last executing test programs: 5.848394559s ago: executing program 2 (id=2418): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000006000000000000000000000000000000fd"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x0, &(0x7f0000000000), 0x0) 5.762471837s ago: executing program 2 (id=2419): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x583, 0x0, 0x3}]}) 5.550473116s ago: executing program 2 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 5.28263515s ago: executing program 2 (id=2424): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="85", 0xe80}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10101) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1}, 0x142) 5.241492004s ago: executing program 2 (id=2425): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000180)={[{@discard}, {@filestreams}]}, 0x1, 0x9847, &(0x7f000001c900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="0070000000000000ff7f0000000000000100000000000000", @ANYRES32=r0]) 3.152527743s ago: executing program 2 (id=2435): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000001000000b7"], 0x0, 0x0, 0x0, 0x0}) 2.392723523s ago: executing program 0 (id=2440): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0xa2402, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 2.19645014s ago: executing program 3 (id=2441): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x3c}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 2.174727202s ago: executing program 0 (id=2442): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 2.046954614s ago: executing program 0 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0000c732ffffffff0000e6cec47d1aaa11e623d92a"], 0x38}}, 0x0) 2.045562604s ago: executing program 3 (id=2444): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) accept4(r0, 0x0, 0x0, 0x0) 1.959266171s ago: executing program 3 (id=2445): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd37/\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}, 0x1, 0x7a00}, 0x0) 1.736875652s ago: executing program 0 (id=2449): r0 = syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000000)={[{@attr2}, {@gqnoenforce}, {@sysvgroups}, {@nolazytime}, {@sysvgroups}, {@uqnoenforce}, {@nolargeio}]}, 0x1, 0x9a0c, &(0x7f0000009880)="$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") write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "8eb91a590433b3d36ea2ec2853df44b79af5ae8ffd3aabd29e4f7f39181d"}, 0x29) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0xc0c0583b, &(0x7f0000000140)) 1.677863647s ago: executing program 3 (id=2451): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x1}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x0, 0x1}, 0x10) 1.596952474s ago: executing program 3 (id=2453): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000002", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, {[@hopopts={0x3c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x2}}]}]}}}}}, 0x0) 1.53172967s ago: executing program 1 (id=2454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCFLSH(r0, 0x89f0, 0x20000000) 1.236260427s ago: executing program 3 (id=2457): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000008c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) r0 = open(&(0x7f0000001840)='./bus\x00', 0xca02, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 1.022680036s ago: executing program 1 (id=2459): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 926.117805ms ago: executing program 1 (id=2460): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x5c, 0x10003, '\x00', [{0x0, 0x0, 0x3f00}, {0xffffffff}]}) 570.824967ms ago: executing program 4 (id=2462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01bb0000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 550.95765ms ago: executing program 1 (id=2463): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) recvmsg$unix(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)=""/18, 0x12}], 0x1, &(0x7f0000001880)}, 0x40) close(r1) 454.650988ms ago: executing program 4 (id=2464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010002000040"]) 388.029624ms ago: executing program 1 (id=2465): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=@bridge_setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) 249.728447ms ago: executing program 4 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x9}}]}, 0x48}}, 0x0) 174.939634ms ago: executing program 4 (id=2467): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0xe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 112.769079ms ago: executing program 1 (id=2468): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x18000, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x185, &(0x7f0000000400)="$eJzs20tO8lAYxvGnXD/4+C7eJo5MHOhEqkCiDFkAG3BGoBJiUSNOICbEpbgTd+IGINENWEM5A0ETmzZSAv9fAryTp+dt4OS8DCoAa+u//27JUtqvPM8b7kk6r0tKxdwcgB/l6c0DsK6SL3F3ACAe41rSnwOeLOn59b45Mq90wPlhXEtMC0safchnzHgx/C7/YPmfu6nZfFbSryDzy+M0f6DZfC5o/2b9/Fw+Hzg/vf/D/dn8b0kFSX8k/ZX0z/zX2pC0qdyn9Vtz6+8EXB+IYvLrK0bNR7jAZPdcdFznOGQ+bfInIfMZky9FzJdD5rMmX2xeu62Q1wDCSsS8/5MR938q4v4H1lmvP7hsuK5zS7HqRYGve3kKmbNzWfr5ukMAq8y+697Yvf7gqNNttJ22c1WqVM8q5VLltGr7c7kdZToHsMz8s74+OfTj7gQAAAAAAAAAAAAAAIS1JWk77iYAAAAALMQiHieK+x4BAAAAAAAAAAAAAAAAAACAVfEeAAD//zmHTRw=") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) unshare(0x22020400) fstat(r0, &(0x7f0000002680)) 104.80164ms ago: executing program 4 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=2470): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") ftruncate(0xffffffffffffffff, 0x20cf01) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) kernel console output (not intermixed with test programs): [ T8623] XFS (loop1): Mounting V5 Filesystem [ 186.897341][ T8623] XFS (loop1): Starting recovery (logdev: internal) [ 186.929183][ T8623] XFS (loop1): Ending recovery (logdev: internal) [ 186.954028][ T1291] usb 5-1: USB disconnect, device number 10 [ 187.007881][ T3566] XFS (loop1): Unmounting Filesystem [ 187.586117][ T8659] loop2: detected capacity change from 0 to 40427 [ 187.623441][ T8657] loop3: detected capacity change from 0 to 32768 [ 187.659615][ T8659] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 187.671542][ T8657] XFS: noikeep mount option is deprecated. [ 187.687359][ T8659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.703423][ T8659] F2FS-fs (loop2): invalid crc value [ 187.758828][ T8659] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.789507][ T1291] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.812588][ T8657] XFS (loop3): Mounting V5 Filesystem [ 187.847728][ T8659] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.866474][ T8663] loop4: detected capacity change from 0 to 32768 [ 187.873886][ T8659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.948345][ T8663] XFS (loop4): Mounting V5 Filesystem [ 187.956981][ T3567] attempt to access beyond end of device [ 187.956981][ T3567] loop2: rw=2049, want=45104, limit=40427 [ 188.006371][ T8657] XFS (loop3): Ending clean mount [ 188.032548][ T8657] XFS (loop3): Quotacheck needed: Please wait. [ 188.069767][ T1291] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 188.148804][ T8657] XFS (loop3): Quotacheck: Done. [ 188.161286][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.171354][ T8663] XFS (loop4): Ending clean mount [ 188.177160][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.188880][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.197931][ T8663] XFS (loop4): Quotacheck needed: Please wait. [ 188.265176][ T6031] XFS (loop3): Unmounting Filesystem [ 188.271703][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.285580][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.286740][ T8663] XFS (loop4): Quotacheck: Done. [ 188.315675][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.414139][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.430780][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.460318][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.557644][ T4804] XFS (loop4): Unmounting Filesystem [ 188.568605][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.589186][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.606707][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.666399][ T8697] loop2: detected capacity change from 0 to 1024 [ 188.708338][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.723957][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.735568][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.750807][ T8697] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 188.870037][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.878958][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.922819][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.028123][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.049988][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.069543][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.149831][ T1291] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.158793][ T1291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.198489][ T1291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.244018][ T8709] loop3: detected capacity change from 0 to 4096 [ 189.369966][ T1291] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.389163][ T1291] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.421589][ T1291] usb 2-1: Product: syz [ 189.425783][ T1291] usb 2-1: Manufacturer: syz [ 189.444900][ T1291] usb 2-1: SerialNumber: syz [ 189.467736][ T1291] usb 2-1: config 0 descriptor?? [ 189.479650][ T3766] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.505684][ T8709] ntfs3: loop3: ino=1f, "file2" The size of extended attributes must not exceed 64KiB [ 189.527541][ T1291] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.859077][ T1291] usb 2-1: USB disconnect, device number 12 [ 189.859157][ T8717] loop0: detected capacity change from 0 to 32768 [ 189.865164][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 189.911747][ T1291] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 189.951320][ T8721] loop4: detected capacity change from 0 to 32768 [ 190.000538][ T8717] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 190.000538][ T8717] [ 190.020171][ T8721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1731 (8721) [ 190.049648][ T3766] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 190.058715][ T3766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.068061][ T3766] usb 3-1: Product: syz [ 190.079478][ T3766] usb 3-1: Manufacturer: syz [ 190.084143][ T3766] usb 3-1: SerialNumber: syz [ 190.084438][ T154] read_mapping_page failed! [ 190.101230][ T3766] usb 3-1: config 0 descriptor?? [ 190.122142][ T8721] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 190.156472][ T154] ERROR: (device loop0): txCommit: [ 190.156472][ T154] [ 190.189649][ T154] jfs_write_inode: jfs_commit_inode failed! [ 190.189766][ T8721] BTRFS info (device loop4): using free space tree [ 190.209589][ T8721] BTRFS info (device loop4): has skinny extents [ 190.300375][ T8723] loop3: detected capacity change from 0 to 32768 [ 190.356559][ T8723] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.365951][ T8723] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.414486][ T8723] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 190.432143][ T1291] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 190.439169][ T1291] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 190.473879][ T8721] BTRFS info (device loop4): enabling ssd optimizations [ 190.538292][ T1291] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 99ms [ 190.548597][ T1291] gfs2: fsid=syz:syz.0: jid=0: Done [ 190.554509][ T8723] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 190.579164][ T8749] loop0: detected capacity change from 0 to 4096 [ 190.657244][ T8723] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 190.739496][ T8723] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 190.739496][ T8723] inode = 12 2341 [ 190.739496][ T8723] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 190.770940][ T8749] ntfs3: loop0: failed to convert "0080" to cp850 [ 190.788376][ T8749] ntfs3: loop0: failed to convert name for inode 1e. [ 190.796379][ T8723] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 190.886390][ T8723] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 190.957996][ T8723] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 190.978782][ T8723] gfs2: fsid=syz:syz.0: File system withdrawn [ 190.988228][ T8723] CPU: 0 PID: 8723 Comm: syz.3.1732 Not tainted 5.15.167-syzkaller #0 [ 190.996419][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.006560][ T8723] Call Trace: [ 191.009823][ T8723] [ 191.012753][ T8723] dump_stack_lvl+0x1e3/0x2d0 [ 191.017413][ T8723] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 191.023043][ T8723] ? panic+0x860/0x860 [ 191.027116][ T8723] ? do_raw_spin_unlock+0x137/0x8b0 [ 191.032302][ T8723] gfs2_withdraw+0xe9e/0x14e0 [ 191.036970][ T8723] ? gfs2_lm+0x230/0x230 [ 191.041208][ T8723] ? gfs2_dirent_scan+0x276/0x640 [ 191.046338][ T8723] ? panic+0x860/0x860 [ 191.050515][ T8723] ? gfs2_consist_inode_i+0xc0/0xe0 [ 191.055729][ T8723] gfs2_dirent_scan+0x512/0x640 [ 191.060592][ T8723] ? gfs2_dirent_scan+0x640/0x640 [ 191.065645][ T8723] gfs2_dir_read+0x831/0x1af0 [ 191.070322][ T8723] ? gfs2_dir_hash_inval+0x80/0x80 [ 191.075414][ T8723] ? _raw_spin_unlock+0x24/0x40 [ 191.080243][ T8723] ? gfs2_glock_nq+0xc6e/0x15e0 [ 191.085087][ T8723] ? gfs2_glock_wait+0x137/0x1c0 [ 191.090013][ T8723] gfs2_readdir+0x146/0x1a0 [ 191.094527][ T8723] ? __fdget_pos+0x2cb/0x380 [ 191.099100][ T8723] ? gfs2_fallocate+0x490/0x490 [ 191.103935][ T8723] ? gfs2_readdir+0x102/0x1a0 [ 191.108589][ T8723] ? iterate_dir+0x10a/0x570 [ 191.113159][ T8723] ? iterate_dir+0x10a/0x570 [ 191.117726][ T8723] ? fsnotify_perm+0x442/0x590 [ 191.122472][ T8723] iterate_dir+0x224/0x570 [ 191.126866][ T8723] ? gfs2_fallocate+0x490/0x490 [ 191.131706][ T8723] __se_sys_getdents64+0x209/0x4f0 [ 191.136809][ T8723] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 191.142892][ T8723] ? __x64_sys_getdents64+0x80/0x80 [ 191.148096][ T8723] ? filldir+0x720/0x720 [ 191.152437][ T8723] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.158412][ T8723] ? lockdep_hardirqs_on+0x94/0x130 [ 191.164038][ T8723] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.170098][ T8723] do_syscall_64+0x3b/0xb0 [ 191.174494][ T8723] ? clear_bhb_loop+0x15/0x70 [ 191.179148][ T8723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.185021][ T8723] RIP: 0033:0x7fa838526ff9 [ 191.189421][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.209071][ T8723] RSP: 002b:00007fa83699f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 191.217485][ T8723] RAX: ffffffffffffffda RBX: 00007fa8386def80 RCX: 00007fa838526ff9 [ 191.225465][ T8723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 191.233419][ T8723] RBP: 00007fa838599296 R08: 0000000000000000 R09: 0000000000000000 [ 191.241381][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.249357][ T8723] R13: 0000000000000000 R14: 00007fa8386def80 R15: 00007ffd14cb1bd8 [ 191.257414][ T8723] [ 191.269730][ T3766] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1c, error -71 [ 191.286389][ T3766] usb 3-1: Firmware version (0.0) predates our first public release. [ 191.315188][ T3766] usb 3-1: Please update to version 0.2 or newer [ 191.352617][ T3766] usb 3-1: atusb_probe: initialization failed, error = -71 [ 191.390474][ T3766] atusb: probe of 3-1:0.0 failed with error -71 [ 191.430639][ T3766] usb 3-1: USB disconnect, device number 9 [ 191.708563][ T8769] loop3: detected capacity change from 0 to 64 [ 191.928776][ T25] audit: type=1326 audit(2000000002.730:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.1744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa838526ff9 code=0x0 [ 192.125477][ T8767] loop1: detected capacity change from 0 to 32768 [ 192.227909][ T8767] XFS (loop1): Mounting V5 Filesystem [ 192.379267][ T8767] XFS (loop1): Ending clean mount [ 192.394084][ T8767] XFS (loop1): Quotacheck needed: Please wait. [ 192.455566][ T8767] XFS (loop1): Quotacheck: Done. [ 192.509043][ T3566] XFS (loop1): Unmounting Filesystem [ 193.108863][ T8790] loop4: detected capacity change from 0 to 32768 [ 193.181513][ T25] audit: type=1326 audit(2000000003.990:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.2.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58ae9e6ff9 code=0x0 [ 193.256772][ T8790] XFS (loop4): Mounting V5 Filesystem [ 193.353266][ T8790] XFS (loop4): Ending clean mount [ 193.405461][ T4804] XFS (loop4): Unmounting Filesystem [ 193.678017][ T8800] loop0: detected capacity change from 0 to 32768 [ 193.752270][ T8800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1764 (8800) [ 193.820389][ T8800] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 193.829095][ T8800] BTRFS info (device loop0): setting nodatacow, compression disabled [ 193.870532][ T8800] BTRFS info (device loop0): setting datacow [ 193.876564][ T8800] BTRFS info (device loop0): doing ref verification [ 193.904102][ T8800] BTRFS info (device loop0): force clearing of disk cache [ 193.959861][ T8800] BTRFS info (device loop0): turning off barriers [ 193.966362][ T8800] BTRFS info (device loop0): enabling ssd optimizations [ 194.019635][ T8800] BTRFS info (device loop0): using spread ssd allocation scheme [ 194.069741][ T8800] BTRFS info (device loop0): not using ssd optimizations [ 194.076815][ T8800] BTRFS info (device loop0): not using spread ssd allocation scheme [ 194.084333][ T8834] netlink: 'syz.1.1774': attribute type 4 has an invalid length. [ 194.095210][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.095790][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.148149][ T8800] BTRFS info (device loop0): using free space tree [ 194.204014][ T8800] BTRFS info (device loop0): has skinny extents [ 194.209537][ T8834] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1774'. [ 194.356843][ T8843] tipc: Enabling of bearer rejected, failed to enable media [ 194.507118][ T8800] BTRFS info (device loop0): clearing free space tree [ 194.548400][ T8800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.562490][ T8869] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 194.562490][ T8869] program syz.4.1768 not setting count and/or reply_len properly [ 194.645729][ T8800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.711668][ T8871] loop2: detected capacity change from 0 to 256 [ 194.758270][ T8800] BTRFS info (device loop0): creating free space tree [ 194.777222][ T8800] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.818658][ T8800] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.830878][ T8871] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.939373][ T8879] netlink: 'syz.4.1775': attribute type 29 has an invalid length. [ 194.968106][ T8879] netlink: 'syz.4.1775': attribute type 29 has an invalid length. [ 195.113645][ T8884] program syz.1.1778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.233849][ T8888] loop2: detected capacity change from 0 to 64 [ 195.417312][ T8887] loop4: detected capacity change from 0 to 8192 [ 195.508343][ T8887] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 195.519771][ T8887] REISERFS (device loop4): using ordered data mode [ 195.526334][ T8887] reiserfs: using flush barriers [ 195.562857][ T8887] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.580137][ T8887] REISERFS (device loop4): checking transaction log (loop4) [ 195.608443][ T8887] REISERFS (device loop4): Using tea hash to sort names [ 195.616148][ T8887] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 195.805419][ T8898] loop1: detected capacity change from 0 to 1024 [ 195.839125][ T8899] option changes via remount are deprecated (pid=8897 comm=syz.0.1780) [ 195.924819][ T8903] loop0: detected capacity change from 0 to 1024 [ 195.974434][ T8898] hfsplus: extend alloc file! (8192,512,16777719) [ 196.122996][ T6015] hfsplus: b-tree write err: -5, ino 4 [ 196.244927][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 196.582842][ T25] audit: type=1326 audit(2000000007.390:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.1.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x0 [ 196.927573][ T8901] loop3: detected capacity change from 0 to 40427 [ 197.003914][ T8901] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 197.018050][ T8901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 197.061514][ T8901] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.141330][ T8901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 197.148594][ T8901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.275875][ T8925] loop0: detected capacity change from 0 to 65536 [ 197.377076][ T8948] loop4: detected capacity change from 0 to 2048 [ 197.453388][ T8925] XFS (loop0): Mounting V5 Filesystem [ 197.484011][ T8948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.670041][ T8963] loop4: detected capacity change from 0 to 4096 [ 197.688330][ T8925] XFS (loop0): Ending clean mount [ 197.698550][ T8963] EXT4-fs (loop4): Test dummy encryption mode enabled [ 197.755100][ T3557] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x8001 [ 197.796915][ T8963] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,delalloc,journal_ioprio=0x0000000000000007,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 197.840790][ T3557] XFS (loop0): Unmount and run xfs_repair [ 197.846828][ T3557] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 197.898680][ T8968] loop1: detected capacity change from 0 to 512 [ 197.935635][ T3557] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00 XAGF..........@. [ 197.950417][ T8972] loop3: detected capacity change from 0 to 764 [ 197.960289][ T3557] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 197.962711][ T8968] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 197.977590][ T8963] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 197.980925][ T3557] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 198.009532][ T3557] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00 ......;_..;\.... [ 198.015730][ T8968] EXT4-fs (loop1): invalid journal inode [ 198.046960][ T3557] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 198.084267][ T8968] EXT4-fs (loop1): can't get journal size [ 198.088100][ T3557] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.104076][ T6031] rock: directory entry would overflow storage [ 198.123170][ T6031] rock: sig=0x4f50, size=4, remaining=3 [ 198.125147][ T8968] EXT4-fs (loop1): 1 truncate cleaned up [ 198.128779][ T6031] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 198.143282][ T8968] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 198.144448][ T3557] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.190711][ T8968] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 4294967293 (only 1 groups) [ 198.202561][ T3557] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 198.220648][ T8925] XFS (loop0): metadata I/O error in "xfs_read_agf+0x263/0x510" at daddr 0x8001 len 1 error 74 [ 198.237694][ T6031] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 198.290782][ T3569] XFS (loop0): Unmounting Filesystem [ 198.388498][ T8946] loop2: detected capacity change from 0 to 40427 [ 198.526006][ T8946] F2FS-fs (loop2): invalid crc value [ 198.600204][ T8946] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.750733][ T8946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.166240][ T9002] loop1: detected capacity change from 0 to 1024 [ 199.444930][ T9011] loop1: detected capacity change from 0 to 128 [ 199.567434][ T8985] loop3: detected capacity change from 0 to 40427 [ 199.702834][ T8985] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.807202][ T9020] loop1: detected capacity change from 0 to 512 [ 199.851262][ T8985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.934751][ T9020] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 199.934751][ T9020] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 199.934751][ T9020] [ 199.983852][ T6031] attempt to access beyond end of device [ 199.983852][ T6031] loop3: rw=2049, want=45104, limit=40427 [ 200.008936][ T9020] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 200.032914][ T9023] loop2: detected capacity change from 0 to 256 [ 200.106590][ T9000] loop4: detected capacity change from 0 to 32768 [ 200.145068][ T9008] loop0: detected capacity change from 0 to 32768 [ 200.199745][ T9023] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 200.217506][ T9008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1826 (9008) [ 200.304530][ T9000] XFS (loop4): Mounting V5 Filesystem [ 200.331803][ T9008] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 200.341493][ T9008] BTRFS info (device loop0): enabling auto defrag [ 200.348076][ T9008] BTRFS info (device loop0): max_inline at 0 [ 200.354711][ T9008] BTRFS info (device loop0): enabling ssd optimizations [ 200.361829][ T9008] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 200.374535][ T9008] BTRFS info (device loop0): use lzo compression, level 0 [ 200.381751][ T9008] BTRFS info (device loop0): not using ssd optimizations [ 200.429455][ T9008] BTRFS info (device loop0): using free space tree [ 200.435990][ T9008] BTRFS info (device loop0): has skinny extents [ 200.539004][ T9000] XFS (loop4): Ending clean mount [ 200.649539][ T9000] XFS (loop4): Quotacheck needed: Please wait. [ 200.734252][ T9059] loop2: detected capacity change from 0 to 64 [ 200.894393][ T9000] XFS (loop4): Quotacheck: Done. [ 201.429017][ T9038] loop1: detected capacity change from 0 to 32768 [ 201.547168][ T4804] XFS (loop4): Unmounting Filesystem [ 201.748855][ T9038] XFS (loop1): Mounting V5 Filesystem [ 202.173384][ T9038] XFS (loop1): Ending clean mount [ 202.320405][ T3566] XFS (loop1): Unmounting Filesystem [ 202.597482][ T9104] loop0: detected capacity change from 0 to 2048 [ 202.694752][ T9104] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.810696][ T9104] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,sb=0x0000000000000401,norecovery,. Quota mode: none. [ 202.981487][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 203.058791][ T9100] loop4: detected capacity change from 0 to 32768 [ 203.144908][ T9100] [ 203.144908][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.144908][ T9100] [ 203.275984][ T9113] loop1: detected capacity change from 0 to 4096 [ 203.340630][ T9120] [ 203.340630][ T9120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.340630][ T9120] [ 203.359277][ T9113] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 203.366438][ T9095] loop2: detected capacity change from 0 to 32768 [ 203.419757][ T9120] [ 203.419757][ T9120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.419757][ T9120] [ 203.454532][ T9095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1849 (9095) [ 203.507304][ T9120] [ 203.507304][ T9120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.507304][ T9120] [ 203.527381][ T9095] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 203.540443][ T3616] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 203.558875][ T9095] BTRFS info (device loop2): enabling auto defrag [ 203.589811][ T9095] BTRFS info (device loop2): max_inline at 0 [ 203.595868][ T9095] BTRFS info (device loop2): enabling ssd optimizations [ 203.603309][ T9120] [ 203.603309][ T9120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.603309][ T9120] [ 203.642982][ T9095] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 203.697295][ T9095] BTRFS info (device loop2): use lzo compression, level 0 [ 203.720707][ T9120] [ 203.720707][ T9120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.720707][ T9120] [ 203.753934][ T9095] BTRFS info (device loop2): not using ssd optimizations [ 203.764381][ T9095] BTRFS info (device loop2): using free space tree [ 203.764429][ T9100] [ 203.764429][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.764429][ T9100] [ 203.794285][ T9095] BTRFS info (device loop2): has skinny extents [ 203.812708][ T3616] usb 1-1: Using ep0 maxpacket: 8 [ 203.814923][ T9100] [ 203.814923][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.814923][ T9100] [ 203.880776][ T9100] [ 203.880776][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.880776][ T9100] [ 203.937535][ T9126] loop1: detected capacity change from 0 to 4096 [ 203.944415][ T3616] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 203.957136][ T4804] [ 203.957136][ T4804] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.957136][ T4804] [ 203.979468][ T4804] [ 203.979468][ T4804] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.979468][ T4804] [ 204.009669][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.060243][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 204.090314][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.260943][ T3616] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 204.268461][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.340162][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 204.399844][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.539764][ T3616] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 204.547254][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.599456][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 204.664361][ T3616] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.837177][ T9117] loop3: detected capacity change from 0 to 32768 [ 205.008537][ T9117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1856 (9117) [ 205.059187][ T3616] usb 1-1: string descriptor 0 read error: -22 [ 205.073148][ T3616] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.091416][ T3616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.174016][ T3616] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.402249][ T9117] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 205.420781][ T3613] usb 1-1: USB disconnect, device number 13 [ 205.457065][ T9117] BTRFS info (device loop3): setting nodatasum [ 205.489587][ T9117] BTRFS info (device loop3): force zlib compression, level 3 [ 205.505260][ T9117] BTRFS info (device loop3): setting nodatacow [ 205.569607][ T9117] BTRFS info (device loop3): turning on flush-on-commit [ 205.577332][ T9117] BTRFS info (device loop3): allowing degraded mounts [ 205.627542][ T9119] adutux: No device or device unplugged -19 [ 205.709635][ T9117] BTRFS info (device loop3): using free space tree [ 205.716265][ T9117] BTRFS info (device loop3): has skinny extents [ 205.752945][ T9171] loop1: detected capacity change from 0 to 2048 [ 205.956640][ T9171] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.973244][ T9171] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038 (0x7fffffff) [ 206.032783][ T9167] loop4: detected capacity change from 0 to 32768 [ 206.116357][ T9117] BTRFS info (device loop3): enabling ssd optimizations [ 206.153524][ T3557] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 206.198263][ T9167] find_entry called with index >= next_index [ 206.252844][ T9167] find_entry called with index >= next_index [ 206.263437][ T9167] find_entry called with index >= next_index [ 206.338556][ T9204] loop0: detected capacity change from 0 to 1024 [ 206.409881][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 206.469789][ T9204] hfsplus: xattr searching failed [ 206.575388][ T9204] hfsplus: b-tree write err: -5, ino 3 [ 206.581101][ T3557] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 206.599353][ T3557] usb 3-1: config 0 has no interface number 0 [ 206.605982][ T3557] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 206.644206][ T3557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.696390][ T3557] usb 3-1: config 0 descriptor?? [ 206.740603][ T3557] ums-realtek 3-1:0.6: USB Mass Storage device detected [ 206.910345][ T3628] hfsplus: bad catalog file entry [ 206.974501][ T3557] usb 3-1: USB disconnect, device number 10 [ 207.573166][ T9214] loop0: detected capacity change from 0 to 256 [ 207.620232][ T9214] exfat: Deprecated parameter 'namecase' [ 207.626560][ T9214] exfat: Deprecated parameter 'namecase' [ 207.710319][ T9214] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 207.886299][ T9229] loop3: detected capacity change from 0 to 2048 [ 208.233143][ T9234] loop3: detected capacity change from 0 to 1024 [ 208.393144][ T9234] hfsplus: xattr searching failed [ 208.441234][ T9234] hfsplus: b-tree write err: -5, ino 3 [ 208.558320][ T3628] hfsplus: bad catalog file entry [ 208.583160][ T9230] loop4: detected capacity change from 0 to 32768 [ 208.691503][ T9239] loop2: detected capacity change from 0 to 4096 [ 208.705005][ T9243] loop3: detected capacity change from 0 to 64 [ 208.716520][ T9230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1888 (9230) [ 208.763286][ T9226] loop1: detected capacity change from 0 to 40427 [ 208.793970][ T9230] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 208.828409][ T9230] BTRFS info (device loop4): setting nodatasum [ 208.836152][ T9239] ntfs: volume version 3.1. [ 208.859543][ T9230] BTRFS info (device loop4): force zlib compression, level 3 [ 208.868657][ T9226] F2FS-fs (loop1): invalid crc value [ 208.905707][ T9226] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.922139][ T9230] BTRFS info (device loop4): setting nodatacow [ 208.928417][ T9230] BTRFS info (device loop4): turning on flush-on-commit [ 208.993320][ T9230] BTRFS info (device loop4): allowing degraded mounts [ 209.048199][ T9230] BTRFS info (device loop4): using free space tree [ 209.077771][ T9230] BTRFS info (device loop4): has skinny extents [ 209.106349][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 209.129571][ T9226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 209.362016][ T3566] attempt to access beyond end of device [ 209.362016][ T3566] loop1: rw=2049, want=45104, limit=40427 [ 209.634850][ T9279] ODEBUG: Out of memory. ODEBUG disabled [ 209.648458][ T9230] BTRFS info (device loop4): enabling ssd optimizations [ 209.673873][ T9281] loop2: detected capacity change from 0 to 1024 [ 209.867283][ T9281] hfsplus: xattr searching failed [ 209.962268][ T9281] hfsplus: b-tree write err: -5, ino 3 [ 210.268328][ T9287] loop3: detected capacity change from 0 to 1024 [ 210.561416][ T4037] hfsplus: bad catalog file entry [ 210.809559][ T9304] loop2: detected capacity change from 0 to 512 [ 210.812124][ T9306] loop3: detected capacity change from 0 to 512 [ 210.843323][ T9308] loop4: detected capacity change from 0 to 64 [ 210.946013][ T9306] EXT4-fs (loop3): Ignoring removed orlov option [ 210.958448][ T9306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.981935][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1913: corrupted inode contents [ 211.033598][ T9306] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1914: corrupted in-inode xattr [ 211.056290][ T9304] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.1913: mark_inode_dirty error [ 211.144341][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1913: corrupted inode contents [ 211.160756][ T9306] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1914: couldn't read orphan inode 15 (err -117) [ 211.196109][ T9304] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1913: mark_inode_dirty error [ 211.220223][ T9306] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,jqfmt=vfsold,orlov,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 211.248086][ T9304] Quota error (device loop2): write_blk: dquota write failed [ 211.256260][ T9304] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 211.308503][ T9304] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1913: Failed to acquire dquot type 0 [ 211.322320][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1913: corrupted inode contents [ 211.342877][ T9304] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #16: comm syz.2.1913: mark_inode_dirty error [ 211.360128][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1913: corrupted inode contents [ 211.375968][ T9304] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.1913: mark_inode_dirty error [ 211.388570][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1913: corrupted inode contents [ 211.420167][ T9304] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 211.449594][ T9304] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.1913: corrupted inode contents [ 211.480496][ T9304] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.1913: mark_inode_dirty error [ 211.510709][ T9304] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 211.518048][ T9302] loop1: detected capacity change from 0 to 40427 [ 211.532723][ T9304] EXT4-fs (loop2): 1 truncate cleaned up [ 211.538365][ T9304] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.549687][ T9304] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038 (0x7fffffff) [ 211.589367][ T9319] loop4: detected capacity change from 0 to 1024 [ 211.597519][ T9320] device wlan0 entered promiscuous mode [ 211.636235][ T9302] F2FS-fs (loop1): invalid crc value [ 211.672936][ T9302] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.744821][ T9319] hfsplus: xattr searching failed [ 211.759618][ T9302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.844414][ T3566] attempt to access beyond end of device [ 211.844414][ T3566] loop1: rw=2049, want=45104, limit=40427 [ 211.892883][ T9319] hfsplus: b-tree write err: -5, ino 3 [ 211.989804][ T9] hfsplus: bad catalog file entry [ 212.088028][ T9336] loop3: detected capacity change from 0 to 512 [ 212.157198][ T9336] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 212.192962][ T9336] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.220508][ T9336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.238107][ T9336] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 212.264369][ T9336] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.288300][ T9336] EXT4-fs (loop3): 1 truncate cleaned up [ 212.296776][ T9336] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,dioread_nolock,nobarrier,,errors=continue. Quota mode: none. [ 212.531223][ T9325] loop2: detected capacity change from 0 to 32768 [ 212.588387][ T9346] loop1: detected capacity change from 0 to 2048 [ 212.624999][ T9325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1916 (9325) [ 212.682311][ T9325] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 212.709549][ T9325] BTRFS info (device loop2): setting nodatasum [ 212.718691][ T9346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.753000][ T25] audit: type=1800 audit(2000000023.560:221): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1929" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 212.792432][ T9325] BTRFS info (device loop2): force zlib compression, level 3 [ 212.818807][ T9325] BTRFS info (device loop2): setting nodatacow [ 212.868220][ T9325] BTRFS info (device loop2): turning on flush-on-commit [ 212.930039][ T9325] BTRFS info (device loop2): allowing degraded mounts [ 212.940474][ T9325] BTRFS info (device loop2): using free space tree [ 212.956566][ T9325] BTRFS info (device loop2): has skinny extents [ 213.057494][ T9340] loop4: detected capacity change from 0 to 32768 [ 213.082475][ T9325] BTRFS info (device loop2): enabling ssd optimizations [ 213.089373][ T9367] loop0: detected capacity change from 0 to 1024 [ 213.217878][ T9340] read_mapping_page failed! [ 213.276451][ T9340] bread failed! [ 213.281486][ T9367] hfsplus: xattr searching failed [ 213.315779][ T9340] jfs_create: dtInsert returned -EIO [ 213.344622][ T9340] ERROR: (device loop4): jfs_create: [ 213.344622][ T9340] [ 213.368496][ T9367] hfsplus: b-tree write err: -5, ino 3 [ 213.406077][ T9340] ERROR: (device loop4): remounting filesystem as read-only [ 213.497436][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 213.603720][ T9394] loop1: detected capacity change from 0 to 512 [ 213.780984][ T9394] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 213.797782][ T9403] loop3: detected capacity change from 0 to 2048 [ 213.818002][ T9394] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 213.859785][ T9394] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1942: Corrupt directory, running e2fsck is recommended [ 213.864948][ T9403] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 213.903231][ T3628] hfsplus: bad catalog file entry [ 213.922398][ T9394] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 213.946297][ T9394] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1942: corrupted in-inode xattr [ 213.961454][ T9394] EXT4-fs (loop1): Remounting filesystem read-only [ 213.968139][ T9394] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1942: couldn't read orphan inode 15 (err -117) [ 213.968148][ T9406] loop2: detected capacity change from 0 to 4096 [ 213.979924][ T9394] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 214.035156][ T9394] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 214.039801][ T9403] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 214.047588][ T9394] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 214.113140][ T9394] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1942: Corrupt directory, running e2fsck is recommended [ 214.539291][ T9415] loop3: detected capacity change from 0 to 4096 [ 214.682602][ T9415] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 214.742016][ T9415] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 214.869481][ T6031] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 214.986930][ T9431] loop3: detected capacity change from 0 to 512 [ 215.192293][ T9431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.208934][ T9423] loop0: detected capacity change from 0 to 32768 [ 215.221803][ T9421] loop1: detected capacity change from 0 to 32768 [ 215.227283][ T9431] ext4 filesystem being mounted at /220/bus supports timestamps until 2038 (0x7fffffff) [ 215.285528][ T9423] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1951 (9423) [ 215.337767][ T9428] loop4: detected capacity change from 0 to 32768 [ 215.344100][ T9420] loop2: detected capacity change from 0 to 32768 [ 215.380109][ T9428] XFS: attr2 mount option is deprecated. [ 215.381975][ T9421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1948 (9421) [ 215.399118][ T9423] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.487366][ T9423] BTRFS info (device loop0): force zlib compression, level 3 [ 215.499304][ T9428] XFS (loop4): Mounting V5 Filesystem [ 215.509972][ T9423] BTRFS info (device loop0): force clearing of disk cache [ 215.517214][ T9423] BTRFS info (device loop0): setting nodatasum [ 215.548604][ T9442] ALSA: mixer_oss: invalid OSS volume 'MIÚ2ĉ›q½œ™á&<,sóã ”cñãC' [ 215.554801][ T9421] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 215.579744][ T9423] BTRFS info (device loop0): allowing degraded mounts [ 215.586641][ T9423] BTRFS info (device loop0): enabling disk space caching [ 215.595063][ T9421] BTRFS info (device loop1): setting nodatasum [ 215.610387][ T9421] BTRFS info (device loop1): force zlib compression, level 3 [ 215.617802][ T9421] BTRFS info (device loop1): setting nodatacow [ 215.624212][ T9423] BTRFS info (device loop0): disk space caching is enabled [ 215.644074][ T9423] BTRFS info (device loop0): has skinny extents [ 215.721579][ T9421] BTRFS info (device loop1): turning on flush-on-commit [ 215.728555][ T9421] BTRFS info (device loop1): allowing degraded mounts [ 215.814783][ T9421] BTRFS info (device loop1): using free space tree [ 215.827892][ T9428] XFS (loop4): Ending clean mount [ 215.860318][ T9421] BTRFS info (device loop1): has skinny extents [ 215.869278][ T9428] XFS (loop4): Quotacheck needed: Please wait. [ 215.880430][ T9448] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 215.908478][ T9448] netdevsim netdevsim2 netdevsim1: Failed to get key data for SA table [ 215.991266][ T9423] BTRFS info (device loop0): clearing free space tree [ 215.998443][ T9423] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.031605][ T9423] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.042302][ T9428] XFS (loop4): Quotacheck: Done. [ 216.074428][ T9421] BTRFS info (device loop1): enabling ssd optimizations [ 216.092304][ T9494] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 216.130781][ T4804] XFS (loop4): Unmounting Filesystem [ 216.180272][ T9423] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 216.272902][ T9503] loop2: detected capacity change from 0 to 128 [ 216.350369][ T9503] EXT4-fs warning (device loop2): ext4_fill_super:3981: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 216.425520][ T9503] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 217.084751][ T9514] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1968'. [ 217.149600][ T4703] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.409647][ T4703] usb 4-1: Using ep0 maxpacket: 8 [ 217.478980][ T25] audit: type=1326 audit(2000000028.280:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e5f3cff9 code=0x0 [ 217.699570][ T4703] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 217.720534][ T4703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.728540][ T4703] usb 4-1: Product: syz [ 217.749469][ T4703] usb 4-1: Manufacturer: syz [ 217.754101][ T4703] usb 4-1: SerialNumber: syz [ 217.779939][ T4703] usb 4-1: config 0 descriptor?? [ 217.820910][ T4703] option 4-1:0.0: GSM modem (1-port) converter detected [ 217.840047][ T9551] smc: net device vlan0 applied user defined pnetid SYZ1 [ 217.861652][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 218.011030][ T9539] loop1: detected capacity change from 0 to 32768 [ 218.066966][ T4703] usb 4-1: USB disconnect, device number 9 [ 218.074651][ T9539] [ 218.074651][ T9539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.074651][ T9539] [ 218.090035][ T4703] option 4-1:0.0: device disconnected [ 218.135799][ T9539] [ 218.135799][ T9539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.135799][ T9539] [ 218.147104][ T9539] [ 218.147104][ T9539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.147104][ T9539] [ 218.158323][ T9539] [ 218.158323][ T9539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.158323][ T9539] [ 218.173527][ T9539] [ 218.173527][ T9539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.173527][ T9539] [ 218.192643][ T9556] [ 218.192643][ T9556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.192643][ T9556] [ 218.229488][ T9556] [ 218.229488][ T9556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.229488][ T9556] [ 218.259456][ T9556] [ 218.259456][ T9556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.259456][ T9556] [ 218.273104][ T9556] [ 218.273104][ T9556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.273104][ T9556] [ 218.292373][ T9556] [ 218.292373][ T9556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.292373][ T9556] [ 218.333781][ T3610] [ 218.333781][ T3610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.333781][ T3610] [ 218.335312][ T9555] loop2: detected capacity change from 0 to 32768 [ 218.353711][ T3610] [ 218.353711][ T3610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.353711][ T3610] [ 218.383043][ T3566] [ 218.383043][ T3566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.383043][ T3566] [ 218.407417][ T276] [ 218.407417][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.407417][ T276] [ 218.432488][ T3566] [ 218.432488][ T3566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.432488][ T3566] [ 218.458365][ T9555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1983 (9555) [ 218.486396][ T9555] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 218.496281][ T9555] BTRFS info (device loop2): using free space tree [ 218.504799][ T9555] BTRFS info (device loop2): has skinny extents [ 218.902478][ T9555] BTRFS info (device loop2): enabling ssd optimizations [ 218.909377][ T9558] loop0: detected capacity change from 0 to 40427 [ 219.081686][ T9592] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.103822][ T9558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.206649][ T9558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 219.240798][ T9558] attempt to access beyond end of device [ 219.240798][ T9558] loop0: rw=1, want=45104, limit=40427 [ 219.493186][ T3711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (3711) [ 219.494071][ T3569] attempt to access beyond end of device [ 219.494071][ T3569] loop0: rw=2049, want=45112, limit=40427 [ 219.861977][ T9569] loop3: detected capacity change from 0 to 40427 [ 219.895352][ T9616] loop2: detected capacity change from 0 to 1024 [ 219.959709][ T9569] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 219.967494][ T9569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 220.037000][ T9569] F2FS-fs (loop3): invalid crc value [ 220.092929][ T9569] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 220.303039][ T9569] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 220.331497][ T9601] loop1: detected capacity change from 0 to 32768 [ 220.334414][ T9569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.511396][ T9601] XFS (loop1): Mounting V5 Filesystem [ 220.689571][ T9601] XFS (loop1): Ending clean mount [ 220.706963][ T9601] XFS (loop1): Quotacheck needed: Please wait. [ 220.850432][ T9601] XFS (loop1): Quotacheck: Done. [ 220.918838][ T9625] loop2: detected capacity change from 0 to 40427 [ 221.019754][ T3566] XFS (loop1): Unmounting Filesystem [ 221.111136][ T9625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.241343][ T9625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.271981][ T9636] loop0: detected capacity change from 0 to 40427 [ 221.334003][ T9636] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 221.349486][ T9636] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.403916][ T9636] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.436281][ T9625] attempt to access beyond end of device [ 221.436281][ T9625] loop2: rw=2049, want=45104, limit=40427 [ 221.504942][ T9636] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.543095][ T9636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.506271][ T9666] loop4: detected capacity change from 0 to 32768 [ 222.578850][ T9667] loop1: detected capacity change from 0 to 32768 [ 222.677202][ T9670] loop2: detected capacity change from 0 to 32768 [ 222.726379][ T9667] XFS (loop1): Mounting V5 Filesystem [ 222.752706][ T9670] XFS (loop2): Mounting V5 Filesystem [ 222.840757][ T9667] XFS (loop1): Ending clean mount [ 222.910402][ T9670] XFS (loop2): Ending clean mount [ 222.940076][ T9670] XFS (loop2): Quotacheck needed: Please wait. [ 222.962316][ T3566] XFS (loop1): Unmounting Filesystem [ 223.023164][ T9670] XFS (loop2): Quotacheck: Done. [ 223.271327][ T9676] loop3: detected capacity change from 0 to 32768 [ 223.283611][ T3567] XFS (loop2): Unmounting Filesystem [ 223.487181][ T9676] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 223.487181][ T9676] [ 223.533782][ T3610] read_mapping_page failed! [ 223.538346][ T3610] ERROR: (device loop3): txCommit: [ 223.538346][ T3610] [ 223.552943][ T9674] loop0: detected capacity change from 0 to 32768 [ 223.582266][ T9683] loop4: detected capacity change from 0 to 32768 [ 223.588946][ T3610] jfs_write_inode: jfs_commit_inode failed! [ 223.612380][ T9674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2030 (9674) [ 223.733644][ T9683] XFS (loop4): Mounting V5 Filesystem [ 223.770177][ T9674] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 223.779004][ T9674] BTRFS info (device loop0): setting nodatasum [ 223.833119][ T9674] BTRFS info (device loop0): force zlib compression, level 3 [ 223.861136][ T9683] XFS (loop4): Ending clean mount [ 223.869022][ T9674] BTRFS info (device loop0): setting nodatacow [ 223.881754][ T9683] XFS (loop4): Quotacheck needed: Please wait. [ 223.903762][ T9674] BTRFS info (device loop0): turning on flush-on-commit [ 223.939506][ T9674] BTRFS info (device loop0): allowing degraded mounts [ 223.946331][ T9674] BTRFS info (device loop0): using free space tree [ 223.979833][ T9674] BTRFS info (device loop0): has skinny extents [ 224.042621][ T9711] overlayfs: failed to set xattr on upper [ 224.048415][ T9711] overlayfs: ...falling back to index=off,metacopy=off. [ 224.083404][ T9683] XFS (loop4): Quotacheck: Done. [ 224.166605][ T4804] XFS (loop4): Unmounting Filesystem [ 224.196872][ T9674] BTRFS info (device loop0): enabling ssd optimizations [ 225.036594][ T25] audit: type=1326 audit(2000000035.840:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.159235][ T25] audit: type=1326 audit(2000000035.840:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.192652][ T9751] device wlan0 entered promiscuous mode [ 225.239193][ T25] audit: type=1326 audit(2000000035.840:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.344852][ T25] audit: type=1326 audit(2000000035.840:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.429892][ T25] audit: type=1326 audit(2000000035.840:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.547697][ T25] audit: type=1326 audit(2000000035.840:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.555202][ T9745] loop2: detected capacity change from 0 to 32768 [ 225.644129][ T25] audit: type=1326 audit(2000000035.840:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.682500][ T25] audit: type=1326 audit(2000000035.840:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.735402][ T9747] loop3: detected capacity change from 0 to 40427 [ 225.743955][ T9745] [ 225.743955][ T9745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.743955][ T9745] [ 225.754888][ T25] audit: type=1326 audit(2000000035.840:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.754923][ T25] audit: type=1326 audit(2000000035.840:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.1.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3877c75ff9 code=0x7fc00000 [ 225.879962][ T9747] F2FS-fs (loop3): invalid crc value [ 225.903959][ T9747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 226.022319][ T9745] [ 226.022319][ T9745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.022319][ T9745] [ 226.078924][ T9745] [ 226.078924][ T9745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.078924][ T9745] [ 226.113226][ T9747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.125286][ T9745] [ 226.125286][ T9745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.125286][ T9745] [ 226.184600][ T9745] [ 226.184600][ T9745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.184600][ T9745] [ 226.228267][ T9778] [ 226.228267][ T9778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.228267][ T9778] [ 226.258591][ T9778] [ 226.258591][ T9778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.258591][ T9778] [ 226.298670][ T9783] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2048'. [ 226.310369][ T9778] [ 226.310369][ T9778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.310369][ T9778] [ 226.329973][ T6031] attempt to access beyond end of device [ 226.329973][ T6031] loop3: rw=2049, want=45104, limit=40427 [ 226.359580][ T9778] [ 226.359580][ T9778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.359580][ T9778] [ 226.431057][ T9778] [ 226.431057][ T9778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.431057][ T9778] [ 226.437369][ T9785] loop4: detected capacity change from 0 to 256 [ 226.548326][ T3628] [ 226.548326][ T3628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.548326][ T3628] [ 226.579258][ T3628] [ 226.579258][ T3628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.579258][ T3628] [ 226.636459][ T3567] [ 226.636459][ T3567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.636459][ T3567] [ 226.652045][ T276] [ 226.652045][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.652045][ T276] [ 226.685356][ T3567] [ 226.685356][ T3567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.685356][ T3567] [ 226.746310][ T9787] loop4: detected capacity change from 0 to 16 [ 226.758105][ T9787] erofs: (device loop4): mounted with root inode @ nid 36. [ 226.771075][ T9787] attempt to access beyond end of device [ 226.771075][ T9787] loop4: rw=0, want=24, limit=16 [ 226.783861][ T9787] erofs: (device loop4): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 226.793167][ T9769] loop0: detected capacity change from 0 to 32768 [ 226.833996][ T9787] erofs: (device loop4): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 226.877742][ T9787] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 226.883269][ T9772] loop1: detected capacity change from 0 to 32768 [ 226.916101][ T9787] attempt to access beyond end of device [ 226.916101][ T9787] loop4: rw=524288, want=32, limit=16 [ 226.932787][ T9769] JBD2: Ignoring recovery information on journal [ 226.979670][ T9787] attempt to access beyond end of device [ 226.979670][ T9787] loop4: rw=524288, want=24, limit=16 [ 227.008242][ T9772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2044 (9772) [ 227.137857][ T9772] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 227.177291][ T9772] BTRFS info (device loop1): setting nodatasum [ 227.188474][ T9793] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2061'. [ 227.198837][ T9769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.219699][ T9772] BTRFS info (device loop1): force zlib compression, level 3 [ 227.253789][ T9772] BTRFS info (device loop1): setting nodatacow [ 227.278785][ T9772] BTRFS info (device loop1): turning on flush-on-commit [ 227.304736][ T3569] ocfs2: Unmounting device (7,0) on (node local) [ 227.309567][ T9772] BTRFS info (device loop1): allowing degraded mounts [ 227.317850][ T9772] BTRFS info (device loop1): using free space tree [ 227.350402][ T3770] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.359714][ T9772] BTRFS info (device loop1): has skinny extents [ 227.403056][ T9798] loop2: detected capacity change from 0 to 512 [ 227.476402][ T9798] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 227.484569][ T9798] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.499435][ T9798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.563710][ T9798] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 227.583651][ T9798] EXT4-fs (loop2): 1 truncate cleaned up [ 227.591115][ T9798] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,dioread_nolock,nobarrier,,errors=continue. Quota mode: none. [ 227.688172][ T9772] BTRFS info (device loop1): enabling ssd optimizations [ 227.790599][ T3770] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 227.813234][ T3770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.831144][ T3770] usb 4-1: config 0 descriptor?? [ 227.877780][ T9823] netlink: 'syz.2.2055': attribute type 9 has an invalid length. [ 227.988607][ T9795] loop4: detected capacity change from 0 to 32768 [ 228.049812][ T4715] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.083719][ T9795] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2052 (9795) [ 228.289543][ T4715] usb 1-1: Using ep0 maxpacket: 16 [ 228.298129][ T9795] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 228.309722][ T3770] hackrf 4-1:0.0: Board ID: 00 [ 228.314638][ T3770] hackrf 4-1:0.0: Firmware version: [ 228.341177][ T9795] BTRFS info (device loop4): turning off barriers [ 228.347664][ T9795] BTRFS info (device loop4): enabling auto defrag [ 228.385268][ T3770] hackrf 4-1:0.0: Registered as swradio16 [ 228.399509][ T9795] BTRFS info (device loop4): enabling all of the rescue options [ 228.409807][ T4715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.439642][ T3770] hackrf 4-1:0.0: Registered as swradio17 [ 228.445401][ T3770] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 228.449601][ T4715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.479625][ T9795] BTRFS info (device loop4): ignoring data csums [ 228.540244][ T9795] BTRFS info (device loop4): ignoring bad roots [ 228.546526][ T9795] BTRFS info (device loop4): disabling log replay at mount time [ 228.565979][ T3770] usb 4-1: USB disconnect, device number 10 [ 228.602000][ T9795] BTRFS info (device loop4): enabling ssd optimizations [ 228.619366][ T9795] BTRFS info (device loop4): using spread ssd allocation scheme [ 228.628275][ T9795] BTRFS info (device loop4): using free space tree [ 228.643817][ T4715] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 228.663778][ T4715] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 228.678312][ T9795] BTRFS info (device loop4): has skinny extents [ 228.715618][ T4715] usb 1-1: Product: syz [ 228.720295][ T9795] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 228.754805][ T4715] usb 1-1: Manufacturer: syz [ 228.774455][ T4715] usb 1-1: config 0 descriptor?? [ 228.810000][ T9795] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 228.879643][ T9795] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 228.927042][ T9795] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 228.942823][ T9795] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 228.961856][ T9795] workqueue: max_active 32767 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 228.977371][ T9795] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 228.996391][ T9795] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 229.008133][ T9795] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 229.048461][ T9795] workqueue: max_active 32767 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 229.073323][ T9825] loop2: detected capacity change from 0 to 32768 [ 229.100721][ T9860] loop1: detected capacity change from 0 to 512 [ 229.123325][ T9795] BTRFS error (device loop4): nologreplay must be used with ro mount option [ 229.162481][ T9860] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 229.162481][ T9860] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 229.162481][ T9860] [ 229.326059][ T4715] kovaplus 0003:1E7D:2D50.000E: item fetching failed at offset 5/7 [ 229.362738][ T4715] kovaplus 0003:1E7D:2D50.000E: parse failed [ 229.368772][ T4715] kovaplus: probe of 0003:1E7D:2D50.000E failed with error -22 [ 229.384302][ T9825] MetaData crosses page boundary!! [ 229.403478][ T9825] lblock = 631800, size = 28672 [ 229.408441][ T9825] CPU: 1 PID: 9825 Comm: syz.2.2057 Not tainted 5.15.167-syzkaller #0 [ 229.416599][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.426817][ T9825] Call Trace: [ 229.430098][ T9825] [ 229.433028][ T9825] dump_stack_lvl+0x1e3/0x2d0 [ 229.437699][ T9825] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 229.443323][ T9825] ? panic+0x860/0x860 [ 229.447403][ T9825] ? asm_exc_page_fault+0x22/0x30 [ 229.452427][ T9825] __get_metapage+0xc16/0x1070 [ 229.457221][ T9825] dtReadFirst+0xde/0xbe0 [ 229.458235][ T9860] EXT4-fs (loop1): 1 orphan inode deleted [ 229.461593][ T9825] jfs_readdir+0x8c4/0x4650 [ 229.461665][ T9825] ? rcu_lock_release+0x5/0x20 [ 229.461691][ T9825] ? mark_lock+0x98/0x340 [ 229.461713][ T9825] ? __lock_acquire+0x1295/0x1ff0 [ 229.461744][ T9825] ? dtInitRoot+0x690/0x690 [ 229.461791][ T9825] ? end_current_label_crit_section+0x147/0x170 [ 229.461816][ T9825] ? common_file_perm+0x17d/0x1d0 [ 229.461845][ T9825] iterate_dir+0x224/0x570 [ 229.461878][ T9825] __se_sys_getdents64+0x209/0x4f0 [ 229.471377][ T9860] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,nouser_xattr,sysvgroups,norecovery,usrquota,minixdf,,errors=continue. Quota mode: writeback. [ 229.472073][ T9825] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 229.476979][ T9860] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038 (0x7fffffff) [ 229.481131][ T9825] ? __x64_sys_getdents64+0x80/0x80 [ 229.481156][ T9825] ? filldir+0x720/0x720 [ 229.481177][ T9825] ? syscall_enter_from_user_mode+0x2e/0x240 [ 229.481199][ T9825] ? lockdep_hardirqs_on+0x94/0x130 [ 229.481219][ T9825] ? syscall_enter_from_user_mode+0x2e/0x240 [ 229.481243][ T9825] do_syscall_64+0x3b/0xb0 [ 229.481260][ T9825] ? clear_bhb_loop+0x15/0x70 [ 229.481277][ T9825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.499578][ T4715] usb 1-1: USB disconnect, device number 14 [ 229.502110][ T9825] RIP: 0033:0x7f58ae9e6ff9 [ 229.603155][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.622776][ T9825] RSP: 002b:00007f58ace5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 229.631190][ T9825] RAX: ffffffffffffffda RBX: 00007f58aeb9ef80 RCX: 00007f58ae9e6ff9 [ 229.639171][ T9825] RDX: 0000000000001002 RSI: 0000000020002f40 RDI: 0000000000000005 [ 229.647141][ T9825] RBP: 00007f58aea59296 R08: 0000000000000000 R09: 0000000000000000 [ 229.655104][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.663074][ T9825] R13: 0000000000000000 R14: 00007f58aeb9ef80 R15: 00007ffe784a4958 [ 229.671119][ T9825] [ 229.785731][ T9825] bread failed! [ 229.820770][ T3734] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (3734) [ 229.979591][ T3615] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.078545][ T9886] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2075'. [ 230.172700][ T9891] ALSA: mixer_oss: invalid OSS volume '' [ 230.310214][ T3768] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.345939][ T9895] netlink: 'syz.0.2079': attribute type 16 has an invalid length. [ 230.355271][ T9895] netlink: 'syz.0.2079': attribute type 3 has an invalid length. [ 230.359731][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.363399][ T9895] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 230.383249][ T9895] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 230.396063][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.399875][ T9895] netlink: 'syz.0.2079': attribute type 2 has an invalid length. [ 230.422247][ T3615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.425150][ T9895] netlink: 64006 bytes leftover after parsing attributes in process `syz.0.2079'. [ 230.461645][ T3615] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 230.486213][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.518431][ T3615] usb 4-1: config 0 descriptor?? [ 230.674312][ T9899] loop0: detected capacity change from 0 to 8192 [ 230.732560][ T3768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.749422][ T3768] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.840431][ T3768] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.859433][ T3768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.867609][ T3768] usb 5-1: SerialNumber: syz [ 230.979660][ T9899] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 231.000888][ T9910] nbd: must specify a size in bytes for the device [ 231.001412][ T3615] hid-udraw 0003:20D6:CB17.000F: unbalanced delimiter at end of report description [ 231.019982][ T3615] hid-udraw 0003:20D6:CB17.000F: parse failed [ 231.026174][ T3615] hid-udraw: probe of 0003:20D6:CB17.000F failed with error -22 [ 231.028107][ T9899] REISERFS (device loop0): using ordered data mode [ 231.059980][ T9899] reiserfs: using flush barriers [ 231.068144][ T9899] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.089371][ T9899] REISERFS (device loop0): checking transaction log (loop0) [ 231.192673][ T3768] usb 5-1: 0:2 : does not exist [ 231.236724][ T3770] usb 4-1: USB disconnect, device number 11 [ 231.290689][ T9899] REISERFS (device loop0): Using tea hash to sort names [ 231.303800][ T9899] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 231.334889][ T3768] usb 5-1: USB disconnect, device number 11 [ 231.359076][ T9899] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 231.481192][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 231.677370][ T9931] loop1: detected capacity change from 0 to 512 [ 231.740371][ T9931] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.823796][ T9931] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 231.841620][ T9931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2095: invalid indirect mapped block 2683928664 (level 1) [ 231.885067][ T9931] EXT4-fs (loop1): 1 truncate cleaned up [ 231.888673][ T9935] loop3: detected capacity change from 0 to 2048 [ 231.891303][ T9931] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,mb_optimize_scan=0x0000000000000001,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 231.970158][ T9935] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 231.977797][ T9935] UDF-fs: Scanning with blocksize 512 failed [ 231.994262][ T9931] Process accounting resumed [ 232.022294][ T9931] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.2095: Invalid block bitmap block 3 in block_group 0 [ 232.051256][ T9935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.055347][ T9940] loop4: detected capacity change from 0 to 4096 [ 232.076503][ T9931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2095: invalid indirect mapped block 2683928664 (level 1) [ 232.173109][ T9940] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 232.650414][ T3768] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.697125][ T9937] loop0: detected capacity change from 0 to 32768 [ 232.729537][ T9969] netlink: 'syz.4.2111': attribute type 2 has an invalid length. [ 232.769608][ T9937] XFS (loop0): Mounting V5 Filesystem [ 232.850817][ T9937] XFS (loop0): Ending clean mount [ 232.859027][ T9937] XFS (loop0): Quotacheck needed: Please wait. [ 232.888309][ T9987] loop1: detected capacity change from 0 to 512 [ 232.907025][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'. [ 232.917856][ T3768] usb 3-1: Using ep0 maxpacket: 32 [ 232.979575][ T9987] EXT4-fs (loop1): Ignoring removed nobh option [ 232.985977][ T9987] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 232.999884][ T9937] XFS (loop0): Quotacheck: Done. [ 233.060403][ T3768] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 233.071795][ T3768] usb 3-1: config 0 has no interface number 0 [ 233.099531][ T3755] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.143625][ T3569] XFS (loop0): Unmounting Filesystem [ 233.169250][ T9996] loop3: detected capacity change from 0 to 1024 [ 233.193018][ T9987] EXT4-fs (loop1): 1 truncate cleaned up [ 233.198689][ T9987] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 233.270758][ T3768] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.280002][ T3768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.288359][ T3768] usb 3-1: Product: syz [ 233.293343][ T3768] usb 3-1: Manufacturer: syz [ 233.297958][ T3768] usb 3-1: SerialNumber: syz [ 233.320558][ T3768] usb 3-1: config 0 descriptor?? [ 233.387005][ T3768] smsc95xx v2.0.0 [ 233.532185][ T3755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.568933][ T3755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.584294][ T3755] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 233.595171][ T3755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.625401][ T3755] usb 5-1: config 0 descriptor?? [ 233.810495][ T3768] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 233.845905][ T3768] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.893812][T10024] tap0: tun_chr_ioctl cmd 1074025680 [ 234.130178][ T3755] wacom 0003:056A:032B.0010: unknown main item tag 0x0 [ 234.140451][ T3768] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 234.171392][ T3755] wacom 0003:056A:032B.0010: unknown main item tag 0x0 [ 234.180146][ T3768] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 234.205121][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2135'. [ 234.225381][ T3755] wacom 0003:056A:032B.0010: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.4-1/input0 [ 234.239966][ T3768] usb 3-1: USB disconnect, device number 11 [ 234.328707][ T3755] usb 5-1: USB disconnect, device number 12 [ 234.379634][ T25] kauditd_printk_skb: 56 callbacks suppressed [ 234.379648][ T25] audit: type=1326 audit(2000000045.190:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.0.2139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e5f3cff9 code=0x0 [ 234.469013][T10043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2142'. [ 234.722340][T10058] loop1: detected capacity change from 0 to 512 [ 234.775285][T10058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 234.796393][T10054] loop3: detected capacity change from 0 to 8192 [ 234.828114][T10058] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2148: invalid indirect mapped block 83886080 (level 1) [ 234.835258][T10054] loop3: AHDI p1 p3 p4 [ 234.851392][T10058] EXT4-fs (loop1): Remounting filesystem read-only [ 234.883896][T10054] loop3: p1 size 1048585 extends beyond EOD, truncated [ 234.892514][T10058] EXT4-fs (loop1): 1 orphan inode deleted [ 234.898255][T10058] EXT4-fs (loop1): 1 truncate cleaned up [ 234.908500][T10058] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 234.915439][T10063] loop4: detected capacity change from 0 to 512 [ 234.930551][T10054] loop3: p3 size 131074 extends beyond EOD, truncated [ 234.949262][T10058] EXT4-fs error (device loop1): ext4_empty_dir:3152: inode #2: block 13: comm syz.1.2148: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 234.998855][T10058] EXT4-fs (loop1): Remounting filesystem read-only [ 235.020461][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2152'. [ 235.040524][T10063] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 235.046011][T10058] EXT4-fs warning (device loop1): ext4_empty_dir:3154: inode #2: comm syz.1.2148: directory missing '..' [ 235.058003][T10063] UDF-fs: Scanning with blocksize 512 failed [ 235.073361][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 235.097171][T10063] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 235.125082][T10063] UDF-fs: Scanning with blocksize 1024 failed [ 235.132890][ T3566] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 235.182247][T10063] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 235.210483][T10063] UDF-fs: Scanning with blocksize 2048 failed [ 235.239047][T10063] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 235.278536][T10063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.604157][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 235.629275][ T7747] udevd[7747]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 235.692463][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 235.696359][ T7747] udevd[7747]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 235.845377][ T9960] bridge0: port 3(syz_tun) entered disabled state [ 235.908906][ T9960] device syz_tun left promiscuous mode [ 235.929341][ T9960] bridge0: port 3(syz_tun) entered disabled state [ 236.387283][T10071] loop0: detected capacity change from 0 to 32768 [ 236.572147][T10071] XFS (loop0): Mounting V5 Filesystem [ 236.607120][T10120] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2178'. [ 236.742789][T10071] XFS (loop0): Ending clean mount [ 236.774732][T10071] XFS (loop0): Quotacheck needed: Please wait. [ 236.897458][T10071] XFS (loop0): Quotacheck: Done. [ 237.081386][ T3569] XFS (loop0): Unmounting Filesystem [ 237.236684][T10118] chnl_net:caif_netlink_parms(): no params data found [ 237.490498][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.497593][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.539183][T10118] device bridge_slave_0 entered promiscuous mode [ 237.564772][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.580942][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.598041][T10118] device bridge_slave_1 entered promiscuous mode [ 237.667368][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.724756][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.837849][T10118] team0: Port device team_slave_0 added [ 237.881750][T10118] team0: Port device team_slave_1 added [ 237.974493][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.990749][T10161] loop4: detected capacity change from 0 to 764 [ 238.000295][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.040082][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.087941][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.115908][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.166035][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.324264][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.456090][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.544223][T10187] loop4: detected capacity change from 0 to 4096 [ 238.572845][T10118] device hsr_slave_0 entered promiscuous mode [ 238.593415][T10118] device hsr_slave_1 entered promiscuous mode [ 238.599267][T10192] user requested TSC rate below hardware speed [ 238.618188][T10118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.636317][T10118] Cannot create hsr debugfs directory [ 238.659572][ T3615] Bluetooth: hci0: command 0x0409 tx timeout [ 238.667900][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.754017][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.783792][T10187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.938131][T10206] loop0: detected capacity change from 0 to 1024 [ 239.248527][ T155] tipc: Left network mode [ 239.378687][T10219] loop0: detected capacity change from 0 to 512 [ 239.510429][T10219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.540139][T10195] loop3: detected capacity change from 0 to 32768 [ 239.551588][T10219] EXT4-fs (loop0): 1 truncate cleaned up [ 239.557388][T10219] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.667103][T10195] XFS (loop3): Mounting V5 Filesystem [ 239.709566][ T4926] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 239.868745][T10195] XFS (loop3): Ending clean mount [ 239.906073][T10195] XFS (loop3): Quotacheck needed: Please wait. [ 240.072123][ T4926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.102630][ T4926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 240.112592][ T4926] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 240.122089][ T4926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.138145][ T4926] usb 5-1: config 0 descriptor?? [ 240.205823][T10195] XFS (loop3): Quotacheck: Done. [ 240.293954][ T6031] XFS (loop3): Unmounting Filesystem [ 240.311981][T10118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.322323][T10118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.354587][T10118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.438736][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2226'. [ 240.469748][T10118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.647630][T10253] loop0: detected capacity change from 0 to 32768 [ 240.649784][ T4926] Bluetooth: Can't get state to change to load configuration err [ 240.667473][ T4926] Bluetooth: Loading sysconfig file failed [ 240.674476][ T4926] ath3k: probe of 5-1:0.0 failed with error -16 [ 240.690607][ T4926] usb 5-1: USB disconnect, device number 13 [ 240.729748][ T4925] Bluetooth: hci0: command 0x041b tx timeout [ 240.755894][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.869586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.877908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.893462][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.908944][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.929186][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.936307][T10280] loop0: detected capacity change from 0 to 512 [ 240.939338][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.950617][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.961155][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.998572][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.018477][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.071226][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.073793][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.2228: corrupted inode contents [ 241.078545][ T4037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.098789][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.108300][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.140489][ T155] device hsr_slave_0 left promiscuous mode [ 241.171201][ T155] device hsr_slave_1 left promiscuous mode [ 241.177865][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.220924][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.236250][T10289] loop3: detected capacity change from 0 to 4096 [ 241.247372][T10280] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #3: comm syz.0.2228: mark_inode_dirty error [ 241.271818][T10289] NILFS (loop3): invalid segment: Checksum error in segment payload [ 241.285410][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.2228: corrupted inode contents [ 241.298551][T10289] NILFS (loop3): trying rollback from an earlier position [ 241.313792][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.328540][T10280] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.2228: mark_inode_dirty error [ 241.339577][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.351863][ T155] device bridge_slave_1 left promiscuous mode [ 241.358233][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.371690][T10289] NILFS (loop3): recovery complete [ 241.378858][ T155] device bridge_slave_0 left promiscuous mode [ 241.385505][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.393887][T10280] Quota error (device loop0): write_blk: dquota write failed [ 241.408801][T10280] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 241.409333][T10292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.446216][T10280] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.2228: Failed to acquire dquot type 0 [ 241.460163][ T155] device veth1_macvtap left promiscuous mode [ 241.475828][ T155] device veth0_macvtap left promiscuous mode [ 241.495164][ T155] device veth1_vlan left promiscuous mode [ 241.498699][T10294] loop2: detected capacity change from 0 to 1024 [ 241.501516][ T155] device veth0_vlan left promiscuous mode [ 241.516850][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.2228: corrupted inode contents [ 241.569958][T10280] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #16: comm syz.0.2228: mark_inode_dirty error [ 241.596084][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.2228: corrupted inode contents [ 241.612704][T10280] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.2228: mark_inode_dirty error [ 241.643364][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.2228: corrupted inode contents [ 241.682800][T10280] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 241.713748][T10280] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.2228: corrupted inode contents [ 241.736696][T10280] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.2228: mark_inode_dirty error [ 241.748929][T10280] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 241.769896][T10280] EXT4-fs (loop0): 1 truncate cleaned up [ 241.775575][T10280] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.822915][T10280] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038 (0x7fffffff) [ 241.838313][ T25] audit: type=1326 audit(2000000052.640:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa838526ff9 code=0x7ffc0000 [ 241.901159][ T25] audit: type=1326 audit(2000000052.670:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa838526ff9 code=0x7ffc0000 [ 241.949601][ T25] audit: type=1326 audit(2000000052.670:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa838526ff9 code=0x7ffc0000 [ 242.017276][ T155] smc: removing net device vlan0 with user defined pnetid SYZ1 [ 242.214039][ T155] team0 (unregistering): Port device team_slave_1 removed [ 242.227754][ T155] team0 (unregistering): Port device team_slave_0 removed [ 242.240194][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.255222][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.320099][ T155] bond0 (unregistering): Released all slaves [ 242.379243][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.420114][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.431293][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.481196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.500370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.525480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.555782][T10314] input: syz0 as /devices/virtual/input/input19 [ 242.560736][T10316] loop2: detected capacity change from 0 to 256 [ 242.595894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.611898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.634249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.662851][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.713192][T10316] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 242.809836][ T4715] Bluetooth: hci0: command 0x040f tx timeout [ 242.962287][T10340] netlink: 412 bytes leftover after parsing attributes in process `syz.4.2253'. [ 243.050691][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.058173][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.084257][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.138882][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.186187][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.277518][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.307984][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.322821][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.347388][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.372806][T10118] device veth0_vlan entered promiscuous mode [ 243.412586][T10118] device veth1_vlan entered promiscuous mode [ 243.507610][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.526491][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.581138][T10118] device veth0_macvtap entered promiscuous mode [ 243.635650][T10118] device veth1_macvtap entered promiscuous mode [ 243.662649][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.680845][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.711329][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.740755][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.758422][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.809589][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.829485][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.851516][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.905512][T10378] loop4: detected capacity change from 0 to 128 [ 243.923335][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.946324][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.962177][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.988186][T10374] loop2: detected capacity change from 0 to 4096 [ 244.010810][T10380] loop3: detected capacity change from 0 to 64 [ 244.019361][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.043734][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.044479][T10335] loop0: detected capacity change from 0 to 32768 [ 244.057169][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.099772][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.119425][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.139440][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.149697][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.160775][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.171134][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.182018][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.194134][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.204003][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.247549][T10380] hfs: keylen 1794 too large [ 244.286971][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.314688][T10335] XFS (loop0): Mounting V5 Filesystem [ 244.387091][T10118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.389867][T10374] ntfs3: loop2: failed to convert "0080" to macturkish [ 244.450651][T10374] ntfs3: loop2: failed to convert name for inode 1e. [ 244.451449][T10118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.477971][ T6031] hfs: node 4:3 still has 1 user(s)! [ 244.532058][T10335] XFS (loop0): Ending clean mount [ 244.552406][T10335] XFS (loop0): Quotacheck needed: Please wait. [ 244.572324][T10118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.625395][T10118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.811397][T10335] XFS (loop0): Quotacheck: Done. [ 244.821712][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.844047][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.882353][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.890044][ T4926] Bluetooth: hci0: command 0x0419 tx timeout [ 244.918037][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.944881][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.017385][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.055031][ T3569] XFS (loop0): Unmounting Filesystem [ 245.317434][ T3755] kernel write not supported for file /sysvipc/sem (pid: 3755 comm: kworker/1:9) [ 245.662858][T10424] loop4: detected capacity change from 0 to 4096 [ 245.737832][T10424] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 245.809518][ T4926] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.818154][T10436] loop2: detected capacity change from 0 to 512 [ 245.884501][T10436] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 245.884975][T10424] ntfs3: loop4: failed to convert "c46c" to cp775 [ 245.908223][T10436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 245.919923][T10436] System zones: 1-12 [ 245.926473][T10436] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.2292: corrupted in-inode xattr [ 245.942665][T10436] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2292: couldn't read orphan inode 15 (err -117) [ 245.969559][T10436] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 246.189671][ T4926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.211269][ T4926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.255424][ T4926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.288634][ T4926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.386033][ T4926] usb 2-1: config 0 descriptor?? [ 246.527156][T10458] loop0: detected capacity change from 0 to 1024 [ 246.601738][T10458] EXT4-fs (loop0): unable to read superblock [ 246.923806][ T4926] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 246.947073][ T4926] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description [ 246.979165][ T4926] plantronics 0003:047F:FFFF.0011: parse failed [ 246.999007][ T4926] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 247.126521][ T4926] usb 2-1: USB disconnect, device number 13 [ 247.179398][ C1] sched: RT throttling activated [ 247.963274][T10451] loop2: detected capacity change from 0 to 262144 [ 248.018528][T10451] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.2298 (10451) [ 248.126048][T10451] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 248.135811][T10451] BTRFS info (device loop2): using free space tree [ 248.142423][T10451] BTRFS info (device loop2): has skinny extents [ 248.148673][T10451] BTRFS info (device loop2): flagging fs with big metadata feature [ 248.325399][T10469] loop1: detected capacity change from 0 to 32768 [ 248.421766][T10469] XFS: attr2 mount option is deprecated. [ 248.508974][T10469] XFS (loop1): Mounting V5 Filesystem [ 248.556553][T10451] BTRFS info (device loop2): enabling ssd optimizations [ 248.678846][T10469] XFS (loop1): Ending clean mount [ 248.697815][T10469] XFS (loop1): Quotacheck needed: Please wait. [ 248.719619][ T4926] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.749068][ T4715] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 248.761450][ T4715] XFS (loop1): Unmount and run xfs_repair [ 248.767183][ T4715] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 248.775357][ T4715] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 248.784587][ T4715] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 248.794786][ T4715] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 248.804810][ T4715] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 248.814900][ T4715] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 248.824114][ T4715] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.840718][ T4715] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.854785][ T4715] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.875797][ T154] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 248.903977][T10469] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 249.006352][T10485] loop4: detected capacity change from 0 to 32768 [ 249.068766][T10485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2311 (10485) [ 249.100734][ T4926] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 249.113839][T10118] XFS (loop1): Unmounting Filesystem [ 249.127527][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 249.146953][ T4926] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 249.156932][ T4926] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 249.174047][ T4926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.233511][T10485] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 249.248773][ T4926] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 249.284325][T10485] BTRFS info (device loop4): using free space tree [ 249.313657][T10485] BTRFS info (device loop4): has skinny extents [ 249.457759][ T4926] gspca_sn9c2028: read1 error -32 [ 249.499630][ T4926] gspca_sn9c2028: read1 error -32 [ 249.689555][T10485] BTRFS info (device loop4): enabling ssd optimizations [ 249.764334][ T4926] usb 4-1: USB disconnect, device number 12 [ 250.684272][T10538] loop0: detected capacity change from 0 to 40427 [ 250.785206][T10578] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2335'. [ 250.814565][T10538] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.993727][T10538] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.147940][ T3569] attempt to access beyond end of device [ 251.147940][ T3569] loop0: rw=2049, want=45104, limit=40427 [ 251.317844][T10600] loop3: detected capacity change from 0 to 8192 [ 251.444813][T10600] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 251.464996][T10600] REISERFS (device loop3): using ordered data mode [ 251.467105][T10569] loop4: detected capacity change from 0 to 32768 [ 251.479558][T10600] reiserfs: using flush barriers [ 251.485779][T10600] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.503991][T10600] REISERFS (device loop3): checking transaction log (loop3) [ 251.540808][T10600] REISERFS (device loop3): Using r5 hash to sort names [ 251.564845][T10600] reiserfs: enabling write barrier flush mode [ 251.595859][ T4315] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 251.637683][T10600] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 251.891639][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 251.927652][T10607] loop2: detected capacity change from 0 to 32768 [ 252.041380][ T4037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.111115][ T4037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.196975][ T4037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.213298][T10621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 252.290385][ T4037] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.310275][ T4315] usb 2-1: New USB device found, idVendor=1019, idProduct=0c55, bcdDevice= 0.cf [ 252.333305][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.364204][ T4315] usb 2-1: Product: syz [ 252.368527][ T4315] usb 2-1: Manufacturer: syz [ 252.378207][ T4315] usb 2-1: SerialNumber: syz [ 252.393859][ T4315] usb 2-1: config 0 descriptor?? [ 252.497733][ T4315] usb-storage 2-1:0.0: USB Mass Storage device detected [ 252.717786][ T4715] usb 2-1: USB disconnect, device number 14 [ 252.805403][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'. [ 252.835307][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'. [ 253.534640][ T25] audit: type=1326 audit(2000000064.340:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.2377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e5f3cff9 code=0x0 [ 253.876436][ T4037] device hsr_slave_0 left promiscuous mode [ 253.883724][ T4037] device hsr_slave_1 left promiscuous mode [ 253.890249][ T4037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.897932][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.907693][ T4037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.915398][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.930200][ T4037] device bridge_slave_1 left promiscuous mode [ 253.942025][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.953890][ T4037] device bridge_slave_0 left promiscuous mode [ 253.960507][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.976033][ T4037] device veth1_macvtap left promiscuous mode [ 253.982360][ T4037] device veth0_macvtap left promiscuous mode [ 253.988615][ T4037] device veth1_vlan left promiscuous mode [ 253.994672][ T4037] device veth0_vlan left promiscuous mode [ 254.300373][T10682] loop3: detected capacity change from 0 to 32768 [ 254.427266][ T4037] team0 (unregistering): Port device team_slave_1 removed [ 254.431977][T10674] loop1: detected capacity change from 0 to 40427 [ 254.453874][T10682] XFS (loop3): Mounting V5 Filesystem [ 254.454123][ T4037] team0 (unregistering): Port device team_slave_0 removed [ 254.475781][ T4037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.494137][ T4037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.510687][T10674] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 254.518859][T10674] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.543222][T10711] loop0: detected capacity change from 0 to 2048 [ 254.563308][T10682] XFS (loop3): Ending clean mount [ 254.584706][T10682] XFS (loop3): Quotacheck needed: Please wait. [ 254.599350][T10674] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.639478][T10711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.720096][T10682] XFS (loop3): Quotacheck: Done. [ 254.772822][T10674] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.784038][ T6031] XFS (loop3): Unmounting Filesystem [ 254.784202][T10674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.825894][ T4037] bond0 (unregistering): Released all slaves [ 255.023811][T10675] chnl_net:caif_netlink_parms(): no params data found [ 255.133976][ T4920] Bluetooth: hci0: command 0x0405 tx timeout [ 255.412789][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.422120][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.437797][T10675] device bridge_slave_0 entered promiscuous mode [ 255.478165][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.490838][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.503407][T10729] loop3: detected capacity change from 0 to 4096 [ 255.505214][T10675] device bridge_slave_1 entered promiscuous mode [ 255.542666][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.548993][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.590564][ T4925] Bluetooth: hci3: command 0x0409 tx timeout [ 255.687293][T10729] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 255.967329][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.995337][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.003999][ T6031] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 256.019114][ T6031] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 256.054188][ T6031] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.060503][T10720] loop0: detected capacity change from 0 to 32768 [ 256.195373][T10675] team0: Port device team_slave_0 added [ 256.303766][T10723] loop2: detected capacity change from 0 to 32768 [ 256.329721][T10675] team0: Port device team_slave_1 added [ 256.342598][T10720] XFS (loop0): Mounting V5 Filesystem [ 256.379565][ T4925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.496357][T10720] XFS (loop0): Ending clean mount [ 256.539588][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.546591][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.619288][ T3569] XFS (loop0): Unmounting Filesystem [ 256.624894][ T4925] usb 2-1: Using ep0 maxpacket: 32 [ 256.659584][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.699602][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.707548][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.759761][ T4925] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 256.768913][ T4925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.811258][ T4925] usb 2-1: config 0 descriptor?? [ 256.826380][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.870520][ T4925] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 256.996463][T10675] device hsr_slave_0 entered promiscuous mode [ 257.032832][T10675] device hsr_slave_1 entered promiscuous mode [ 257.089598][T10675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.109824][T10675] Cannot create hsr debugfs directory [ 257.347752][T10789] loop2: detected capacity change from 0 to 1024 [ 257.624229][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 257.705588][T10797] loop0: detected capacity change from 0 to 4096 [ 257.729577][ T4925] gspca_nw80x: reg_r err -71 [ 257.734660][ T4925] nw80x: probe of 2-1:0.0 failed with error -71 [ 257.764410][ T4925] usb 2-1: USB disconnect, device number 15 [ 257.806413][T10797] NILFS (loop0): invalid segment: Checksum error in segment payload [ 257.829664][T10797] NILFS (loop0): trying rollback from an earlier position [ 257.880065][T10797] NILFS (loop0): recovery complete [ 257.889253][T10805] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.061936][T10809] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2401'. [ 258.113059][T10675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.142172][T10675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.206189][T10675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.235842][T10675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.506084][T10790] loop3: detected capacity change from 0 to 32768 [ 258.612675][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.679960][ T25] audit: type=1800 audit(2000000069.490:294): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2395" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 258.802066][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.822869][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.851531][T10850] loop0: detected capacity change from 0 to 64 [ 258.889369][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.922569][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.949760][T10850] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 258.961037][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.994736][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.001871][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.033936][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.071394][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.116414][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.123572][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.168433][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.206558][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.250363][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.284717][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.313712][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2422'. [ 259.341519][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.393461][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.411898][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.450663][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.514895][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.544556][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.595814][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.637446][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.682973][T10675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.696954][ T3766] Bluetooth: hci3: command 0x040f tx timeout [ 259.982485][T10890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.041870][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.064014][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.104701][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.377632][T10859] loop3: detected capacity change from 0 to 32768 [ 260.543163][T10863] loop0: detected capacity change from 0 to 40427 [ 260.596567][T10859] XFS (loop3): Mounting V5 Filesystem [ 260.657903][T10859] XFS (loop3): Ending clean mount [ 260.661996][T10863] F2FS-fs (loop0): invalid crc value [ 260.688057][T10859] XFS (loop3): Quotacheck needed: Please wait. [ 260.744825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.756158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.758049][T10863] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.780549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.789960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.800543][T10675] device veth0_vlan entered promiscuous mode [ 260.835715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.849981][T10859] XFS (loop3): Quotacheck: Done. [ 260.870723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.880545][T10873] loop2: detected capacity change from 0 to 32768 [ 260.892041][T10675] device veth1_vlan entered promiscuous mode [ 260.989980][ T3754] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 261.014558][T10863] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 261.026363][T10675] device veth0_macvtap entered promiscuous mode [ 261.042824][T10863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.045402][T10873] XFS (loop2): Mounting V5 Filesystem [ 261.061239][ T6031] XFS (loop3): Unmounting Filesystem [ 261.114753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.143548][T10922] attempt to access beyond end of device [ 261.143548][T10922] loop0: rw=2049, want=40976, limit=40427 [ 261.176638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.205206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.258053][T10873] XFS (loop2): Ending clean mount [ 261.263388][ T3754] usb 2-1: Using ep0 maxpacket: 16 [ 261.281117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.298094][T10675] device veth1_macvtap entered promiscuous mode [ 261.307227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.325566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.401147][ T3754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.407129][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.422435][ T3754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.459425][ T3754] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.464382][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.489601][ T3754] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.506189][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.519044][ T3754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.528691][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.542975][ T3754] usb 2-1: config 0 descriptor?? [ 261.556568][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.572744][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.584280][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.596220][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.608468][T10675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.625520][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.634744][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.700988][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.766471][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.777299][ T3621] Bluetooth: hci3: command 0x0419 tx timeout [ 261.791753][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.819738][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.844015][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.868939][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.912193][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.953743][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.966651][ T3567] XFS (loop2): Unmounting Filesystem [ 261.976997][T10675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.987317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.021963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.059790][ T3754] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 262.090476][T10675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.090736][T10955] loop0: detected capacity change from 0 to 16 [ 262.108663][ T3754] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 262.126010][T10675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.140985][ T3754] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 262.148756][T10675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.158319][ T3754] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 262.166705][T10675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.175941][ T3754] microsoft 0003:045E:07DA.0012: unbalanced collection at end of report description [ 262.188972][ T3754] microsoft 0003:045E:07DA.0012: parse failed [ 262.196670][ T3754] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 262.238519][T10955] erofs: (device loop0): mounted with root inode @ nid 36. [ 262.347915][ T3754] usb 2-1: USB disconnect, device number 16 [ 262.506444][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.544402][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.600609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.626255][T10975] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2441'. [ 262.644109][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.679734][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.714503][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.912031][T10989] loop4: detected capacity change from 0 to 1024 [ 262.959225][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2447'. [ 263.092745][ T1291] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 263.116916][T11005] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 263.129020][ T3628] hfsplus: b-tree write err: -5, ino 4 [ 263.236883][T11009] bridge0: port 3(syz_tun) entered blocking state [ 263.286905][T11009] bridge0: port 3(syz_tun) entered disabled state [ 263.342633][T11009] device syz_tun entered promiscuous mode [ 263.349796][ T1291] usb 3-1: Using ep0 maxpacket: 8 [ 263.350410][T11009] bridge0: port 3(syz_tun) entered blocking state [ 263.361386][T11009] bridge0: port 3(syz_tun) entered forwarding state [ 263.377290][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 263.469807][ T1291] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 263.492041][ T1291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.564756][ T1291] usb 3-1: config 0 descriptor?? [ 263.890766][T11043] loop1: detected capacity change from 0 to 512 [ 264.045984][T11043] EXT4-fs (loop1): 1 orphan inode deleted [ 264.069612][T11043] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 264.073628][T11000] loop0: detected capacity change from 0 to 32768 [ 264.093375][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.140155][T11000] XFS: attr2 mount option is deprecated. [ 264.159939][T11043] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 264.367474][T11000] XFS (loop0): Mounting V5 Filesystem [ 264.472430][T11029] loop3: detected capacity change from 0 to 32768 [ 264.479584][ T1291] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.518998][ T1291] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 264.560943][T11000] XFS (loop0): Ending clean mount [ 264.602335][ T1291] asix: probe of 3-1:0.0 failed with error -71 [ 264.617212][T11029] JBD2: Ignoring recovery information on journal [ 264.636949][ T1291] usb 3-1: USB disconnect, device number 12 [ 264.651351][T11000] XFS (loop0): Quotacheck needed: Please wait. [ 264.709153][T11087] loop1: detected capacity change from 0 to 64 [ 264.717305][ T3621] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 264.738437][T11029] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 264.768055][ T3621] XFS (loop0): Unmount and run xfs_repair [ 264.773375][ T25] audit: type=1800 audit(2000000075.580:295): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2457" name="bus" dev="loop3" ino=16946 res=0 errno=0 [ 264.807068][T11029] [ 264.809418][T11029] ====================================================== [ 264.817394][T11029] WARNING: possible circular locking dependency detected [ 264.824924][T11029] 5.15.167-syzkaller #0 Not tainted [ 264.830100][T11029] ------------------------------------------------------ [ 264.837177][T11029] syz.3.2457/11029 is trying to acquire lock: [ 264.843216][T11029] ffff88806053a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 264.854773][T11029] [ 264.854773][T11029] but task is already holding lock: [ 264.862122][T11029] ffff88806053a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 264.872723][T11029] [ 264.872723][T11029] which lock already depends on the new lock. [ 264.872723][T11029] [ 264.883102][T11029] [ 264.883102][T11029] the existing dependency chain (in reverse order) is: [ 264.892091][T11029] [ 264.892091][T11029] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 264.900146][T11029] lock_acquire+0x1db/0x4f0 [ 264.905154][T11029] down_read+0x45/0x2e0 [ 264.909809][T11029] ocfs2_init_acl+0x398/0x930 [ 264.914990][T11029] ocfs2_mknod+0x1e8f/0x2cd0 [ 264.920078][T11029] ocfs2_mkdir+0x194/0x430 [ 264.925000][T11029] vfs_mkdir+0x3b6/0x590 [ 264.929740][T11029] do_mkdirat+0x260/0x520 [ 264.934569][T11029] __x64_sys_mkdirat+0x85/0x90 [ 264.939829][T11029] do_syscall_64+0x3b/0xb0 [ 264.944747][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.951141][T11029] [ 264.951141][T11029] -> #3 (jbd2_handle){++++}-{0:0}: [ 264.958417][T11029] lock_acquire+0x1db/0x4f0 [ 264.963420][T11029] start_this_handle+0x12e1/0x1570 [ 264.969036][T11029] jbd2__journal_start+0x2d1/0x5c0 [ 264.974648][T11029] jbd2_journal_start+0x25/0x30 [ 264.979999][T11029] ocfs2_start_trans+0x3c2/0x6f0 [ 264.985443][T11029] ocfs2_mknod+0x15bb/0x2cd0 [ 264.990534][T11029] ocfs2_create+0x194/0x430 [ 264.995549][T11029] path_openat+0x130a/0x2f20 [ 265.000641][T11029] do_filp_open+0x21c/0x460 [ 265.005646][T11029] do_sys_openat2+0x13b/0x4f0 [ 265.010823][T11029] __x64_sys_openat+0x243/0x290 [ 265.016189][T11029] do_syscall_64+0x3b/0xb0 [ 265.021123][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.027533][T11029] [ 265.027533][T11029] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 265.036155][T11029] lock_acquire+0x1db/0x4f0 [ 265.041249][T11029] down_read+0x45/0x2e0 [ 265.045904][T11029] ocfs2_start_trans+0x3b7/0x6f0 [ 265.051339][T11029] ocfs2_mknod+0x15bb/0x2cd0 [ 265.056429][T11029] ocfs2_create+0x194/0x430 [ 265.061433][T11029] path_openat+0x130a/0x2f20 [ 265.066525][T11029] do_filp_open+0x21c/0x460 [ 265.071545][T11029] do_sys_openat2+0x13b/0x4f0 [ 265.076722][T11029] __x64_sys_openat+0x243/0x290 [ 265.082069][T11029] do_syscall_64+0x3b/0xb0 [ 265.086984][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.093376][T11029] [ 265.093376][T11029] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 265.100828][T11029] lock_acquire+0x1db/0x4f0 [ 265.105828][T11029] ocfs2_start_trans+0x2b2/0x6f0 [ 265.111263][T11029] ocfs2_truncate_file+0x661/0x14f0 [ 265.116976][T11029] ocfs2_setattr+0x165e/0x1c70 [ 265.122260][T11029] notify_change+0xc6d/0xf50 [ 265.127359][T11029] do_truncate+0x21c/0x300 [ 265.132281][T11029] path_openat+0x28a3/0x2f20 [ 265.137370][T11029] do_filp_open+0x21c/0x460 [ 265.142381][T11029] do_sys_openat2+0x13b/0x4f0 [ 265.147560][T11029] __x64_sys_open+0x221/0x270 [ 265.152738][T11029] do_syscall_64+0x3b/0xb0 [ 265.157660][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.164145][T11029] [ 265.164145][T11029] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 265.172895][T11029] validate_chain+0x1649/0x5930 [ 265.178287][T11029] __lock_acquire+0x1295/0x1ff0 [ 265.183659][T11029] lock_acquire+0x1db/0x4f0 [ 265.188672][T11029] down_write+0x38/0x60 [ 265.193329][T11029] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 265.199833][T11029] ocfs2_truncate_file+0xe3c/0x14f0 [ 265.205705][T11029] ocfs2_setattr+0x165e/0x1c70 [ 265.210972][T11029] notify_change+0xc6d/0xf50 [ 265.216152][T11029] do_truncate+0x21c/0x300 [ 265.221066][T11029] path_openat+0x28a3/0x2f20 [ 265.226152][T11029] do_filp_open+0x21c/0x460 [ 265.231153][T11029] do_sys_openat2+0x13b/0x4f0 [ 265.236330][T11029] __x64_sys_open+0x221/0x270 [ 265.241503][T11029] do_syscall_64+0x3b/0xb0 [ 265.246435][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.252836][T11029] [ 265.252836][T11029] other info that might help us debug this: [ 265.252836][T11029] [ 265.263129][T11029] Chain exists of: [ 265.263129][T11029] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 265.263129][T11029] [ 265.277373][T11029] Possible unsafe locking scenario: [ 265.277373][T11029] [ 265.285085][T11029] CPU0 CPU1 [ 265.290433][T11029] ---- ---- [ 265.295791][T11029] lock(&oi->ip_xattr_sem); [ 265.300380][T11029] lock(jbd2_handle); [ 265.307072][T11029] lock(&oi->ip_xattr_sem); [ 265.314158][T11029] lock(&ocfs2_file_ip_alloc_sem_key); [ 265.319682][T11029] [ 265.319682][T11029] *** DEADLOCK *** [ 265.319682][T11029] [ 265.327821][T11029] 3 locks held by syz.3.2457/11029: [ 265.332995][T11029] #0: ffff8880789f2460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 265.342320][T11029] #1: ffff88806053a648 (&sb->s_type->i_mutex_key#42){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 265.352666][T11029] #2: ffff88806053a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 265.363703][T11029] [ 265.363703][T11029] stack backtrace: [ 265.369573][T11029] CPU: 0 PID: 11029 Comm: syz.3.2457 Not tainted 5.15.167-syzkaller #0 [ 265.377818][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.387875][T11029] Call Trace: [ 265.391181][T11029] [ 265.394107][T11029] dump_stack_lvl+0x1e3/0x2d0 [ 265.398790][T11029] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 265.404541][T11029] ? print_circular_bug+0x12b/0x1a0 [ 265.409833][T11029] check_noncircular+0x2f8/0x3b0 [ 265.415054][T11029] ? add_chain_block+0x850/0x850 [ 265.419975][T11029] ? lockdep_lock+0x11f/0x2a0 [ 265.424665][T11029] validate_chain+0x1649/0x5930 [ 265.429507][T11029] ? stack_trace_save+0x113/0x1c0 [ 265.434517][T11029] ? reacquire_held_locks+0x660/0x660 [ 265.439874][T11029] ? stack_trace_snprint+0xe0/0xe0 [ 265.445071][T11029] ? lockdep_unlock+0x166/0x300 [ 265.449906][T11029] ? mark_lock+0x98/0x340 [ 265.454245][T11029] __lock_acquire+0x1295/0x1ff0 [ 265.459105][T11029] lock_acquire+0x1db/0x4f0 [ 265.463624][T11029] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 265.469777][T11029] ? read_lock_is_recursive+0x10/0x10 [ 265.475236][T11029] ? __might_sleep+0xc0/0xc0 [ 265.479807][T11029] ? rwsem_write_trylock+0x166/0x210 [ 265.485163][T11029] ? clear_nonspinnable+0x60/0x60 [ 265.490169][T11029] down_write+0x38/0x60 [ 265.494305][T11029] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 265.500615][T11029] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 265.506846][T11029] ? ocfs2_remove_refcount_tree+0x1000/0x1000 [ 265.512993][T11029] ? ocfs2_truncate_file+0xa07/0x14f0 [ 265.518372][T11029] ocfs2_truncate_file+0xe3c/0x14f0 [ 265.523583][T11029] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 265.529306][T11029] ? ocfs2_simple_size_update+0x4d0/0x4d0 [ 265.535029][T11029] ? do_raw_spin_unlock+0x137/0x8b0 [ 265.540233][T11029] ? memset+0x1f/0x40 [ 265.544209][T11029] ? _raw_spin_unlock+0x24/0x40 [ 265.549058][T11029] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 265.554857][T11029] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 265.560389][T11029] ? ocfs2_rw_lock+0x13a/0x250 [ 265.565136][T11029] ? ocfs2_create_new_inode_locks+0x6d0/0x6d0 [ 265.571192][T11029] ? jbd2_journal_begin_ordered_truncate+0xbc/0x150 [ 265.577760][T11029] ocfs2_setattr+0x165e/0x1c70 [ 265.582514][T11029] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 265.588303][T11029] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 265.594529][T11029] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 265.600404][T11029] ? current_time+0x1ba/0x300 [ 265.605069][T11029] ? atime_needs_update+0x7b0/0x7b0 [ 265.610246][T11029] ? evm_inode_setattr+0xf7/0x5b0 [ 265.615249][T11029] ? rwsem_write_trylock+0x166/0x210 [ 265.620515][T11029] ? bpf_lsm_inode_setattr+0x5/0x10 [ 265.625696][T11029] ? security_inode_setattr+0xce/0x120 [ 265.631138][T11029] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 265.636939][T11029] notify_change+0xc6d/0xf50 [ 265.641515][T11029] do_truncate+0x21c/0x300 [ 265.645922][T11029] ? rcu_lock_release+0x20/0x20 [ 265.650927][T11029] ? ima_bprm_check+0x2b0/0x2b0 [ 265.655761][T11029] ? bpf_lsm_path_truncate+0x5/0x10 [ 265.660949][T11029] path_openat+0x28a3/0x2f20 [ 265.665565][T11029] ? do_filp_open+0x460/0x460 [ 265.670347][T11029] do_filp_open+0x21c/0x460 [ 265.674856][T11029] ? vfs_tmpfile+0x2e0/0x2e0 [ 265.679448][T11029] ? _raw_spin_unlock+0x24/0x40 [ 265.684285][T11029] ? alloc_fd+0x598/0x630 [ 265.688600][T11029] do_sys_openat2+0x13b/0x4f0 [ 265.693263][T11029] ? do_sys_open+0x220/0x220 [ 265.697846][T11029] __x64_sys_open+0x221/0x270 [ 265.702540][T11029] ? do_sys_openat2+0x4f0/0x4f0 [ 265.707372][T11029] ? syscall_enter_from_user_mode+0x2e/0x240 [ 265.713336][T11029] ? lockdep_hardirqs_on+0x94/0x130 [ 265.718553][T11029] ? syscall_enter_from_user_mode+0x2e/0x240 [ 265.724521][T11029] do_syscall_64+0x3b/0xb0 [ 265.728939][T11029] ? clear_bhb_loop+0x15/0x70 [ 265.733610][T11029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.739491][T11029] RIP: 0033:0x7fa838526ff9 [ 265.743910][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.763507][T11029] RSP: 002b:00007fa83699f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 265.771907][T11029] RAX: ffffffffffffffda RBX: 00007fa8386def80 RCX: 00007fa838526ff9 [ 265.779872][T11029] RDX: 0000000000000000 RSI: 000000000000ca02 RDI: 0000000020001840 [ 265.787826][T11029] RBP: 00007fa838599296 R08: 0000000000000000 R09: 0000000000000000 [ 265.795779][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.803731][T11029] R13: 0000000000000000 R14: 00007fa8386def80 R15: 00007ffd14cb1bd8 [ 265.811704][T11029] [ 265.840951][ T3621] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 265.848476][ T3621] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 265.880870][ T3621] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 265.900126][ T3621] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 265.915769][ T3621] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 265.925602][ T3621] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 265.946169][ T3621] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.961895][ T3621] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.972803][ T3621] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.984252][ T4513] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 266.008022][T11000] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 266.033430][ T3569] XFS (loop0): Unmounting Filesystem [ 266.142499][T11093] loop4: detected capacity change from 0 to 40427 [ 266.188169][ T6031] ocfs2: Unmounting device (7,3) on (node local) [ 266.201546][T11093] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 266.245132][T11093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 266.290768][T11093] F2FS-fs (loop4): Found nat_bits in checkpoint [ 266.334946][T11093] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 266.353601][T11093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 266.393212][ T25] audit: type=1800 audit(2000000077.200:296): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2470" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 266.420827][T11093] attempt to access beyond end of device [ 266.420827][T11093] loop4: rw=2049, want=53264, limit=40427 [ 266.432270][T11093] attempt to access beyond end of device [ 266.432270][T11093] loop4: rw=2049, want=78776, limit=40427 [ 266.457413][T10675] attempt to access beyond end of device [ 266.457413][T10675] loop4: rw=2049, want=45104, limit=40427 [ 267.860019][ T3621] Bluetooth: hci4: command 0x0406 tx timeout