last executing test programs: 4.890458923s ago: executing program 3 (id=1271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x9, 0x6e, 0xffffffff}, 0x14) 4.127644356s ago: executing program 3 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x60000010) 3.936022809s ago: executing program 3 (id=1282): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@datacow}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000004c0)={&(0x7f0000000140)=[{&(0x7f0000000100)='I\t', 0x2}], 0x1, 0x0, 0x0, 0x3, 0x800000950, 0xed, 0x3}) 3.499611929s ago: executing program 2 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "02ea"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) 3.244116816s ago: executing program 2 (id=1285): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) eventfd2(0xd8e, 0x800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.008301983s ago: executing program 2 (id=1287): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) 2.816134086s ago: executing program 3 (id=1288): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB="63726561746f723d05f343e92c6469725f756d61736b3d30303030303030303030303030303030303130303030312c636f6465706167653d63703836332c63726561746f723d32c9459b2c696f636861727365743d6d6163637972696c6c69632c00"], 0x81, 0x30e, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000004980)=""/174, 0xae) 2.784909588s ago: executing program 2 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) 2.518476236s ago: executing program 2 (id=1291): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2.389555985s ago: executing program 1 (id=1292): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'macsec0\x00', {}, 0xfffe}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000540)={0x0, 'bridge_slave_0\x00', {0x2}, 0x8}) 2.114211095s ago: executing program 1 (id=1293): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x1fa, &(0x7f0000000940)="$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") chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x189) 1.797305377s ago: executing program 3 (id=1295): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000240)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ba8e750ff39244144a06582a19364d3c5190d2fa5cebd2747e8ceb18079b85c374c4ae58b6532534406af5360fd38cbd2800896b9bdd7f75b5aca3ab0bbfe3766ed385e88d170e6dcf28164c0986b0f046ac64cc8a06a88e2b80021986f83a78988c2c08e3e395cf3b66b1d340f8884dcc18fa527db3eee14bdef54a0a99f6a6f055968cb518ffd2e6bd9ca500e5692cd6308959b5a3b929fd1898372175c14561df7a00f6252ea5e224673c32590c7bc210bdb5b18262d242aad19270ddb8401d7fff5ada4fe667bb0dcd41165c144bac"], 0x1, 0x9e28, &(0x7f000000a040)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1.750373829s ago: executing program 2 (id=1296): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x28, {0x28, 0x5, "f70ba385038de583bb48fd16a2cb4fd4a0560fb30d54f3e5c5b1d43e2f40f4809166714c75ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.272372872s ago: executing program 1 (id=1297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000380)=0x2, 0x4) 1.178951099s ago: executing program 0 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x44048850) 1.096086624s ago: executing program 3 (id=1299): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 967.675744ms ago: executing program 0 (id=1300): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000576000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 869.743ms ago: executing program 0 (id=1301): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2048d1, &(0x7f0000000100), 0x9, 0x33c, &(0x7f0000000bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) getdents64(r0, &(0x7f0000002d00)=""/4096, 0x1000) 530.215214ms ago: executing program 0 (id=1302): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x204, 0x2}, 0xe) 358.047726ms ago: executing program 1 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 336.813327ms ago: executing program 0 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 160.151809ms ago: executing program 0 (id=1305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 115.373132ms ago: executing program 1 (id=1306): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) 0s ago: executing program 1 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)="f3d34c328eb9fb9244ebdcdf956468ce26b69ae785f6c17430d58cded19b380965a2ad0ab7089071b11b9dfb66cae0895fa8b21930489a9961f4ad4a82be40a89a9e84aea1e75fe0ec5c857c38595519c45f517be4a51ebad720e9aa33c9962a5b112b8e70dee09aa758a9b3d8c7eafd2f42e868a98f7353badf", &(0x7f0000000040), 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000080)=""/17}, 0x20) kernel console output (not intermixed with test programs): gh-speed USB device number 5 using dummy_hcd [ 132.989307][ T6888] loop1: detected capacity change from 0 to 64 [ 133.015919][ T6865] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 133.174159][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181740][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204380][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 133.267860][ T786] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.288918][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.320973][ T786] usb 1-1: config 0 descriptor?? [ 133.326933][ T6883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.626066][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 133.839928][ T786] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 134.061969][ T966] usb 1-1: USB disconnect, device number 5 [ 134.312434][ T6917] loop2: detected capacity change from 0 to 256 [ 134.341724][ T6917] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x4ea91ace, utbl_chksum : 0xe619d30d) [ 134.354693][ T6917] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 134.784764][ T6928] netlink: 'syz.0.422': attribute type 5 has an invalid length. [ 134.808704][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 135.236319][ T6944] loop3: detected capacity change from 0 to 512 [ 135.268605][ T6944] EXT4-fs: Ignoring removed nobh option [ 135.301163][ T6944] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.390144][ T6944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.405899][ T6953] kernel profiling enabled (shift: 34) [ 135.413205][ T6953] profiling shift: 34 too large [ 135.455050][ T6955] loop0: detected capacity change from 0 to 512 [ 135.458803][ T6944] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.462746][ T6955] EXT4-fs: Ignoring removed nobh option [ 135.504428][ T6955] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 135.514180][ T6955] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 135.522799][ T6955] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.434: inode has both inline data and extents flags [ 135.537249][ T6955] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.434: couldn't read orphan inode 13 (err -117) [ 135.551177][ T6955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.685431][ T6944] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.431: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 135.720918][ T6944] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.431: directory missing '.' [ 135.722840][ T6955] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 135.805135][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.830870][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.951572][ T5833] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 136.072188][ T6964] loop3: detected capacity change from 0 to 1764 [ 136.103546][ T6966] loop0: detected capacity change from 0 to 256 [ 136.150210][ T5833] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 136.173792][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.216859][ T5833] usb 3-1: config 0 has no interface number 0 [ 136.240895][ T5833] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 136.261839][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.302185][ T5833] usb 3-1: Product: syz [ 136.306429][ T5833] usb 3-1: Manufacturer: syz [ 136.346311][ T5833] usb 3-1: SerialNumber: syz [ 136.361710][ T5833] usb 3-1: config 0 descriptor?? [ 136.385324][ T5833] cdc_acm 3-1:0.123: More than one union descriptor, skipping ... [ 136.650478][ T5833] usb 3-1: USB disconnect, device number 9 [ 137.083771][ T6992] loop0: detected capacity change from 0 to 64 [ 137.634693][ T7000] netlink: 384 bytes leftover after parsing attributes in process `syz.0.455'. [ 137.808064][ T786] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 137.887027][ T7006] loop0: detected capacity change from 0 to 4096 [ 137.935446][ T7007] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.038591][ T6994] loop2: detected capacity change from 0 to 32768 [ 138.069562][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.089353][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.125609][ T786] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 138.140341][ T6994] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 138.189565][ T6994] JBD2: Ignoring recovery information on journal [ 138.196192][ T786] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.243134][ T7010] loop1: detected capacity change from 0 to 128 [ 138.247446][ T786] usb 4-1: Manufacturer: syz [ 138.278563][ T7010] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 138.306876][ T786] usb 4-1: config 0 descriptor?? [ 138.330259][ T7010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.368305][ T6994] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.781798][ T786] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 138.807559][ T786] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 138.814617][ T786] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 138.832837][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 138.837017][ T786] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 138.873503][ T786] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 138.929169][ T786] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 139.087691][ T7028] loop1: detected capacity change from 0 to 256 [ 139.109330][ T5761] usb 4-1: USB disconnect, device number 6 [ 139.135467][ T7028] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 139.305781][ T7029] fido_id[7029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.824386][ T7042] loop0: detected capacity change from 0 to 4096 [ 140.769013][ T7076] loop1: detected capacity change from 0 to 512 [ 140.886139][ T7076] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 141.227636][ T7084] @ÿ: renamed from veth0_vlan (while UP) [ 141.716067][ T7070] loop3: detected capacity change from 0 to 32768 [ 141.862410][ T7070] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.032164][ T7070] XFS (loop3): Ending clean mount [ 142.122841][ T7085] loop0: detected capacity change from 0 to 32768 [ 142.164436][ T7085] (syz.0.488,7085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.233369][ T7085] (syz.0.488,7085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.331689][ T7085] JBD2: Ignoring recovery information on journal [ 142.386445][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.449338][ T7085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 142.611711][ T7113] loop2: detected capacity change from 0 to 8192 [ 142.700301][ T7113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.760203][ T7113] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 142.827655][ T7113] REISERFS (device loop2): using ordered data mode [ 142.830608][ T7093] loop1: detected capacity change from 0 to 32768 [ 142.834222][ T7113] reiserfs: using flush barriers [ 142.884272][ T7113] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.930228][ T7113] REISERFS (device loop2): checking transaction log (loop2) [ 143.020090][ T7093] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.131604][ T7134] loop3: detected capacity change from 0 to 8 [ 143.226252][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 143.259765][ T7093] XFS (loop1): Ending clean mount [ 143.353100][ T7113] REISERFS (device loop2): Using tea hash to sort names [ 143.374145][ T7134] SQUASHFS error: Failed to read block 0x2d0: -5 [ 143.407999][ T7113] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 143.447572][ T7134] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 143.457065][ T7113] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 143.481340][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.488493][ T7134] SQUASHFS error: Unable to read directory block [2ce:0] [ 144.527621][ T786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.747493][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 144.767631][ T786] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.793690][ T7163] loop2: detected capacity change from 0 to 512 [ 144.796126][ T786] usb 4-1: config 0 has no interface number 0 [ 144.841090][ T786] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 144.858005][ T7163] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 144.871007][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.900121][ T786] usb 4-1: Product: syz [ 144.903549][ T7163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.917665][ T786] usb 4-1: Manufacturer: syz [ 144.923772][ T786] usb 4-1: SerialNumber: syz [ 144.929927][ T7163] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.505: Block bitmap for bg 0 marked uninitialized [ 144.958758][ T786] usb 4-1: config 0 descriptor?? [ 144.973870][ T786] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 144.987626][ T786] usb 4-1: selecting invalid altsetting 1 [ 144.993604][ T786] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 145.005384][ T786] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.017675][ T786] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 145.027851][ T786] usb 4-1: media controller created [ 145.063203][ T7163] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 145.066519][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.133499][ T7163] EXT4-fs (loop2): 1 orphan inode deleted [ 145.149007][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.298258][ T7163] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.505: Block bitmap for bg 0 marked uninitialized [ 145.339496][ T7141] loop1: detected capacity change from 0 to 32768 [ 145.389841][ T7141] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.498 (7141) [ 145.435963][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.513775][ T7141] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 145.576456][ T7141] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 145.622090][ T7141] BTRFS info (device loop1): enabling disk space caching [ 145.657937][ T7141] BTRFS info (device loop1): force clearing of disk cache [ 145.665349][ T7141] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.724102][ T7141] BTRFS info (device loop1): use zstd compression, level 3 [ 145.744011][ T7141] BTRFS info (device loop1): disk space caching is enabled [ 145.882042][ T7141] BTRFS info (device loop1): enabling ssd optimizations [ 145.904298][ T7141] BTRFS info (device loop1): auto enabling async discard [ 145.948634][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 146.287934][ T786] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 146.310065][ T5777] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 146.325974][ T786] zl10353_read_register: readreg error (reg=127, ret==-110) [ 146.363692][ T7150] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 146.615866][ T7212] tipc: Started in network mode [ 146.644910][ T7212] tipc: Node identity ac14142f, cluster identity 4711 [ 146.687842][ T7212] tipc: New replicast peer: 0.0.0.0 [ 146.694989][ T7212] tipc: Enabled bearer , priority 10 [ 146.696138][ T786] usb 4-1: USB disconnect, device number 7 [ 146.742035][ T7214] netlink: 48 bytes leftover after parsing attributes in process `syz.0.522'. [ 146.967534][ T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 147.179399][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.201454][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.224446][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 147.238252][ T5833] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 147.240166][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.269239][ T27] usb 3-1: SerialNumber: syz [ 147.301066][ T27] usb 3-1: bad CDC descriptors [ 147.306931][ T27] usb-storage 3-1:1.0: USB Mass Storage device detected [ 147.370789][ T27] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 147.437895][ T27] scsi host1: usb-storage 3-1:1.0 [ 147.456320][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.493752][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.554475][ T5833] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 147.597938][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.625684][ T5833] usb 2-1: config 0 descriptor?? [ 147.808157][ T966] tipc: Node number set to 2886997039 [ 147.868249][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.973981][ T7252] netlink: 'syz.3.524': attribute type 280 has an invalid length. [ 148.058475][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.077573][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.079771][ T5833] cypress 0003:04B4:DE64.0009: item fetching failed at offset 0/3 [ 148.095629][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.108949][ T27] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 148.129148][ T5833] cypress 0003:04B4:DE64.0009: parse failed [ 148.135192][ T5833] cypress: probe of 0003:04B4:DE64.0009 failed with error -22 [ 148.141871][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.164861][ T27] usb 1-1: config 0 descriptor?? [ 148.353463][ T5833] usb 2-1: USB disconnect, device number 6 [ 148.629067][ T27] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x2 [ 148.655663][ T27] hid-rmi 0003:0461:4E72.000A: item fetching failed at offset 3/11 [ 148.666825][ T27] hid-rmi 0003:0461:4E72.000A: parse failed [ 148.683348][ T27] hid-rmi: probe of 0003:0461:4E72.000A failed with error -22 [ 148.863184][ T27] usb 1-1: USB disconnect, device number 6 [ 148.889412][ T7276] loop3: detected capacity change from 0 to 2048 [ 148.915990][ T7276] EXT4-fs: Ignoring removed oldalloc option [ 148.987658][ T7276] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 149.014980][ T7276] System zones: 0-7 [ 149.036034][ T7276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.137726][ T7276] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.529: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 149.195407][ T7276] EXT4-fs (loop3): Remounting filesystem read-only [ 149.280382][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.559031][ T7282] loop1: detected capacity change from 0 to 32768 [ 149.577944][ T7282] XFS: noikeep mount option is deprecated. [ 149.612254][ T5833] usb 3-1: USB disconnect, device number 10 [ 149.678594][ T7282] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.011094][ T7282] XFS (loop1): Ending clean mount [ 150.041903][ T7282] XFS (loop1): Quotacheck needed: Please wait. [ 150.115670][ T7282] XFS (loop1): Quotacheck: Done. [ 150.290739][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.305429][ T7315] loop3: detected capacity change from 0 to 1024 [ 150.451795][ T49] hfsplus: b-tree write err: -5, ino 25 [ 150.461030][ T49] hfsplus: b-tree write err: -5, ino 4 [ 150.466873][ T49] hfsplus: b-tree write err: -5, ino 2 [ 150.761176][ T7325] loop3: detected capacity change from 0 to 4096 [ 150.780531][ T7325] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 150.797786][ T7325] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 150.818982][ T7325] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 150.834169][ T7325] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 150.864966][ T7325] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.882009][ T28] audit: type=1326 audit(1775705347.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08bf9c819 code=0x7ffc0000 [ 150.909688][ T28] audit: type=1326 audit(1775705347.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd08bf9c819 code=0x7ffc0000 [ 150.941165][ T28] audit: type=1326 audit(1775705347.179:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08bf9c819 code=0x7ffc0000 [ 150.964458][ T7325] ntfs: volume version 3.1. [ 150.989572][ T28] audit: type=1326 audit(1775705347.179:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08bf9c819 code=0x7ffc0000 [ 151.021503][ T7325] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 151.662279][ T7331] loop2: detected capacity change from 0 to 32768 [ 151.750721][ T7331] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.909118][ T7331] XFS (loop2): Ending clean mount [ 152.092719][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.224003][ T7357] loop0: detected capacity change from 0 to 8192 [ 152.233627][ T7357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.248708][ T7357] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 152.264580][ T7357] REISERFS (device loop0): using ordered data mode [ 152.276658][ T7357] reiserfs: using flush barriers [ 152.330410][ T7357] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.384467][ T7357] REISERFS (device loop0): checking transaction log (loop0) [ 152.437090][ T7357] REISERFS (device loop0): Using r5 hash to sort names [ 152.472020][ T7357] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 152.515635][ T7357] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 152.681910][ T7357] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 152.733282][ T7357] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 152.823793][ T7371] vlan2: entered promiscuous mode [ 152.894125][ T7371] bridge0: entered promiscuous mode [ 153.259864][ T2991] bond0: (slave bond_slave_0): interface is now down [ 153.265213][ T7383] loop0: detected capacity change from 0 to 1024 [ 153.277634][ T2991] bond0: (slave bond_slave_1): interface is now down [ 153.306634][ T7379] loop3: detected capacity change from 0 to 4096 [ 153.314363][ T2991] bond0: (slave netdevsim0): interface is now down [ 153.345347][ T2991] bond0: now running without any active interface! [ 153.456045][ T7383] hfsplus: found bad thread record in catalog [ 153.476639][ T7387] loop2: detected capacity change from 0 to 64 [ 153.589400][ T2991] hfsplus: b-tree write err: -5, ino 25 [ 153.595343][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 153.622429][ T2991] hfsplus: b-tree write err: -5, ino 2 [ 153.818133][ T966] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 154.011191][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 154.022909][ T966] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 154.055734][ T966] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.078043][ T966] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.113394][ T966] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.163591][ T966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.180769][ T966] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 154.192654][ T7404] loop2: detected capacity change from 0 to 512 [ 154.217574][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.242770][ T966] usb 2-1: config 0 descriptor?? [ 154.273752][ T7404] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 154.329570][ T7411] loop3: detected capacity change from 0 to 1024 [ 154.377238][ T7404] EXT4-fs (loop2): 1 truncate cleaned up [ 154.404362][ T7404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.621871][ T2991] hfsplus: b-tree write err: -5, ino 25 [ 154.633373][ T7413] loop0: detected capacity change from 0 to 4096 [ 154.644451][ T7404] EXT4-fs: Ignoring removed orlov option [ 154.644615][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 154.655114][ T7404] EXT4-fs: Ignoring removed orlov option [ 154.671317][ T7413] ntfs: volume version 3.1. [ 154.676267][ T2991] hfsplus: b-tree write err: -5, ino 2 [ 154.714694][ T7404] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.579: Abort forced by user [ 154.732158][ T966] hid-alps 0003:044E:120C.000B: unknown main item tag 0x6 [ 154.775389][ T966] hid-alps 0003:044E:120C.000B: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 154.791454][ T7404] EXT4-fs (loop2): Remounting filesystem read-only [ 154.821679][ T7404] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 155.012481][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.046318][ T966] usb 2-1: USB disconnect, device number 7 [ 155.190978][ T7422] loop2: detected capacity change from 0 to 1024 [ 155.486616][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 155.587698][ T7432] loop3: detected capacity change from 0 to 2048 [ 155.645296][ T7432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.731062][ T7438] vivid-002: disconnect [ 155.768927][ T7437] vivid-002: reconnect [ 155.881896][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.899046][ T7440] loop2: detected capacity change from 0 to 128 [ 156.107630][ T7447] CUSE: info not properly terminated [ 156.494130][ T7454] loop1: detected capacity change from 0 to 1024 [ 156.517077][ T7458] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.518695][ T7454] EXT4-fs: Ignoring removed bh option [ 156.566790][ T7454] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.637223][ T7454] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #3: block 1: comm syz.1.601: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.655106][ T7454] __quota_error: 28 callbacks suppressed [ 156.655123][ T7454] Quota error (device loop1): write_blk: dquota write failed [ 156.670851][ T7454] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 156.681521][ T7454] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.601: Failed to acquire dquot type 0 [ 156.731186][ T7454] EXT4-fs error (device loop1): ext4_free_blocks:6692: comm syz.1.601: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.746381][ T7454] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.601: Invalid inode bitmap blk 0 in block_group 0 [ 156.765061][ T12] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.803802][ T7454] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 156.854515][ T7444] loop0: detected capacity change from 0 to 32768 [ 156.866007][ T7454] EXT4-fs (loop1): 1 orphan inode deleted [ 156.877656][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 156.916103][ T7454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.937718][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 157.019272][ T7444] jfs: Unrecognized mount option "quota=" or missing value [ 157.135392][ T7454] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.160159][ T7469] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (18333!=0) [ 157.315419][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.212259][ T7497] loop1: detected capacity change from 0 to 128 [ 158.290549][ T7497] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.319484][ T7497] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.370438][ T7475] loop2: detected capacity change from 0 to 32768 [ 158.390775][ T7475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.610 (7475) [ 158.429781][ T7475] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.466761][ T7475] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 158.487584][ T7475] BTRFS info (device loop2): setting nodatasum [ 158.497331][ T7475] BTRFS info (device loop2): force zlib compression, level 3 [ 158.509561][ T7475] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 158.534010][ T7475] BTRFS info (device loop2): use lzo compression, level 0 [ 158.589054][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.602989][ T7475] BTRFS info (device loop2): turning on flush-on-commit [ 158.622868][ T7475] BTRFS info (device loop2): enabling auto defrag [ 158.638018][ T7475] BTRFS info (device loop2): max_inline at 4096 [ 158.677776][ T7475] BTRFS info (device loop2): using free space tree [ 158.861681][ T7475] BTRFS info (device loop2): enabling ssd optimizations [ 159.033908][ T7493] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.219197][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.329515][ T7493] XFS (loop3): Ending clean mount [ 159.367358][ T7493] XFS (loop3): Quotacheck needed: Please wait. [ 159.473883][ T7539] set_capacity_and_notify: 1 callbacks suppressed [ 159.473899][ T7539] loop1: detected capacity change from 0 to 512 [ 159.491493][ T7493] XFS (loop3): Quotacheck: Done. [ 159.544698][ T7539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.703548][ T7544] loop2: detected capacity change from 0 to 8 [ 159.750484][ T7544] SQUASHFS error: Unable to read directory block [629:46] [ 159.826902][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.843060][ T7542] loop0: detected capacity change from 0 to 4096 [ 159.897106][ T7542] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 159.943355][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.102392][ T7548] loop2: detected capacity change from 0 to 1024 [ 160.761827][ T7560] hsr0: entered promiscuous mode [ 160.768029][ T7560] macsec1: entered promiscuous mode [ 160.908766][ T7547] loop1: detected capacity change from 0 to 40427 [ 160.946130][ T7547] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 160.966218][ T7547] F2FS-fs (loop1): heap/no_heap options were deprecated [ 160.989207][ T7547] F2FS-fs (loop1): invalid crc value [ 161.008625][ T7547] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.042147][ T7566] loop2: detected capacity change from 0 to 64 [ 161.207673][ T28] audit: type=1800 audit(1775705357.519:18): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.642" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 161.285801][ T7547] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.609719][ T5777] syz-executor: attempt to access beyond end of device [ 161.609719][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.650951][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 161.832688][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 161.956945][ T5761] kernel write not supported for file /sysvipc/sem (pid: 5761 comm: kworker/1:3) [ 162.613301][ T7597] loop2: detected capacity change from 0 to 4096 [ 162.632204][ T7580] loop0: detected capacity change from 0 to 40427 [ 162.660548][ T7597] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 162.700687][ T7580] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 162.733781][ T7580] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.772364][ T7580] F2FS-fs (loop0): invalid crc value [ 162.787544][ T5761] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.805306][ T7599] loop1: detected capacity change from 0 to 512 [ 162.819961][ T7580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.970816][ T7580] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.987142][ T7580] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.991756][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 163.029781][ T5761] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 163.050936][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.089588][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.108166][ T5761] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 163.124326][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.174617][ T5761] usb 4-1: config 0 descriptor?? [ 163.300443][ T7607] loop2: detected capacity change from 0 to 4096 [ 163.350658][ T7607] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 163.421285][ T7607] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 163.457618][ T7607] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 163.496941][ T7607] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 163.558116][ T7607] ntfs: volume version 3.1. [ 163.623931][ T5761] logitech 0003:046D:C29C.000C: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 163.639069][ T7607] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 163.727686][ T7607] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 163.809005][ T5761] logitech 0003:046D:C29C.000C: no inputs found [ 163.833277][ T5761] usb 4-1: USB disconnect, device number 8 [ 163.949941][ T5774] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 164.925707][ T7643] netlink: 108 bytes leftover after parsing attributes in process `syz.2.675'. [ 164.991570][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 165.074604][ T7649] set_capacity_and_notify: 1 callbacks suppressed [ 165.074622][ T7649] loop0: detected capacity change from 0 to 512 [ 165.136269][ T7649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.167921][ T7649] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.204533][ T7649] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.679: corrupted xattr block 32: overlapping e_value [ 165.342762][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.835413][ T7671] loop1: detected capacity change from 0 to 256 [ 166.120125][ T7679] mmap: syz.2.684 (7679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.156192][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.691'. [ 166.575726][ T7694] loop3: detected capacity change from 0 to 64 [ 167.547552][ T5833] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.601376][ T7689] loop0: detected capacity change from 0 to 32768 [ 167.631424][ T7689] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.657744][ T7689] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.714333][ T7689] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 167.735940][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 167.743303][ T5833] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 167.755278][ T5833] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 167.758986][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 167.764825][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.802102][ T5833] usb 3-1: Product: syz [ 167.806377][ T5833] usb 3-1: Manufacturer: syz [ 167.810298][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 167.817484][ T5833] usb 3-1: SerialNumber: syz [ 167.834525][ T5833] usb 3-1: config 0 descriptor?? [ 167.853968][ T5833] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 167.867572][ T5833] usb 3-1: setting power ON [ 167.872170][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 167.910883][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.916683][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 167.943384][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 167.948172][ T5833] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 167.970913][ T7689] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.983180][ T5833] usb 3-1: media controller created [ 168.016865][ T7714] loop3: detected capacity change from 0 to 32768 [ 168.068571][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.112392][ T7710] dvb-usb: bulk message failed: -22 (3/0) [ 168.124268][ T7714] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 168.130749][ T5833] usb 3-1: selecting invalid altsetting 6 [ 168.159489][ T7713] loop1: detected capacity change from 0 to 32768 [ 168.161912][ T7714] JBD2: Ignoring recovery information on journal [ 168.193547][ T5833] usb 3-1: digital interface selection failed (-22) [ 168.209312][ T5833] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 168.233910][ T5833] usb 3-1: setting power OFF [ 168.236379][ T7713] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.240421][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 168.265069][ T5833] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 168.274870][ T5833] (NULL device *): no alternate interface [ 168.312472][ T5833] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 168.320281][ T7714] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 168.336978][ T5833] usb 3-1: USB disconnect, device number 11 [ 168.469328][ T7713] XFS (loop1): Ending clean mount [ 168.561376][ T7689] gfs2: fsid=syz:syz.0: found 1 quota changes [ 168.653153][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 168.698171][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.791489][ T7689] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 168.791489][ T7689] inode = 11 2339 [ 168.791489][ T7689] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 168.839389][ T7689] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 168.852018][ T7689] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7689 [syz.0.696] gfs2_quota_sync+0x411/0x5a0 [ 168.862918][ T7689] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 168.887668][ T7689] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 169.013400][ T7689] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 169.047683][ T7689] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 169.119787][ T7689] gfs2: fsid=syz:syz.0: File system withdrawn [ 169.158731][ T7689] CPU: 1 PID: 7689 Comm: syz.0.696 Not tainted syzkaller #0 [ 169.166111][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.176400][ T7689] Call Trace: [ 169.179742][ T7689] [ 169.182723][ T7689] dump_stack_lvl+0x18c/0x250 [ 169.187464][ T7689] ? kobject_uevent_env+0x363/0x8b0 [ 169.192729][ T7689] ? show_regs_print_info+0x20/0x20 [ 169.198118][ T7689] ? load_image+0x420/0x420 [ 169.202675][ T7689] ? kobject_uevent_env+0x363/0x8b0 [ 169.207948][ T7689] gfs2_withdraw+0xb24/0x13d0 [ 169.212792][ T7689] ? gfs2_lm+0x240/0x240 [ 169.217105][ T7689] ? preempt_schedule+0xc0/0xd0 [ 169.222103][ T7689] ? gfs2_consist_inode_i+0xf5/0x110 [ 169.227593][ T7689] gfs2_inode_refresh+0xb89/0x1000 [ 169.232900][ T7689] ? gfs2_inode_metasync+0xf0/0xf0 [ 169.238033][ T7689] ? gfs2_glock_nq+0xd4f/0x1420 [ 169.242911][ T7689] gfs2_instantiate+0x162/0x220 [ 169.247783][ T7689] gfs2_glock_wait+0x1d4/0x2a0 [ 169.252574][ T7689] do_sync+0x4c6/0xe50 [ 169.256660][ T7689] ? gfs2_quota_sync+0x411/0x5a0 [ 169.261619][ T7689] ? bh_get+0x760/0x760 [ 169.265791][ T7689] ? gfs2_quota_sync+0x31a/0x5a0 [ 169.270746][ T7689] ? gfs2_quota_sync+0x411/0x5a0 [ 169.275700][ T7689] ? do_raw_spin_unlock+0x121/0x230 [ 169.280948][ T7689] ? do_raw_spin_unlock+0x121/0x230 [ 169.286177][ T7689] gfs2_quota_sync+0x411/0x5a0 [ 169.290997][ T7689] gfs2_sync_fs+0x4c/0xb0 [ 169.295372][ T7689] sync_filesystem+0xea/0x220 [ 169.300081][ T7689] gfs2_reconfigure+0xbb/0xb10 [ 169.304880][ T7689] ? hook_sb_remount+0x1b/0xc0 [ 169.309672][ T7689] ? bpf_lsm_sb_remount+0x9/0x10 [ 169.314626][ T7689] reconfigure_super+0x21e/0x8a0 [ 169.319603][ T7689] vfs_fsconfig_locked+0x16c/0x320 [ 169.324745][ T7689] __se_sys_fsconfig+0x70d/0x850 [ 169.329704][ T7689] ? __x64_sys_fsconfig+0xc0/0xc0 [ 169.334755][ T7689] ? lockdep_hardirqs_on+0x98/0x150 [ 169.340052][ T7689] ? __x64_sys_fsconfig+0x20/0xc0 [ 169.346958][ T7689] do_syscall_64+0x55/0xa0 [ 169.351491][ T7689] ? clear_bhb_loop+0x40/0x90 [ 169.356305][ T7689] ? clear_bhb_loop+0x40/0x90 [ 169.361030][ T7689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.367057][ T7689] RIP: 0033:0x7f083fd9c819 [ 169.371513][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.391241][ T7689] RSP: 002b:00007f0840ba5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 169.399677][ T7689] RAX: ffffffffffffffda RBX: 00007f0840015fa0 RCX: 00007f083fd9c819 [ 169.407663][ T7689] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 169.415645][ T7689] RBP: 00007f083fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.423635][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.431709][ T7689] R13: 00007f0840016038 R14: 00007f0840015fa0 R15: 00007ffc95ea0d48 [ 169.439710][ T7689] [ 169.956924][ T7744] loop0: detected capacity change from 0 to 64 [ 170.086072][ T7746] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 170.129032][ T7746] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 170.156102][ T7746] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 170.171720][ T7746] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 170.186889][ T7746] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 170.217836][ T7746] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 170.235212][ T7746] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 170.257767][ T7746] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 170.277294][ T7746] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 170.286845][ T7750] loop1: detected capacity change from 0 to 512 [ 170.289584][ T7746] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 170.302926][ T7750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.359495][ T7750] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #11: comm syz.1.719: iget: bad extended attribute block 3153 [ 170.385296][ T7750] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.719: couldn't read orphan inode 11 (err -117) [ 170.450452][ T7750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.457860][ T7733] loop2: detected capacity change from 0 to 40427 [ 170.485175][ T7733] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 170.517327][ T7733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 170.549532][ T7733] F2FS-fs (loop2): invalid crc value [ 170.564553][ T7733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.703319][ T7733] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 170.712428][ T7733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.734043][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.113169][ T7766] loop0: detected capacity change from 0 to 4096 [ 171.145006][ T7772] loop2: detected capacity change from 0 to 512 [ 171.169584][ T7772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.215014][ T7772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.317675][ T7772] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.350211][ T7778] loop3: detected capacity change from 0 to 1024 [ 171.444926][ T7778] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 171.545672][ T7778] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.729: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.687650][ T7778] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 171.729874][ T7778] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.729: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.755555][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.767536][ T7778] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 171.776913][ T7778] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.729: Failed to acquire dquot type 0 [ 171.893471][ T7778] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 171.927682][ T7778] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.729: mark_inode_dirty error [ 171.970145][ T7778] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 171.994378][ T7778] EXT4-fs (loop3): 1 orphan inode deleted [ 172.006655][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.033155][ T11] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.066414][ T7787] loop1: detected capacity change from 0 to 4096 [ 172.071692][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 172.117682][ T7787] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 172.129935][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 172.241263][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.261608][ T11] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.295645][ T7787] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.320259][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 172.328985][ T7787] ntfs3: loop1: Inode r=b is not in use! [ 172.334757][ T7787] ntfs3: loop1: Failed to load $Extend (-116). [ 172.348835][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 172.361994][ T7787] ntfs3: loop1: Failed to initialize $Extend. [ 172.382869][ T5773] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 172.433084][ T5773] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5932: Corrupt filesystem [ 172.463467][ T5773] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 172.917553][ T966] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.128120][ T966] usb 4-1: Using ep0 maxpacket: 32 [ 173.138829][ T966] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 173.150280][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.175972][ T966] usb 4-1: Product: syz [ 173.182270][ T966] usb 4-1: Manufacturer: syz [ 173.191249][ T966] usb 4-1: SerialNumber: syz [ 173.217106][ T966] usb 4-1: config 0 descriptor?? [ 173.410273][ T7817] netlink: 71 bytes leftover after parsing attributes in process `syz.2.748'. [ 173.537542][ T7809] loop0: detected capacity change from 0 to 32768 [ 173.649697][ T7809] ialloc: diAlloc returned -5! [ 173.748137][ T112] ERROR: (device loop0): diUpdatePMap: the iag is outside the map [ 173.748137][ T112] [ 173.794559][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 173.841735][ T966] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 173.958144][ T966] peak_usb: probe of 4-1:0.0 failed with error -71 [ 173.970566][ T7830] netlink: 128 bytes leftover after parsing attributes in process `syz.2.755'. [ 173.977006][ T966] usb 4-1: USB disconnect, device number 9 [ 173.986349][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 174.104427][ T7834] loop1: detected capacity change from 0 to 256 [ 174.150320][ T7836] loop2: detected capacity change from 0 to 1024 [ 174.169636][ T1142] hfsplus: b-tree write err: -5, ino 25 [ 174.175541][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 174.228694][ T1142] hfsplus: b-tree write err: -5, ino 2 [ 174.696088][ T7847] loop2: detected capacity change from 0 to 1024 [ 174.830593][ T7847] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 174.861505][ T7847] hfsplus: xattr searching failed [ 174.912389][ T7854] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 174.944268][ T7854] hfsplus: xattr searching failed [ 174.979890][ T7854] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 174.986500][ T7854] hfsplus: xattr searching failed [ 175.001579][ T7854] syz.2.763: attempt to access beyond end of device [ 175.001579][ T7854] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 175.038925][ T7854] Buffer I/O error on dev loop2, logical block 458752, async page read [ 175.058137][ T7852] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.076972][ T7854] hfsplus: unable to mark blocks free: error -5 [ 175.092855][ T7852] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 175.099365][ T7854] hfsplus: can't free extent [ 175.127827][ T7852] REISERFS (device loop1): using ordered data mode [ 175.141345][ T7852] reiserfs: using flush barriers [ 175.187088][ T7852] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.219342][ T7852] REISERFS (device loop1): checking transaction log (loop1) [ 175.319742][ T7852] REISERFS (device loop1): Using r5 hash to sort names [ 175.363221][ T7852] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 175.500800][ T7863] set_capacity_and_notify: 1 callbacks suppressed [ 175.500818][ T7863] loop2: detected capacity change from 0 to 512 [ 175.527140][ T7863] EXT4-fs: Ignoring removed oldalloc option [ 175.585814][ T7863] EXT4-fs (loop2): 1 truncate cleaned up [ 175.627835][ T7863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.628052][ T7843] loop3: detected capacity change from 0 to 32768 [ 175.705439][ T7863] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.766: invalid indirect mapped block 234881024 (level 0) [ 175.808644][ T7843] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.840292][ T7863] EXT4-fs (loop2): Remounting filesystem read-only [ 175.967609][ T7843] XFS (loop3): Ending clean mount [ 176.067226][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.268106][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.442801][ T7888] loop0: detected capacity change from 0 to 64 [ 176.665229][ T7881] loop1: detected capacity change from 0 to 32768 [ 176.706428][ T7881] [ 176.706428][ T7881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.706428][ T7881] [ 176.786988][ T7894] loop0: detected capacity change from 0 to 1024 [ 176.838794][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.889846][ T5777] [ 176.889846][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.889846][ T5777] [ 176.927154][ T7894] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.936744][ T5777] [ 176.936744][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.936744][ T5777] [ 177.140020][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.342732][ T7908] loop0: detected capacity change from 0 to 64 [ 177.635329][ T7909] loop1: detected capacity change from 0 to 4096 [ 177.674072][ T7909] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 177.740941][ T7909] ntfs3: loop1: MFT: r=b, expect seq=b instead of 0! [ 177.787574][ T7909] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 177.818775][ T7909] ntfs3: loop1: Failed to load $Extend (-22). [ 177.825118][ T7909] ntfs3: loop1: Failed to initialize $Extend. [ 177.905325][ T7915] loop0: detected capacity change from 0 to 128 [ 177.972524][ T7915] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.078015][ T7915] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.330899][ T7903] loop2: detected capacity change from 0 to 32768 [ 178.360000][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.391330][ T7903] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 178.431556][ T7903] JBD2: Ignoring recovery information on journal [ 178.580287][ T7903] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.733983][ T7917] loop3: detected capacity change from 0 to 32768 [ 178.793357][ T7917] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.831432][ T7938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.937795][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 178.996642][ T7938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.042815][ T7938] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.238105][ T7917] XFS (loop3): Ending clean mount [ 179.278897][ T7917] XFS (loop3): Quotacheck needed: Please wait. [ 179.375777][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.392625][ T7917] XFS (loop3): Quotacheck: Done. [ 179.781491][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.998787][ T7967] ubi31: attaching mtd0 [ 180.003396][ T7967] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 180.533041][ T7981] set_capacity_and_notify: 1 callbacks suppressed [ 180.533058][ T7981] loop3: detected capacity change from 0 to 2048 [ 180.606412][ T7981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.010045][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 181.198193][ T8005] loop1: detected capacity change from 0 to 1024 [ 181.377703][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.823'. [ 181.675557][ T8013] loop1: detected capacity change from 0 to 4096 [ 181.716087][ T8013] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 181.897753][ T8013] ntfs: volume version 3.1. [ 182.068936][ T966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.258330][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 182.267243][ T8035] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 182.284299][ T966] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 182.293899][ T966] usb 1-1: config 0 has no interface number 0 [ 182.304069][ T966] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 182.347775][ T966] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.375859][ T966] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.416492][ T966] usb 1-1: config 0 interface 196 has no altsetting 0 [ 182.436476][ T966] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 182.446624][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.461618][ T966] usb 1-1: Product: syz [ 182.465873][ T966] usb 1-1: Manufacturer: syz [ 182.493053][ T966] usb 1-1: SerialNumber: syz [ 182.509307][ T28] audit: type=1326 audit(1775705378.829:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff2d9c819 code=0x0 [ 182.534279][ T8043] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 182.535321][ T8039] sp0: Synchronizing with TNC [ 182.563413][ T966] usb 1-1: config 0 descriptor?? [ 182.573491][ T8023] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.575310][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.586274][ T8044] sp0: Found TNC [ 182.621131][ T8043] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 182.634641][ T8045] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 182.643283][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.839'. [ 182.653371][ T8045] batadv0: entered promiscuous mode [ 182.658723][ T8045] batadv0: entered allmulticast mode [ 182.666041][ T8045] bond0: (slave batadv0): Releasing backup interface [ 182.690041][ T8045] bridge0: port 3(batadv0) entered blocking state [ 182.698914][ T8045] bridge0: port 3(batadv0) entered disabled state [ 183.000163][ T3481] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 183.011248][ T3481] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 183.218953][ T966] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 183.237199][ T966] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 183.249085][ T966] usb 1-1: USB disconnect, device number 7 [ 183.289211][ T966] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 183.367737][ T5833] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.568042][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.608061][ T5833] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 183.617281][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.638377][ T5833] usb 3-1: Product: syz [ 183.643034][ T5833] usb 3-1: Manufacturer: syz [ 183.648432][ T5833] usb 3-1: SerialNumber: syz [ 183.663971][ T5833] usb 3-1: selecting invalid altsetting 1 [ 183.680008][ T5833] usb 3-1: unit 6 not found! [ 183.991152][ T8070] loop0: detected capacity change from 0 to 256 [ 184.064219][ T8070] FAT-fs (loop0): Directory bread(block 64) failed [ 184.076370][ T8070] FAT-fs (loop0): Directory bread(block 65) failed [ 184.083625][ T8070] FAT-fs (loop0): Directory bread(block 66) failed [ 184.107536][ T8070] FAT-fs (loop0): Directory bread(block 67) failed [ 184.114245][ T8070] FAT-fs (loop0): Directory bread(block 68) failed [ 184.134063][ T5833] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 184.157612][ T8070] FAT-fs (loop0): Directory bread(block 69) failed [ 184.164184][ T5833] usb 3-1: selecting invalid altsetting 1 [ 184.164329][ T8070] FAT-fs (loop0): Directory bread(block 70) failed [ 184.185273][ T5833] usb 3-1: unit 6 not found! [ 184.212146][ T8070] FAT-fs (loop0): Directory bread(block 71) failed [ 184.213572][ T5833] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 184.219326][ T8070] FAT-fs (loop0): Directory bread(block 72) failed [ 184.234321][ T8070] FAT-fs (loop0): Directory bread(block 73) failed [ 184.268371][ T5833] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 184.299221][ T5833] usb 3-1: selecting invalid altsetting 1 [ 184.306781][ T5833] usb 3-1: unit 6 not found! [ 184.338645][ T5833] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 184.447065][ T5833] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 184.471037][ T5833] usb 3-1: USB disconnect, device number 12 [ 184.485285][ T8076] loop3: detected capacity change from 0 to 4096 [ 184.568755][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.651778][ T8076] ntfs3: loop3: ino=5, "/" directory corrupted [ 184.682618][ T8076] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 185.028531][ T8082] netlink: 92 bytes leftover after parsing attributes in process `syz.3.856'. [ 185.073603][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 185.204154][ T8074] loop1: detected capacity change from 0 to 32768 [ 185.273523][ T8074] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 185.294134][ T8074] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.514137][ T8074] XFS (loop1): Ending clean mount [ 185.523163][ T8074] XFS (loop1): Quotacheck needed: Please wait. [ 185.609535][ T8074] XFS (loop1): Quotacheck: Done. [ 185.850785][ T8104] binder: 8103:8104 ioctl 4018620d 0 returned -22 [ 185.856078][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.873637][ T8104] binder: 8103:8104 ioctl c0306201 200000000300 returned -11 [ 186.132858][ T8096] loop0: detected capacity change from 0 to 32768 [ 186.212570][ T8096] (syz.0.861,8096,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 186.249404][ T8096] (syz.0.861,8096,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 186.354434][ T8096] JBD2: Ignoring recovery information on journal [ 186.368878][ T8097] comedi comedi2: reset error (fatal) [ 186.483906][ T8096] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.564202][ T8114] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 186.789420][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 186.942661][ T8123] loop1: detected capacity change from 0 to 64 [ 187.155871][ T8129] loop0: detected capacity change from 0 to 256 [ 187.589666][ T8139] loop0: detected capacity change from 0 to 256 [ 187.614388][ T8141] loop1: detected capacity change from 0 to 256 [ 187.650280][ T8143] loop3: detected capacity change from 0 to 512 [ 187.678141][ T8139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 187.704435][ T8143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.812386][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.851603][ T8143] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.029147][ T28] audit: type=1800 audit(1775705384.349:20): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name=0AF301 dev="loop3" ino=18 res=0 errno=0 [ 188.106526][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.425564][ T8133] loop2: detected capacity change from 0 to 32768 [ 189.062739][ T8179] loop3: detected capacity change from 0 to 2048 [ 189.089899][ T8179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.154488][ T8200] loop2: detected capacity change from 0 to 1024 [ 190.358902][ T8191] loop0: detected capacity change from 0 to 32768 [ 190.365730][ T2991] hfsplus: b-tree write err: -5, ino 25 [ 190.393378][ T8191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.904 (8191) [ 190.395130][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 190.433030][ T8187] F2FS-fs (loop1): invalid crc value [ 190.437827][ T2991] hfsplus: b-tree write err: -5, ino 2 [ 190.462264][ T2991] hfsplus: b-tree write err: -5, ino 17 [ 190.478848][ T8187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.501021][ T8191] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.539025][ T8191] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 190.592976][ T8191] BTRFS info (device loop0): setting nodatasum [ 190.623098][ T8191] BTRFS info (device loop0): force zlib compression, level 3 [ 190.654783][ T8191] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 190.685890][ T8191] BTRFS info (device loop0): use lzo compression, level 0 [ 190.697723][ T8187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 190.711002][ T8191] BTRFS info (device loop0): turning on flush-on-commit [ 190.741391][ T8191] BTRFS info (device loop0): enabling auto defrag [ 190.766037][ T8191] BTRFS info (device loop0): max_inline at 4096 [ 190.803900][ T8191] BTRFS info (device loop0): using free space tree [ 190.857872][ T5777] syz-executor: attempt to access beyond end of device [ 190.857872][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.882704][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.064780][ T8191] BTRFS info (device loop0): enabling ssd optimizations [ 191.354664][ T8234] usb usb8: usbfs: process 8234 (syz.2.915) did not claim interface 0 before use [ 191.542255][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.709475][ T8239] set_capacity_and_notify: 2 callbacks suppressed [ 191.709494][ T8239] loop2: detected capacity change from 0 to 512 [ 191.772342][ T8239] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.918: invalid indirect mapped block 256 (level 2) [ 191.797275][ T8239] EXT4-fs (loop2): 2 truncates cleaned up [ 191.808900][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.812399][ T8243] loop3: detected capacity change from 0 to 128 [ 191.849659][ T8243] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 191.907826][ T28] audit: type=1800 audit(1775705388.219:21): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.918" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 191.933987][ T8239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.918: bg 0: block 5: invalid block bitmap [ 192.023460][ T8239] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 192.032938][ T28] audit: type=1800 audit(1775705388.309:22): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.919" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 192.173788][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.397560][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.563497][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 192.630700][ T27] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 192.646912][ T27] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 192.669118][ T27] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 192.697493][ T27] usb 2-1: config 220 has no interface number 2 [ 192.714115][ T27] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.723200][ T8258] loop2: detected capacity change from 0 to 256 [ 192.752446][ T27] usb 2-1: config 220 interface 0 has no altsetting 0 [ 192.767491][ T27] usb 2-1: config 220 interface 76 has no altsetting 0 [ 192.787453][ T27] usb 2-1: config 220 interface 1 has no altsetting 0 [ 192.809871][ T27] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.814710][ T8258] FAT-fs (loop2): Directory bread(block 64) failed [ 192.820051][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.836278][ T8258] FAT-fs (loop2): Directory bread(block 65) failed [ 192.854807][ T8258] FAT-fs (loop2): Directory bread(block 66) failed [ 192.867741][ T27] usb 2-1: Product: syz [ 192.872061][ T27] usb 2-1: Manufacturer: syz [ 192.872103][ T8258] FAT-fs (loop2): Directory bread(block 67) failed [ 192.876673][ T27] usb 2-1: SerialNumber: syz [ 192.899550][ T8258] FAT-fs (loop2): Directory bread(block 68) failed [ 192.906255][ T8258] FAT-fs (loop2): Directory bread(block 69) failed [ 192.918018][ T8258] FAT-fs (loop2): Directory bread(block 70) failed [ 192.924742][ T8258] FAT-fs (loop2): Directory bread(block 71) failed [ 192.942239][ T8258] FAT-fs (loop2): Directory bread(block 72) failed [ 192.949192][ T8258] FAT-fs (loop2): Directory bread(block 73) failed [ 193.139668][ T27] usb 2-1: selecting invalid altsetting 0 [ 193.159957][ T27] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 193.166384][ T27] usb 2-1: No valid video chain found. [ 193.176614][ T8247] loop0: detected capacity change from 0 to 32768 [ 193.191023][ T27] usb 2-1: selecting invalid altsetting 0 [ 193.199049][ T27] usbtest: probe of 2-1:220.1 failed with error -22 [ 193.230248][ T27] usb 2-1: USB disconnect, device number 8 [ 193.512229][ T8270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'. [ 193.515771][ T8269] loop3: detected capacity change from 0 to 1024 [ 193.563558][ T8269] hfsplus: can't free extent [ 193.794507][ T8276] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 193.935012][ T8280] loop2: detected capacity change from 0 to 2048 [ 193.982624][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.041024][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.076815][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 194.351280][ T8288] loop3: detected capacity change from 0 to 4096 [ 194.431776][ T8293] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.600119][ T8298] loop0: detected capacity change from 0 to 2048 [ 194.607301][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.617452][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626814][ T8298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.667689][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.847742][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 194.866855][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 194.894882][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.925570][ T27] usb 3-1: Product: syz [ 194.931470][ T27] usb 3-1: Manufacturer: syz [ 194.936191][ T27] usb 3-1: SerialNumber: syz [ 194.960662][ T27] usb 3-1: config 0 descriptor?? [ 194.980622][ T27] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 195.070236][ T8306] loop0: detected capacity change from 0 to 2048 [ 195.084586][ T8306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.188968][ T8306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.414878][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.589488][ T27] ssu100: probe of 3-1:0.0 failed with error -71 [ 195.612216][ T27] usb 3-1: USB disconnect, device number 13 [ 196.085222][ T8340] loop3: detected capacity change from 0 to 16 [ 196.114674][ T8340] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.466366][ T8352] ip6gretap0: entered promiscuous mode [ 196.491910][ T8352] macvtap1: entered promiscuous mode [ 196.525587][ T8352] ip6gretap0: left promiscuous mode [ 196.768720][ T8358] set_capacity_and_notify: 1 callbacks suppressed [ 196.768737][ T8358] loop1: detected capacity change from 0 to 512 [ 196.861646][ T8358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.025224][ T8358] fs-verity (loop1, inode 15): Unknown hash algorithm number: 3 [ 197.093913][ T8346] loop2: detected capacity change from 0 to 32768 [ 197.165490][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.177990][ T8346] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.289077][ T8346] XFS (loop2): Ending clean mount [ 197.302396][ T8369] loop0: detected capacity change from 0 to 4096 [ 197.334979][ T8369] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 197.366663][ T8369] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 197.391286][ T8379] ubi31: attaching mtd0 [ 197.419121][ T8369] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 197.435977][ T8377] loop3: detected capacity change from 0 to 4096 [ 197.464466][ T8369] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 197.489533][ T8377] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 197.515940][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.527958][ T8369] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 197.565192][ T8377] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 197.581288][ T8377] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 197.623874][ T8369] ntfs: volume version 3.1. [ 197.634985][ T8377] ntfs: volume version 3.1. [ 197.679046][ T8369] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 197.699226][ T8369] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 198.627480][ T5833] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.710763][ T8408] loop2: detected capacity change from 0 to 1024 [ 198.727521][ T8408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.825426][ T8408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.838155][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 198.882536][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.923734][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.956098][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.977125][ T8415] loop1: detected capacity change from 0 to 1024 [ 198.995980][ T8408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.989: missing EA_INODE flag [ 199.017450][ T5833] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.033398][ T8415] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 199.039334][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.053156][ T8408] EXT4-fs (loop2): Remounting filesystem read-only [ 199.057669][ T8415] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 199.082931][ T8415] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #32: comm syz.1.991: iget: special inode unallocated [ 199.114170][ T8415] EXT4-fs (loop1): no journal found [ 199.114469][ T5833] usb 4-1: config 0 descriptor?? [ 199.136154][ T8415] EXT4-fs (loop1): can't get journal size [ 199.153947][ T8415] EXT4-fs (loop1): filesystem is read-only [ 199.171550][ T8415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.178333][ T8406] loop0: detected capacity change from 0 to 32768 [ 199.208802][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.233492][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.336231][ T8406] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.569232][ T5833] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 199.571151][ T5833] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 199.576973][ T5833] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 199.586351][ T8406] XFS (loop0): Ending clean mount [ 199.615742][ T5833] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 199.615782][ T5833] microsoft 0003:045E:07DA.000D: no inputs found [ 199.615815][ T5833] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 199.854887][ T9] usb 4-1: USB disconnect, device number 10 [ 199.897530][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.909966][ T8431] fido_id[8431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 200.214400][ T8433] openvswitch: netlink: Port 1048718283 exceeds max allowable 65535 [ 200.322387][ T8430] loop2: detected capacity change from 0 to 32768 [ 200.387279][ T8430] JBD2: Ignoring recovery information on journal [ 200.516236][ T8430] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 200.709175][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 200.909013][ T8451] hub 8-0:1.0: USB hub found [ 200.926334][ T8451] hub 8-0:1.0: 1 port detected [ 200.954282][ T8449] loop3: detected capacity change from 0 to 4096 [ 201.097810][ T8455] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.194255][ T8449] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 201.213516][ T8459] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 201.244139][ T8449] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 201.801742][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.807948][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.812426][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 201.814127][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.063886][ T8478] loop1: detected capacity change from 0 to 8192 [ 202.098487][ T8454] loop2: detected capacity change from 0 to 32768 [ 202.147589][ T8454] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.165954][ T8478] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.180377][ T8478] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 202.190127][ T8478] REISERFS (device loop1): using ordered data mode [ 202.197194][ T8478] reiserfs: using flush barriers [ 202.217547][ T8478] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.275680][ T8491] netlink: 'syz.0.1016': attribute type 2 has an invalid length. [ 202.283773][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 202.298446][ T8478] REISERFS (device loop1): checking transaction log (loop1) [ 202.326167][ T8478] REISERFS (device loop1): Using r5 hash to sort names [ 202.352570][ T8478] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 202.352673][ T8454] XFS (loop2): Ending clean mount [ 202.518836][ T8454] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.666338][ T8495] netlink: 436 bytes leftover after parsing attributes in process `syz.3.1018'. [ 202.697864][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 203.245419][ T8512] loop2: detected capacity change from 0 to 256 [ 203.312201][ T8512] FAT-fs (loop2): Directory bread(block 64) failed [ 203.332043][ T8512] FAT-fs (loop2): Directory bread(block 65) failed [ 203.347989][ T8512] FAT-fs (loop2): Directory bread(block 66) failed [ 203.354878][ T8512] FAT-fs (loop2): Directory bread(block 67) failed [ 203.370092][ T8512] FAT-fs (loop2): Directory bread(block 68) failed [ 203.379488][ T8512] FAT-fs (loop2): Directory bread(block 69) failed [ 203.407990][ T8512] FAT-fs (loop2): Directory bread(block 70) failed [ 203.414699][ T8512] FAT-fs (loop2): Directory bread(block 71) failed [ 203.438326][ T8512] FAT-fs (loop2): Directory bread(block 72) failed [ 203.444941][ T8512] FAT-fs (loop2): Directory bread(block 73) failed [ 203.817645][ T8504] loop3: detected capacity change from 0 to 32768 [ 203.893271][ T8504] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.909786][ T8520] loop2: detected capacity change from 0 to 4096 [ 204.002104][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.051447][ T8504] XFS (loop3): Ending clean mount [ 204.107267][ T8520] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.1029: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 204.164202][ T8520] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.1029: directory missing '..' [ 204.275084][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.287500][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 204.311017][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.531678][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.585050][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.635215][ T786] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 204.666596][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.687056][ T786] usb 2-1: Product: syz [ 204.701001][ T786] usb 2-1: Manufacturer: syz [ 204.705695][ T786] usb 2-1: SerialNumber: syz [ 204.716615][ T8544] dummy0: entered promiscuous mode [ 204.724556][ T8544] macsec1: entered promiscuous mode [ 204.732105][ T8544] macsec1: entered allmulticast mode [ 204.744713][ T8544] dummy0: entered allmulticast mode [ 204.753865][ T8544] dummy0: left allmulticast mode [ 204.765096][ T8544] dummy0: left promiscuous mode [ 204.887535][ T966] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.954946][ T786] usb 2-1: 0:1 : does not exist [ 204.972612][ T786] usb 2-1: unit 116 not found! [ 204.979243][ T786] usb 2-1: unit 114 not found! [ 205.019669][ T8548] loop2: detected capacity change from 0 to 2048 [ 205.029764][ T786] usb 2-1: USB disconnect, device number 9 [ 205.085208][ T8549] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.087541][ T966] usb 4-1: Using ep0 maxpacket: 8 [ 205.179740][ T966] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 205.183050][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.204409][ T966] usb 4-1: config 2 has no interface number 0 [ 205.227170][ T8548] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 205.236141][ T966] usb 4-1: config 2 interface 31 has no altsetting 0 [ 205.271474][ T966] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 205.303095][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.319006][ T8548] Remounting filesystem read-only [ 205.329864][ T966] usb 4-1: Product: syz [ 205.337538][ T966] usb 4-1: Manufacturer: syz [ 205.342194][ T966] usb 4-1: SerialNumber: syz [ 205.648000][ T8555] tmpfs: Cannot change global quota limit on remount [ 205.723153][ T8559] loop1: detected capacity change from 0 to 128 [ 206.032164][ T966] ch9200: probe of 4-1:2.31 failed with error -22 [ 206.084038][ T966] usb 4-1: USB disconnect, device number 11 [ 206.413840][ T8570] loop1: detected capacity change from 0 to 4096 [ 206.457987][ T8573] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.469715][ T8570] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 206.527132][ T8570] Remounting filesystem read-only [ 206.626051][ T8577] loop0: detected capacity change from 0 to 256 [ 206.648735][ T8577] exfat: Deprecated parameter 'utf8' [ 206.757169][ T8577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 206.928929][ T8562] loop2: detected capacity change from 0 to 32768 [ 206.966701][ T8562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1045 (8562) [ 207.058137][ T8562] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.087547][ T8562] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 207.096344][ T8562] BTRFS info (device loop2): setting nodatasum [ 207.126835][ T8562] BTRFS info (device loop2): force zlib compression, level 3 [ 207.158301][ T8562] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 207.208029][ T8562] BTRFS info (device loop2): use lzo compression, level 0 [ 207.215252][ T8562] BTRFS info (device loop2): turning on flush-on-commit [ 207.275886][ T8562] BTRFS info (device loop2): enabling auto defrag [ 207.319133][ T8562] BTRFS info (device loop2): max_inline at 4096 [ 207.331703][ T8562] BTRFS info (device loop2): using free space tree [ 207.467804][ T8562] BTRFS info (device loop2): enabling ssd optimizations [ 207.494640][ T8609] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 207.494640][ T8609] program syz.3.1060 not setting count and/or reply_len properly [ 207.547991][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.607625][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 207.712711][ T8611] set_capacity_and_notify: 1 callbacks suppressed [ 207.712727][ T8611] loop3: detected capacity change from 0 to 1024 [ 207.749869][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.767589][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 207.783864][ T5877] usb 1-1: config index 0 descriptor too short (expected 50325, got 36) [ 207.813533][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.825330][ T27] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 207.843003][ T27] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 207.854501][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.871756][ T27] usb 2-1: config 160 has no interface number 0 [ 207.878762][ T5877] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 207.897761][ T27] usb 2-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.916694][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.926888][ T11] hfsplus: b-tree write err: -5, ino 25 [ 207.933480][ T27] usb 2-1: config 160 interface 200 has no altsetting 0 [ 207.946023][ T11] hfsplus: b-tree write err: -5, ino 4 [ 207.960719][ T27] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 207.970072][ T5877] usb 1-1: config 0 descriptor?? [ 207.980713][ T11] hfsplus: b-tree write err: -5, ino 2 [ 207.993218][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.021006][ T27] usb 2-1: Product: syz [ 208.025385][ T27] usb 2-1: Manufacturer: syz [ 208.058776][ T27] usb 2-1: SerialNumber: syz [ 208.287665][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 208.360345][ T27] usb 2-1: USB disconnect, device number 10 [ 208.440171][ T5877] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x2 [ 208.467673][ T5877] hid-steam 0003:28DE:1102.000E: item fetching failed at offset 4/5 [ 208.494194][ T5877] hid-steam 0003:28DE:1102.000E: steam_probe:parse of hid interface failed [ 208.536141][ T5877] hid-steam: probe of 0003:28DE:1102.000E failed with error -22 [ 208.686276][ T27] usb 1-1: USB disconnect, device number 8 [ 208.730923][ T8626] loop3: detected capacity change from 0 to 512 [ 208.753170][ T8626] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1068: inode has both inline data and extents flags [ 208.767507][ T8626] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1068: couldn't read orphan inode 15 (err -117) [ 208.782762][ T8626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.844034][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.996052][ T8634] loop1: detected capacity change from 0 to 512 [ 209.053273][ T8634] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1071: iget: bad i_size value: 38620345925642 [ 209.099232][ T8634] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1071: couldn't read orphan inode 15 (err -117) [ 209.126226][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 209.147290][ T8634] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.247308][ T8641] loop3: detected capacity change from 0 to 512 [ 209.302467][ T8641] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1074: EA inode hash validation failed [ 209.334133][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 209.358218][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.381756][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 209.401414][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.422841][ T8646] netlink: 'syz.0.1077': attribute type 5 has an invalid length. [ 209.448311][ T8641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #15: comm syz.3.1074: corrupted inode contents [ 209.470203][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.486953][ T8641] EXT4-fs error (device loop3): ext4_dirty_inode:6136: inode #15: comm syz.3.1074: mark_inode_dirty error [ 209.515855][ T8641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #15: comm syz.3.1074: corrupted inode contents [ 209.520571][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.547601][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.574657][ T8641] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2998: inode #15: comm syz.3.1074: mark_inode_dirty error [ 209.589328][ T5833] usb 3-1: config 0 descriptor?? [ 209.604267][ T8641] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.1074: mark inode dirty (error -117) [ 209.636303][ T8641] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -117) [ 209.655520][ T8641] EXT4-fs (loop3): 1 orphan inode deleted [ 209.683623][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.856481][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.041715][ T5833] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 210.060825][ T5833] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 210.076781][ T5833] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 210.119870][ T5833] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 210.151112][ T5833] microsoft 0003:045E:07DA.000F: no inputs found [ 210.160934][ T8658] loop3: detected capacity change from 0 to 2048 [ 210.172057][ T5833] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 210.259750][ T8658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.398831][ T8658] syz.3.1081: attempt to access beyond end of device [ 210.398831][ T8658] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.442306][ T8658] exFAT-fs (loop3): unable to read boot sector [ 210.482576][ T8658] exFAT-fs (loop3): failed to read boot sector [ 210.489638][ T8667] dvmrp12: entered allmulticast mode [ 210.496376][ T8658] exFAT-fs (loop3): failed to recognize exfat type [ 210.503210][ T27] usb 3-1: USB disconnect, device number 14 [ 210.534917][ T8666] dvmrp12: left allmulticast mode [ 210.608369][ T8669] loop0: detected capacity change from 0 to 128 [ 210.669938][ T8669] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 210.697920][ T8669] hpfs: filesystem error: improperly stopped [ 210.704598][ T8669] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 210.729455][ T8669] hpfs: You really don't want any checks? You are crazy... [ 210.737250][ T8669] hpfs: Code page index out of array [ 210.746786][ T8669] hpfs: code page support is disabled [ 210.758610][ T8669] hpfs: hpfs_map_4sectors(): unaligned read [ 210.770981][ T8669] hpfs: hpfs_map_4sectors(): unaligned read [ 210.785271][ T8669] hpfs: filesystem error: unable to find root dir [ 210.837294][ T8669] hpfs: hpfs_map_sector(): read error [ 211.009131][ T8677] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 211.016688][ T8677] ALSA: mixer_oss: invalid index 137438 [ 211.036928][ T8673] loop3: detected capacity change from 0 to 8192 [ 211.082113][ T8673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.116645][ T8673] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 211.201228][ T8673] REISERFS (device loop3): using ordered data mode [ 211.249411][ T8673] reiserfs: using flush barriers [ 211.270256][ T8680] loop1: detected capacity change from 0 to 2048 [ 211.283021][ T8673] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.327845][ T8680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.334430][ T8673] REISERFS (device loop3): checking transaction log (loop3) [ 211.645969][ T8673] REISERFS (device loop3): Using r5 hash to sort names [ 211.683832][ T8673] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 211.804867][ T8694] loop2: detected capacity change from 0 to 512 [ 211.848795][ T8694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.855529][ T8694] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.964516][ T8694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 211.994212][ T8694] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 212.030343][ T8703] loop1: detected capacity change from 0 to 512 [ 212.052829][ T8694] EXT4-fs (loop2): 1 truncate cleaned up [ 212.067190][ T8694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.125343][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.225481][ T8703] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.332964][ T8694] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 212.429387][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.503181][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.145150][ T8729] set_capacity_and_notify: 1 callbacks suppressed [ 213.145166][ T8729] loop3: detected capacity change from 0 to 512 [ 213.188518][ T8729] EXT4-fs: Ignoring removed i_version option [ 213.194593][ T8729] EXT4-fs: Ignoring removed bh option [ 213.262368][ T8729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.280118][ T8729] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.323657][ T8738] loop1: detected capacity change from 0 to 512 [ 213.330998][ T8738] EXT4-fs: Ignoring removed orlov option [ 213.336739][ T8738] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.402289][ T8738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.411563][ T8738] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 213.468551][ T8738] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1117: attempt to clear invalid blocks 2 len 1 [ 213.471262][ T8711] loop0: detected capacity change from 0 to 32768 [ 213.498806][ T8729] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.1114: resize_inode disabled but reserved GDT blocks non-zero [ 213.507874][ T8738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 213.532022][ T8738] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1117: invalid indirect mapped block 1819239214 (level 0) [ 213.549673][ T8738] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1117: invalid indirect mapped block 1819239214 (level 1) [ 213.608903][ T8711] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.692852][ T8738] EXT4-fs (loop1): 1 truncate cleaned up [ 213.701713][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.739145][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.811819][ T8711] XFS (loop0): Ending clean mount [ 213.847907][ T8711] XFS (loop0): Quotacheck needed: Please wait. [ 213.920755][ T966] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 213.933375][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.940364][ T8711] XFS (loop0): Quotacheck: Done. [ 214.090361][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.137480][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 214.155629][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.219962][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.267544][ T966] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 214.276670][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.328698][ T966] usb 3-1: config 0 descriptor?? [ 214.368249][ T8761] Bluetooth: MGMT ver 1.22 [ 214.817957][ T966] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x4 [ 214.837583][ T966] savu 0003:1E7D:2D5A.0010: item fetching failed at offset 5/8 [ 214.868399][ T966] savu 0003:1E7D:2D5A.0010: parse failed [ 214.878796][ T966] savu: probe of 0003:1E7D:2D5A.0010 failed with error -22 [ 215.056249][ T8781] loop0: detected capacity change from 0 to 256 [ 215.085920][ T8781] exfat: Deprecated parameter 'namecase' [ 215.149185][ T8781] exfat: Deprecated parameter 'utf8' [ 215.155507][ T966] usb 3-1: USB disconnect, device number 15 [ 215.176738][ T8781] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 215.205655][ T8783] loop3: detected capacity change from 0 to 512 [ 215.230977][ T8783] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.256838][ T8783] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 215.287155][ T8781] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 215.299122][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.471385][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.551715][ T8790] loop1: detected capacity change from 0 to 512 [ 215.566034][ T8790] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.438819][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 216.445821][ T5778] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 218.088099][ T8835] loop2: detected capacity change from 0 to 32768 [ 218.168008][ T8835] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 218.204839][ T8835] JBD2: Ignoring recovery information on journal [ 218.216250][ T8838] loop0: detected capacity change from 0 to 32768 [ 218.315768][ T8835] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.406855][ T8838] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 218.421388][ T8838] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.543215][ T8838] XFS (loop0): Ending clean mount [ 218.598681][ T8838] XFS (loop0): Quotacheck needed: Please wait. [ 218.777864][ T8838] XFS (loop0): Quotacheck: Done. [ 218.879315][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 219.005973][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.422062][ T8899] loop2: detected capacity change from 0 to 64 [ 220.167534][ T8920] use of bytesused == 0 is deprecated and will be removed in the future, [ 220.230437][ T8920] use the actual size instead. [ 220.474118][ T8913] loop1: detected capacity change from 0 to 65536 [ 220.558825][ T8913] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 220.621145][ T8913] XFS (loop1): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x118/0x200 [ 220.636351][ T8913] CPU: 0 PID: 8913 Comm: syz.1.1178 Not tainted syzkaller #0 [ 220.643776][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.653883][ T8913] Call Trace: [ 220.657205][ T8913] [ 220.660176][ T8913] dump_stack_lvl+0x18c/0x250 [ 220.664919][ T8913] ? show_regs_print_info+0x20/0x20 [ 220.670196][ T8913] ? __phys_addr+0xba/0x170 [ 220.674746][ T8913] ? __kasan_kmalloc_large+0x8b/0xa0 [ 220.680111][ T8913] xfs_corruption_error+0x122/0x170 [ 220.685366][ T8913] ? xlog_alloc_buffer+0x118/0x200 [ 220.690710][ T8913] xlog_alloc_buffer+0x159/0x200 [ 220.695712][ T8913] ? xlog_alloc_buffer+0x118/0x200 [ 220.700876][ T8913] xlog_do_recovery_pass+0x1de/0xdb0 [ 220.706307][ T8913] ? lock_chain_count+0x20/0x20 [ 220.711211][ T8913] ? xlog_do_io+0x360/0x360 [ 220.715781][ T8913] ? xlog_verify_head+0xea/0x430 [ 220.720858][ T8913] ? __kmem_cache_free+0xba/0x1e0 [ 220.725945][ T8913] xlog_verify_head+0x137/0x430 [ 220.730883][ T8913] xlog_find_tail+0x6c4/0xa00 [ 220.735654][ T8913] xlog_recover+0x4c/0x440 [ 220.740139][ T8913] xfs_log_mount+0x2c2/0x470 [ 220.744787][ T8913] xfs_mountfs+0xc58/0x1d40 [ 220.749341][ T8913] ? lockdep_softirqs_off+0x430/0x430 [ 220.754770][ T8913] ? xfs_default_resblks+0x70/0x70 [ 220.759935][ T8913] ? init_timer_key+0x161/0x2a0 [ 220.764865][ T8913] ? rcu_is_watching+0x15/0xb0 [ 220.769763][ T8913] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 220.776067][ T8913] xfs_fs_fill_super+0x112f/0x13a0 [ 220.781233][ T8913] get_tree_bdev+0x3f3/0x520 [ 220.785870][ T8913] ? vfs_parse_fs_string+0x170/0x170 [ 220.791215][ T8913] ? xfs_mount_set_dax_mode+0x100/0x100 [ 220.796813][ T8913] ? setup_bdev_super+0x660/0x660 [ 220.801894][ T8913] ? apparmor_capable+0x137/0x1a0 [ 220.806990][ T8913] ? bpf_lsm_capable+0x9/0x10 [ 220.811722][ T8913] ? security_capable+0x89/0xb0 [ 220.816721][ T8913] vfs_get_tree+0x8c/0x280 [ 220.821365][ T8913] do_new_mount+0x24b/0xa40 [ 220.824143][ T8940] devtmpfs: Too few inodes for current use [ 220.825909][ T8913] __se_sys_mount+0x2e7/0x3d0 [ 220.825940][ T8913] ? __x64_sys_mount+0xc0/0xc0 [ 220.841750][ T8913] ? lockdep_hardirqs_on+0x98/0x150 [ 220.847107][ T8913] ? __x64_sys_mount+0x20/0xc0 [ 220.851926][ T8913] do_syscall_64+0x55/0xa0 [ 220.856392][ T8913] ? clear_bhb_loop+0x40/0x90 [ 220.861213][ T8913] ? clear_bhb_loop+0x40/0x90 [ 220.865944][ T8913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.871986][ T8913] RIP: 0033:0x7efff2d9da8a [ 220.876455][ T8913] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.896244][ T8913] RSP: 002b:00007efff3c9fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.904730][ T8913] RAX: ffffffffffffffda RBX: 00007efff3c9fee0 RCX: 00007efff2d9da8a [ 220.912755][ T8913] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007efff3c9fea0 [ 220.920793][ T8913] RBP: 0000200000000800 R08: 00007efff3c9fee0 R09: 0000000003000010 [ 220.928827][ T8913] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 220.936870][ T8913] R13: 00007efff3c9fea0 R14: 000000000000b9aa R15: 0000200000000040 [ 220.945028][ T8913] [ 220.948215][ C0] sched: RT throttling activated [ 220.949879][ T8913] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 220.962874][ T8913] XFS (loop1): Invalid block length (0x20040) for buffer [ 220.971264][ T8913] XFS (loop1): failed to locate log tail [ 220.976956][ T8913] XFS (loop1): log mount/recovery failed: error -12 [ 220.998749][ T8913] XFS (loop1): log mount failed [ 221.783171][ T8962] loop0: detected capacity change from 0 to 764 [ 221.822841][ T8964] loop1: detected capacity change from 0 to 64 [ 222.366901][ T8977] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1205'. [ 222.392019][ T8977] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1205'. [ 222.471100][ T8982] loop1: detected capacity change from 0 to 512 [ 222.559810][ T8982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.584617][ T8982] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1208: bad orphan inode 131083 [ 222.602508][ T8982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.731122][ T8996] loop3: detected capacity change from 0 to 64 [ 223.140224][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.236425][ T9007] loop3: detected capacity change from 0 to 1024 [ 223.253788][ T9007] EXT4-fs: Ignoring removed bh option [ 223.274254][ T9007] EXT4-fs: Ignoring removed bh option [ 223.329304][ T9007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.415941][ T9007] EXT4-fs error (device loop3): empty_inline_dir:1875: inode #12: block 7: comm syz.3.1218: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 223.478011][ T9007] EXT4-fs (loop3): Remounting filesystem read-only [ 223.511020][ T9007] EXT4-fs warning (device loop3): empty_inline_dir:1882: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 223.610273][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.434971][ T9038] loop3: detected capacity change from 0 to 512 [ 224.447105][ T9038] EXT4-fs: Ignoring removed bh option [ 224.477945][ T9038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e018, mo2=0003] [ 224.496332][ T9038] System zones: 1-12 [ 224.502026][ T9038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.523294][ T9038] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.1232: invalid block [ 224.553210][ T9024] loop2: detected capacity change from 0 to 32768 [ 224.569040][ T9038] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1232: invalid indirect mapped block 1819239214 (level 1) [ 224.588644][ T9024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1225 (9024) [ 224.624334][ T9038] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1232: bg 0: block 361: padding at end of block bitmap is not set [ 224.636076][ T9034] loop1: detected capacity change from 0 to 32768 [ 224.665143][ T9038] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 224.689318][ T9024] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.704047][ T9034] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.718477][ T9024] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 224.727203][ T9024] BTRFS info (device loop2): using free space tree [ 224.745278][ T9038] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1232: attempt to clear invalid blocks 33619980 len 1 [ 224.783692][ T9038] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1232: invalid indirect mapped block 1819239214 (level 0) [ 224.841486][ T9038] EXT4-fs (loop3): 1 truncate cleaned up [ 224.863223][ T9024] BTRFS info (device loop2): enabling ssd optimizations [ 224.878349][ T9024] BTRFS info (device loop2): auto enabling async discard [ 224.878432][ T9038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 225.034967][ T9034] XFS (loop1): Ending clean mount [ 225.057150][ T9034] XFS (loop1): Quotacheck needed: Please wait. [ 225.093895][ T9038] EXT4-fs: Ignoring removed orlov option [ 225.113814][ T9038] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 225.124273][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.156013][ T9038] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 225.172468][ T9034] XFS (loop1): Quotacheck: Done. [ 225.173820][ T9038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 225.201028][ T9038] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 225.375025][ T9065] tipc: Enabled bearer , priority 12 [ 225.441124][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.464530][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.467186][ T6177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6177) [ 225.887060][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 225.887078][ T28] audit: type=1326 audit(1775705422.199:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9071 comm="syz.2.1237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd08bf9c819 code=0x0 [ 226.082292][ T9077] loop3: detected capacity change from 0 to 256 [ 226.348780][ T9083] loop1: detected capacity change from 0 to 24 [ 226.361945][ T9083] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 226.368874][ T27] tipc: Node number set to 3758096385 [ 226.388694][ T9083] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 227.144631][ T9107] loop0: detected capacity change from 0 to 512 [ 227.265802][ T9107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.347926][ T9107] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.494086][ T9107] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.1253: corrupted inode contents [ 227.545815][ T9101] loop1: detected capacity change from 0 to 32768 [ 227.567593][ T8987] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 227.626898][ T9107] EXT4-fs (loop0): Remounting filesystem read-only [ 227.632405][ T9101] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.662159][ T8987] EXT4-fs (loop0): Remounting filesystem read-only [ 227.768288][ T9129] loop2: detected capacity change from 0 to 512 [ 227.776827][ T9129] EXT4-fs: Ignoring removed oldalloc option [ 227.785793][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.804950][ T9101] XFS (loop1): Ending clean mount [ 227.805694][ T9129] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1258: invalid block [ 227.824127][ T11] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 227.876448][ T9129] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1258: invalid indirect mapped block 4294967295 (level 1) [ 227.971380][ T9129] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1258: invalid indirect mapped block 4294967295 (level 1) [ 228.018321][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.081670][ T9129] EXT4-fs (loop2): 2 truncates cleaned up [ 228.099724][ T9129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.337841][ T9129] ext4: Unexpected value for 'quota' [ 228.485774][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.514683][ T9140] Bluetooth: MGMT ver 1.22 [ 228.762586][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 228.939660][ T9134] loop3: detected capacity change from 0 to 32768 [ 229.126170][ T9155] loop0: detected capacity change from 0 to 512 [ 229.139441][ T9155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.156196][ T9155] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 229.208377][ T9155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 229.219235][ T9155] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 229.229366][ T9155] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 229.248900][ T9155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.279890][ T9155] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1270: dx entry: limit 65535 != root limit 120 [ 229.293848][ T9155] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1270: Corrupt directory, running e2fsck is recommended [ 229.310125][ T9155] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1270: path /312/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 229.400203][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.591935][ T9166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.617463][ T9167] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 229.629804][ T9163] IPVS: stopping master sync thread 9167 ... [ 229.668576][ T9164] loop1: detected capacity change from 0 to 1764 [ 229.902364][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 229.914532][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 229.922144][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.932282][ T5778] Workqueue: hci3 hci_rx_work [ 229.937030][ T5778] Call Trace: [ 229.940344][ T5778] [ 229.943318][ T5778] dump_stack_lvl+0x18c/0x250 [ 229.948057][ T5778] ? show_regs_print_info+0x20/0x20 [ 229.953491][ T5778] ? load_image+0x420/0x420 [ 229.958067][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 229.963236][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 229.968010][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 229.973267][ T5778] kobject_add_internal+0x61c/0xcc0 [ 229.978542][ T5778] kobject_add+0x164/0x240 [ 229.983009][ T5778] ? __rwlock_init+0x150/0x150 [ 229.987822][ T5778] ? kobject_init+0x1e0/0x1e0 [ 229.992545][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 229.997451][ T5778] ? get_device_parent+0x366/0x390 [ 230.002616][ T5778] device_add+0x408/0xc20 [ 230.007098][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 230.012184][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 230.017516][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 230.022690][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 230.029020][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 230.034715][ T5778] ? skb_pull_data+0xfb/0x200 [ 230.039456][ T5778] hci_le_enh_conn_complete_evt+0x189/0x460 [ 230.045403][ T5778] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 230.051872][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 230.058006][ T5778] hci_event_packet+0x7ba/0x1270 [ 230.063015][ T5778] ? bis_list+0x290/0x290 [ 230.067401][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 230.072659][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 230.077913][ T5778] hci_rx_work+0x43a/0xd60 [ 230.082404][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 230.088229][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 230.093867][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 230.099409][ T5778] ? assign_work+0x3d2/0x5d0 [ 230.104166][ T5778] worker_thread+0xa55/0xfc0 [ 230.108966][ T5778] kthread+0x2fa/0x390 [ 230.113102][ T5778] ? pr_cont_work+0x560/0x560 [ 230.117844][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 230.122497][ T5778] ret_from_fork+0x48/0x80 [ 230.126971][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 230.131611][ T5778] ret_from_fork_asm+0x11/0x20 [ 230.136443][ T5778] [ 230.146983][ T5778] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.161395][ T5778] Bluetooth: hci3: failed to register connection device [ 230.609616][ T9180] loop3: detected capacity change from 0 to 32768 [ 230.632328][ T9180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1282 (9180) [ 230.686458][ T9180] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.728928][ T9186] loop1: detected capacity change from 0 to 4096 [ 230.737121][ T9180] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 230.757781][ T9180] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 230.811498][ T9180] BTRFS info (device loop3): trying to use backup root at mount time [ 230.826671][ T9180] BTRFS info (device loop3): setting nodatasum [ 230.843576][ T9180] BTRFS info (device loop3): enabling ssd optimizations [ 230.858472][ T9180] BTRFS info (device loop3): using spread ssd allocation scheme [ 230.866200][ T9180] BTRFS info (device loop3): turning on flush-on-commit [ 230.880159][ T9180] BTRFS info (device loop3): using free space tree [ 230.888768][ T9186] ntfs: volume version 3.1. [ 231.114410][ T28] audit: type=1800 audit(1775705427.429:33): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1282" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 231.175203][ T9178] loop0: detected capacity change from 0 to 32768 [ 231.177980][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.294204][ T9178] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 231.645613][ T9223] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 231.724028][ T9223] team0: Port device dummy0 added [ 231.749848][ T9178] XFS (loop0): Starting recovery (logdev: internal) [ 231.798633][ T9226] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 231.883973][ T9178] XFS (loop0): Ending recovery (logdev: internal) [ 231.912899][ T9226] team0: Port device dummy0 removed [ 231.957182][ T9226] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.997572][ T28] audit: type=1800 audit(1775705428.309:34): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1281" name="file2" dev="loop0" ino=7431 res=0 errno=0 [ 232.016962][ T9229] loop1: detected capacity change from 0 to 8 [ 232.031249][ T9230] loop3: detected capacity change from 0 to 64 [ 232.103085][ T5771] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 232.156717][ T49] bond0: (slave dummy0): interface is now down [ 232.211793][ T49] bond0: now running without any active interface! [ 232.473911][ T9234] loop3: detected capacity change from 0 to 128 [ 232.480461][ T9229] SQUASHFS error: xz decompression failed, data probably corrupt [ 232.511429][ T9229] SQUASHFS error: Failed to read block 0xa8: -5 [ 232.537695][ T9234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 232.551672][ T9229] SQUASHFS error: xz decompression failed, data probably corrupt [ 232.564475][ T9234] hpfs: filesystem error: improperly stopped [ 232.572812][ T9229] SQUASHFS error: Failed to read block 0xa8: -5 [ 232.579337][ T5877] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 232.589671][ T9234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 232.599390][ T28] audit: type=1800 audit(1775705428.909:35): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1293" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 232.619968][ T9234] hpfs: You really don't want any checks? You are crazy... [ 232.627260][ T9234] hpfs: Code page index out of array [ 232.633608][ T9234] hpfs: code page support is disabled [ 232.669278][ T9234] hpfs: hpfs_map_4sectors(): unaligned read [ 232.687598][ T9234] hpfs: hpfs_map_4sectors(): unaligned read [ 232.705816][ T9234] hpfs: filesystem error: unable to find root dir [ 232.736708][ T9229] syz.1.1293 (9229) used greatest stack depth: 20048 bytes left [ 232.752437][ T9234] hpfs: hpfs_map_4sectors(): unaligned read [ 232.789684][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.815666][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 232.847485][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.883249][ T5877] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 232.921401][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.937157][ T5877] usb 3-1: config 0 descriptor?? [ 232.943405][ T9232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.224368][ T9242] loop3: detected capacity change from 0 to 8192 [ 233.273688][ T9242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.362488][ T9242] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 233.413751][ T5877] hid (null): unknown global tag 0xe [ 233.427496][ T5877] hid (null): unknown global tag 0xe [ 233.427656][ T9242] REISERFS (device loop3): using ordered data mode [ 233.436624][ T5877] waltop 0003:172F:0500.0011: unknown global tag 0xe [ 233.463498][ T5877] waltop 0003:172F:0500.0011: item 0 1 1 14 parsing failed [ 233.477937][ T5877] waltop: probe of 0003:172F:0500.0011 failed with error -22 [ 233.486128][ T9242] reiserfs: using flush barriers [ 233.527733][ T9242] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.599755][ T9242] REISERFS (device loop3): checking transaction log (loop3) [ 233.632441][ T9242] REISERFS (device loop3): Using r5 hash to sort names [ 233.719890][ T5877] usb 3-1: USB disconnect, device number 16 [ 233.728005][ T9242] reiserfs: enabling write barrier flush mode [ 233.775660][ T9242] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 233.810878][ T9242] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 233.826165][ T9242] REISERFS (device loop3): Remounting filesystem read-only [ 233.863764][ T9242] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 233.886673][ T9242] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 233.909457][ T9242] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 233.924552][ T9242] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 233.934203][ T9242] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 233.957638][ T9242] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 233.977503][ T9242] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 234.001486][ T9242] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 234.108995][ T5773] ------------[ cut here ]------------ [ 234.114573][ T5773] kernel BUG at fs/reiserfs/journal.c:1916! [ 234.126227][ T5773] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 234.132378][ T5773] CPU: 1 PID: 5773 Comm: syz-executor Not tainted syzkaller #0 [ 234.139962][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.150055][ T5773] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 234.155914][ T5773] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 7a a4 5d ff <0f> 0b e8 73 a4 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 234.175786][ T5773] RSP: 0018:ffffc9000450fb00 EFLAGS: 00010293 [ 234.182008][ T5773] RAX: ffffffff82297d56 RBX: 1ffff920008a1f64 RCX: ffff888077c20000 [ 234.190020][ T5773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.198020][ T5773] RBP: ffffc9000450fbf8 R08: ffffc9000450fb77 R09: 0000000000000000 [ 234.206027][ T5773] R10: ffffc9000450fb40 R11: fffff520008a1f6f R12: ffffc90004b01000 [ 234.214041][ T5773] R13: dffffc0000000000 R14: ffff88805a980630 R15: 0000000000000000 [ 234.222055][ T5773] FS: 0000555576f74500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 234.231055][ T5773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.237681][ T5773] CR2: 00007ffea6e7dbe0 CR3: 0000000062770000 CR4: 00000000003506e0 [ 234.245700][ T5773] Call Trace: [ 234.249009][ T5773] [ 234.251971][ T5773] ? journal_release+0x30/0x30 [ 234.256773][ T5773] journal_release+0x1f/0x30 [ 234.261414][ T5773] reiserfs_put_super+0x26b/0x510 [ 234.266485][ T5773] ? hook_inode_free_security+0xb0/0xb0 [ 234.272065][ T5773] ? evict_inodes+0x63c/0x6a0 [ 234.276784][ T5773] ? reiserfs_dirty_inode+0x270/0x270 [ 234.282227][ T5773] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 234.287923][ T5773] ? reiserfs_dirty_inode+0x270/0x270 [ 234.293424][ T5773] generic_shutdown_super+0x134/0x2b0 [ 234.298826][ T5773] kill_block_super+0x44/0x90 [ 234.303532][ T5773] deactivate_locked_super+0x97/0x100 [ 234.308937][ T5773] cleanup_mnt+0x43b/0x4d0 [ 234.313385][ T5773] task_work_run+0x1d4/0x260 [ 234.317995][ T5773] ? task_work_cancel+0x220/0x220 [ 234.323120][ T5773] ? exit_to_user_mode_loop+0x3b/0x110 [ 234.328594][ T5773] exit_to_user_mode_loop+0xe6/0x110 [ 234.333888][ T5773] exit_to_user_mode_prepare+0xee/0x180 [ 234.339449][ T5773] syscall_exit_to_user_mode+0x1a/0x50 [ 234.344916][ T5773] do_syscall_64+0x61/0xa0 [ 234.349339][ T5773] ? clear_bhb_loop+0x40/0x90 [ 234.354028][ T5773] ? clear_bhb_loop+0x40/0x90 [ 234.358801][ T5773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.364704][ T5773] RIP: 0033:0x7fd8de59da57 [ 234.369127][ T5773] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 234.388845][ T5773] RSP: 002b:00007ffea6e7e238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 234.397310][ T5773] RAX: 0000000000000000 RBX: 00007fd8de632048 RCX: 00007fd8de59da57 [ 234.405304][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea6e7e2f0 [ 234.413290][ T5773] RBP: 00007ffea6e7e2f0 R08: 00007ffea6e7f2f0 R09: 00000000ffffffff [ 234.421277][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea6e7f380 [ 234.429257][ T5773] R13: 00007fd8de632048 R14: 0000000000039241 R15: 00007ffea6e7f3c0 [ 234.437246][ T5773] [ 234.440278][ T5773] Modules linked in: [ 234.444236][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.459599][ T5773] ---[ end trace 0000000000000000 ]--- [ 234.490945][ T5773] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 234.506694][ T5773] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 7a a4 5d ff <0f> 0b e8 73 a4 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 234.577145][ T5773] RSP: 0018:ffffc9000450fb00 EFLAGS: 00010293 [ 234.583407][ T5773] RAX: ffffffff82297d56 RBX: 1ffff920008a1f64 RCX: ffff888077c20000 [ 234.591684][ T5773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.600374][ T5773] RBP: ffffc9000450fbf8 R08: ffffc9000450fb77 R09: 0000000000000000 [ 234.608879][ T5773] R10: ffffc9000450fb40 R11: fffff520008a1f6f R12: ffffc90004b01000 [ 234.618402][ T5773] R13: dffffc0000000000 R14: ffff88805a980630 R15: 0000000000000000 [ 234.626459][ T5773] FS: 0000555576f74500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 234.635924][ T5773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.642798][ T5773] CR2: 0000001b2d921ff8 CR3: 0000000062770000 CR4: 00000000003506e0 [ 234.651020][ T5773] Kernel panic - not syncing: Fatal exception [ 234.657333][ T5773] Kernel Offset: disabled [ 234.661670][ T5773] Rebooting in 86400 seconds..