1 (id=1415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.59920686s ago: executing program 1 (id=1417): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 2.317877636s ago: executing program 4 (id=1422): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.107098671s ago: executing program 4 (id=1427): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, 0xffffffffffffffff, 0x0, 0x2004}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.006913803s ago: executing program 4 (id=1431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) 1.826194167s ago: executing program 4 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x110) write$tcp_mem(r0, &(0x7f0000000700)={0x9, 0x20, 0x7fffffffffffffff, 0x20, 0x4000000007}, 0x48) 1.68312091s ago: executing program 2 (id=1435): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private2}, 0x1c) 1.68299957s ago: executing program 4 (id=1436): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000180)={0xfff, {"023c2aa645df00593351869c4dcdc3fc", "4069dad70b989bf95fef2b9a5a141188", "d8b7b9690900f3afcf10c95600"}, 0x1c44, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 1.670635161s ago: executing program 1 (id=1437): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x9, 0xbde, 0xb, 0xe4}}) 1.519032334s ago: executing program 2 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.518895365s ago: executing program 1 (id=1440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7e) 1.518773845s ago: executing program 5 (id=1441): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0xf000000, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 1.439230576s ago: executing program 1 (id=1442): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 1.434514816s ago: executing program 5 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) 1.367008318s ago: executing program 2 (id=1444): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 1.271401791s ago: executing program 5 (id=1445): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.156861793s ago: executing program 2 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000200a01040000000000000000020000020900020073797a30000000000900010073797a30"], 0xc8}}, 0x0) 1.071152465s ago: executing program 5 (id=1447): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='.\x00', 0x0, 0x100e002, 0x0) 938.556848ms ago: executing program 5 (id=1448): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 810.070061ms ago: executing program 2 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="c2e9b436163138bc3381bfe4775c7463fb65ac8dffae2caff509c2234dd2cbb26783", @ANYRESHEX=0x0], 0x28) 530.805268ms ago: executing program 2 (id=1450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="31a9", 0x2) 329.791962ms ago: executing program 1 (id=1451): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, 0x0) 133.702397ms ago: executing program 4 (id=1452): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x5, 0x5, 0x8, 0x55, 0x20008000, 0xe7, 0x1, 0x4]}}) 0s ago: executing program 5 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) kernel console output (not intermixed with test programs): lave_1 added [ 155.785248][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.805356][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.893297][ T7542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.956130][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.996461][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.103094][ T7542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.358451][ T7670] ipvlan2: entered promiscuous mode [ 156.380179][ T7670] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.422771][ T7670] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 156.465021][ T7670] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 156.485372][ T7542] hsr_slave_0: entered promiscuous mode [ 156.496072][ T7542] hsr_slave_1: entered promiscuous mode [ 157.166140][ T7695] loop1: detected capacity change from 0 to 256 [ 157.221857][ T7695] exfat: Deprecated parameter 'namecase' [ 157.255712][ T7695] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 157.491662][ T5780] Bluetooth: hci2: command tx timeout [ 157.704045][ T7712] loop2: detected capacity change from 0 to 512 [ 157.869519][ T7712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.991746][ T7712] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.076856][ T7724] loop1: detected capacity change from 0 to 512 [ 158.144660][ T7542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.168784][ T7724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.206519][ T7542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.251942][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.272871][ T7724] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.290110][ T7542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.311984][ T7542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.328848][ T7722] loop3: detected capacity change from 0 to 8192 [ 158.346965][ T7724] logitech-hidpp-device 0005:046D:B012.0005: received hid++ report of bad size (4096) [ 158.426270][ T5774] logitech-hidpp-device 0005:046D:B012.0005: Device not connected [ 158.460645][ T7722] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.581649][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.606710][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.618285][ T7722] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 158.730388][ T7722] REISERFS (device loop3): using ordered data mode [ 158.736922][ T7722] reiserfs: using flush barriers [ 158.761158][ T7542] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.875222][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.882425][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.899758][ T7722] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.963544][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.970750][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.047803][ T7722] REISERFS (device loop3): checking transaction log (loop3) [ 159.455759][ T7722] REISERFS (device loop3): Using tea hash to sort names [ 159.531837][ T7722] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 159.622742][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.334488][ T7542] veth0_vlan: entered promiscuous mode [ 160.386098][ T7542] veth1_vlan: entered promiscuous mode [ 160.477278][ T7542] veth0_macvtap: entered promiscuous mode [ 160.513477][ T7542] veth1_macvtap: entered promiscuous mode [ 160.574248][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.615332][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.655320][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.704878][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.737172][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.773963][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.815429][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.873279][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.917459][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.950903][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.980865][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.035493][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.084262][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.117613][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 161.143097][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.163599][ T7778] loop2: detected capacity change from 0 to 32768 [ 161.176471][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.212598][ T7542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.246957][ T7778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.511 (7778) [ 161.287489][ T7542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.327902][ T7542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.368371][ T7778] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.379212][ T5774] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.388960][ T7542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.454749][ T7778] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 161.520962][ T7801] loop3: detected capacity change from 0 to 128 [ 161.557675][ T7778] BTRFS info (device loop2): setting nodatasum [ 161.600286][ T7778] BTRFS info (device loop2): enabling auto defrag [ 161.606866][ T5774] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.629189][ T7778] BTRFS info (device loop2): disabling tree log [ 161.635468][ T7778] BTRFS info (device loop2): using free space tree [ 161.649918][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.692674][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.720373][ T7801] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.735362][ T5774] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.799495][ T5774] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.841835][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.859375][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.872145][ T7801] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.887327][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.934987][ T7794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.014617][ T5774] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 162.055014][ T7778] BTRFS info (device loop2): enabling ssd optimizations [ 162.132795][ T7778] BTRFS info (device loop2): auto enabling async discard [ 162.320549][ T6002] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.399621][ T5774] usb 2-1: USB disconnect, device number 13 [ 162.822000][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.860252][ T7835] netlink: 96 bytes leftover after parsing attributes in process `syz.3.515'. [ 162.915608][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 162.983178][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'. [ 163.249846][ T7846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 163.883892][ T7874] loop3: detected capacity change from 0 to 256 [ 163.967111][ T7874] exFAT-fs (loop3): error, The cluster chain has a loop [ 164.034290][ T7874] exFAT-fs (loop3): Filesystem has been set read-only [ 164.088066][ T7874] exFAT-fs (loop3): failed to count the number of clusters in root [ 164.143872][ T7874] exFAT-fs (loop3): failed to recognize exfat type [ 164.268484][ T28] audit: type=1800 audit(1791445018.664:17): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.531" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 164.387060][ T7889] netlink: 76 bytes leftover after parsing attributes in process `syz.2.532'. [ 164.476194][ T7893] netlink: 76 bytes leftover after parsing attributes in process `syz.2.532'. [ 164.566339][ T7893] Zero length message leads to an empty skb [ 164.600520][ T7900] loop1: detected capacity change from 0 to 64 [ 164.637690][ T7902] netem: change failed [ 165.181754][ T28] audit: type=1800 audit(1791445019.584:18): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.542" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 165.409349][ T5774] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.585280][ T7937] vxcan0: tx address claim with dest, not broadcast [ 165.632734][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.676562][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.720077][ T5774] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.768449][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.803644][ T5774] usb 2-1: SerialNumber: syz [ 165.823887][ T7946] loop4: detected capacity change from 0 to 512 [ 165.896660][ T7946] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.551: inode has both inline data and extents flags [ 165.961245][ T7946] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.551: couldn't read orphan inode 15 (err -117) [ 166.022604][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.062420][ T5774] usb 2-1: 0:2 : does not exist [ 166.141834][ T5774] usb 2-1: USB disconnect, device number 14 [ 166.177131][ T7946] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 166.251235][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.364486][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.537665][ T7966] warning: `syz.4.555' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.762392][ T7971] ip_tables: iptables: counters copy to user failed while replacing table [ 166.815301][ T28] audit: type=1400 audit(1791445021.214:19): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7973 comm="syz.4.561" [ 167.449009][ T8006] kAFS: Invalid Command on /proc/fs/afs/cells file [ 167.649448][ T789] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.851036][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 167.859231][ T5774] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.878632][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.909228][ T789] usb 2-1: config 0 has no interfaces? [ 167.924968][ T789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.946848][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.975907][ T789] usb 2-1: config 0 descriptor?? [ 168.069653][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 168.076083][ T5774] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 168.094671][ T5774] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.123681][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.155490][ T28] audit: type=1800 audit(1791445022.554:20): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.587" name="dummy_udc" dev="gadgetfs" ino=6083 res=0 errno=0 [ 168.176732][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.218932][ T5774] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.238753][ T789] usb 2-1: USB disconnect, device number 15 [ 168.279175][ T5774] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.302785][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.546867][ T5774] usb 3-1: GET_CAPABILITIES returned 0 [ 168.562750][ T5774] usbtmc 3-1:16.0: can't read capabilities [ 168.632470][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 168.797627][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.871033][ T8] usb 3-1: USB disconnect, device number 9 [ 168.953060][ T8041] loop4: detected capacity change from 0 to 8192 [ 168.993558][ T8041] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.086762][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.307176][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.460590][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.751871][ T8054] loop1: detected capacity change from 0 to 256 [ 169.846993][ T8054] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 169.885517][ T8057] loop4: detected capacity change from 0 to 512 [ 170.097735][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.111061][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.119508][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.131593][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.141701][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.148869][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.413034][ T8069] loop4: detected capacity change from 0 to 512 [ 170.478665][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.534767][ T8074] tap0: tun_chr_ioctl cmd 1074025677 [ 170.551480][ T8069] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.566661][ T8074] tap0: linktype set to 825 [ 170.701027][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.279648][ T5813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 171.443802][ T8059] loop2: detected capacity change from 0 to 40427 [ 171.470852][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 171.499475][ T8059] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 171.526427][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 171.558479][ T5813] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.585083][ T8059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 171.616129][ T5813] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.666338][ T8059] F2FS-fs (loop2): Image doesn't support compression [ 171.687108][ T5813] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 171.732709][ T8059] F2FS-fs (loop2): Image doesn't support compression [ 171.742058][ T5813] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 171.782173][ T5813] usb 2-1: Product: syz [ 171.786364][ T5813] usb 2-1: Manufacturer: syz [ 171.792721][ T8059] F2FS-fs (loop2): invalid crc value [ 171.827237][ T5813] hub 2-1:4.0: USB hub found [ 171.862828][ T8102] loop4: detected capacity change from 0 to 128 [ 172.054489][ T5813] hub 2-1:4.0: 2 ports detected [ 172.180702][ T8059] F2FS-fs (loop2): Start checkpoint disabled! [ 172.209895][ T5776] Bluetooth: hci3: command tx timeout [ 172.263352][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.303082][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.321659][ T8110] loop4: detected capacity change from 0 to 64 [ 172.332991][ T8059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.349425][ T8061] bridge_slave_0: entered allmulticast mode [ 172.375719][ T8061] bridge_slave_0: entered promiscuous mode [ 172.396406][ T8059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 172.464957][ T5813] hub 2-1:4.0: set hub depth failed [ 172.474510][ T49] hsr_slave_0: left promiscuous mode [ 172.528514][ T5813] usb 2-1: USB disconnect, device number 16 [ 172.613540][ T49] hsr_slave_1: left promiscuous mode [ 172.676811][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.708978][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.749847][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.772418][ T8059] VFS:Filesystem freeze failed [ 172.795276][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.822159][ T49] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 172.859004][ T49] batman_adv: batadv0: Removing interface: ipvlan2 [ 172.883710][ T49] bridge_slave_1: left allmulticast mode [ 172.909365][ T49] bridge_slave_1: left promiscuous mode [ 172.939280][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.980441][ T49] bridge_slave_0: left allmulticast mode [ 172.986112][ T49] bridge_slave_0: left promiscuous mode [ 173.030311][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.125674][ T49] veth1_macvtap: left promiscuous mode [ 173.147022][ T49] veth0_macvtap: left promiscuous mode [ 173.180511][ T49] veth1_vlan: left promiscuous mode [ 173.189241][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.211563][ T49] veth0_vlan: left promiscuous mode [ 173.407203][ T5813] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.458998][ T5813] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.506044][ T8131] loop1: detected capacity change from 0 to 512 [ 173.517938][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.542923][ T5813] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 173.582643][ T8131] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.620: invalid indirect mapped block 10 (level 1) [ 173.618657][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.651094][ T5813] usb 5-1: config 0 descriptor?? [ 173.673512][ T8131] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.620: invalid indirect mapped block 8 (level 1) [ 173.717760][ T8131] EXT4-fs (loop1): 1 truncate cleaned up [ 173.747973][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.804549][ T8131] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 173.906902][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.078410][ T5813] hid (null): invalid report_size 1221535620 [ 174.118913][ T5813] hid-multitouch 0003:0EEF:72C4.0006: collection stack underflow [ 174.162237][ T5813] hid-multitouch 0003:0EEF:72C4.0006: item 0 4 0 12 parsing failed [ 174.200257][ T5813] hid-multitouch: probe of 0003:0EEF:72C4.0006 failed with error -22 [ 174.289595][ T5776] Bluetooth: hci3: command tx timeout [ 174.357630][ T5813] usb 5-1: USB disconnect, device number 3 [ 174.973667][ T8157] loop2: detected capacity change from 0 to 512 [ 175.022155][ T8157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.037133][ T8159] loop4: detected capacity change from 0 to 512 [ 175.074311][ T8159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.097725][ T8157] System zones: 1-12 [ 175.135229][ T8157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.630: missing EA_INODE flag [ 175.156818][ T49] team0 (unregistering): Port device team_slave_1 removed [ 175.174971][ T8159] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.631: bad orphan inode 131083 [ 175.203272][ T8159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.233114][ T8157] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.630: error while reading EA inode 12 err=-117 [ 175.289008][ T8157] EXT4-fs (loop2): 1 orphan inode deleted [ 175.295640][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.319728][ T49] team0 (unregistering): Port device team_slave_0 removed [ 175.364733][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.386798][ T28] audit: type=1800 audit(1791445029.784:21): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.630" name="bus" dev="loop2" ino=15 res=0 errno=0 [ 175.536964][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.703949][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.721091][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.732881][ T8165] loop4: detected capacity change from 0 to 4096 [ 175.778948][ T8165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.102482][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.338921][ T5813] kernel write not supported for file /snd/seq (pid: 5813 comm: kworker/0:5) [ 176.370347][ T5776] Bluetooth: hci3: command tx timeout [ 176.591581][ T8176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 176.598410][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.636194][ T8179] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 176.642764][ T8179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.678078][ T8176] vhci_hcd vhci_hcd.0: Device attached [ 176.706393][ T8179] vhci_hcd vhci_hcd.0: Device attached [ 176.726071][ T8176] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 176.732611][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.755275][ T49] bond0 (unregistering): Released all slaves [ 176.779497][ T8176] vhci_hcd vhci_hcd.0: Device attached [ 176.797224][ T8179] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(8) [ 176.803775][ T8179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.845545][ T8179] vhci_hcd vhci_hcd.0: Device attached [ 176.874177][ T8182] vhci_hcd: connection closed [ 176.876880][ T8177] vhci_hcd: connection closed [ 176.882850][ T8180] vhci_hcd: connection closed [ 176.893643][ T42] vhci_hcd: stop threads [ 176.902763][ T5813] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 176.922105][ T8178] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 176.936084][ T8184] vhci_hcd: connection closed [ 176.937411][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.953439][ T42] vhci_hcd: release socket [ 176.960557][ T42] vhci_hcd: disconnect device [ 176.965343][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.984149][ T42] vhci_hcd: stop threads [ 176.996131][ T42] vhci_hcd: release socket [ 177.001562][ T8061] bridge_slave_1: entered allmulticast mode [ 177.007563][ T42] vhci_hcd: disconnect device [ 177.017189][ T8061] bridge_slave_1: entered promiscuous mode [ 177.023454][ T42] vhci_hcd: stop threads [ 177.027820][ T42] vhci_hcd: release socket [ 177.055492][ T8150] tun0: tun_chr_ioctl cmd 1074025692 [ 177.069794][ T42] vhci_hcd: disconnect device [ 177.085136][ T8170] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 177.110377][ T42] vhci_hcd: stop threads [ 177.114653][ T42] vhci_hcd: release socket [ 177.159370][ T42] vhci_hcd: disconnect device [ 177.247590][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.312261][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.465858][ T8061] team0: Port device team_slave_0 added [ 177.531476][ T8061] team0: Port device team_slave_1 added [ 177.623671][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.664906][ T8200] loop2: detected capacity change from 0 to 512 [ 177.699343][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.804723][ T8200] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.642: inode has both inline data and extents flags [ 177.881899][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.925567][ T8200] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.642: couldn't read orphan inode 15 (err -117) [ 177.964806][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.005875][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.058008][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.123449][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.362179][ T8061] hsr_slave_0: entered promiscuous mode [ 178.401566][ T8061] hsr_slave_1: entered promiscuous mode [ 178.430466][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.452099][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.460495][ T5776] Bluetooth: hci3: command tx timeout [ 178.489386][ T8061] Cannot create hsr debugfs directory [ 179.033360][ T8232] loop2: detected capacity change from 0 to 128 [ 179.101505][ T8232] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.206702][ T8061] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.255959][ T8232] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.312139][ T8061] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.350594][ T8061] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.415162][ T8061] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.505267][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.620714][ T8249] kAFS: bad VL server IP address [ 179.768692][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.857964][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.930358][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.937554][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.031675][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.038798][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.173289][ T8270] loop1: detected capacity change from 0 to 256 [ 180.188099][ T8061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.262621][ T8270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 180.297585][ T8061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.856443][ T8291] syz.4.667: attempt to access beyond end of device [ 180.856443][ T8291] loop8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 180.893279][ T8292] loop2: detected capacity change from 0 to 256 [ 180.962127][ T8291] SQUASHFS error: Failed to read block 0x0: -5 [ 180.993116][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.532085][ T8317] loop4: detected capacity change from 0 to 512 [ 181.603770][ T8317] EXT4-fs (loop4): 1 truncate cleaned up [ 181.667763][ T8317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.847324][ T28] audit: type=1800 audit(1791445036.244:22): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.675" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 181.880982][ T8317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.675: bg 0: block 465: padding at end of block bitmap is not set [ 181.935716][ T8061] veth0_vlan: entered promiscuous mode [ 182.003986][ T8317] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 182.021206][ T8061] veth1_vlan: entered promiscuous mode [ 182.049984][ T5813] vhci_hcd: vhci_device speed not set [ 182.080823][ T8317] EXT4-fs (loop4): This should not happen!! Data will be lost [ 182.080823][ T8317] [ 182.130634][ T8061] veth0_macvtap: entered promiscuous mode [ 182.145991][ T8317] EXT4-fs (loop4): Total free blocks count 0 [ 182.167991][ T8061] veth1_macvtap: entered promiscuous mode [ 182.178862][ T8317] EXT4-fs (loop4): Free/Dirty block details [ 182.196761][ T8340] loop1: detected capacity change from 0 to 128 [ 182.207679][ T8317] EXT4-fs (loop4): free_blocks=0 [ 182.247355][ T8317] EXT4-fs (loop4): dirty_blocks=9 [ 182.260713][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.287391][ T8317] EXT4-fs (loop4): Block reservation details [ 182.318184][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.354720][ T8317] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 182.379398][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.428846][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.471215][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.493686][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.506945][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.538525][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.602378][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.651372][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.685738][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.723526][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.772205][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.818961][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.860253][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.918231][ T8061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.956858][ T8061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.986721][ T8350] loop4: detected capacity change from 0 to 4096 [ 183.007419][ T8061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.049731][ T8061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.080872][ T8350] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 183.148620][ T8350] ntfs3: loop4: Failed to load $Bitmap (-2). [ 183.740113][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.747955][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.891032][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.898872][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.703854][ T8390] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.978710][ T28] audit: type=1400 audit(1791445039.374:23): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8395 comm="syz.2.698" name="p" offset=64 [ 185.072577][ T8369] loop4: detected capacity change from 0 to 40427 [ 185.116796][ T8382] loop1: detected capacity change from 0 to 32768 [ 185.137619][ T8369] F2FS-fs (loop4): invalid crc value [ 185.190887][ T8369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.232781][ T8382] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 185.299544][ T8382] JBD2: Ignoring recovery information on journal [ 185.425862][ T8369] F2FS-fs (loop4): Start checkpoint disabled! [ 185.437526][ T8382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.532473][ T8369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 185.966804][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 186.094664][ T59] kworker/u4:4: attempt to access beyond end of device [ 186.094664][ T59] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 186.189869][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 186.238695][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 187.188209][ T8456] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 187.274261][ T8456] rtrs_client L2081: : Failed to resolve address, err: -19 [ 187.314470][ T8456] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 187.592938][ T8475] loop1: detected capacity change from 0 to 512 [ 187.679668][ T8475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.795894][ T8475] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.722: bad orphan inode 131083 [ 187.878656][ T8475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.941211][ T8487] loop5: detected capacity change from 0 to 256 [ 187.988031][ T8487] exfat: Deprecated parameter 'namecase' [ 188.047715][ T8487] exfat: Deprecated parameter 'namecase' [ 188.108405][ T8487] exfat: Deprecated parameter 'namecase' [ 188.152963][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.186394][ T8487] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 188.303627][ T8493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.512278][ T8501] loop5: detected capacity change from 0 to 1024 [ 188.564224][ T8501] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 188.657738][ T8501] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.728: lblock 2 mapped to illegal pblock 2 (length 1) [ 188.734577][ T8501] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 188.761176][ T8501] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.728: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.799782][ T8] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 188.825351][ T8501] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 188.871914][ T8501] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.728: Failed to acquire dquot type 0 [ 188.907079][ T8501] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 188.942342][ T8501] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.728: mark_inode_dirty error [ 189.017454][ T8501] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 189.038857][ T8] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.072553][ T8501] EXT4-fs (loop5): 1 orphan inode deleted [ 189.082657][ T8] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 189.095468][ T2968] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.123204][ T8501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.162520][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.190108][ T2968] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 189.204713][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 189.233573][ T8501] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.728: Invalid inode table block 1 in block_group 0 [ 189.249474][ T2968] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 189.264198][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.292343][ T8] usb 2-1: config 0 descriptor?? [ 189.306403][ T8501] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 189.339663][ T8504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.360554][ T8501] EXT4-fs error (device loop5): ext4_setattr:5526: inode #2: comm syz.5.728: mark_inode_dirty error [ 189.429303][ T789] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 189.454206][ T8061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.470175][ T1149] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.505606][ T1149] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 189.525335][ T1149] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 189.548825][ T8061] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.590305][ T8061] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 189.609820][ T8061] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 189.625383][ T8508] loop2: detected capacity change from 0 to 32768 [ 189.635859][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.725705][ T8508] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 189.735763][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.781010][ T789] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 189.807004][ T8] wacom 0003:056A:030A.0007: unknown main item tag 0x3 [ 189.823289][ T8508] JBD2: Ignoring recovery information on journal [ 189.854550][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.909552][ T8] wacom 0003:056A:030A.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:030a] on usb-dummy_hcd.1-1/input0 [ 189.932151][ T789] usb 5-1: config 0 descriptor?? [ 190.021394][ T8508] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.147214][ T5861] usb 2-1: USB disconnect, device number 17 [ 190.272186][ T28] audit: type=1800 audit(1791445044.674:24): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.730" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 190.392675][ T789] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 190.434961][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 190.848496][ T8528] loop5: detected capacity change from 0 to 32768 [ 190.863866][ T789] usb 5-1: USB disconnect, device number 4 [ 190.877112][ T8528] XFS: noikeep mount option is deprecated. [ 190.922233][ T8528] XFS: noikeep mount option is deprecated. [ 190.986311][ T8528] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.122825][ T8528] XFS (loop5): Ending clean mount [ 191.149645][ T8528] XFS (loop5): Quotacheck needed: Please wait. [ 191.191901][ T8547] block nbd1: shutting down sockets [ 191.268885][ T8528] XFS (loop5): Quotacheck: Done. [ 191.384312][ T8061] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.483440][ T8554] loop2: detected capacity change from 0 to 4096 [ 191.566568][ T8554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.823419][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.851423][ T8564] loop4: detected capacity change from 0 to 136 [ 192.014703][ T8564] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 192.163070][ T8556] loop1: detected capacity change from 0 to 40427 [ 192.194786][ T8556] F2FS-fs (loop1): invalid crc value [ 192.223415][ T8556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.371680][ T8556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.619781][ T5768] syz-executor: attempt to access beyond end of device [ 192.619781][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.693629][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 193.318771][ T8598] program syz.5.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.514878][ T8607] loop1: detected capacity change from 0 to 2048 [ 193.574675][ T8607] loop1: p3 < > p4 < > [ 193.589876][ T8607] loop1: partition table partially beyond EOD, truncated [ 193.614075][ T8607] loop1: p3 start 4284289 is beyond EOD, truncated [ 194.014092][ T8618] erspan0: entered promiscuous mode [ 194.213031][ T8624] netlink: 'syz.1.767': attribute type 12 has an invalid length. [ 194.247657][ T8624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 194.456958][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463635][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646973][ T8642] loop1: detected capacity change from 0 to 24 [ 194.668693][ T8642] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 194.732964][ T8642] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 195.152748][ T8660] loop1: detected capacity change from 0 to 512 [ 195.220305][ T8660] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 195.285222][ T8663] loop4: detected capacity change from 0 to 512 [ 195.294788][ T8660] EXT4-fs (loop1): orphan cleanup on readonly fs [ 195.347777][ T8660] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.781: bad orphan inode 15 [ 195.384476][ T8663] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 195.450890][ T8660] ext4_test_bit(bit=14, block=18) = 1 [ 195.456321][ T8660] is_bad_inode(inode)=0 [ 195.481053][ T8663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.516332][ T8660] NEXT_ORPHAN(inode)=1023 [ 195.574432][ T8660] max_ino=32 [ 195.577672][ T8660] i_nlink=0 [ 195.601638][ T8663] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.634085][ T8660] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.781: corrupted xattr block 19: e_value size too large [ 195.710944][ T8660] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 195.720944][ T8676] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 195.720944][ T8676] The task syz.5.784 (8676) triggered the difference, watch for misbehavior. [ 195.777695][ T8660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.940486][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.087660][ T8680] loop1: detected capacity change from 0 to 512 [ 196.116250][ T8680] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.154885][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.168641][ T8680] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.785: corrupted inode contents [ 196.221719][ T8680] EXT4-fs (loop1): Remounting filesystem read-only [ 196.231980][ T8653] loop2: detected capacity change from 0 to 40427 [ 196.257530][ T8680] EXT4-fs (loop1): 1 orphan inode deleted [ 196.288031][ T8680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.300692][ T8653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 196.343119][ T8653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.401302][ T8653] F2FS-fs (loop2): Unrecognized mount option "0177777777777777777777700000000000000000000000" or missing value [ 196.454795][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.798896][ T8691] loop4: detected capacity change from 0 to 1024 [ 196.939233][ T28] audit: type=1800 audit(1791445051.324:25): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.790" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 197.272161][ T8700] batadv_slave_1: entered promiscuous mode [ 197.311029][ T8700] batadv_slave_1: left promiscuous mode [ 197.423628][ T8689] loop1: detected capacity change from 0 to 32768 [ 197.450772][ T8689] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.788 (8689) [ 197.547604][ T8689] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 197.599205][ T8689] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 197.608645][ T8689] BTRFS info (device loop1): use no compression [ 197.665671][ T8689] BTRFS info (device loop1): using free space tree [ 197.739232][ T5861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.814418][ T8689] BTRFS info (device loop1): enabling ssd optimizations [ 197.849586][ T8689] BTRFS info (device loop1): auto enabling async discard [ 197.961285][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 197.991763][ T5861] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.028239][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.098258][ T5768] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 198.119961][ T5861] usb 3-1: config 0 descriptor?? [ 198.155476][ T5861] as10x_usb: device has been detected [ 198.181546][ T5861] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 198.253695][ T5861] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 198.447394][ T5861] as10x_usb: error during firmware upload part1 [ 198.504867][ T5861] Registered device nBox DVB-T Dongle [ 198.542148][ T5861] usb 3-1: USB disconnect, device number 10 [ 198.687401][ T5861] Unregistered device nBox DVB-T Dongle [ 198.688420][ T8733] Bluetooth: MGMT ver 1.22 [ 198.730051][ T5861] as10x_usb: device has been disconnected [ 199.086693][ T8729] loop4: detected capacity change from 0 to 32768 [ 199.144625][ T8729] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.259328][ T8729] XFS (loop4): Ending clean mount [ 199.285916][ T8729] XFS (loop4): Quotacheck needed: Please wait. [ 199.393321][ T8729] XFS (loop4): Quotacheck: Done. [ 199.579875][ T8760] bond0: no command found in slaves file - use +ifname or -ifname [ 200.286323][ T7542] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.482688][ T8791] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.932905][ T8802] loop4: detected capacity change from 0 to 512 [ 200.967570][ T8802] EXT4-fs: Ignoring removed nobh option [ 200.979434][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.037747][ T8802] EXT4-fs (loop4): 1 truncate cleaned up [ 201.064575][ T8802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.217815][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.239532][ T5813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.268652][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.299335][ T5813] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 201.328224][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 201.373762][ T5813] usb 6-1: Product: syz [ 201.377975][ T5813] usb 6-1: Manufacturer: syz [ 201.447960][ T5813] usb 6-1: Found UVC 1.00 device syz (8086:0ad2) [ 201.649140][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 201.655258][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 201.890465][ T5813] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 201.964703][ T5813] videodev: could not get a free minor [ 201.971195][ T8836] zero sized request [ 201.999297][ T5813] uvcvideo 6-1:1.1: Failed to register meta-cap device (-23). [ 202.149209][ T5813] usb 6-1: USB disconnect, device number 2 [ 202.698649][ T5774] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 202.905358][ T5774] usb 5-1: Using ep0 maxpacket: 32 [ 202.932040][ T5774] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.968090][ T5774] usb 5-1: config 0 has no interface number 0 [ 203.006967][ T5774] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.057449][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.097737][ T5774] usb 5-1: Product: syz [ 203.122756][ T5774] usb 5-1: Manufacturer: syz [ 203.127382][ T5774] usb 5-1: SerialNumber: syz [ 203.186050][ T5774] usb 5-1: config 0 descriptor?? [ 203.224632][ T5774] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.433797][ T5774] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.501662][ T5774] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.858665][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.867186][ T5813] usb 5-1: USB disconnect, device number 5 [ 203.909647][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.991997][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.020781][ T8900] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 204.042317][ T5813] quatech2 5-1:0.51: device disconnected [ 204.067679][ T8900] nbd: error processing sock list [ 204.144902][ T8900] block nbd0: shutting down sockets [ 204.263559][ T28] audit: type=1326 audit(1791445058.664:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 204.418279][ T28] audit: type=1326 audit(1791445058.664:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 204.581317][ T28] audit: type=1326 audit(1791445058.694:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 204.725585][ T8927] loop1: detected capacity change from 0 to 2048 [ 204.737573][ T8931] loop5: detected capacity change from 0 to 64 [ 204.758367][ T28] audit: type=1326 audit(1791445058.694:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 204.826298][ T8927] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 204.895658][ T8934] loop4: detected capacity change from 0 to 1024 [ 204.941952][ T8927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.020492][ T28] audit: type=1326 audit(1791445058.694:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 205.254331][ T28] audit: type=1326 audit(1791445058.694:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 205.469242][ T28] audit: type=1326 audit(1791445058.694:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 205.645032][ T28] audit: type=1326 audit(1791445058.704:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 205.761608][ T5813] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.828135][ T28] audit: type=1326 audit(1791445058.704:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a299e199 code=0x7ffc0000 [ 205.996780][ T28] audit: type=1400 audit(1791445058.934:35): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=8920 comm="syz.5.852" name="/" offset=59 [ 206.057479][ T5813] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.088985][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.138542][ T5813] usb 3-1: Product: syz [ 206.168017][ T5813] usb 3-1: Manufacturer: syz [ 206.220081][ T5813] usb 3-1: SerialNumber: syz [ 206.250007][ T5813] usb 3-1: config 0 descriptor?? [ 206.555312][ T8976] loop5: detected capacity change from 0 to 256 [ 206.579360][ T5774] usb 3-1: USB disconnect, device number 11 [ 206.617531][ T8976] exfat: Deprecated parameter 'utf8' [ 206.678984][ T8976] exfat: Deprecated parameter 'namecase' [ 206.740050][ T8976] exfat: Deprecated parameter 'namecase' [ 206.785446][ T8976] exfat: Deprecated parameter 'utf8' [ 206.835495][ T8976] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 207.017642][ T8954] loop4: detected capacity change from 0 to 32768 [ 207.131820][ T8954] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.253032][ T8954] XFS (loop4): Ending clean mount [ 207.402443][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.875'. [ 207.536218][ T8954] XFS (loop4): User initiated shutdown received. [ 207.577291][ T8954] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 207.663326][ T8954] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 207.766073][ T7542] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.905364][ T5774] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 208.130268][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 208.171225][ T5774] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 208.213075][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.254897][ T5774] usb 2-1: config 0 descriptor?? [ 208.317612][ T5774] gspca_main: sunplus-2.14.0 probing 041e:400b [ 209.129998][ T5774] gspca_sunplus: reg_w_riv err -71 [ 209.135222][ T5774] sunplus: probe of 2-1:0.0 failed with error -71 [ 209.197776][ T5774] usb 2-1: USB disconnect, device number 18 [ 209.417416][ T9083] loop7: detected capacity change from 0 to 8 [ 209.447174][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.456390][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.478636][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 209.488022][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.497168][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.505960][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.515164][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.529089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.538247][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.548347][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.557538][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.576637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.585839][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.594223][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.603372][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.615767][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.624973][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.632884][ T9083] ldm_validate_partition_table(): Disk read failed. [ 209.675794][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.685003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.693507][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 209.705616][ T9083] Dev loop7: unable to read RDB block 0 [ 209.738509][ T9083] loop7: unable to read partition table [ 209.766776][ T9083] loop7: partition table beyond EOD, truncated [ 209.820090][ T9083] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CîjÌ–4FLQkÝÇ5) failed (rc=-5) [ 210.131590][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.909'. [ 210.153984][ T9102] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 210.463878][ T9118] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 210.606728][ T9120] loop4: detected capacity change from 0 to 4096 [ 210.654581][ T9126] loop1: detected capacity change from 0 to 512 [ 210.654682][ T9120] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 210.707514][ T9126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 210.760152][ T9126] System zones: 1-12 [ 210.786663][ T9126] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.919: missing EA_INODE flag [ 210.852046][ T9120] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 210.863912][ T9126] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.919: error while reading EA inode 12 err=-117 [ 210.902637][ T5813] logitech-hidpp-device 0003:046D:C082.0009: Device not connected [ 210.926175][ T9120] ntfs3: loop4: mft corrupted [ 210.941111][ T9126] EXT4-fs (loop1): 1 orphan inode deleted [ 210.947574][ T9126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.969965][ T9120] ntfs3: loop4: Failed to load $Extend (-22). [ 211.008392][ T9120] ntfs3: loop4: Failed to initialize $Extend. [ 211.070755][ T9126] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 211.113159][ T9120] ntfs3: loop4: ino=1e, mi_enum_attr [ 211.143829][ T9120] ntfs3: loop4: ino=1e, mi_enum_attr [ 211.209260][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.545775][ T9154] netlink: 200 bytes leftover after parsing attributes in process `syz.5.929'. [ 211.669620][ T9160] rnbd_client L127: Can't parse path ip: -93 [ 212.504045][ T9196] loop1: detected capacity change from 0 to 128 [ 212.541066][ T9196] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 212.810232][ T1149] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 212.884907][ T9204] loop2: detected capacity change from 0 to 4096 [ 212.899723][ T9208] loop5: detected capacity change from 0 to 2048 [ 212.971768][ T9212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.040605][ T9204] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 213.057657][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 213.057667][ T28] audit: type=1800 audit(1791445067.454:59): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.952" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 213.231189][ T28] audit: type=1800 audit(1791445067.494:60): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.952" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 213.307418][ T9212] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 213.386529][ T9212] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 213.448065][ T9217] loop4: detected capacity change from 0 to 4096 [ 213.511902][ T9212] Remounting filesystem read-only [ 213.521009][ T49] NILFS (loop5): discard dirty page: offset=0, ino=15 [ 213.527799][ T49] NILFS (loop5): discard dirty block: blocknr=22, size=1024 [ 213.541822][ T9217] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 213.585482][ T9221] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 213.624029][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 213.680214][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 213.695567][ T9223] loop2: detected capacity change from 0 to 1024 [ 213.739370][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 213.757069][ T9217] ntfs: volume version 3.1. [ 213.792115][ T49] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 213.852682][ T49] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 213.871450][ T9223] hfsplus: invalid length 1280 has been corrected to 255 [ 213.912468][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 213.978830][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.027895][ T49] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.077619][ T8061] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 214.118483][ T8061] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 214.162365][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.196671][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.247463][ T8061] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 214.292169][ T8061] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 214.324798][ T8061] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 214.355353][ T8061] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 214.386052][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.426033][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.469957][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.482340][ T9236] loop1: detected capacity change from 0 to 4096 [ 214.512005][ T9236] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 214.521885][ T8061] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 214.528575][ T8061] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 214.604806][ T8061] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 214.621742][ T9236] ntfs3: loop1: ino=19, mi_enum_attr [ 214.627095][ T9236] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 214.657160][ T8061] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 214.672082][ T9236] ntfs3: loop1: ino=1a, mi_enum_attr [ 214.689418][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.698344][ T8061] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 214.719930][ T9236] ntfs3: loop1: ino=1a, mi_enum_attr [ 214.731928][ T9236] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 214.748108][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.804095][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.838576][ T8061] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 214.862486][ T8061] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.955897][ T9248] loop4: detected capacity change from 0 to 256 [ 215.002845][ T9248] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.088178][ T9248] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.159604][ T9254] netlink: 'syz.2.974': attribute type 39 has an invalid length. [ 215.361717][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 215.374539][ T9261] loop4: detected capacity change from 0 to 1024 [ 215.422400][ T9261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.507007][ T9261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.744443][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.873903][ T9283] loop2: detected capacity change from 0 to 764 [ 215.911788][ T9283] rock: directory entry would overflow storage [ 215.976628][ T9283] rock: sig=0x4654, size=5, remaining=4 [ 216.631581][ T9290] loop1: detected capacity change from 0 to 32768 [ 216.673058][ T9290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.769227][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 216.933299][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 216.974110][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 217.029419][ T5813] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.057713][ T5813] usb 5-1: config 0 has no interface number 0 [ 217.101599][ T5813] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 217.132118][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.160936][ T5813] usb 5-1: Product: syz [ 217.187413][ T5813] usb 5-1: Manufacturer: syz [ 217.204146][ T5813] usb 5-1: SerialNumber: syz [ 217.230802][ T5813] usb 5-1: config 0 descriptor?? [ 217.266757][ T5813] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 217.661170][ T9334] loop1: detected capacity change from 0 to 128 [ 217.681506][ T9336] loop5: detected capacity change from 0 to 512 [ 217.722144][ T9334] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.775280][ T9336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 217.808650][ T9334] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.831012][ T9336] System zones: 1-12 [ 217.838048][ T9336] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1009: missing EA_INODE flag [ 217.907752][ T9336] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1009: error while reading EA inode 12 err=-117 [ 217.944528][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.954549][ T9336] EXT4-fs (loop5): 1 orphan inode deleted [ 217.972393][ T9336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.054910][ T5813] gspca_spca1528: reg_w err -71 [ 218.088282][ T9336] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 218.109293][ T5813] spca1528: probe of 5-1:0.1 failed with error -71 [ 218.134696][ T5813] usb 5-1: USB disconnect, device number 6 [ 218.212519][ T8061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.572646][ T9345] loop1: detected capacity change from 0 to 32768 [ 218.648653][ T9345] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.821981][ T9345] XFS (loop1): Ending clean mount [ 218.855952][ T9345] XFS (loop1): Quotacheck needed: Please wait. [ 218.982002][ T9345] XFS (loop1): Quotacheck: Done. [ 219.031172][ T28] audit: type=1800 audit(1791445073.434:61): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1012" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 219.102080][ T9347] loop2: detected capacity change from 0 to 32768 [ 219.171280][ T9347] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1013 (9347) [ 219.309295][ T9347] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 219.369011][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.393221][ T9347] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 219.448523][ T9375] bond1: entered promiscuous mode [ 219.470197][ T9347] BTRFS info (device loop2): use zlib compression, level 3 [ 219.549328][ T9347] BTRFS info (device loop2): using free space tree [ 219.742603][ T9396] tap0: tun_chr_ioctl cmd 1074025675 [ 219.748190][ T9396] tap0: persist disabled [ 219.795547][ T9347] BTRFS info (device loop2): enabling ssd optimizations [ 219.844714][ T9347] BTRFS info (device loop2): auto enabling async discard [ 219.980786][ T8] Process accounting resumed [ 220.047747][ T5769] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.345897][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 220.395929][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'. [ 220.452112][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 220.538178][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1033'. [ 220.833482][ T9405] loop5: detected capacity change from 0 to 40427 [ 220.881925][ T9428] ip_tables: iptables: counters copy to user failed while replacing table [ 220.897549][ T9405] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 220.910544][ T5813] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 220.930376][ T9405] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 220.996817][ T9405] F2FS-fs (loop5): invalid crc value [ 221.128185][ T5813] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 221.179686][ T5813] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 221.227312][ T5813] usb 2-1: can't read configurations, error -71 [ 221.248226][ T9405] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 221.282051][ T9405] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 221.335180][ T9405] syz.5.1027: attempt to access beyond end of device [ 221.335180][ T9405] loop5: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 221.404489][ T9442] syz.5.1027: attempt to access beyond end of device [ 221.404489][ T9442] loop5: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 221.448959][ T9444] loop4: detected capacity change from 0 to 512 [ 221.518900][ T8061] syz-executor: attempt to access beyond end of device [ 221.518900][ T8061] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.562111][ T9444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.593932][ T8061] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 221.615219][ T9444] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.712883][ T9444] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.1041: corrupted inode contents [ 221.778799][ T9444] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.1041: mark_inode_dirty error [ 221.920608][ T9444] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.1041: corrupted inode contents [ 222.000546][ T9452] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.1041: corrupted inode contents [ 222.091966][ T9452] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.1041: mark_inode_dirty error [ 222.158595][ T9452] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #2: comm syz.4.1041: corrupted inode contents [ 222.211997][ T9452] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #2: comm syz.4.1041: mark_inode_dirty error [ 222.225274][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 222.341909][ T9462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 222.377946][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.505364][ T9465] loop5: detected capacity change from 0 to 4096 [ 222.583056][ T9465] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 222.625666][ T9465] ntfs3: loop5: Failed to load $Bitmap (-2). [ 222.650393][ T9472] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 222.819386][ T5813] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 223.016385][ T9485] program syz.1.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.039738][ T5813] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.064541][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.087902][ T5813] usb 5-1: config 0 descriptor?? [ 223.122892][ T5813] cp210x 5-1:0.0: cp210x converter detected [ 223.563974][ T5813] usb 5-1: cp210x converter now attached to ttyUSB0 [ 223.796561][ T5813] usb 5-1: USB disconnect, device number 7 [ 223.822023][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 223.883516][ T5813] cp210x 5-1:0.0: device disconnected [ 223.905321][ T9509] loop1: detected capacity change from 0 to 1024 [ 223.955443][ T9509] EXT4-fs error (device loop1): __ext4_fill_super:5517: comm syz.1.1067: inode #2: comm syz.1.1067: iget: illegal inode # [ 224.018459][ T9509] EXT4-fs (loop1): get root inode failed [ 224.048783][ T9509] EXT4-fs (loop1): mount failed [ 224.191472][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 224.209999][ T9516] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 224.237034][ T9514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.264053][ T9516] rtrs_client L2081: : Failed to resolve address, err: -19 [ 224.291059][ T9516] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 224.721694][ T9536] loop2: detected capacity change from 0 to 256 [ 224.765989][ T9536] exfat: Deprecated parameter 'utf8' [ 224.812791][ T9542] autofs4:pid:9542:autofs_fill_super: could not open pipe file descriptor [ 224.832453][ T9536] exfat: Deprecated parameter 'namecase' [ 224.861046][ T9536] exfat: Deprecated parameter 'namecase' [ 224.906643][ T9536] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 225.014055][ T28] audit: type=1804 audit(1791445079.414:62): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1088" name=2F6E6577726F6F742F3237352FE91F7189591E9233614B2F627573 dev="loop2" ino=1048730 res=1 errno=0 [ 225.193036][ T9552] loop1: detected capacity change from 0 to 256 [ 225.463437][ T28] audit: type=1326 audit(1791445079.864:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.531511][ T9563] bcache: register_bcache() error : failed to open device [ 225.568149][ T28] audit: type=1326 audit(1791445079.864:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.676911][ T28] audit: type=1326 audit(1791445079.864:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.700867][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.773741][ T28] audit: type=1326 audit(1791445079.864:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.797690][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.807176][ T28] audit: type=1326 audit(1791445079.904:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.831095][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.858355][ T28] audit: type=1326 audit(1791445079.904:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.882300][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.894808][ T5813] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 225.916139][ T28] audit: type=1326 audit(1791445079.904:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 225.998944][ T28] audit: type=1326 audit(1791445079.904:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bf773f519 code=0x7ffc0000 [ 226.061623][ T28] audit: type=1326 audit(1791445079.904:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 226.085536][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.119410][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 226.125847][ T5813] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 226.142385][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 226.162031][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.191120][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 226.242290][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 226.273524][ T5813] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.326462][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.355714][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.610992][ T5813] usb 5-1: GET_CAPABILITIES returned 0 [ 226.629269][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 226.791264][ T9598] loop1: detected capacity change from 0 to 2048 [ 226.814974][ T5813] usb 5-1: USB disconnect, device number 8 [ 226.881257][ T9598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.924969][ T9598] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.034877][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.084496][ T9587] loop2: detected capacity change from 0 to 32768 [ 227.137740][ T9587] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 227.542300][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 227.744396][ T8] Process accounting resumed [ 227.830592][ T9630] block nbd4: shutting down sockets [ 227.865172][ T9635] loop1: detected capacity change from 0 to 512 [ 227.912424][ T9635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.973572][ T9635] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 228.021288][ T9635] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1123: corrupted in-inode xattr: e_value size too large [ 228.064951][ T9640] loop4: detected capacity change from 0 to 512 [ 228.102505][ T9635] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1123: couldn't read orphan inode 15 (err -117) [ 228.123582][ T9640] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 228.162485][ T9635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.201316][ T9640] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.230893][ T9640] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.1125: bad orphan inode 15 [ 228.285810][ T9640] ext4_test_bit(bit=14, block=18) = 1 [ 228.309332][ T9640] is_bad_inode(inode)=0 [ 228.313544][ T9640] NEXT_ORPHAN(inode)=1023 [ 228.330802][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.349247][ T9640] max_ino=32 [ 228.361621][ T9640] i_nlink=0 [ 228.405033][ T9640] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #15: comm syz.4.1125: corrupted xattr block 19: e_value size too large [ 228.485172][ T9640] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 228.532981][ T9640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.592087][ T9637] loop5: detected capacity change from 0 to 32768 [ 228.663200][ T9637] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 228.837665][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.874817][ T9655] kAFS: Invalid Command on /proc/fs/afs/cells file [ 229.036973][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 229.063596][ T8061] ocfs2: Unmounting device (7,5) on (node local) [ 229.110926][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.227200][ T9664] erspan0: entered promiscuous mode [ 229.301906][ T9666] input: syz0 as /devices/virtual/input/input17 [ 229.459216][ T9671] jffs2: notice: (9671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.493849][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 229.564263][ T9677] vivid-000: disconnect [ 229.593031][ T9674] vivid-000: reconnect [ 229.660293][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1139'. [ 229.864163][ T9688] loop4: detected capacity change from 0 to 1024 [ 229.931497][ T9688] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 230.006519][ T9688] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.1143: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.094070][ T9688] __quota_error: 8 callbacks suppressed [ 230.094081][ T9688] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 230.156009][ T9688] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.1143: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.223009][ T9688] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 230.269777][ T9688] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1143: Failed to acquire dquot type 0 [ 230.325298][ T9688] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 230.370245][ T9688] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1143: mark_inode_dirty error [ 230.412143][ T9688] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.468228][ T9688] EXT4-fs (loop4): 1 orphan inode deleted [ 230.488535][ T59] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.506603][ T9688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.553721][ T9690] loop5: detected capacity change from 0 to 32768 [ 230.572298][ T59] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 230.613558][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 230.676759][ T9690] JBD2: Ignoring recovery information on journal [ 230.710021][ T9688] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1143: Invalid inode table block 1 in block_group 0 [ 230.789934][ T9690] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 230.814338][ T9688] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 230.872480][ T9688] EXT4-fs error (device loop4): ext4_setattr:5526: inode #2: comm syz.4.1143: mark_inode_dirty error [ 231.037625][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.052715][ T1138] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.077158][ T8061] ocfs2: Unmounting device (7,5) on (node local) [ 231.135529][ T1138] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 231.181115][ T1138] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 231.224719][ T9709] __sock_release: fasync list not empty! [ 231.231132][ T7542] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 231.279328][ T7542] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 231.332767][ T7542] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 231.626224][ T9720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 231.667885][ T9724] loop1: detected capacity change from 0 to 1024 [ 231.755262][ T28] audit: type=1800 audit(1791445086.154:80): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1157" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 231.846896][ T9727] loop4: detected capacity change from 0 to 24 [ 231.882117][ T9727] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 231.921127][ T9727] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 232.184840][ T9736] loop5: detected capacity change from 0 to 24 [ 232.214957][ T9736] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 232.280418][ T9736] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 232.350389][ T9740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.713801][ T9748] loop5: detected capacity change from 0 to 1024 [ 232.816271][ T9752] loop2: detected capacity change from 0 to 1024 [ 232.853265][ T9729] loop1: detected capacity change from 0 to 40427 [ 232.881277][ T28] audit: type=1800 audit(1791445087.284:81): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1168" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 232.913868][ T9729] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 232.927721][ T9752] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 232.975065][ T9729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 233.027891][ T9729] F2FS-fs (loop1): Unrecognized mount option "0177777777777777777777700000000000000000000000" or missing value [ 233.113026][ T9752] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.1167: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.214942][ T9758] loop5: detected capacity change from 0 to 1024 [ 233.258972][ T9752] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 233.295800][ T9758] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 233.311288][ T9752] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.1167: lblock 0 mapped to illegal pblock 48 (length 1) [ 233.331790][ T9762] loop4: detected capacity change from 0 to 256 [ 233.355571][ T9758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.395189][ T9762] exfat: Deprecated parameter 'utf8' [ 233.421138][ T9762] exfat: Deprecated parameter 'utf8' [ 233.426504][ T9762] exfat: Deprecated parameter 'namecase' [ 233.452688][ T9758] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.464099][ T9752] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 233.519328][ T9762] exfat: Deprecated parameter 'namecase' [ 233.525023][ T9762] exfat: Deprecated parameter 'namecase' [ 233.534343][ T9752] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1167: Failed to acquire dquot type 0 [ 233.565587][ T9758] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 3: comm syz.5.1172: lblock 3 mapped to illegal pblock 3 (length 3) [ 233.596301][ T9762] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 233.621027][ T9752] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 233.643714][ T9758] EXT4-fs (loop5): Remounting filesystem read-only [ 233.660010][ T9752] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1167: mark_inode_dirty error [ 233.686692][ T9763] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -5 [ 233.747597][ T9752] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 233.806992][ T8061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.831187][ T9752] EXT4-fs (loop2): 1 orphan inode deleted [ 233.837633][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.871556][ T49] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.960955][ T49] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 234.005211][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 234.076094][ T9752] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.1167: Invalid inode table block 1 in block_group 0 [ 234.117031][ T9752] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 234.154806][ T9752] EXT4-fs error (device loop2): ext4_setattr:5526: inode #2: comm syz.2.1167: mark_inode_dirty error [ 234.288551][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.302726][ T49] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.319173][ T8] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 234.363565][ T49] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 234.393067][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 234.435773][ T5769] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 234.465287][ T9778] loop1: detected capacity change from 0 to 2048 [ 234.507750][ T9779] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.525407][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 234.563135][ T5769] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 234.602158][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.661169][ T5769] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 234.686578][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.719159][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.747039][ T9781] loop1: detected capacity change from 0 to 512 [ 234.763616][ T8] usb 6-1: SerialNumber: syz [ 234.768936][ T9771] loop4: detected capacity change from 0 to 32768 [ 234.801180][ T9770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.843727][ T9781] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 234.903312][ T9781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.934763][ T9771] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.977790][ T9781] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.082563][ T9770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.120976][ T9771] XFS (loop4): Ending clean mount [ 235.176616][ T9771] XFS (loop4): Quotacheck needed: Please wait. [ 235.245169][ T9771] XFS (loop4): Quotacheck: Done. [ 235.357309][ T28] audit: type=1800 audit(1791445089.754:82): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1185" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 235.423859][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.590481][ T8] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 235.757739][ T8] usb 6-1: USB disconnect, device number 3 [ 235.797014][ T8] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 235.932202][ T7542] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.677549][ T9806] XFS: noikeep mount option is deprecated. [ 236.726246][ T9806] XFS: noikeep mount option is deprecated. [ 236.788011][ T9806] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.828058][ T28] audit: type=1326 audit(1791445097.226:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 236.966348][ T28] audit: type=1326 audit(1791445097.226:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.015856][ T9806] XFS (loop1): Ending clean mount [ 237.038512][ T9806] XFS (loop1): Quotacheck needed: Please wait. [ 237.123370][ T28] audit: type=1326 audit(1791445097.266:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.197574][ T9806] XFS (loop1): Quotacheck: Done. [ 237.231328][ T9850] set_capacity_and_notify: 1 callbacks suppressed [ 237.231338][ T9850] loop2: detected capacity change from 0 to 512 [ 237.257547][ T28] audit: type=1326 audit(1791445097.266:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.324561][ T9850] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 237.374237][ T28] audit: type=1326 audit(1791445097.266:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.434166][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.462480][ T9850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.493568][ T28] audit: type=1326 audit(1791445097.266:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.528531][ T9850] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.574913][ T28] audit: type=1326 audit(1791445097.266:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.708630][ T28] audit: type=1326 audit(1791445097.266:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 237.831959][ T28] audit: type=1326 audit(1791445097.266:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.4.1195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f9e199 code=0x7ffc0000 [ 238.307248][ T9859] loop5: detected capacity change from 0 to 32768 [ 238.316525][ T9878] loop4: detected capacity change from 0 to 512 [ 238.377213][ T9878] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.1203: Invalid block bitmap block 0 in block_group 0 [ 238.402389][ T9859] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.465431][ T9878] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 238.495309][ T9878] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1203: attempt to clear invalid blocks 983261 len 1 [ 238.524686][ T9859] XFS (loop5): Ending clean mount [ 238.544312][ T9859] XFS (loop5): Quotacheck needed: Please wait. [ 238.560855][ T9878] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1203: invalid indirect mapped block 2683928664 (level 0) [ 238.686200][ T9878] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1203: Invalid inode table block 0 in block_group 0 [ 238.727633][ T9859] XFS (loop5): Quotacheck: Done. [ 238.738053][ T9878] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 238.791599][ T9878] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 238.836513][ T9878] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1203: Invalid inode table block 0 in block_group 0 [ 238.899572][ T9878] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 238.951513][ T9878] EXT4-fs error (device loop4): ext4_truncate:4314: inode #13: comm syz.4.1203: mark_inode_dirty error [ 239.006347][ T9878] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 239.059501][ T9878] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1203: Invalid inode table block 0 in block_group 0 [ 239.113935][ T9878] EXT4-fs (loop4): 1 truncate cleaned up [ 239.140718][ T9878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.231294][ T8061] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.353076][ T7542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.401454][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.744613][ T9901] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 239.771668][ T9901] nbd: error processing sock list [ 239.784536][ T9907] loop4: detected capacity change from 0 to 512 [ 239.821690][ T9901] block nbd0: shutting down sockets [ 240.088425][ T9914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.319930][ T9925] syz_tun: entered promiscuous mode [ 240.334806][ T9923] syz_tun: left promiscuous mode [ 240.876189][ T9947] loop4: detected capacity change from 0 to 256 [ 240.889170][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 240.907572][ T9947] exfat: Deprecated parameter 'utf8' [ 240.959220][ T9947] exfat: Deprecated parameter 'namecase' [ 240.985364][ T9947] exfat: Deprecated parameter 'namecase' [ 241.024193][ T9947] exfat: Deprecated parameter 'utf8' [ 241.051961][ T9947] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 241.099231][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 241.119935][ T8] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.148399][ T8] usb 6-1: config 0 has no interface number 0 [ 241.177115][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.208479][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.241246][ T9922] loop2: detected capacity change from 0 to 32768 [ 241.252401][ T8] usb 6-1: Product: syz [ 241.256592][ T8] usb 6-1: Manufacturer: syz [ 241.292175][ T8] usb 6-1: SerialNumber: syz [ 241.313567][ T8] usb 6-1: config 0 descriptor?? [ 241.346624][ T9922] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.387441][ T8] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.550664][ T9922] XFS (loop2): Ending clean mount [ 241.582142][ T9922] XFS (loop2): Quotacheck needed: Please wait. [ 241.623113][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.691391][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.764039][ T9922] XFS (loop2): Quotacheck: Done. [ 241.927041][ T9951] loop1: detected capacity change from 0 to 32768 [ 242.002786][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 242.002812][ T28] audit: type=1800 audit(1791445102.406:94): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1216" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 242.121946][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.131362][ T5813] usb 6-1: USB disconnect, device number 4 [ 242.165574][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.236959][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.313992][ T5813] quatech2 6-1:0.51: device disconnected [ 242.518185][ T9976] loop1: detected capacity change from 0 to 1024 [ 242.548887][ T9976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.608206][ T9976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.630789][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.852422][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.051678][ T9987] loop1: detected capacity change from 0 to 256 [ 243.563721][ T9978] loop4: detected capacity change from 0 to 40427 [ 243.613852][ T9978] F2FS-fs (loop4): heap/no_heap options were deprecated [ 243.686490][ T9978] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.751101][T10010] loop1: detected capacity change from 0 to 164 [ 243.857801][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1252'. [ 243.869155][T10010] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 243.901592][ T9978] F2FS-fs (loop4): Start checkpoint disabled! [ 244.032593][ T9978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 244.131523][ T9978] syz.4.1239: attempt to access beyond end of device [ 244.131523][ T9978] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 244.290133][ T1138] kworker/u4:7: attempt to access beyond end of device [ 244.290133][ T1138] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 244.331207][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.348779][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.366053][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.393039][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.423422][ T1138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.516031][T10026] loop2: detected capacity change from 0 to 128 [ 245.283945][T10046] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1266'. [ 245.681282][ T5813] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.879496][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 245.895363][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.907627][ T5813] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.917997][ T5813] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 245.934449][ T5813] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 245.948049][ T5813] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.961145][ T5813] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.971669][ T5813] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 245.983323][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.992101][ T5813] usb 5-1: Product: syz [ 245.996362][ T5813] usb 5-1: Manufacturer: syz [ 246.003537][ T5813] usb 5-1: SerialNumber: syz [ 246.218550][ T5813] usb 5-1: selecting invalid altsetting 0 [ 246.418641][ T5813] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 246.628634][ T5813] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 246.731384][ T5813] usb 5-1: USB disconnect, device number 9 [ 246.980294][T10076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1279'. [ 247.482199][T10094] loop1: detected capacity change from 0 to 4096 [ 247.575760][T10094] ntfs: volume version 3.1. [ 247.906963][T10108] loop1: detected capacity change from 0 to 2048 [ 247.928799][T10108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.244313][T10120] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 248.488562][T10133] Line length is too long: Should be less than 4094 [ 248.611064][T10137] loop4: detected capacity change from 0 to 764 [ 248.671002][T10137] Symlink component flag not implemented [ 248.708079][T10137] Symlink component flag not implemented [ 248.901654][T10146] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 249.380588][ T789] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 249.609230][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 249.623159][ T789] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 249.655382][T10163] loop4: detected capacity change from 0 to 16 [ 249.663973][ T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.682086][T10164] loop5: detected capacity change from 0 to 256 [ 249.694075][T10163] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 249.710833][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.762184][T10164] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 249.780849][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.838314][ T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.902760][T10164] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 249.932111][ T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.961201][T10164] exFAT-fs (loop5): Filesystem has been set read-only [ 249.976847][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.999856][ T28] audit: type=1804 audit(1791445110.396:95): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1321" name="/newroot/168/file2/file2" dev="loop5" ino=1048745 res=1 errno=0 [ 250.205302][T10175] loop4: detected capacity change from 0 to 256 [ 250.252135][ T789] usb 2-1: GET_CAPABILITIES returned 0 [ 250.263718][T10175] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 250.287977][ T789] usbtmc 2-1:16.0: can't read capabilities [ 250.361049][T10175] exFAT-fs (loop4): error, broken FAT chain. [ 250.387790][T10175] exFAT-fs (loop4): Filesystem has been set read-only [ 250.408072][T10175] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4c21e0 iblock : 0, err : -5) [ 250.457644][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.479827][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.488910][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.501575][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.510653][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.519693][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.528731][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.537772][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.546803][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.555857][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.586139][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.595223][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.604263][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.613297][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.622330][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.631369][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.640406][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 250.649511][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.700877][ T5774] usb 2-1: USB disconnect, device number 21 [ 251.105555][T10179] loop5: detected capacity change from 0 to 40427 [ 251.138032][T10179] F2FS-fs (loop5): invalid crc value [ 251.163997][T10179] F2FS-fs (loop5): Found nat_bits in checkpoint [ 251.254949][T10179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 251.297364][T10179] syz.5.1328: attempt to access beyond end of device [ 251.297364][T10179] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.336531][T10179] syz.5.1328: attempt to access beyond end of device [ 251.336531][T10179] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 251.420528][ T8061] syz-executor: attempt to access beyond end of device [ 251.420528][ T8061] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 251.463482][ T8061] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 251.994905][T10218] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.1343'. [ 252.021981][T10218] netlink: zone id is out of range [ 252.038783][T10218] netlink: zone id is out of range [ 252.059735][T10218] netlink: zone id is out of range [ 252.077994][T10218] netlink: zone id is out of range [ 252.094564][T10218] netlink: zone id is out of range [ 252.113711][T10218] netlink: zone id is out of range [ 252.123250][T10218] netlink: zone id is out of range [ 252.138280][T10218] netlink: zone id is out of range [ 252.154244][T10218] netlink: zone id is out of range [ 252.166443][T10224] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1346'. [ 252.180340][T10218] netlink: zone id is out of range [ 252.524905][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 252.552087][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 253.439915][T10267] loop7: detected capacity change from 0 to 7 [ 253.479414][ C0] blk_print_req_error: 12 callbacks suppressed [ 253.479425][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.494756][ C0] buffer_io_error: 11 callbacks suppressed [ 253.494764][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.515197][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.524445][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.532315][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 253.548977][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.558198][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.566822][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.575995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.588062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.597270][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.606556][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.615749][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.630141][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.639323][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.647225][T10267] ldm_validate_partition_table(): Disk read failed. [ 253.660572][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.669792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.678876][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.688075][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.697097][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.706305][T10267] Dev loop7: unable to read RDB block 0 [ 253.722496][T10267] loop7: unable to read partition table [ 253.731643][T10269] loop5: detected capacity change from 0 to 4096 [ 253.754262][T10267] loop7: partition table beyond EOD, truncated [ 253.765747][T10269] EXT4-fs: Ignoring removed nobh option [ 253.830858][T10267] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CîjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5) [ 253.930476][ T5139] ldm_validate_partition_table(): Disk read failed. [ 253.998129][ T5139] Dev loop7: unable to read RDB block 0 [ 254.012916][ T5139] loop7: unable to read partition table [ 254.039152][ T5139] loop7: partition table beyond EOD, truncated [ 254.083763][T10269] EXT4-fs: Ignoring removed bh option [ 254.124027][T10269] EXT4-fs (loop5): Test dummy encryption mode enabled [ 254.206713][T10269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.284524][T10287] pimreg: tun_chr_ioctl cmd 1074025677 [ 254.313870][T10287] pimreg: linktype set to 774 [ 254.407248][ T8061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.589705][ T28] audit: type=1326 audit(1791445114.996:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 254.701378][T10304] loop4: detected capacity change from 0 to 256 [ 254.707772][ T28] audit: type=1326 audit(1791445115.016:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 254.831458][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 254.846417][ T28] audit: type=1326 audit(1791445115.026:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 254.973772][ T28] audit: type=1326 audit(1791445115.026:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.052716][T10313] loop4: detected capacity change from 0 to 256 [ 255.115725][ T28] audit: type=1326 audit(1791445115.026:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.259275][ T28] audit: type=1326 audit(1791445115.026:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.393465][ T28] audit: type=1326 audit(1791445115.026:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.515788][T10326] binder: 10324:10326 ioctl 40046205 0 returned -22 [ 255.527287][ T28] audit: type=1326 audit(1791445115.026:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.568727][T10327] i2c i2c-0: delete_device: Deleting device ccgx-ucsi at 0x08 [ 255.675773][ T28] audit: type=1326 audit(1791445115.026:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.788478][ T28] audit: type=1326 audit(1791445115.026:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 255.891852][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898245][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.910486][ T28] audit: type=1326 audit(1791445115.026:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 256.011773][ T28] audit: type=1326 audit(1791445115.026:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 256.116220][ T28] audit: type=1326 audit(1791445115.026:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 256.179367][T10346] vcan0: tx address claim with dlc 0 [ 256.222104][ T28] audit: type=1326 audit(1791445115.036:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf779e199 code=0x7ffc0000 [ 256.326602][T10348] loop1: detected capacity change from 0 to 8192 [ 256.546486][T10356] loop4: detected capacity change from 0 to 256 [ 256.638484][ T5768] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 256.681363][ T5768] FAT-fs (loop1): Filesystem has been set read-only [ 257.004167][T10372] nvme_fcloop: unknown parameter or missing value 'ww' [ 258.130513][T10419] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 258.679162][ T789] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 258.708080][T10448] loop2: detected capacity change from 0 to 256 [ 258.745410][T10448] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.871303][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.908694][ T789] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 258.968162][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 258.997774][ T789] usb 5-1: Product: syz [ 259.013408][ T789] usb 5-1: Manufacturer: syz [ 259.053489][ T789] usb 5-1: selecting invalid altsetting 1 [ 259.092663][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1446'. [ 259.106520][ T789] dvb_ttusb_budget: ttusb_init_controller: error [ 259.132096][ T789] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 259.255117][T10430] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 259.308221][ T789] DVB: Unable to find symbol cx22700_attach() [ 259.338577][T10460] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 259.432190][ T789] DVB: Unable to find symbol tda10046_attach() [ 259.461199][ T789] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 259.517318][ T789] usb 5-1: USB disconnect, device number 10 [ 259.807107][T10458] loop5: detected capacity change from 0 to 40427 [ 259.835108][T10458] F2FS-fs (loop5): invalid crc value [ 259.856297][T10458] F2FS-fs (loop5): Found nat_bits in checkpoint [ 259.935265][T10458] F2FS-fs (loop5): Start checkpoint disabled! [ 259.964453][T10458] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 259.982109][T10458] F2FS-fs (loop5): Skipping Checkpoint. Checkpoints currently disabled. [ 260.039736][ T1138] kworker/u4:7: attempt to access beyond end of device [ 260.039736][ T1138] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 260.058028][ T1138] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 260.066904][ T1138] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 273.334597][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 317.335755][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.345650][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.249107][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 378.772923][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.779435][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.649160][ T29] INFO: task kworker/u4:4:59 blocked for more than 143 seconds. [ 421.657347][ T29] Not tainted syzkaller #0 [ 421.671679][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.681039][ T29] task:kworker/u4:4 state:D stack:21544 pid:59 ppid:2 flags:0x00004000 [ 421.696778][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 421.706987][ T29] Call Trace: [ 421.713126][ T29] [ 421.716115][ T29] __schedule+0x15ae/0x4660 [ 421.727978][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 421.738787][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 421.753224][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 421.764065][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 421.771834][ T29] ? asan.module_dtor+0x20/0x20 [ 421.776697][ T29] ? blk_check_plugged+0x250/0x250 [ 421.791621][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 421.796769][ T29] ? wq_worker_sleeping+0x63/0x240 [ 421.802576][ T29] schedule+0xbd/0x170 [ 421.806737][ T29] io_schedule+0x80/0xd0 [ 421.821979][ T29] rq_qos_wait+0x22b/0x360 [ 421.826435][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 421.840995][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 421.846320][ T29] ? rq_qos_wait+0x360/0x360 [ 421.854592][ T29] ? wbt_exit+0xb0/0xb0 [ 421.858827][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 421.875689][ T29] wbt_wait+0x34a/0x580 [ 421.881460][ T29] ? rwb_trace_step+0x320/0x320 [ 421.886340][ T29] ? dd_depth_updated+0x110/0x110 [ 421.905884][ T29] ? rwb_trace_step+0x320/0x320 [ 421.914163][ T29] __rq_qos_throttle+0x65/0xb0 [ 421.921209][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 421.926235][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 421.941548][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 421.947303][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 421.957379][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 421.971165][ T29] ? ktime_get+0x7f/0x280 [ 421.975550][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 421.989902][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 421.995238][ T29] __submit_bio+0x12b/0x260 [ 422.007729][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 422.016186][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 422.024111][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 422.035625][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 422.044482][ T29] ? should_fail_request+0x70/0x70 [ 422.052496][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 422.057716][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 422.069835][ T29] mpage_submit_folio+0x231/0x3c0 [ 422.074886][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 422.088814][ T29] mpage_prepare_extent_to_map+0xecd/0x1f80 [ 422.097853][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 422.106484][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 422.116900][ T29] ext4_do_writepages+0xb46/0x3990 [ 422.124422][ T29] ? wg_packet_handshake_send_worker+0x207/0x360 [ 422.135869][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 422.146876][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 422.158622][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 422.168711][ T29] ext4_writepages+0x1dd/0x350 [ 422.177208][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 422.188880][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 422.196505][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 422.208670][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 422.214122][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 422.228041][ T29] do_writepages+0x351/0x590 [ 422.232946][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 422.238664][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 422.253783][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.258837][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 422.270777][ T29] __writeback_single_inode+0x14e/0xee0 [ 422.276708][ T29] writeback_sb_inodes+0x813/0x1020 [ 422.288218][ T29] ? queue_io+0x530/0x530 [ 422.295845][ T29] __writeback_inodes_wb+0x114/0x240 [ 422.302135][ T29] wb_writeback+0x472/0xbe0 [ 422.306662][ T29] ? queue_io+0x2c1/0x530 [ 422.312989][ T29] ? percpu_ref_tryget+0x250/0x250 [ 422.318115][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 422.324960][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.333810][ T29] wb_workfn+0xad7/0xe60 [ 422.338081][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 422.344669][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 422.352551][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.357583][ T29] ? read_lock_is_recursive+0x20/0x20 [ 422.363306][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.373625][ T29] ? process_scheduled_works+0x975/0x1600 [ 422.379598][ T29] ? process_scheduled_works+0x975/0x1600 [ 422.385318][ T29] process_scheduled_works+0xa60/0x1600 [ 422.393850][ T29] ? worker_attach_to_pool+0x370/0x370 [ 422.399508][ T29] ? assign_work+0x3cc/0x5d0 [ 422.404099][ T29] worker_thread+0xa5e/0xfe0 [ 422.408705][ T29] kthread+0x2fa/0x390 [ 422.415482][ T29] ? pr_cont_work+0x550/0x550 [ 422.420401][ T29] ? kthread_blkcg+0xd0/0xd0 [ 422.425111][ T29] ret_from_fork+0x48/0x80 [ 422.429855][ T29] ? kthread_blkcg+0xd0/0xd0 [ 422.434467][ T29] ret_from_fork_asm+0x11/0x20 [ 422.443489][ T29] [ 422.446557][ T29] INFO: task jbd2/sda1-8:5102 blocked for more than 144 seconds. [ 422.455787][ T29] Not tainted syzkaller #0 [ 422.463257][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.472970][ T29] task:jbd2/sda1-8 state:D stack:24648 pid:5102 ppid:2 flags:0x00004000 [ 422.485808][ T29] Call Trace: [ 422.489349][ T29] [ 422.492280][ T29] __schedule+0x15ae/0x4660 [ 422.496790][ T29] ? asan.module_dtor+0x20/0x20 [ 422.504852][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.510146][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 422.516055][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 422.523905][ T29] schedule+0xbd/0x170 [ 422.527982][ T29] io_schedule+0x80/0xd0 [ 422.532469][ T29] bit_wait_io+0x11/0xd0 [ 422.536711][ T29] __wait_on_bit+0x9f/0x2c0 [ 422.541575][ T29] ? bit_wait+0xd0/0xd0 [ 422.545727][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 422.555469][ T29] ? bit_wait+0xd0/0xd0 [ 422.559826][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 422.564587][ T29] ? do_raw_write_lock+0x11e/0x260 [ 422.573042][ T29] ? bit_waitqueue+0x30/0x30 [ 422.577641][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 422.582934][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 422.592930][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 422.599966][ T29] ? lock_chain_count+0x20/0x20 [ 422.604830][ T29] ? _raw_spin_unlock+0x40/0x40 [ 422.613706][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 422.619608][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 422.624889][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.632587][ T29] ? timer_delete_sync+0x20/0x20 [ 422.637531][ T29] ? do_raw_read_unlock+0x80/0x80 [ 422.642853][ T29] ? prepare_to_wait+0x1aa/0x200 [ 422.647792][ T29] kjournald2+0x40f/0x810 [ 422.654539][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 422.661274][ T29] ? wake_bit_function+0x200/0x200 [ 422.666414][ T29] ? _raw_spin_unlock+0x40/0x40 [ 422.674622][ T29] ? __kthread_parkme+0x71/0x1c0 [ 422.679783][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 422.684820][ T29] kthread+0x2fa/0x390 [ 422.688877][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 422.696645][ T29] ? kthread_blkcg+0xd0/0xd0 [ 422.701469][ T29] ret_from_fork+0x48/0x80 [ 422.705881][ T29] ? kthread_blkcg+0xd0/0xd0 [ 422.714694][ T29] ret_from_fork_asm+0x11/0x20 [ 422.720183][ T29] [ 422.723216][ T29] INFO: task syz-executor:5756 blocked for more than 144 seconds. [ 422.733482][ T29] Not tainted syzkaller #0 [ 422.738409][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.747590][ T29] task:syz-executor state:D stack:22000 pid:5756 ppid:5755 flags:0x00004002 [ 422.759376][ T29] Call Trace: [ 422.762685][ T29] [ 422.765630][ T29] __schedule+0x15ae/0x4660 [ 422.775269][ T29] ? mark_lock+0x94/0x320 [ 422.781263][ T29] ? asan.module_dtor+0x20/0x20 [ 422.786121][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.793090][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 422.799770][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 422.805000][ T29] schedule+0xbd/0x170 [ 422.811025][ T29] io_schedule+0x80/0xd0 [ 422.815287][ T29] bit_wait_io+0x11/0xd0 [ 422.821994][ T29] __wait_on_bit+0x9f/0x2c0 [ 422.826521][ T29] ? bit_wait+0xd0/0xd0 [ 422.833299][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 422.838772][ T29] ? bit_wait+0xd0/0xd0 [ 422.843807][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 422.848574][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 422.855783][ T29] ? bit_waitqueue+0x30/0x30 [ 422.861204][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 422.866408][ T29] do_get_write_access+0x5c9/0xe00 [ 422.873472][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 422.882385][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 422.888572][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 422.896645][ T29] ? __might_sleep+0xe0/0xe0 [ 422.901989][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 422.907537][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 422.914952][ T29] ext4_dirty_inode+0xcb/0x110 [ 422.920455][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 422.926261][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 422.938672][ T29] file_update_time+0x187/0x1a0 [ 422.945414][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 422.952358][ T29] ? do_wp_page+0x4ce/0x34d0 [ 422.956950][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 422.964129][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.970986][ T29] do_page_mkwrite+0x153/0x3f0 [ 422.975754][ T29] do_wp_page+0xd4d/0x34d0 [ 422.981826][ T29] ? folio_put+0xd0/0xd0 [ 422.986072][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 422.994353][ T29] ? __rwlock_init+0x150/0x150 [ 422.999896][ T29] handle_mm_fault+0x1306/0x4a50 [ 423.004834][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 423.012049][ T29] ? numa_migrate_prep+0x350/0x350 [ 423.017180][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 423.023371][ T29] do_user_addr_fault+0x736/0x12d0 [ 423.028493][ T29] exc_page_fault+0x64/0x100 [ 423.035030][ T29] ? clear_bhb_loop+0x40/0x90 [ 423.041487][ T29] asm_exc_page_fault+0x26/0x30 [ 423.046350][ T29] RIP: 0033:0x7efd8a47c722 [ 423.053439][ T29] RSP: 002b:00007ffc0432bf20 EFLAGS: 00010202 [ 423.060758][ T29] RAX: 00007efd883f4000 RBX: 0000555556989570 RCX: 0000000000000004 [ 423.068752][ T29] RDX: 0000000000002ecf RSI: 0000555556982e30 RDI: 0000000000000010 [ 423.078847][ T29] RBP: 00007ffc0432c420 R08: 0000555556982ec8 R09: 0000000000000090 [ 423.088439][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc0432c260 [ 423.098367][ T29] R13: 00007ffc0432c050 R14: 585858582e7a7973 R15: 00007ffc0432bfa0 [ 423.108505][ T29] [ 423.113369][ T29] INFO: task syz.2.1450:10464 blocked for more than 144 seconds. [ 423.121834][ T29] Not tainted syzkaller #0 [ 423.126756][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.137313][ T29] task:syz.2.1450 state:D stack:27560 pid:10464 ppid:5769 flags:0x00004004 [ 423.147330][ T29] Call Trace: [ 423.153553][ T29] [ 423.156488][ T29] __schedule+0x15ae/0x4660 [ 423.162471][ T29] ? mark_lock+0x94/0x320 [ 423.166805][ T29] ? asan.module_dtor+0x20/0x20 [ 423.173997][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.179911][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 423.186676][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 423.193802][ T29] schedule+0xbd/0x170 [ 423.197891][ T29] io_schedule+0x80/0xd0 [ 423.202960][ T29] bit_wait_io+0x11/0xd0 [ 423.207209][ T29] __wait_on_bit+0x9f/0x2c0 [ 423.215019][ T29] ? bit_wait+0xd0/0xd0 [ 423.219921][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 423.225377][ T29] ? bit_wait+0xd0/0xd0 [ 423.231350][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 423.236107][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 423.241978][ T29] ? bit_waitqueue+0x30/0x30 [ 423.246604][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 423.253875][ T29] do_get_write_access+0x5c9/0xe00 [ 423.260895][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 423.266884][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 423.275728][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 423.282787][ T29] ? __might_sleep+0xe0/0xe0 [ 423.287392][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 423.295907][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 423.302187][ T29] ext4_dirty_inode+0xcb/0x110 [ 423.306948][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 423.314659][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 423.321912][ T29] file_update_time+0x187/0x1a0 [ 423.326768][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 423.335225][ T29] ? filemap_fault+0x103c/0x1540 [ 423.340795][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 423.346505][ T29] ? pte_alloc_one+0x3b6/0x540 [ 423.353262][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 423.360258][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.365284][ T29] do_page_mkwrite+0x153/0x3f0 [ 423.373024][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 423.377962][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 423.384212][ T29] ? numa_migrate_prep+0x350/0x350 [ 423.392225][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 423.397513][ T29] do_user_addr_fault+0x736/0x12d0 [ 423.403606][ T29] exc_page_fault+0x64/0x100 [ 423.408196][ T29] ? clear_bhb_loop+0x40/0x90 [ 423.415509][ T29] asm_exc_page_fault+0x26/0x30 [ 423.421090][ T29] RIP: 0033:0x7fc2e286bae3 [ 423.425499][ T29] RSP: 002b:00007ffe99a528e0 EFLAGS: 00010246 [ 423.434921][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d264000 [ 423.444114][ T29] RDX: 0000001b2d224000 RSI: 0000000000400000 RDI: 00007fc2e2be2708 [ 423.453918][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.462821][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 423.472689][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe99a52b70 [ 423.482444][ T29] [ 423.485493][ T29] INFO: task syz.1.1451:10465 blocked for more than 145 seconds. [ 423.497661][ T29] Not tainted syzkaller #0 [ 423.503606][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.514375][ T29] task:syz.1.1451 state:D stack:27560 pid:10465 ppid:5768 flags:0x00004004 [ 423.524459][ T29] Call Trace: [ 423.527744][ T29] [ 423.532562][ T29] __schedule+0x15ae/0x4660 [ 423.537102][ T29] ? mark_lock+0x94/0x320 [ 423.543788][ T29] ? asan.module_dtor+0x20/0x20 [ 423.548658][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.556070][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 423.562792][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 423.567993][ T29] schedule+0xbd/0x170 [ 423.574400][ T29] io_schedule+0x80/0xd0 [ 423.578648][ T29] bit_wait_io+0x11/0xd0 [ 423.583695][ T29] __wait_on_bit+0x9f/0x2c0 [ 423.588198][ T29] ? bit_wait+0xd0/0xd0 [ 423.596070][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 423.602879][ T29] ? bit_wait+0xd0/0xd0 [ 423.607041][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 423.613876][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 423.619822][ T29] ? bit_waitqueue+0x30/0x30 [ 423.624417][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 423.631514][ T29] do_get_write_access+0x5c9/0xe00 [ 423.636639][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 423.643415][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 423.655960][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 423.662841][ T29] ? __might_sleep+0xe0/0xe0 [ 423.667431][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 423.674879][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 423.681142][ T29] ext4_dirty_inode+0xcb/0x110 [ 423.685921][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 423.693656][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 423.701309][ T29] file_update_time+0x187/0x1a0 [ 423.706168][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 423.713656][ T29] ? filemap_fault+0x103c/0x1540 [ 423.718619][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 423.725434][ T29] ? pte_alloc_one+0x3b6/0x540 [ 423.732285][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 423.738531][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.744498][ T29] do_page_mkwrite+0x153/0x3f0 [ 423.751152][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 423.756104][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 423.763492][ T29] ? numa_migrate_prep+0x350/0x350 [ 423.768623][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 423.776322][ T29] do_user_addr_fault+0x736/0x12d0 [ 423.782306][ T29] exc_page_fault+0x64/0x100 [ 423.786905][ T29] ? clear_bhb_loop+0x40/0x90 [ 423.793591][ T29] asm_exc_page_fault+0x26/0x30 [ 423.798446][ T29] RIP: 0033:0x7f17a286bae3 [ 423.804611][ T29] RSP: 002b:00007ffcaf4055c0 EFLAGS: 00010246 [ 423.814090][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d164000 [ 423.823377][ T29] RDX: 0000001b2d124000 RSI: 0000000000400000 RDI: 00007f17a2be2708 [ 423.833454][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.842340][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 423.852337][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcaf405850 [ 423.860587][ T29] [ 423.863613][ T29] INFO: task syz.4.1452:10467 blocked for more than 145 seconds. [ 423.875294][ T29] Not tainted syzkaller #0 [ 423.880431][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.891572][ T29] task:syz.4.1452 state:D stack:27560 pid:10467 ppid:7542 flags:0x00004004 [ 423.901014][ T29] Call Trace: [ 423.905184][ T29] [ 423.908134][ T29] __schedule+0x15ae/0x4660 [ 423.915190][ T29] ? mark_lock+0x94/0x320 [ 423.919798][ T29] ? asan.module_dtor+0x20/0x20 [ 423.924648][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.934134][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 423.940426][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 423.945632][ T29] schedule+0xbd/0x170 [ 423.952479][ T29] io_schedule+0x80/0xd0 [ 423.956788][ T29] bit_wait_io+0x11/0xd0 [ 423.961367][ T29] __wait_on_bit+0x9f/0x2c0 [ 423.965877][ T29] ? bit_wait+0xd0/0xd0 [ 423.976948][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 423.984031][ T29] ? bit_wait+0xd0/0xd0 [ 423.988221][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 423.995467][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 424.000658][ T29] ? bit_waitqueue+0x30/0x30 [ 424.006123][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 424.013870][ T29] do_get_write_access+0x5c9/0xe00 [ 424.019172][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 424.025164][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 424.033839][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 424.041899][ T29] ? __might_sleep+0xe0/0xe0 [ 424.046508][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 424.055519][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 424.061465][ T29] ext4_dirty_inode+0xcb/0x110 [ 424.066225][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 424.074556][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 424.079748][ T29] file_update_time+0x187/0x1a0 [ 424.084596][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 424.089946][ T29] ? filemap_fault+0x103c/0x1540 [ 424.094883][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 424.104294][ T29] ? pte_alloc_one+0x3b6/0x540 [ 424.110090][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 424.116333][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 424.123792][ T29] do_page_mkwrite+0x153/0x3f0 [ 424.128556][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 424.133897][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 424.138843][ T29] ? numa_migrate_prep+0x350/0x350 [ 424.146500][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 424.154356][ T29] do_user_addr_fault+0x736/0x12d0 [ 424.161949][ T29] exc_page_fault+0x64/0x100 [ 424.166554][ T29] ? clear_bhb_loop+0x40/0x90 [ 424.171631][ T29] asm_exc_page_fault+0x26/0x30 [ 424.176476][ T29] RIP: 0033:0x7f67f3e6bae3 [ 424.183524][ T29] RSP: 002b:00007ffc5765af00 EFLAGS: 00010246 [ 424.189859][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33764000 [ 424.197825][ T29] RDX: 0000001b33724000 RSI: 0000000000400000 RDI: 00007f67f41e2708 [ 424.208311][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.221338][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 424.229527][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc5765b190 [ 424.237503][ T29] [ 424.242975][ T29] INFO: task syz.5.1453:10469 blocked for more than 145 seconds. [ 424.250878][ T29] Not tainted syzkaller #0 [ 424.255802][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.264814][ T29] task:syz.5.1453 state:D stack:27560 pid:10469 ppid:8061 flags:0x00004004 [ 424.278471][ T29] Call Trace: [ 424.282077][ T29] [ 424.285003][ T29] __schedule+0x15ae/0x4660 [ 424.292214][ T29] ? mark_lock+0x94/0x320 [ 424.296561][ T29] ? asan.module_dtor+0x20/0x20 [ 424.301648][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 424.306673][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 424.315970][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 424.322782][ T29] schedule+0xbd/0x170 [ 424.326855][ T29] io_schedule+0x80/0xd0 [ 424.333527][ T29] bit_wait_io+0x11/0xd0 [ 424.337775][ T29] __wait_on_bit+0x9f/0x2c0 [ 424.342510][ T29] ? bit_wait+0xd0/0xd0 [ 424.346660][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 424.354621][ T29] ? bit_wait+0xd0/0xd0 [ 424.358772][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 424.363767][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 424.368794][ T29] ? bit_waitqueue+0x30/0x30 [ 424.373721][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 424.384351][ T29] do_get_write_access+0x5c9/0xe00 [ 424.389804][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 424.395784][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 424.404548][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 424.410898][ T29] ? __might_sleep+0xe0/0xe0 [ 424.416354][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 424.424386][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 424.431452][ T29] ext4_dirty_inode+0xcb/0x110 [ 424.436217][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 424.444509][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 424.450491][ T29] file_update_time+0x187/0x1a0 [ 424.455351][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 424.462927][ T29] ? filemap_fault+0x103c/0x1540 [ 424.467870][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 424.473887][ T29] ? pte_alloc_one+0x3b6/0x540 [ 424.478676][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 424.487374][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 424.494224][ T29] do_page_mkwrite+0x153/0x3f0 [ 424.501507][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 424.506450][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 424.511766][ T29] ? numa_migrate_prep+0x350/0x350 [ 424.518046][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 424.525739][ T29] do_user_addr_fault+0x736/0x12d0 [ 424.531129][ T29] exc_page_fault+0x64/0x100 [ 424.535717][ T29] ? clear_bhb_loop+0x40/0x90 [ 424.545849][ T29] asm_exc_page_fault+0x26/0x30 [ 424.550900][ T29] RIP: 0033:0x7f9bf766bae3 [ 424.555306][ T29] RSP: 002b:00007fff6c180770 EFLAGS: 00010246 [ 424.563846][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33664000 [ 424.572013][ T29] RDX: 0000001b33624000 RSI: 0000000000400000 RDI: 00007f9bf79e2708 [ 424.582390][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.590560][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 424.598543][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6c180a00 [ 424.606899][ T29] [ 424.613918][ T29] [ 424.613918][ T29] Showing all locks held in the system: [ 424.622855][ T29] 1 lock held by khungtaskd/29: [ 424.627703][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 424.640045][ T29] 4 locks held by kworker/u4:4/59: [ 424.645148][ T29] #0: ffff88801e25d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 424.660832][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 424.674116][ T29] #2: ffff88814d71c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 424.686488][ T29] #3: ffff88814d71ec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 424.700630][ T29] 2 locks held by getty/5521: [ 424.705308][ T29] #0: ffff888032c620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 424.715321][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 424.729060][ T29] 3 locks held by syz-executor/5756: [ 424.734374][ T29] #0: ffff888030904420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.746681][ T29] #1: ffff88814d71c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 424.756676][ T29] #2: ffff88814d720990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 424.772133][ T29] 3 locks held by syz.2.1450/10464: [ 424.777344][ T29] #0: ffff8880769d01a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.788255][ T29] #1: ffff88814d71c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 424.800476][ T29] #2: ffff88814d720990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 424.811136][ T29] 3 locks held by syz.1.1451/10465: [ 424.816346][ T29] #0: ffff8880769d4da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.830640][ T29] #1: ffff88814d71c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 424.842587][ T29] #2: ffff88814d720990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 424.861829][ T29] 3 locks held by syz.4.1452/10467: [ 424.867070][ T29] #0: ffff888022134420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.881215][ T29] #1: ffff88814d71c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 424.891363][ T29] #2: ffff88814d720990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 424.903440][ T29] 3 locks held by syz.5.1453/10469: [ 424.908637][ T29] #0: ffff888022136a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 424.918835][ T29] #1: ffff88814d71c510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 424.931897][ T29] #2: ffff88814d720990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 424.943422][ T29] [ 424.945750][ T29] ============================================= [ 424.945750][ T29] [ 424.956934][ T29] NMI backtrace for cpu 0 [ 424.961289][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 424.968466][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 424.978501][ T29] Call Trace: [ 424.981764][ T29] [ 424.984684][ T29] dump_stack_lvl+0x18c/0x250 [ 424.989350][ T29] ? __wake_up_klogd+0xd9/0x100 [ 424.994208][ T29] ? show_regs_print_info+0x20/0x20 [ 424.999403][ T29] ? load_image+0x420/0x420 [ 425.004162][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 425.009087][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 425.015223][ T29] ? load_image+0x420/0x420 [ 425.019707][ T29] ? wq_watchdog_touch+0xef/0x170 [ 425.024731][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 425.030784][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 425.036747][ T29] watchdog+0xf59/0xfa0 [ 425.040889][ T29] ? watchdog+0x1e1/0xfa0 [ 425.045215][ T29] kthread+0x2fa/0x390 [ 425.049266][ T29] ? hungtask_pm_notify+0x50/0x50 [ 425.054295][ T29] ? kthread_blkcg+0xd0/0xd0 [ 425.058869][ T29] ret_from_fork+0x48/0x80 [ 425.063272][ T29] ? kthread_blkcg+0xd0/0xd0 [ 425.067849][ T29] ret_from_fork_asm+0x11/0x20 [ 425.072603][ T29] [ 425.087588][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 425.094453][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 425.101651][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.111685][ T29] Call Trace: [ 425.114949][ T29] [ 425.117865][ T29] dump_stack_lvl+0x18c/0x250 [ 425.122528][ T29] ? show_regs_print_info+0x20/0x20 [ 425.127731][ T29] ? load_image+0x420/0x420 [ 425.132226][ T29] panic+0x2ca/0x720 [ 425.136109][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 425.140612][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 425.146245][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 425.151607][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 425.157759][ T29] watchdog+0xf98/0xfa0 [ 425.161922][ T29] ? watchdog+0x1e1/0xfa0 [ 425.166239][ T29] kthread+0x2fa/0x390 [ 425.170290][ T29] ? hungtask_pm_notify+0x50/0x50 [ 425.175386][ T29] ? kthread_blkcg+0xd0/0xd0 [ 425.179971][ T29] ret_from_fork+0x48/0x80 [ 425.184371][ T29] ? kthread_blkcg+0xd0/0xd0 [ 425.188958][ T29] ret_from_fork_asm+0x11/0x20 [ 425.193713][ T29] [ 425.196801][ T29] Kernel Offset: disabled [ 425.201111][ T29] Rebooting in 86400 seconds..