last executing test programs: 4m20.884667967s ago: executing program 1 (id=11327): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m20.648500451s ago: executing program 1 (id=11331): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 4m20.385451536s ago: executing program 1 (id=11335): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 4m20.292793712s ago: executing program 1 (id=11336): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000580)={[{@gid}, {@undelete}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@uid_forget}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@volume={'volume', 0x3d, 0xbe5}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b1c463, &(0x7f00000000c0)={[{}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, '^'}}]}) 4m19.917174174s ago: executing program 1 (id=11340): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) 4m19.367739996s ago: executing program 1 (id=11347): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}]}, 0x42, 0x34e, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m18.811611209s ago: executing program 32 (id=11347): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}]}, 0x42, 0x34e, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 55.085384516s ago: executing program 0 (id=13278): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000280), 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x0, 0x44000000}) 53.579668814s ago: executing program 0 (id=13293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r0, 0xfffff23a}) 52.082582452s ago: executing program 0 (id=13305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0xc, 0x11, 0x1, @empty, @local, {[], {0x4e23, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}}}}}}}}, 0x0) 51.908175313s ago: executing program 0 (id=13308): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 51.698257395s ago: executing program 0 (id=13311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x0, 0x0, 0x0) 51.357553285s ago: executing program 0 (id=13314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000220000000a0001007770616e1018"], 0x20}}, 0x2000c094) 50.627809698s ago: executing program 33 (id=13314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000220000000a0001007770616e1018"], 0x20}}, 0x2000c094) 1.208119018s ago: executing program 4 (id=13757): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800882, &(0x7f00000005c0)={[{}, {@uid}, {@part={'part', 0x3d, 0x7fff}}, {@file_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x21, 0x314, &(0x7f00000010c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.068804837s ago: executing program 3 (id=13760): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x2, 0x203, 0x4, 0x9, 0x4, 0x8, 0x800, r1}, 0x20) 978.942902ms ago: executing program 5 (id=13761): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) 954.584983ms ago: executing program 4 (id=13762): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) 876.780958ms ago: executing program 3 (id=13763): unshare(0x2040400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) close_range(r0, r0, 0x6) 875.795238ms ago: executing program 2 (id=13764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x17c, 0x0, &(0x7f0000000100)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x24) 753.476575ms ago: executing program 5 (id=13765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) 718.067087ms ago: executing program 4 (id=13766): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{0x80000000, 0x0}, {0x80000000, 0x0}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001640)={{r3, r2, 0x1, [0xa6, 0x8]}, {0x80000000, r1, 0x1, [0x93d7, 0x40]}, 0x2, [0x1, 0x600]}) 700.610338ms ago: executing program 3 (id=13767): ioperm(0x1, 0x9, 0xfffffffffffffff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x1000008, &(0x7f0000000080)={0x26, 0x10000, 0x87}) 689.897258ms ago: executing program 2 (id=13768): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000fbdbdf250a8000000000e5"], 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0xc0884) 522.210499ms ago: executing program 4 (id=13769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 521.640589ms ago: executing program 3 (id=13770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 521.078889ms ago: executing program 2 (id=13771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000046c000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 445.067763ms ago: executing program 5 (id=13772): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x2e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 393.760486ms ago: executing program 3 (id=13773): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 364.929548ms ago: executing program 4 (id=13774): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xff, 0x29c, &(0x7f0000000500)="$eJzs3U9rE08cx/HPbLZtfr+WurYVQTxVC56kfy7ipSJ9Bl48idpEKIYKWkE9tZ7Fg0fvfQo+AI+exLPgrScP4ingITKzE7P5s9kkZF2TvF+QbdLMd/5kZjMzW8oKwMy6vfftdOfMPoxUUknSTSmQVJZCSRd0sfz88OjgqFat9Muo5CLswyiONF1p9g+rvUJtnIvwIvsq1FLyd8hH+auOi64DiufO/jbL7hhIC/bsbJ7M5b9ftVzM9KD/dRL/fOE7GQAws/z8H8QreS359XsQSBt+2nfrAz//h5M+gdaLrkDOPma8b+qq+/k/fPdDahjbv+fcW639XscW7nTnbJS6zCseWW0LTJO1q3R1Cf57dFCrXt9/UqsEeq1db66VbM0dK/HQbWruae3zk+6s133DBtxfJnMbzqJrw5xtw3ay/okkq+MtMZv5ZD6beybSe1X+rP/ChrHd5Hoq6uipuP6b6Tm6Vs7LpUpp5XlXyCVfgte3lSV17Uha5n2ebR0YZdXTRa10RMWt28qIWu0ZtZ0RtdYZ1RrN6ZF5M2/NXbOu7/qgvcT6P7Cf9oYGOTNtGpfSj4y+7QldysjNJ/7r5Phyz5TBqC3CCN7ooW5o+dnLV48f1GrVp1P7xJ6JuRXxM4+cb+X+sTQHQfG9M+VP7IdcSOnNeWf0fNK/OrgsPz1anT5kIINgWth1l4n3f4n9yqZbrNlD1L5OX0jGNrIyT+S4lbI3WHHH/9N3cG2Mu3a/2OOvi90l9t1zXbkmXR2kxFjk6/nv2R0lyOzpi+5z/R8AAAAAAAAAAAAAAAAAAGDSjO9fDspKe6voNgIAAAAAAAAAAAAAAAAAAAAAMOl63P93Ybj7//p7MY3r/r93FL/i/r9A7n4HAAD//wPkdI4=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x114) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x275a, 0x0) 297.504452ms ago: executing program 2 (id=13775): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f0000000140)="26a1", 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000002e80), 0x4) 296.973982ms ago: executing program 5 (id=13776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000140)=0xfff, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 222.033396ms ago: executing program 2 (id=13777): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000200)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {@type={'type', 0x3d, "5887f452"}}, {@umask={'umask', 0x3d, 0x8f}}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$eJzs3c1vHGcdB/Dv7K7fUtG6bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGitOWtkuuBEC837toX9Ae8iNExL3oHKGC4KjxakSohdOvi2a2dn12t71S5zEMXw+1ew8M8/7b2dmdza1JsD/rbnzaT1Ikbnzb66V2xv3Z5c27s+O1dlLScp0I2l1VinuJsXHydV0lny23FmXL4b188Hi5e/9/T8bn3S2WvVSlW/srvfzdpIvHHwW6/WSs0ma9Xq3kR3bY8n4/u1dH9De+PZWegbPv+jllAE71w0cHLf2LuuHqT70fAdOjiLf+Myg/ZPJqfrzrvqcq68OjSc7ukfvUFc5AAAAOGZz/z4zc5jyE/X6uc1sZu3E38YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE1Ukzc6qWhrd9NkU3ef/j9b7UqdPtAfHPQAAAAAAAAAA2GVk29ZokrHuxpXBNT6/mc2s5dnudruo/s3/tWrjdPX6TN7NShaynAtZy3xWs5rlTCeZ7O9sbX51dXl6WM1iPalrzgysObN9XM2DTXj8YMUAAAAAAAAA4H/eLzO39e//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNCiSZmdVLae76ck0WknGk4yW5daTv3bTJ0QxaOeDJz8OAAAAOJLxh6jz3GY2s5Znu9vtorrnf6m6Xx7Pu7mb1SxmNUtZyI36Hrq8629s3J9d2rg/e6dcjjz0qsV0fnsY3PMrVYmJ3MxitedCrleDuZFGVbP0zyR3umPaPa5ffFq2faXjJwcc2Y16XXb2fvdXhLEjT/gRmExajYz0IjJVja1zEDzfH4Xdkfjmp8MavdpZtXb2lP6eptPo/fJzutNDmdw35lcOOLNT9bqcz2+H/XLzqI1vdbo+tFAvEo1UkZjpO/pe2jvmyRf/+Pv3by3dvX3r5sr5JzKlx2nnMTHbF4mXDxCJHzy1kWjtnd3YuWOq2nmmu/nRM0m+n/M5m2tZzmJ+nPmsZiFFPdP5+nguXyf3jtTVbVvXhgygZ7R+X5p1ud6YMpfvDBzT2Xy7Ss3ntarus1lMkbdzIwt5o/pvJtP5ai7lUi73vcNnho67mlt11jcOd9af+1KdmEjyu3p93DoXhTKuz/fFtf+aO1nlbe0Z6YvSC3u/u7uvjftPufW5OlH28as9j4YnbWckpvsi8eLekfioXb6uLN29vXxr/p0Bn67tYqRa/+1c0m539r1e55VH3G/2//rzp6PObx9917HyeHkh4/WV5PmMdIbW7Oa92LvKVPEa7a93upe3/RN3NOPl+dzo9NQ5U7879Ewdrb/D7W5ppsp7eWDebJX3Sl9e//et5O0s9b4PAfAUO/XlU6MT/5r4y8SHE7+euDXx5vi3xr429upoRv488vXWVPP1xqvFH/JhfrZ1/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy8lffu3Z5fWlpYHpxoNIdmDUmkfe/2fPdJPgetlZWifpLOofoammgcrfp+id4jfx5fF8efKHbtKWf8aLroPvnocLWmdh9RV48zUP84bK2M9025ObTwqTrRfq4TpUN1MbnzyEyGFB7rBLM55Dyt36KHebgocCJcXL3zzsWV9+59ZfHO/FsLby3cHbl06fLU5UtvzF68ubi0MNV5Pe5RAo/D1vd2AAAAAAAAAAAA4KQ44N8VXPvhj6r/Q/Ch/l7iuOcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnGxz59N6kCLTUxemyu2N+7NL5dJNb5VsJWk0kuKnSfFxcjWdJZN9zRXD+vlg8XIzySdbbbW65Rt71GuPHWgW6/WSs0ma9foItrV3/cjtFb0ZlgE71w0cHLf/BgAA//+iRulF") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 196.050178ms ago: executing program 5 (id=13778): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2, 0x0, 0x12}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 156.16845ms ago: executing program 3 (id=13779): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 908.269µs ago: executing program 4 (id=13780): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c"], 0x92fc}}, 0x0) 369.379µs ago: executing program 5 (id=13781): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008000a00", @ANYRES32], 0x50}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x12022, 0x0, 0x0) 0s ago: executing program 2 (id=13782): r0 = semget$private(0x0, 0x6, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) kernel console output (not intermixed with test programs): AT-fs (loop4): Directory bread(block 65) failed [ 1033.839816][T16872] FAT-fs (loop4): Directory bread(block 66) failed [ 1033.856313][T16872] FAT-fs (loop4): Directory bread(block 67) failed [ 1033.863133][T16872] FAT-fs (loop4): Directory bread(block 68) failed [ 1033.899404][T16872] FAT-fs (loop4): Directory bread(block 69) failed [ 1033.916251][T16872] FAT-fs (loop4): Directory bread(block 70) failed [ 1033.922883][T16872] FAT-fs (loop4): Directory bread(block 71) failed [ 1033.943952][T16872] FAT-fs (loop4): Directory bread(block 72) failed [ 1033.963840][T16872] FAT-fs (loop4): Directory bread(block 73) failed [ 1033.986341][T16854] loop3: detected capacity change from 0 to 32768 [ 1033.988966][T16862] loop0: detected capacity change from 0 to 32768 [ 1034.057920][T16854] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1034.064274][T16862] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.12726 (16862) [ 1034.130018][T16862] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1034.141042][T16862] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1034.153447][T16862] BTRFS info (device loop0): using free space tree [ 1034.232264][T16854] XFS (loop3): Ending clean mount [ 1034.275672][T16854] XFS (loop3): Quotacheck needed: Please wait. [ 1034.395427][T16862] BTRFS info (device loop0): enabling ssd optimizations [ 1034.447237][T16862] BTRFS info (device loop0): auto enabling async discard [ 1034.550347][T16854] XFS (loop3): Quotacheck: Done. [ 1034.687537][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1034.751778][T16915] loop4: detected capacity change from 0 to 2048 [ 1034.763447][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1034.786306][T16915] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1034.855809][T16919] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1035.051090][T16927] loop3: detected capacity change from 0 to 256 [ 1035.223271][T16927] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8a8ef55c, utbl_chksum : 0xe619d30d) [ 1035.679606][T16955] loop0: detected capacity change from 0 to 136 [ 1035.720259][T16955] Attempt to read inode for relocated directory [ 1036.090830][T16971] loop0: detected capacity change from 0 to 2048 [ 1036.109730][T16971] UDF-fs: bad mount option "novrc" or missing value [ 1036.149763][T16971] ÿÿÿÿÿÿ000000000: renamed from lo [ 1036.164394][T32205] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1036.363858][T32205] usb 4-1: Using ep0 maxpacket: 32 [ 1036.375912][T32205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1036.393962][T32205] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1036.413352][T32205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.445133][T32205] usb 4-1: config 0 descriptor?? [ 1036.514101][ T9588] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.602936][T16960] loop4: detected capacity change from 0 to 32768 [ 1036.698029][T16960] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.795247][T16960] XFS (loop4): Ending clean mount [ 1036.852469][T16960] XFS (loop4): Quotacheck needed: Please wait. [ 1036.889006][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.900686][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.911118][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.933325][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.943793][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.950932][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1036.978191][T17006] netlink: set zone limit has 8 unknown bytes [ 1036.984739][T32205] hid-led 0003:1D34:0004.001B: unknown main item tag 0x0 [ 1037.035978][T16960] XFS (loop4): Quotacheck: Done. [ 1037.088297][T32205] hid-led: probe of 0003:1D34:0004.001B failed with error -71 [ 1037.100734][T32205] usb 4-1: USB disconnect, device number 71 [ 1037.208044][T10446] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1037.416709][T17028] loop0: detected capacity change from 0 to 64 [ 1037.963868][T32205] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1038.173382][T32205] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.214133][T32205] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1038.239881][T32205] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.263361][T32205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.287891][T17040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1038.307422][T32205] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1038.336546][T17077] netlink: 'syz.3.12771': attribute type 3 has an invalid length. [ 1038.646679][T32205] usb 1-1: USB disconnect, device number 68 [ 1038.830169][T17117] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1038.846765][T17117] tipc: Started in network mode [ 1038.865015][T17117] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 1038.894565][T17117] tipc: Enabling of bearer rejected, failed to enable media [ 1038.955108][T17121] loop4: detected capacity change from 0 to 2048 [ 1039.009185][T17121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.043273][T17121] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.070713][T17121] fscrypt (loop4, inode 14): Error -61 getting encryption context [ 1039.128134][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.321889][T17136] loop3: detected capacity change from 0 to 512 [ 1039.396632][T17136] EXT4-fs: Ignoring removed nobh option [ 1039.467067][T17136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.514368][T17136] ext4 filesystem being mounted at /3000/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.618070][T17136] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.12780: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1039.769169][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.996095][T17165] loop3: detected capacity change from 0 to 16 [ 1040.033099][T17165] erofs: (device loop3): mounted with root inode @ nid 36. [ 1040.071887][ T28] audit: type=1800 audit(1770823201.755:5309): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12787" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 1040.449739][T17152] loop4: detected capacity change from 0 to 32768 [ 1040.461210][T17152] XFS: noikeep mount option is deprecated. [ 1040.471287][T17152] XFS: attr2 mount option is deprecated. [ 1040.478158][T17152] XFS: noikeep mount option is deprecated. [ 1040.505010][T17152] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1040.573867][ T786] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1040.591412][T17152] XFS (loop4): Ending clean mount [ 1040.617094][T17152] XFS (loop4): Quotacheck needed: Please wait. [ 1040.729363][T17152] XFS (loop4): Quotacheck: Done. [ 1040.767474][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 1040.805432][ T786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1040.817711][ T786] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 1040.847943][ T786] usb 4-1: config 4 has no interface number 0 [ 1040.868875][ T786] usb 4-1: config 4 interface 30 has no altsetting 0 [ 1040.897417][ T786] usb 4-1: string descriptor 0 read error: -22 [ 1040.914055][ T786] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1040.933854][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.950504][T10446] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1040.975976][ T786] dw2102: su3000_identify_state [ 1040.980915][ T786] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1041.023382][ T786] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1041.054680][ T786] dvb-usb: bulk message failed: -22 (2/0) [ 1041.125521][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1041.145713][ T786] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1041.153303][ T786] usb 4-1: media controller created [ 1041.198325][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.234180][ T786] dw2102: i2c transfer failed. [ 1041.281707][T17176] dw2102: i2c wr: len=66 is too big! [ 1041.281707][T17176] [ 1041.323832][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.329658][ T786] dw2102: i2c transfer failed. [ 1041.353798][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.359708][ T786] dw2102: i2c transfer failed. [ 1041.383801][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.398036][ T786] dw2102: i2c transfer failed. [ 1041.438739][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.449952][ T786] dw2102: i2c transfer failed. [ 1041.473876][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 1041.483854][ T786] dw2102: i2c transfer failed. [ 1041.505922][ T786] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1041.551214][T17217] loop0: detected capacity change from 0 to 256 [ 1041.620813][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.647787][T17217] FAT-fs (loop0): Directory bread(block 64) failed [ 1041.674371][T17217] FAT-fs (loop0): Directory bread(block 65) failed [ 1041.683276][T17217] FAT-fs (loop0): Directory bread(block 66) failed [ 1041.704511][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 1041.710345][ T786] dw2102: command 0x0e transfer failed. [ 1041.724020][T17217] FAT-fs (loop0): Directory bread(block 67) failed [ 1041.743019][T17217] FAT-fs (loop0): Directory bread(block 68) failed [ 1041.750167][T17217] FAT-fs (loop0): Directory bread(block 69) failed [ 1041.763886][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 1041.769892][T17217] FAT-fs (loop0): Directory bread(block 70) failed [ 1041.779864][ T786] dw2102: command 0x0e transfer failed. [ 1041.793918][T17217] FAT-fs (loop0): Directory bread(block 71) failed [ 1041.804471][T17217] FAT-fs (loop0): Directory bread(block 72) failed [ 1041.811067][T17217] FAT-fs (loop0): Directory bread(block 73) failed [ 1042.115988][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 1042.122077][ T786] dw2102: command 0x0e transfer failed. [ 1042.160919][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 1042.181731][ T786] dw2102: command 0x0e transfer failed. [ 1042.204112][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 1042.220236][ T786] dw2102: command 0x51 transfer failed. [ 1042.237916][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 1042.254413][ T786] dw2102: i2c probe for address 0x68 failed. [ 1042.270743][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 1042.290824][ T786] dw2102: i2c probe for address 0x69 failed. [ 1042.312968][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 1042.329341][ T786] dw2102: i2c probe for address 0x6a failed. [ 1042.343317][ T786] dw2102: probing for demodulator failed. Is the external power switched on? [ 1042.369693][ T786] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1042.553888][ T786] rc_core: IR keymap rc-tt-1500 not found [ 1042.570001][ T786] Registered IR keymap rc-empty [ 1042.589801][ T786] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1042.609408][T17222] loop4: detected capacity change from 0 to 32768 [ 1042.634007][ T786] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input74 [ 1042.711224][ T786] dvb-usb: schedule remote query interval to 250 msecs. [ 1042.719699][T17222] JBD2: Ignoring recovery information on journal [ 1042.728419][T17222] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1042.738510][T17222] JBD2: bad block at offset 32 [ 1042.763857][ T786] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1042.776661][T17222] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1042.800732][ T786] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1042.883904][ T786] usb 4-1: USB disconnect, device number 72 [ 1043.071983][ T786] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1043.096283][T10446] ocfs2: Unmounting device (7,4) on (node local) [ 1043.103468][T17269] 9pnet_rdma: rdma_create_trans (17269): problem binding to privport: 13 [ 1043.260860][T17231] loop3: detected capacity change from 0 to 32768 [ 1043.319340][T17280] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12811'. [ 1043.340368][T17231] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1043.549721][T17231] XFS (loop3): Ending clean mount [ 1043.744602][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1044.358429][T17331] netlink: 67 bytes leftover after parsing attributes in process `syz.0.12825'. [ 1044.614824][T17348] loop0: detected capacity change from 0 to 16 [ 1044.633400][T17348] erofs: (device loop0): mounted with root inode @ nid 36. [ 1044.694576][T17348] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 1044.923074][T17360] loop0: detected capacity change from 0 to 1024 [ 1045.062700][ T3483] hfsplus: b-tree write err: -5, ino 4 [ 1045.456734][T17380] loop3: detected capacity change from 0 to 128 [ 1045.476322][T17354] loop4: detected capacity change from 0 to 32768 [ 1045.559337][T17354] [ 1045.559337][T17354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1045.559337][T17354] [ 1045.655918][T17354] ERROR: (device loop4): dbReAlloc: the block is outside the filesystem [ 1045.655918][T17354] [ 1045.695997][T17354] ERROR: (device loop4): remounting filesystem as read-only [ 1045.736625][T17387] loop0: detected capacity change from 0 to 2048 [ 1045.836486][T17387] Alternate GPT is invalid, using primary GPT. [ 1045.842955][T17387] loop0: p2 p3 p7 [ 1046.021080][T17399] hsr0: entered promiscuous mode [ 1046.068177][T17399] macsec1: entered promiscuous mode [ 1046.290414][T10863] udevd[10863]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1046.310558][T16168] udevd[16168]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1046.335384][T12994] udevd[12994]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1046.690650][T17433] netlink: 'syz.4.12849': attribute type 8 has an invalid length. [ 1046.862770][T17446] ALSA: seq fatal error: cannot create timer (-22) [ 1046.934224][T17452] netlink: 'syz.0.12856': attribute type 29 has an invalid length. [ 1047.225549][T17463] tipc: Enabled bearer , priority 10 [ 1047.593809][T32205] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1047.605467][T17450] loop4: detected capacity change from 0 to 32768 [ 1047.654655][T17450] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1047.727601][T17450] XFS (loop4): Ending clean mount [ 1047.745613][T17450] XFS (loop4): Quotacheck needed: Please wait. [ 1047.774105][T32205] usb 1-1: Using ep0 maxpacket: 32 [ 1047.783336][T32205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.797078][T32205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.824888][T32205] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1047.848157][T32205] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1047.890887][T32205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.918093][T32205] usb 1-1: config 0 descriptor?? [ 1047.933368][T17450] XFS (loop4): Quotacheck: Done. [ 1048.107687][T10446] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1048.347183][T25941] tipc: Node number set to 24339 [ 1048.402880][T32205] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001C/input/input75 [ 1048.426754][T17487] loop3: detected capacity change from 0 to 32768 [ 1048.528119][T32205] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001C/input/input76 [ 1048.706540][T17487] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1048.743008][T32205] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.06 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1048.802255][T17532] sctp: [Deprecated]: syz.2.12870 (pid 17532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1048.802255][T17532] Use struct sctp_sack_info instead [ 1048.824552][T32205] usb 1-1: USB disconnect, device number 69 [ 1048.940803][T17532] sctp: [Deprecated]: syz.2.12870 (pid 17532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1048.940803][T17532] Use struct sctp_sack_info instead [ 1049.075982][T17539] fido_id[17539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1049.111521][T17487] XFS (loop3): Ending clean mount [ 1049.121556][T17487] XFS (loop3): Quotacheck needed: Please wait. [ 1049.304720][T17487] XFS (loop3): Quotacheck: Done. [ 1049.351750][T17559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12873'. [ 1049.520825][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1049.790767][T17522] loop4: detected capacity change from 0 to 32768 [ 1049.856807][T17522] add_index: next_index = 0. Resetting! [ 1049.863622][T17522] find_entry called with index >= next_index [ 1049.888753][T17522] find_entry called with index >= next_index [ 1049.895573][T17522] find_entry called with index >= next_index [ 1049.901772][T17522] find_entry called with index >= next_index [ 1049.953430][T17570] [U] ¦ [ 1050.622326][T17601] binder: 17600:17601 ioctl 4018620d 0 returned -22 [ 1050.641828][T17601] binder: 17600:17601 ioctl c0306201 200000000300 returned -11 [ 1050.703415][T17604] loop4: detected capacity change from 0 to 64 [ 1050.739429][T17604] hfs: bad catalog entry type 65535 [ 1051.041394][T17619] loop3: detected capacity change from 0 to 1024 [ 1051.135043][T17619] hfsplus: bad catalog entry type [ 1051.217264][ T4543] hfsplus: b-tree write err: -5, ino 4 [ 1051.651047][T17608] loop0: detected capacity change from 0 to 32768 [ 1051.696910][T17608] add_index: next_index = 0. Resetting! [ 1051.702642][T17608] find_entry called with index >= next_index [ 1051.724309][T17608] find_entry called with index >= next_index [ 1051.745189][T17608] find_entry called with index >= next_index [ 1051.760449][T17608] find_entry called with index >= next_index [ 1051.905517][ T1674] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1052.126913][ T1674] usb 5-1: Using ep0 maxpacket: 32 [ 1052.136166][ T1674] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.163640][ T1674] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.191078][ T1674] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1052.201798][ T1674] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1052.223455][ T1674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.244864][ T1674] usb 5-1: config 0 descriptor?? [ 1052.398268][T17654] loop3: detected capacity change from 0 to 32768 [ 1052.410397][T17654] XFS: noikeep mount option is deprecated. [ 1052.418899][T17654] XFS: attr2 mount option is deprecated. [ 1052.426213][T17654] XFS: noikeep mount option is deprecated. [ 1052.445959][T17668] loop0: detected capacity change from 0 to 4096 [ 1052.465337][T17668] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1052.488098][T17654] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1052.591428][T17668] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1052.606293][T17668] ntfs3: loop0: Failed to load $Extend (-22). [ 1052.612436][T17654] XFS (loop3): Ending clean mount [ 1052.618268][T17668] ntfs3: loop0: Failed to initialize $Extend. [ 1052.635700][T17654] XFS (loop3): Quotacheck needed: Please wait. [ 1052.681748][ T1674] hid-steam 0003:28DE:1205.001D: unknown main item tag 0x0 [ 1052.714295][ T1674] hid-steam 0003:28DE:1205.001D: unknown main item tag 0x0 [ 1052.721641][ T1674] hid-steam 0003:28DE:1205.001D: unknown main item tag 0x0 [ 1052.745508][ T1674] hid-steam 0003:28DE:1205.001D: unknown main item tag 0x0 [ 1052.752823][ T1674] hid-steam 0003:28DE:1205.001D: unknown main item tag 0x0 [ 1052.795433][ T1674] hid-steam 0003:28DE:1205.001D: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 1052.823601][T17654] XFS (loop3): Quotacheck: Done. [ 1053.002909][T32208] usb 5-1: USB disconnect, device number 6 [ 1053.159582][ T5766] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1053.493892][ T786] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1053.586878][T17727] netlink: 'syz.3.12908': attribute type 10 has an invalid length. [ 1053.626603][T17727] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1053.654733][T17727] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1053.663304][T17727] team0: Port device netdevsim0 added [ 1053.670716][T17729] netlink: 'syz.3.12908': attribute type 10 has an invalid length. [ 1053.679539][T17729] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1053.686853][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 1053.709854][ T786] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1053.719682][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1053.733833][ T786] usb 1-1: Product: syz [ 1053.739333][ T786] usb 1-1: Manufacturer: syz [ 1053.752729][T17729] team0: Port device netdevsim0 removed [ 1053.753984][ T786] usb 1-1: SerialNumber: syz [ 1053.767046][ T786] usb 1-1: config 0 descriptor?? [ 1053.776762][ T786] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1053.785527][T17729] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1053.794604][ T5858] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1053.830454][T17731] loop4: detected capacity change from 0 to 4096 [ 1053.852511][T17731] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1053.876288][T17731] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1053.897806][T17731] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1053.911073][T17731] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1053.963105][T17731] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1053.981483][ T5858] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.996240][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1054.004422][T17731] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1054.019079][ T5858] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1054.029771][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.058080][ T5858] usb 3-1: config 0 descriptor?? [ 1054.127235][T17731] ntfs: volume version 3.1. [ 1054.209412][T17731] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set euc-jp. You might want to try to use the mount option nls=utf8. [ 1054.231597][T17731] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 1054.431040][ T786] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1054.440582][ T786] sq905: probe of 1-1:0.0 failed with error -71 [ 1054.465494][ T786] usb 1-1: USB disconnect, device number 70 [ 1054.500386][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.514039][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.531452][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.550116][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.567957][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.585321][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.588809][T17743] loop4: detected capacity change from 0 to 8192 [ 1054.612266][T17743] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1054.617068][ T5858] maltron 0003:058F:9410.001E: unknown main item tag 0x0 [ 1054.634566][T17743] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1054.648044][T17743] REISERFS (device loop4): using journaled data mode [ 1054.656674][ T5858] maltron 0003:058F:9410.001E: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.2-1/input0 [ 1054.681625][T17737] loop3: detected capacity change from 0 to 32768 [ 1054.688355][T17743] reiserfs: using flush barriers [ 1054.741632][ T5858] usb 3-1: USB disconnect, device number 68 [ 1054.784107][T17743] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1054.804998][T17743] REISERFS (device loop4): checking transaction log (loop4) [ 1054.825888][T17743] REISERFS (device loop4): Using r5 hash to sort names [ 1054.833206][T17743] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1054.878296][T17743] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1054.918929][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.940264][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.973332][T17756] fido_id[17756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1055.324424][T17779] loop4: detected capacity change from 0 to 4096 [ 1055.384415][T17785] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1055.465661][T17779] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1055.510173][T17779] Remounting filesystem read-only [ 1055.543932][T17791] loop3: detected capacity change from 0 to 512 [ 1055.586940][T17791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1055.593631][T17791] EXT4-fs: Ignoring removed mblk_io_submit option [ 1055.638650][T17791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1055.660874][T10446] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1055.681100][T17791] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.12915: bad orphan inode 131083 [ 1055.685068][T10446] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 1055.715683][T17791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.763183][T10446] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1055.796137][T10446] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 1055.844928][T10446] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 1055.851983][T10446] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 1055.898905][T10446] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1055.926853][T10446] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1055.933640][T10446] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 1055.949773][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.960057][T10446] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 1055.970088][T10446] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 1056.014053][T10446] NILFS (loop4): discard dirty page: offset=270336, ino=3 [ 1056.021446][T10446] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 1056.378248][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12929'. [ 1056.427816][T17824] erspan0: entered promiscuous mode [ 1056.450828][T17824] erspan0: left promiscuous mode [ 1056.720896][T17804] loop0: detected capacity change from 0 to 32768 [ 1057.039376][T17822] loop3: detected capacity change from 0 to 32768 [ 1057.180841][T17846] veth1_to_bridge: entered promiscuous mode [ 1057.404683][T17846] veth1_to_bridge: left promiscuous mode [ 1057.876256][T17872] tipc: Enabling of bearer rejected, failed to enable media [ 1058.009256][T17877] netlink: 'syz.4.12944': attribute type 10 has an invalid length. [ 1058.060832][T17877] team0: Port device netdevsim0 added [ 1058.078947][T17879] netlink: 'syz.4.12944': attribute type 10 has an invalid length. [ 1058.196413][T17881] Bluetooth: MGMT ver 1.22 [ 1058.250741][T17879] team0: Port device netdevsim0 removed [ 1058.271696][T17879] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1058.365089][T17857] loop0: detected capacity change from 0 to 32768 [ 1058.411420][T17857] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1058.475270][T17857] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1058.585346][ T786] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1058.639688][T17907] loop4: detected capacity change from 0 to 1024 [ 1058.734151][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 1058.786056][T17907] hfsplus: bad catalog entry type [ 1058.803183][ T786] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1058.823333][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.857489][ T786] usb 3-1: config 0 descriptor?? [ 1058.876837][ T786] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1058.952335][ T4543] hfsplus: b-tree write err: -5, ino 4 [ 1059.159009][T17926] loop4: detected capacity change from 0 to 1024 [ 1059.177246][T17926] hfsplus: gid requires an argument [ 1059.182529][T17926] hfsplus: unable to parse mount options [ 1059.293282][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1059.362054][ T786] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1059.378806][ T786] usb 3-1: media controller created [ 1059.453398][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1059.536531][ T786] gp8psk_fe: Frontend attached [ 1059.548158][ T786] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1059.583426][ T786] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1059.627677][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1059.659608][T17951] erspan0: entered promiscuous mode [ 1059.688831][T17951] erspan0: left promiscuous mode [ 1059.705158][ T786] gp8psk: usb in 138 operation failed. [ 1059.721827][ T786] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1059.741288][T17958] loop4: detected capacity change from 0 to 256 [ 1059.745533][ T786] gp8psk: found Genpix USB device pID = 203 (hex) [ 1059.786540][ T786] usb 3-1: USB disconnect, device number 69 [ 1059.800133][T17958] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1060.066008][ T786] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1060.182681][T17986] loop0: detected capacity change from 0 to 512 [ 1060.235391][T17986] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.12964: inode has both inline data and extents flags [ 1060.253200][T17986] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.12964: couldn't read orphan inode 15 (err -117) [ 1060.273621][T17986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.360530][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.388484][ T1674] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1060.579848][ T1674] usb 5-1: Using ep0 maxpacket: 8 [ 1060.592084][ T1674] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1060.621805][ T1674] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1060.631525][ T1674] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1060.640248][ T1674] usb 5-1: Product: syz [ 1060.646017][ T1674] usb 5-1: Manufacturer: syz [ 1060.650675][ T1674] usb 5-1: SerialNumber: syz [ 1060.934160][ T1674] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1060.942633][ T1674] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1060.961586][ T1674] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1060.970155][ T1674] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1060.989932][T17997] loop0: detected capacity change from 0 to 32768 [ 1061.024834][T17997] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1061.108637][T17997] XFS (loop0): Ending clean mount [ 1061.124872][T17997] XFS (loop0): Quotacheck needed: Please wait. [ 1061.143916][ T1674] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1061.184335][ T1674] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1061.234727][T18009] loop3: detected capacity change from 0 to 4096 [ 1061.247873][ T1674] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1061.257394][T17997] XFS (loop0): Quotacheck: Done. [ 1061.268564][T18009] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1061.341046][T18009] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1061.444133][ T1674] usb 5-1: USB disconnect, device number 7 [ 1061.466597][ T1674] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1061.509187][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1061.528222][ T1674] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1061.555081][ T1674] visor 5-1:1.0: device disconnected [ 1061.638467][ T5766] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 1061.712480][T18047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1061.893323][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12975'. [ 1062.249149][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12982'. [ 1062.419593][T18085] loop4: detected capacity change from 0 to 64 [ 1063.093246][T18121] loop0: detected capacity change from 0 to 16 [ 1063.119024][T18121] erofs: (device loop0): mounted with root inode @ nid 36. [ 1063.133831][ T786] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1063.151279][T18121] xt_hashlimit: max too large, truncated to 1048576 [ 1063.161630][T18121] erofs: (device loop0): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 1063.189255][T18121] erofs: (device loop0): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 1063.216381][T18121] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 1063.276525][ T966] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1063.306299][ T966] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1063.314784][T25941] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1063.340172][ T786] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1063.356967][ T786] usb 5-1: config 0 has no interface number 0 [ 1063.373375][ T786] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1063.393939][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.436253][ T786] usb 5-1: config 0 descriptor?? [ 1063.456502][ T786] usb 5-1: selecting invalid altsetting 1 [ 1063.477162][ T786] dvb_ttusb_budget: ttusb_init_controller: error [ 1063.483584][ T786] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1063.656089][ T786] DVB: Unable to find symbol cx22700_attach() [ 1063.682880][T18152] ucma_write: process 7479 (syz.2.13003) changed security contexts after opening file descriptor, this is not allowed. [ 1063.748456][ T786] DVB: Unable to find symbol tda10046_attach() [ 1063.761721][ T786] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1063.798614][ T786] usb 5-1: USB disconnect, device number 8 [ 1064.114102][T32208] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1064.217025][T18139] loop3: detected capacity change from 0 to 32768 [ 1064.251710][T18139] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1064.354741][ T786] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1064.432129][T18149] loop0: detected capacity change from 0 to 32768 [ 1064.442419][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1064.527966][T18149] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1064.786167][T18149] XFS (loop0): Ending clean mount [ 1064.994469][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1065.549937][T18210] loop4: detected capacity change from 0 to 2048 [ 1065.623779][T18214] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1065.898812][T18212] loop0: detected capacity change from 0 to 4096 [ 1065.923446][T18212] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1066.005621][T18212] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1066.166544][T18194] loop3: detected capacity change from 0 to 32768 [ 1066.221212][ T5770] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 1066.248656][T18194] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1066.294273][T18233] loop4: detected capacity change from 0 to 4096 [ 1066.353538][T18233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.505374][T18194] XFS (loop3): Ending clean mount [ 1066.539200][T18194] XFS (loop3): Quotacheck needed: Please wait. [ 1066.649486][T18194] XFS (loop3): Quotacheck: Done. [ 1066.738962][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.760948][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1067.013906][T25941] kernel write not supported for file [eventfd] (pid: 25941 comm: kworker/0:0) [ 1067.233943][ C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1067.504708][T18291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13032'. [ 1068.579610][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13052'. [ 1068.594093][T32208] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1068.643317][T18358] ipvlan2: entered promiscuous mode [ 1068.749065][T18364] tunl0: Caught tx_queue_len zero misconfig [ 1068.841102][T32208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1068.877226][T32208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.898196][T32208] usb 1-1: New USB device found, idVendor=056a, idProduct=233b, bcdDevice= 0.00 [ 1068.905531][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13057'. [ 1068.916617][T32208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.936065][T32208] usb 1-1: config 0 descriptor?? [ 1069.012828][T18370] loop3: detected capacity change from 0 to 4096 [ 1069.028474][T18331] loop4: detected capacity change from 0 to 32768 [ 1069.051479][T18370] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1069.065997][T18370] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1069.079964][T18370] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1069.098354][T18370] ntfs: volume version 3.1. [ 1069.119925][T18331] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1069.239208][T18331] XFS (loop4): Ending clean mount [ 1069.287316][T18331] XFS (loop4): Quotacheck needed: Please wait. [ 1069.293611][ T5766] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1069.416064][T32208] wacom 0003:056A:233B.001F: Unknown device_type for 'HID 056a:233b'. Ignoring. [ 1069.464390][T18331] XFS (loop4): Quotacheck: Done. [ 1069.599069][T32208] usb 1-1: USB disconnect, device number 71 [ 1069.681131][T10446] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1070.735600][T18446] loop3: detected capacity change from 0 to 8192 [ 1070.782247][T18446] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1070.821254][T18446] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1070.886848][T18446] REISERFS (device loop3): using ordered data mode [ 1070.893434][T18446] reiserfs: using flush barriers [ 1070.988475][T18446] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1071.096568][T18446] REISERFS (device loop3): checking transaction log (loop3) [ 1071.145029][T18446] REISERFS (device loop3): Using r5 hash to sort names [ 1071.176551][T18446] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1071.302362][ T28] audit: type=1800 audit(1770823232.985:5310): pid=18446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13070" name="file0" dev="loop3" ino=2 res=0 errno=0 [ 1071.361857][T18468] loop4: detected capacity change from 0 to 512 [ 1071.448480][T18468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1071.500276][T18468] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.13075: iget: bad i_size value: 38620345925642 [ 1071.529189][T18468] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.13075: couldn't read orphan inode 15 (err -117) [ 1071.620857][T18468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.737645][T18468] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.13075: bg 0: block 5: invalid block bitmap [ 1071.789291][T18468] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1071.967923][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.437570][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13081'. [ 1072.523965][T18451] loop0: detected capacity change from 0 to 65536 [ 1072.589441][T18514] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1072.603504][ T786] IPVS: starting estimator thread 0... [ 1072.609971][T18451] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1072.699977][T18451] XFS (loop0): Ending clean mount [ 1072.706013][T18515] IPVS: using max 20 ests per chain, 48000 per kthread [ 1072.892735][ T5770] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1073.242214][T18534] loop4: detected capacity change from 0 to 4096 [ 1073.271470][T18534] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1073.939493][T18561] vlan2: entered allmulticast mode [ 1073.963116][T18561] team0: entered allmulticast mode [ 1073.978519][T18561] team_slave_0: entered allmulticast mode [ 1074.003889][T18561] team_slave_1: entered allmulticast mode [ 1074.284698][ T786] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1074.476528][ T786] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1074.496014][ T786] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.533984][ T786] usb 3-1: config 220 has no interface number 2 [ 1074.540380][ T786] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1074.594810][ T786] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1074.624986][ T786] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1074.631942][ T786] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1074.669516][ T786] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1074.683236][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.702090][ T786] usb 3-1: Product: syz [ 1074.712863][ T786] usb 3-1: Manufacturer: syz [ 1074.722409][ T786] usb 3-1: SerialNumber: syz [ 1074.862840][T18611] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13106'. [ 1074.965582][ T786] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1074.976460][ T786] usb 3-1: No valid video chain found. [ 1074.982141][ T786] usb 3-1: selecting invalid altsetting 0 [ 1075.033851][ T786] usb 3-1: selecting invalid altsetting 0 [ 1075.039678][ T786] usbtest: probe of 3-1:220.1 failed with error -22 [ 1075.064151][ T786] usb 3-1: USB disconnect, device number 70 [ 1075.098681][T18625] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.109076][T18625] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.118716][T18625] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.128590][T18625] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.394132][ C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1076.364171][T32208] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1076.557228][T32208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.579374][T32208] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1076.604027][T32208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.640018][T32208] usb 5-1: config 0 descriptor?? [ 1076.903098][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13136'. [ 1077.017921][T18715] loop0: detected capacity change from 0 to 1024 [ 1077.120732][T32208] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0020/input/input80 [ 1077.251673][T32208] uclogic 0003:28BD:0909.0020: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 1077.313329][ T3483] hfsplus: b-tree write err: -5, ino 8 [ 1077.327918][T32208] usb 5-1: USB disconnect, device number 9 [ 1077.521075][T18749] loop0: detected capacity change from 0 to 128 [ 1077.550439][T18749] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 1077.584384][T18732] fido_id[18732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1077.672876][ T5770] sysv_free_block: trying to free block not in datazone [ 1077.699364][ T5770] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1077.790006][T18758] loop0: detected capacity change from 0 to 512 [ 1077.831954][T18758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.857915][T18758] ext4 filesystem being mounted at /3190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.909084][T18758] EXT4-fs error (device loop0): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.0.13144: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1077.932120][T18758] EXT4-fs error (device loop0): ext4_get_first_dir_block:3595: inode #12: comm syz.0.13144: directory missing '.' [ 1077.957059][T18719] loop3: detected capacity change from 0 to 32768 [ 1078.006558][T18719] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1078.018076][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.206562][T18719] XFS (loop3): Ending clean mount [ 1078.225747][T18719] XFS (loop3): Quotacheck needed: Please wait. [ 1078.417936][T18719] XFS (loop3): Quotacheck: Done. [ 1078.485883][ T28] audit: type=1800 audit(1770823240.175:5311): pid=18719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13138" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 1078.620230][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1078.824215][T18814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.833093][T18814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.841935][T18814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.850737][T18814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.864356][T25941] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1078.872121][ T786] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1079.074855][T25941] usb 3-1: Using ep0 maxpacket: 16 [ 1079.080213][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1079.095300][T25941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.113938][ T786] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1079.127938][T25941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1079.149556][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.163793][T25941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1079.184038][T25941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1079.194016][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.209558][T25941] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.223135][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1079.245119][ T786] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1079.254751][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.264417][T25941] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1079.273616][T25941] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1079.292273][ T786] usb 1-1: config 0 descriptor?? [ 1079.297593][T25941] usb 3-1: Manufacturer: syz [ 1079.321087][T25941] usb 3-1: config 0 descriptor?? [ 1079.640890][T18841] loop4: detected capacity change from 0 to 4096 [ 1079.667989][T18841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.682209][T25941] rc_core: IR keymap rc-hauppauge not found [ 1079.711690][T25941] Registered IR keymap rc-empty [ 1079.722598][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.731602][T18841] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.13163: corrupted inode contents [ 1079.746439][T18841] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #15: comm syz.4.13163: mark_inode_dirty error [ 1079.762055][T18841] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.13163: corrupted inode contents [ 1079.763604][ T786] kye 0003:0458:5013.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1079.790754][ T786] kye 0003:0458:5013.0021: unknown main item tag 0x6 [ 1079.795898][T18841] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.13163: mark_inode_dirty error [ 1079.800051][ T786] kye 0003:0458:5013.0021: unknown main item tag 0x5 [ 1079.816338][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.830001][T18841] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.13163: corrupted inode contents [ 1079.844145][ T786] kye 0003:0458:5013.0021: unknown main item tag 0x4 [ 1079.850930][ T786] kye 0003:0458:5013.0021: item fetching failed at offset 31/160 [ 1079.859459][T18841] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.13163: mark_inode_dirty error [ 1079.872177][T25941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1079.887300][ T786] kye 0003:0458:5013.0021: parse failed [ 1079.893094][ T786] kye: probe of 0003:0458:5013.0021 failed with error -22 [ 1079.912711][T25941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input81 [ 1079.940101][T18841] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.13163: corrupted inode contents [ 1079.977988][T18841] EXT4-fs error (device loop4): ext4_truncate:4294: inode #15: comm syz.4.13163: mark_inode_dirty error [ 1079.989543][ T786] usb 1-1: USB disconnect, device number 72 [ 1079.998258][T18841] EXT4-fs error (device loop4) in ext4_setattr:5663: Corrupt filesystem [ 1080.013481][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.021398][T18849] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.13163: corrupted inode contents [ 1080.114673][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.150041][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.204281][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.212675][T10446] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1080.231718][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.243957][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.280910][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.323888][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.355082][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.385073][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.415193][T25941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.446956][T25941] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1080.469178][T25941] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1080.496272][T25941] usb 3-1: USB disconnect, device number 71 [ 1080.648407][T18897] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.13169'. [ 1080.780942][T18905] loop4: detected capacity change from 0 to 16 [ 1080.797236][T18905] erofs: (device loop4): mounted with root inode @ nid 36. [ 1080.808425][T18905] syz.4.13171: attempt to access beyond end of device [ 1080.808425][T18905] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1080.853844][T18905] syz.4.13171: attempt to access beyond end of device [ 1080.853844][T18905] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1080.888329][T18905] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1080.927453][ T28] audit: type=1800 audit(1770823242.615:5312): pid=18905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13171" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 1080.982945][T18912] loop0: detected capacity change from 0 to 256 [ 1081.079322][T18912] FAT-fs (loop0): Directory bread(block 64) failed [ 1081.094176][T18912] FAT-fs (loop0): Directory bread(block 65) failed [ 1081.104703][T18912] FAT-fs (loop0): Directory bread(block 66) failed [ 1081.123785][T18912] FAT-fs (loop0): Directory bread(block 67) failed [ 1081.150157][T18912] FAT-fs (loop0): Directory bread(block 68) failed [ 1081.186589][T18912] FAT-fs (loop0): Directory bread(block 69) failed [ 1081.212008][T18912] FAT-fs (loop0): Directory bread(block 70) failed [ 1081.237439][T18912] FAT-fs (loop0): Directory bread(block 71) failed [ 1081.250340][T18912] FAT-fs (loop0): Directory bread(block 72) failed [ 1081.274105][T18912] FAT-fs (loop0): Directory bread(block 73) failed [ 1081.872867][T18951] loop0: detected capacity change from 0 to 128 [ 1081.948304][T18951] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1082.014594][T18951] hpfs: filesystem error: improperly stopped [ 1082.020710][T18951] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1082.063798][T18951] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1082.096506][T18951] hpfs: You really don't want any checks? You are crazy... [ 1082.105691][T18951] hpfs: hpfs_map_sector(): read error [ 1082.119562][T18951] hpfs: code page support is disabled [ 1082.148153][T18951] hpfs: hpfs_map_4sectors(): unaligned read [ 1082.165781][T18951] hpfs: hpfs_map_4sectors(): unaligned read [ 1082.180490][T18951] hpfs: filesystem error: unable to find root dir [ 1082.273931][T25363] Bluetooth: hci1: command 0x0406 tx timeout [ 1082.504827][ T28] audit: type=1326 audit(1770823244.185:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.560941][ T28] audit: type=1326 audit(1770823244.185:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.614980][ T28] audit: type=1326 audit(1770823244.205:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.664038][ T28] audit: type=1326 audit(1770823244.205:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.726223][ T28] audit: type=1326 audit(1770823244.205:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.757598][T18948] loop4: detected capacity change from 0 to 32768 [ 1082.812054][ T28] audit: type=1326 audit(1770823244.215:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.864477][ T28] audit: type=1326 audit(1770823244.235:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.2.13189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d19bf79 code=0x7ffc0000 [ 1082.890354][T18979] loop0: detected capacity change from 0 to 4096 [ 1082.962714][T18989] loop3: detected capacity change from 0 to 1024 [ 1083.008038][T18995] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1083.019778][T18979] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1083.035256][T18989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.101697][T18979] NILFS (loop0): mounting fs with errors [ 1083.206618][T18989] EXT4-fs: Cannot specify journal on remount [ 1083.329804][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.639617][T19016] loop3: detected capacity change from 0 to 512 [ 1083.737987][T19016] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.761956][T19016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.919768][T19032] bridge_slave_1: default FDB implementation only supports local addresses [ 1083.944712][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.004906][ T28] audit: type=1326 audit(1770823245.685:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.4.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbb9bf79 code=0x7ffc0000 [ 1084.039896][ T28] audit: type=1326 audit(1770823245.685:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.4.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbb9bf79 code=0x7ffc0000 [ 1084.071434][ T28] audit: type=1326 audit(1770823245.755:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.4.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9dbb9bf79 code=0x7ffc0000 [ 1084.155637][ T28] audit: type=1326 audit(1770823245.755:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.4.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbb9bf79 code=0x7ffc0000 [ 1084.200655][ T28] audit: type=1326 audit(1770823245.775:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.4.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbb9bf79 code=0x7ffc0000 [ 1084.658287][T19066] loop3: detected capacity change from 0 to 1024 [ 1084.944084][T19079] cifs: Bad value for 'port' [ 1085.084065][T19085] ax25_connect(): syz.2.13221 uses autobind, please contact jreuter@yaina.de [ 1085.098426][T19049] loop4: detected capacity change from 0 to 32768 [ 1085.134489][T19049] (syz.4.13209,19049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1085.199889][T19049] (syz.4.13209,19049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1085.280794][T19049] JBD2: Ignoring recovery information on journal [ 1085.436974][T19049] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1085.524296][T19106] loop0: detected capacity change from 0 to 128 [ 1085.785872][T10446] ocfs2: Unmounting device (7,4) on (node local) [ 1086.270174][T19138] mkiss: ax0: crc mode is auto. [ 1086.432540][T19154] loop4: detected capacity change from 0 to 1024 [ 1086.489290][T19160] loop3: detected capacity change from 0 to 256 [ 1086.528414][T19154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.590605][T19160] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1086.597866][T19154] EXT4-fs: Cannot specify journal on remount [ 1086.674255][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.064775][T19184] loop3: detected capacity change from 0 to 65 [ 1087.100942][T19184] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1087.133776][T19184] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1087.799149][T19216] loop0: detected capacity change from 0 to 1024 [ 1087.821361][T19215] loop3: detected capacity change from 0 to 2048 [ 1087.852904][T19215] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1087.860868][T19216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.900514][T19228] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1088.029173][T19216] EXT4-fs: Cannot specify journal on remount [ 1088.083871][T32208] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1088.121051][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.274403][T32208] usb 5-1: Using ep0 maxpacket: 32 [ 1088.288108][T32208] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1088.303819][T32208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.332787][T32208] usb 5-1: config 0 descriptor?? [ 1088.347429][T32208] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1088.686635][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13267'. [ 1088.991644][T32208] gspca_vc032x: reg_w err -71 [ 1088.996648][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.003129][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.028173][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.044028][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.054719][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.073739][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.079114][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.101844][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.111966][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.125974][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.141609][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.158084][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.168482][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.183784][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.191869][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.209580][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.215312][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.230909][T32208] gspca_vc032x: I2c Bus Busy Wait 00 [ 1089.241029][T32208] gspca_vc032x: Unknown sensor... [ 1089.262147][T32208] vc032x: probe of 5-1:0.0 failed with error -22 [ 1089.276056][T32208] usb 5-1: USB disconnect, device number 10 [ 1089.342787][T19289] loop0: detected capacity change from 0 to 64 [ 1089.445199][T19264] loop3: detected capacity change from 0 to 40427 [ 1089.472013][T19264] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 1089.506816][T19264] F2FS-fs (loop3): invalid crc value [ 1089.549830][T19264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1089.689016][T19264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1089.816070][T19304] loop4: detected capacity change from 0 to 4096 [ 1089.858471][T19304] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1089.915358][ T5766] syz-executor: attempt to access beyond end of device [ 1089.915358][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1089.954514][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1090.066937][ T28] audit: type=1800 audit(1770823251.755:5325): pid=19304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13277" name="file3" dev="loop4" ino=31 res=0 errno=0 [ 1090.836119][T19309] loop0: detected capacity change from 0 to 40427 [ 1090.844500][T19339] loop3: detected capacity change from 0 to 512 [ 1090.862471][T19339] EXT4-fs: Ignoring removed oldalloc option [ 1090.887418][T19309] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1090.912175][T19309] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1090.950083][T19309] F2FS-fs (loop0): invalid crc value [ 1090.965309][T19339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.978238][T19339] ext4 filesystem being mounted at /3116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.014313][T19309] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1091.082483][T19309] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1091.090791][T19309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1091.199096][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.317730][ T5770] syz-executor: attempt to access beyond end of device [ 1091.317730][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1091.362718][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1091.394060][ C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1091.461904][T19370] loop3: detected capacity change from 0 to 1024 [ 1091.498910][T19370] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1091.533856][T19370] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1091.556250][T19370] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1091.587163][T19370] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.13292: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1091.655150][T19370] EXT4-fs (loop3): no journal found [ 1091.660455][T19370] EXT4-fs (loop3): can't get journal size [ 1091.674640][T19370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1091.692296][T19377] loop4: detected capacity change from 0 to 512 [ 1091.751972][T19377] EXT4-fs: Ignoring removed nobh option [ 1091.800107][T19377] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 1091.811335][T19377] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 1091.821734][T19377] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #13: comm syz.4.13295: inode has both inline data and extents flags [ 1091.868858][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.909076][T19377] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.13295: couldn't read orphan inode 13 (err -117) [ 1091.977149][T19377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.076804][T19394] loop3: detected capacity change from 0 to 16 [ 1092.090009][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13298'. [ 1092.103243][T19394] erofs: (device loop3): mounted with root inode @ nid 36. [ 1092.141042][T19377] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 1092.289637][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.165820][T19446] CUSE: unknown device info "€" [ 1093.188506][T19446] CUSE: unknown device info "" [ 1093.193442][T19446] CUSE: unknown device info "" [ 1093.223853][T19446] CUSE: unknown device info "" [ 1093.237748][T19446] CUSE: zero length info key specified [ 1093.556744][T19461] loop4: detected capacity change from 0 to 4096 [ 1093.708039][T19471] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1093.744475][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.773887][ T5858] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1093.792139][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.822175][T19461] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1093.872707][T19461] Remounting filesystem read-only [ 1093.963034][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.995249][ T5858] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1094.038132][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.085186][ T5858] usb 4-1: config 0 descriptor?? [ 1094.138386][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.169760][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.390357][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.423808][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.520698][ T5858] apple 0003:05AC:0292.0022: unbalanced collection at end of report description [ 1094.565818][ T5858] apple 0003:05AC:0292.0022: parse failed [ 1094.572281][ T5858] apple: probe of 0003:05AC:0292.0022 failed with error -22 [ 1094.602571][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1094.633077][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.643998][T32208] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1094.665143][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.750235][T32205] usb 4-1: USB disconnect, device number 73 [ 1094.839132][T32208] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.853720][T32208] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1094.881333][T32208] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1094.903799][T32208] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1094.912926][T32208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.959185][T32208] usb 5-1: config 0 descriptor?? [ 1095.057963][ T9588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1095.081278][ T9588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1095.099181][ T9588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1095.121762][ T9588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1095.135878][ T9588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1095.143561][ T9588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1095.368180][T19502] wlan1 speed is unknown, defaulting to 1000 [ 1095.374839][ T1135] tipc: Left network mode [ 1095.420112][T32208] saitek 0003:06A3:0621.0023: item fetching failed at offset 5/7 [ 1095.449771][T32208] saitek 0003:06A3:0621.0023: parse failed [ 1095.463833][T32208] saitek: probe of 0003:06A3:0621.0023 failed with error -22 [ 1095.516629][T19537] loop3: detected capacity change from 0 to 128 [ 1095.558025][T19537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1095.579892][T19537] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.620873][ T786] usb 5-1: USB disconnect, device number 11 [ 1095.629136][T19537] ext4 filesystem being mounted at /3124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.818889][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1096.059065][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.076935][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.092812][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.110790][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.131024][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.143935][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.193868][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.211628][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.244009][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.251500][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.261444][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.272522][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.280323][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.288390][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.318662][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.347546][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.383806][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.399330][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.421719][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.448239][T19575] loop4: detected capacity change from 0 to 2048 [ 1096.455041][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.462487][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.489335][T19575] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1096.504434][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.522336][T19575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1096.531646][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.544770][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.552338][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.562974][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.583211][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.614223][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.622283][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.683451][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.714015][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.722099][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.763349][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.772443][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.794295][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.801774][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.838990][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.853984][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.877639][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.885727][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.895601][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.903111][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.912412][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.920230][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.928994][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.936817][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.944732][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.952197][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.960224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1096.974109][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.981586][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1096.991848][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.000043][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.008041][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.015826][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.023395][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.032270][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.040216][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.059016][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.107711][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.154925][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.173633][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.181246][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.207378][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.233959][ T9588] Bluetooth: hci2: command tx timeout [ 1097.252072][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.275941][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.294008][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.301493][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.309535][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.317327][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.318585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.352949][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.375815][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.383414][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.392586][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.426564][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.438902][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.450056][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.470767][T19613] gretap0: entered promiscuous mode [ 1097.478744][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.487921][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.495074][T19613] vlan3: entered promiscuous mode [ 1097.501614][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.509634][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.517465][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.528262][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.536249][T32208] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1097.579921][T32208] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1097.719906][T19617] fido_id[19617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1098.305544][T19502] chnl_net:caif_netlink_parms(): no params data found [ 1098.307199][ T1135] IPVS: stopping backup sync thread 18980 ... [ 1098.598125][T19720] loop4: detected capacity change from 0 to 4096 [ 1098.631222][T19720] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1098.645379][T19720] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1098.654686][T19720] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1098.668805][T19720] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1098.755890][T19720] ntfs: volume version 3.1. [ 1098.821883][T19720] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1098.901470][T19720] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1098.940283][T19502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.950075][T19502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.958308][T19720] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1098.974676][T19502] bridge_slave_0: entered allmulticast mode [ 1098.982826][T19502] bridge_slave_0: entered promiscuous mode [ 1099.045985][T19502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.059887][T19502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.085990][T19502] bridge_slave_1: entered allmulticast mode [ 1099.102903][T19502] bridge_slave_1: entered promiscuous mode [ 1099.316513][ T9588] Bluetooth: hci2: command tx timeout [ 1099.433488][ T1135] hsr_slave_0: left promiscuous mode [ 1099.444213][ T1135] hsr_slave_1: left promiscuous mode [ 1099.507589][T19789] loop4: detected capacity change from 0 to 2048 [ 1099.515049][ T1135] macsec0: left allmulticast mode [ 1099.520153][ T1135] veth1_macvtap: left allmulticast mode [ 1099.534597][T19789] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x80 != 0x7e [ 1099.558970][T19789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1099.573415][ T1135] veth1_macvtap: left promiscuous mode [ 1099.605675][ T1135] veth1_vlan: left promiscuous mode [ 1099.643183][ T28] audit: type=1800 audit(1770823261.325:5326): pid=19789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13341" name="file2" dev="loop4" ino=1416 res=0 errno=0 [ 1099.768598][T19794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13342'. [ 1100.128931][T19801] loop3: detected capacity change from 0 to 8192 [ 1100.151228][T19801] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1100.174567][T19801] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1100.190958][ T1135] bond6 (unregistering): Released all slaves [ 1100.208394][T19801] REISERFS (device loop3): using writeback data mode [ 1100.231272][T19801] reiserfs: using flush barriers [ 1100.253268][T19801] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1100.301429][T19801] REISERFS (device loop3): checking transaction log (loop3) [ 1100.332467][T19801] REISERFS (device loop3): Using r5 hash to sort names [ 1100.371275][T19801] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1100.396261][T19801] REISERFS warning (device loop3): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 1100.424349][ T1135] pimreg (unregistering): left allmulticast mode [ 1100.431054][T19801] REISERFS error (device loop3): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 1100.463907][T19801] REISERFS (device loop3): Remounting filesystem read-only [ 1100.604925][ T5858] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1100.826230][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.849588][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.879566][ T5858] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 1100.889589][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.924670][ T5858] usb 3-1: config 0 descriptor?? [ 1101.030319][T19827] CUSE: unknown device info "€" [ 1101.060140][T19827] CUSE: unknown device info "" [ 1101.068146][T19827] CUSE: unknown device info "" [ 1101.073588][T19827] CUSE: unknown device info "" [ 1101.082592][T19827] CUSE: zero length info key specified [ 1101.091795][ T1135] bond5 (unregistering): Released all slaves [ 1101.129305][ T1135] bond4 (unregistering): Released all slaves [ 1101.161328][T19830] loop3: detected capacity change from 0 to 2048 [ 1101.226771][T19832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1101.306749][ T1135] bond3 (unregistering): Released all slaves [ 1101.317797][ T28] audit: type=1800 audit(1770823263.005:5327): pid=19830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13351" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1101.350232][ T1135] bond2 (unregistering): Released all slaves [ 1101.375734][ T5858] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 1101.382871][ T5858] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 1101.396566][ T9588] Bluetooth: hci2: command tx timeout [ 1101.407993][ T5858] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 1101.421248][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.440762][ T5858] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 1101.465042][ T5858] semitek 0003:1EA7:0907.0025: unknown main item tag 0x0 [ 1101.486262][T19830] Remounting filesystem read-only [ 1101.498395][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.519309][ T5858] semitek 0003:1EA7:0907.0025: hidraw0: USB HID v66.1d Device [HID 1ea7:0907] on usb-dummy_hcd.2-1/input0 [ 1101.535552][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.545902][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.565806][ T5858] usb 3-1: USB disconnect, device number 72 [ 1101.575903][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.619913][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.649619][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.710965][T19850] fido_id[19850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1101.733942][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.760116][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.785554][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.799385][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.812833][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.827282][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.837570][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.851280][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.861512][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.886087][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.922631][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.936763][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1101.948420][T19830] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1102.295207][ T1135] bond1 (unregistering): Released all slaves [ 1102.566120][T32205] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1102.728856][ T1135] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1102.768791][T32205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.782996][T32205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.814511][T32205] usb 4-1: New USB device found, idVendor=a86d, idProduct=c626, bcdDevice= 0.00 [ 1102.824138][T32205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.846163][T32205] usb 4-1: config 0 descriptor?? [ 1103.279987][T32205] hid-generic 0003:A86D:C626.0026: unbalanced collection at end of report description [ 1103.295789][T32205] hid-generic: probe of 0003:A86D:C626.0026 failed with error -22 [ 1103.476498][ T9588] Bluetooth: hci2: command tx timeout [ 1103.511209][T32206] usb 4-1: USB disconnect, device number 74 [ 1103.547599][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13367'. [ 1104.282231][T19921] loop3: detected capacity change from 0 to 4096 [ 1104.312774][T19921] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1104.816368][T19931] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13379'. [ 1104.826016][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13379'. [ 1105.482400][ T1135] bond0 (unregistering): Released all slaves [ 1105.552188][T19502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.679285][T19929] vlan2: entered promiscuous mode [ 1105.809177][T19942] loop4: detected capacity change from 0 to 32768 [ 1105.819501][T19942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.13376 (19942) [ 1105.858610][T19502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.943360][T19942] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1105.991599][T19942] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1106.038089][T19942] BTRFS info (device loop4): force zlib compression, level 3 [ 1106.065956][T19942] BTRFS info (device loop4): enabling ssd optimizations [ 1106.088524][T19942] BTRFS info (device loop4): allowing degraded mounts [ 1106.101374][T19502] team0: Port device team_slave_0 added [ 1106.111564][T19942] BTRFS info (device loop4): force clearing of disk cache [ 1106.140672][T19942] BTRFS info (device loop4): using free space tree [ 1106.152613][T19502] team0: Port device team_slave_1 added [ 1106.260927][T19942] BTRFS info (device loop4): rebuilding free space tree [ 1106.315169][T19942] BTRFS info (device loop4): checking UUID tree [ 1106.406388][T19502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.413412][T19502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.542836][T19502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.586106][T19502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.593135][T19502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.621750][T20021] loop3: detected capacity change from 0 to 512 [ 1106.657314][T19502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.727066][T20021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.783467][T10446] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1106.958046][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.148376][T19502] hsr_slave_0: entered promiscuous mode [ 1107.160766][T17520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (17520) [ 1107.225297][T19502] hsr_slave_1: entered promiscuous mode [ 1107.241203][T19502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.250074][T19502] Cannot create hsr debugfs directory [ 1107.290851][ T1135] IPVS: stop unused estimator thread 0... [ 1108.510359][T19502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1108.558731][T19502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1108.616704][T19502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1108.637614][T19502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1108.997886][T19502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.083031][T19502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.121844][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.129095][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.211885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.219177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.310260][T20216] bridge0: port 1(vlan2) entered blocking state [ 1109.334066][T20216] bridge0: port 1(vlan2) entered disabled state [ 1109.357607][T20216] vlan2: entered allmulticast mode [ 1109.362855][T20216] bridge0: entered allmulticast mode [ 1109.679010][T20216] vlan2: left allmulticast mode [ 1109.693229][T20216] bridge0: left allmulticast mode [ 1109.817038][T20225] sp0: Synchronizing with TNC [ 1109.835354][T20228] sp0: Found TNC [ 1110.282006][T20261] netlink: 'syz.4.13406': attribute type 3 has an invalid length. [ 1110.600107][T19502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.980477][T20293] loop4: detected capacity change from 0 to 512 [ 1111.039945][T20293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.108367][T20293] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.330621][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.527188][T19502] veth0_vlan: entered promiscuous mode [ 1111.576274][T19502] veth1_vlan: entered promiscuous mode [ 1111.699104][T19502] veth0_macvtap: entered promiscuous mode [ 1111.729833][T19502] veth1_macvtap: entered promiscuous mode [ 1111.770695][T19502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.801741][T19502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.838984][T19502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.890217][T19502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.919626][T19502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.945104][T19502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.989351][T19502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.010584][T19502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.028136][T19502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.037996][T19502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.364386][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.372312][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.497172][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.517338][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.343383][T20398] loop3: detected capacity change from 0 to 128 [ 1113.415446][T20398] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1113.431149][T20395] loop4: detected capacity change from 0 to 4096 [ 1113.576944][ T5766] sysv_free_block: trying to free block not in datazone [ 1113.610528][ T5766] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1113.747048][T20395] ntfs3: loop4: ino=9, attr_set_size [ 1113.874391][ T5858] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1114.078407][ T5858] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1114.098123][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.114021][ T5858] usb 6-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 1114.134795][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.162422][ T5858] usb 6-1: config 0 descriptor?? [ 1114.179257][T20411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1114.451910][T20454] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 1114.608229][ T5858] wacom 0003:056A:00D4.0027: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 1114.652773][ T5858] wacom 0003:056A:00D4.0027: hidraw0: USB HID v0.81 Device [HID 056a:00d4] on usb-dummy_hcd.5-1/input0 [ 1114.687301][ T5858] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D4.0027/input/input82 [ 1114.869335][ T5858] usb 6-1: USB disconnect, device number 2 [ 1115.052078][T20495] loop4: detected capacity change from 0 to 128 [ 1115.224103][ T5840] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1115.406969][T20516] loop4: detected capacity change from 0 to 512 [ 1115.439482][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.471324][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.502669][ T5840] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1115.552289][T20521] loop5: detected capacity change from 0 to 128 [ 1115.554325][T20516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.581232][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.608068][T20516] ext4 filesystem being mounted at /505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.630958][T20521] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 1115.666532][ T5840] usb 3-1: config 0 descriptor?? [ 1115.743616][T20521] sysv_count_free_blocks: >flc_size entries in free-list block [ 1115.801074][T20521] sysv_count_free_inodes: unable to read inode table [ 1115.825223][T20516] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.13458: corrupted xattr block 33: invalid ea_ino [ 1115.876631][T20516] EXT4-fs (loop4): Remounting filesystem read-only [ 1115.918978][ T28] audit: type=1800 audit(1770823277.595:5328): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13458" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1116.007392][T19502] sysv_free_block: flc_count > flc_size [ 1116.013060][T19502] sysv_free_block: flc_count > flc_size [ 1116.029244][T19502] sysv_free_block: flc_count > flc_size [ 1116.045529][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.053866][T19502] sysv_free_block: flc_count > flc_size [ 1116.065046][T19502] sysv_free_block: flc_count > flc_size [ 1116.070862][ T3483] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1116.078018][T19502] sysv_free_block: flc_count > flc_size [ 1116.097947][ T3483] Quota error (device loop4): write_blk: dquota write failed [ 1116.105647][ T3483] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 1116.117417][ T3483] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1116.128071][T19502] sysv_free_block: flc_count > flc_size [ 1116.128085][T19502] sysv_free_block: flc_count > flc_size [ 1116.128095][T19502] sysv_free_block: flc_count > flc_size [ 1116.128105][T19502] sysv_free_block: flc_count > flc_size [ 1116.133020][T19502] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1116.172465][ T5840] uclogic 0003:5543:0042.0028: unbalanced delimiter at end of report description [ 1116.196650][ T3483] Quota error (device loop4): write_blk: dquota write failed [ 1116.225125][ T3483] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 1116.236411][ T5840] uclogic 0003:5543:0042.0028: parse failed [ 1116.242491][ T5840] uclogic: probe of 0003:5543:0042.0028 failed with error -22 [ 1116.260738][ T3483] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 1116.299161][T20542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.312981][ T3483] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1116.329370][T20542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.363079][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.369573][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.378339][T20542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.416215][T20542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.455398][ T5840] usb 3-1: USB disconnect, device number 73 [ 1116.643360][T20567] loop3: detected capacity change from 0 to 128 [ 1116.651319][T20567] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1116.686195][T20567] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1116.737370][T20562] loop4: detected capacity change from 0 to 4096 [ 1116.824929][T20574] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1116.884074][ T1002] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1116.957422][T20562] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1117.075929][T20562] Remounting filesystem read-only [ 1117.177811][T10446] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1117.201623][T10446] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 1117.225968][T10446] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 1117.262443][T10446] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 1117.280765][T10446] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 1117.307923][T10446] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1117.329285][T10446] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 1117.347229][T10446] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1117.363936][T10446] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 1117.381564][T10446] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 1117.413448][T10446] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 1117.440764][T10446] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1117.458229][T10446] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 1117.488258][T10446] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 1117.523779][T10446] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 1117.542555][T10446] NILFS (loop4): discard dirty page: offset=270336, ino=3 [ 1117.568017][T10446] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 1118.232487][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13479'. [ 1118.658606][T20652] loop5: detected capacity change from 0 to 16 [ 1118.719941][T20652] erofs: (device loop5): mounted with root inode @ nid 36. [ 1119.115871][T20669] loop5: detected capacity change from 0 to 64 [ 1119.295604][T20673] loop4: detected capacity change from 0 to 2048 [ 1119.365671][T20673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.411949][T20673] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.13488: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1119.546852][T20673] EXT4-fs (loop4): Remounting filesystem read-only [ 1119.561942][T20684] loop5: detected capacity change from 0 to 2048 [ 1119.601953][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.641200][T20684] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1119.684355][T20684] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1119.699792][T20684] UDF-fs: Scanning with blocksize 512 failed [ 1119.779954][T20684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1120.157711][T20715] sp0: Synchronizing with TNC [ 1120.204722][T20715] sp0: Found TNC [ 1120.444163][T20733] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1120.570470][T20739] GUP no longer grows the stack in syz.3.13505 (20739): 200000005000-200000008000 (200000004000) [ 1120.595900][T20739] CPU: 1 PID: 20739 Comm: syz.3.13505 Not tainted syzkaller #0 [ 1120.603535][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1120.613663][T20739] Call Trace: [ 1120.616982][T20739] [ 1120.619967][T20739] dump_stack_lvl+0x18c/0x250 [ 1120.624714][T20739] ? show_regs_print_info+0x20/0x20 [ 1120.629971][T20739] ? load_image+0x400/0x400 [ 1120.634549][T20739] ? find_vma+0x134/0x1b0 [ 1120.638962][T20739] fixup_user_fault+0x642/0x700 [ 1120.643878][T20739] fault_in_user_writeable+0x71/0xd0 [ 1120.649232][T20739] futex_lock_pi+0x274/0x9a0 [ 1120.653890][T20739] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 1120.659357][T20739] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 1120.664960][T20739] ? mas_find_setup+0x493/0x590 [ 1120.669871][T20739] do_futex+0x23d/0x3e0 [ 1120.674096][T20739] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1120.680073][T20739] __se_sys_futex+0x3a9/0x440 [ 1120.684859][T20739] ? __x64_sys_futex+0xf0/0xf0 [ 1120.689699][T20739] ? __x64_sys_futex+0x21/0xf0 [ 1120.694514][T20739] do_syscall_64+0x55/0xa0 [ 1120.698995][T20739] ? clear_bhb_loop+0x40/0x90 [ 1120.703739][T20739] ? clear_bhb_loop+0x40/0x90 [ 1120.708473][T20739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1120.714422][T20739] RIP: 0033:0x7f7ef0b9bf79 [ 1120.718881][T20739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.738541][T20739] RSP: 002b:00007f7ef1b0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1120.747037][T20739] RAX: ffffffffffffffda RBX: 00007f7ef0e15fa0 RCX: 00007f7ef0b9bf79 [ 1120.755061][T20739] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1120.763109][T20739] RBP: 00007f7ef0c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.771146][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.779173][T20739] R13: 00007f7ef0e16038 R14: 00007f7ef0e15fa0 R15: 00007fff0c264a68 [ 1120.787222][T20739] [ 1120.790304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.979497][T20745] netlink: 'syz.3.13507': attribute type 1 has an invalid length. [ 1121.003740][T20745] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.13507'. [ 1121.255826][T20748] loop3: detected capacity change from 0 to 512 [ 1121.309508][T20748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.338858][T20748] ext4 filesystem being mounted at /3176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.446438][T20742] loop4: detected capacity change from 0 to 32768 [ 1121.563954][T20742] JBD2: Ignoring recovery information on journal [ 1121.602180][T20731] loop5: detected capacity change from 0 to 40427 [ 1121.664511][T20731] F2FS-fs (loop5): invalid crc value [ 1121.673295][T20742] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1121.727873][T20731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1121.807230][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.925197][T20731] F2FS-fs (loop5): Start checkpoint disabled! [ 1121.975921][T20731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1122.114730][ C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! [ 1122.299287][ T4543] kworker/u4:9: attempt to access beyond end of device [ 1122.299287][ T4543] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1122.313798][ T4543] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1122.321683][ T4543] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1122.334122][ T4543] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1122.418446][T10446] ocfs2: Unmounting device (7,4) on (node local) [ 1122.717981][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13513'. [ 1122.881924][T20786] loop5: detected capacity change from 0 to 4096 [ 1123.235096][T20786] ntfs3: loop5: ino=9, attr_set_size [ 1123.484648][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13519'. [ 1123.507326][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13519'. [ 1123.692662][T20816] loop4: detected capacity change from 0 to 1764 [ 1123.932316][T20837] usb usb1: check_ctrlrecip: process 20837 (syz.4.13529) requesting ep 01 but needs 81 [ 1124.441590][T20865] tipc: Enabling of bearer rejected, failed to enable media [ 1124.513417][T20863] loop4: detected capacity change from 0 to 4096 [ 1124.638686][T20863] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1125.930260][T20940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.983708][T20940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.993604][T20940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.048002][T20940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.267076][T20957] loop4: detected capacity change from 0 to 16 [ 1126.285896][T20957] erofs: (device loop4): mounted with root inode @ nid 36. [ 1126.601585][T20934] loop3: detected capacity change from 0 to 32768 [ 1126.655948][T20934] JBD2: Ignoring recovery information on journal [ 1126.751308][ T5840] kernel write not supported for file /sysvipc/msg (pid: 5840 comm: kworker/0:5) [ 1126.846103][T20934] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1127.001106][T20993] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1127.141977][T20998] loop5: detected capacity change from 0 to 256 [ 1127.592302][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 1127.860670][T21027] loop3: detected capacity change from 0 to 128 [ 1127.885300][T21027] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1127.914137][T21027] ext4 filesystem being mounted at /3191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.998613][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1128.404018][T32206] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1128.616482][T32206] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.636946][T21048] loop5: detected capacity change from 0 to 4096 [ 1128.638285][T32206] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1128.703325][T32206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1128.731640][T32206] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 1128.772508][T32206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.802877][T32206] usb 4-1: config 0 descriptor?? [ 1128.872264][T21048] ntfs3: loop5: ino=1f, "file2" attr_set_size [ 1129.091281][T21043] loop4: detected capacity change from 0 to 32768 [ 1129.198035][T21043] JBD2: Ignoring recovery information on journal [ 1129.207544][T21043] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1129.215954][T21043] JBD2: bad block at offset 32 [ 1129.249001][T32206] logitech-djreceiver 0003:046D:C51B.0029: unknown main item tag 0x0 [ 1129.257491][T32206] logitech-djreceiver 0003:046D:C51B.0029: unknown main item tag 0x0 [ 1129.301568][T21043] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1129.331062][T21043] (syz.4.13590,21043,1):ocfs2_get_block:148 get_block on system inode 0xffff88805c83c178 (65) [ 1129.364047][T21043] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 1129.383835][T21043] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1129.433770][T21043] OCFS2: File system is now read-only. [ 1129.453084][T32206] usb 4-1: USB disconnect, device number 75 [ 1129.462256][T21043] (syz.4.13590,21043,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1129.505337][T21043] (syz.4.13590,21043,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1129.545903][T21043] (syz.4.13590,21043,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 1129.582076][T21043] (syz.4.13590,21043,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1129.602078][T21043] (syz.4.13590,21043,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88805c83c178, block: 0 [ 1129.639254][T21043] (syz.4.13590,21043,0):ocfs2_get_block:148 get_block on system inode 0xffff88805c83c178 (65) [ 1129.663598][T21043] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 1129.704013][T21043] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1129.723943][T21043] (syz.4.13590,21043,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1129.738686][T21043] (syz.4.13590,21043,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1129.761678][T21043] (syz.4.13590,21043,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 1129.771780][T21043] (syz.4.13590,21043,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1129.781048][T21043] (syz.4.13590,21043,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88805c83c178, block: 0 [ 1129.922198][T10446] ocfs2: Unmounting device (7,4) on (node local) [ 1130.236766][T21075] loop5: detected capacity change from 0 to 32768 [ 1130.343565][T21075] JBD2: Ignoring recovery information on journal [ 1130.440075][T21114] loop4: detected capacity change from 0 to 8192 [ 1130.503917][T21114] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1130.526435][T21114] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1130.572799][T21075] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1130.594074][T21109] loop3: detected capacity change from 0 to 8192 [ 1130.621190][T21114] REISERFS (device loop4): using ordered data mode [ 1130.663888][T21114] reiserfs: using flush barriers [ 1130.756761][T21114] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1130.839642][T21114] REISERFS (device loop4): checking transaction log (loop4) [ 1130.909856][T21114] REISERFS (device loop4): Using r5 hash to sort names [ 1130.957281][T21114] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1130.982059][T21131] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13605'. [ 1131.035609][T21131] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1131.037053][T21114] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1131.605278][T19502] ocfs2: Unmounting device (7,5) on (node local) [ 1131.650550][T21153] loop3: detected capacity change from 0 to 1024 [ 1131.794263][T21153] hfsplus: found bad thread record in catalog [ 1131.800417][T21153] hfsplus: catalog searching failed [ 1131.858068][T21163] netlink: 'syz.2.13614': attribute type 2 has an invalid length. [ 1131.957283][ T1002] hfsplus: b-tree write err: -5, ino 4 [ 1132.117814][T21173] netlink: 'syz.2.13617': attribute type 2 has an invalid length. [ 1132.376694][T21176] loop3: detected capacity change from 0 to 4096 [ 1132.403708][T21176] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1132.643796][T21176] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 1133.590333][T21224] loop3: detected capacity change from 0 to 2048 [ 1133.686074][T21233] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.710506][T21191] loop5: detected capacity change from 0 to 32768 [ 1133.792526][ T28] audit: type=1800 audit(1770823295.475:5329): pid=21224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13628" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1133.843120][T21191] JBD2: Ignoring recovery information on journal [ 1134.036342][T21191] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1134.063907][T21233] NILFS (loop3): writing node/leaf block does not appear in b-tree (ino=16) at key=0, level=1 [ 1134.095865][T21233] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1134.135003][T21233] Remounting filesystem read-only [ 1134.290981][ T5766] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1134.310706][ T5766] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1134.326651][T21253] loop4: detected capacity change from 0 to 256 [ 1134.333079][ T5766] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1134.349737][T21253] exfat: Deprecated parameter 'namecase' [ 1134.363913][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.380592][T21253] exfat: Deprecated parameter 'namecase' [ 1134.404245][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.418349][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.452254][ T5766] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1134.473594][T21253] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 1134.485641][ T5766] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1134.509658][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.547139][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.581700][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.604626][ T5766] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1134.622931][ T5766] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1134.630892][ T5766] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1134.640105][ T5766] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1134.678907][ T5766] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1134.864891][T21265] loop4: detected capacity change from 0 to 1024 [ 1134.903166][T21268] No buffer was provided with the request [ 1135.198965][T19502] ocfs2: Unmounting device (7,5) on (node local) [ 1135.447582][T21290] loop3: detected capacity change from 0 to 1024 [ 1135.564287][T21290] hfsplus: bad catalog entry type [ 1135.696022][ T1002] hfsplus: b-tree write err: -5, ino 4 [ 1136.209564][T21330] loop3: detected capacity change from 0 to 4096 [ 1136.308145][T21345] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1136.608114][T21354] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13655'. [ 1136.644073][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13655'. [ 1136.843427][T21364] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13657'. [ 1136.991910][T21373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1137.386747][T21391] tipc: Enabled bearer , priority 10 [ 1138.187396][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13674'. [ 1138.299856][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13675'. [ 1138.760742][T21462] loop5: detected capacity change from 0 to 64 [ 1139.298573][ T5840] IPVS: starting estimator thread 0... [ 1139.398424][T21502] IPVS: using max 17 ests per chain, 40800 per kthread [ 1139.465869][T21509] loop5: detected capacity change from 0 to 64 [ 1139.543837][ T786] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1139.756373][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.797148][ T786] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1139.824417][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.854761][ T786] usb 3-1: config 0 descriptor?? [ 1140.296997][ T786] sigmamicro 0003:1C4F:0059.002A: collection stack underflow [ 1140.321441][ T786] sigmamicro 0003:1C4F:0059.002A: item 0 1 0 12 parsing failed [ 1140.341303][ T786] sigmamicro: probe of 0003:1C4F:0059.002A failed with error -22 [ 1140.402460][T21557] syz.3.13705 (21557) used obsolete PPPIOCDETACH ioctl [ 1140.566551][ T786] usb 3-1: USB disconnect, device number 74 [ 1140.866446][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13711'. [ 1140.894291][T21586] loop3: detected capacity change from 0 to 8192 [ 1140.912907][T21586] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1140.991370][T21586] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1141.056417][T21586] REISERFS (device loop3): using ordered data mode [ 1141.105684][T21586] reiserfs: using flush barriers [ 1141.146051][T21586] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1141.223086][T21586] REISERFS (device loop3): checking transaction log (loop3) [ 1141.277212][T21607] loop4: detected capacity change from 0 to 4096 [ 1141.301708][T21586] REISERFS (device loop3): Using r5 hash to sort names [ 1141.345593][T21586] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1141.411465][T21617] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 1141.716964][T21633] loop4: detected capacity change from 0 to 64 [ 1141.829346][T21641] loop3: detected capacity change from 0 to 256 [ 1141.891710][T21641] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 1141.944188][T21641] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 1142.950479][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13741'. [ 1143.400395][T21721] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13750'. [ 1143.609271][T21730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13753'. [ 1143.643736][T21730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13753'. [ 1143.795494][T21740] loop4: detected capacity change from 0 to 64 [ 1144.663427][T21799] loop4: detected capacity change from 0 to 64 [ 1144.734669][T21799] hfs: request for non-existent node 1280 in B*Tree [ 1144.780642][T21799] hfs: request for non-existent node 1280 in B*Tree [ 1144.846365][ T1135] ------------[ cut here ]------------ [ 1144.852526][ T1135] kernel BUG at fs/hfs/inode.c:449! [ 1144.875543][ T1135] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1144.881726][ T1135] CPU: 0 PID: 1135 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1144.889309][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1144.899413][ T1135] Workqueue: writeback wb_workfn (flush-7:4) [ 1144.905461][ T1135] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1144.911059][ T1135] Code: c7 c1 00 93 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 93 30 97 e8 b0 0f 84 ff e9 62 fe ff ff e8 b6 e6 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1144.930719][ T1135] RSP: 0018:ffffc9000466f340 EFLAGS: 00010293 [ 1144.936827][ T1135] RAX: ffffffff825b2cea RBX: ffff88807d653c28 RCX: ffff888023f60000 [ 1144.944846][ T1135] RDX: 0000000000000000 RSI: ffffffff8d339760 RDI: 0000000000000000 [ 1144.952866][ T1135] RBP: ffffc9000466f4d0 R08: ffff888023f60000 R09: 0000000000000003 [ 1144.960867][ T1135] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1144.968859][ T1135] R13: 1ffff920008cde6c R14: ffff88807d653bd8 R15: 0000000000000000 [ 1144.976846][ T1135] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1144.985794][ T1135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1144.992401][ T1135] CR2: 00007fcc2d3e42f8 CR3: 0000000061e08000 CR4: 00000000003506f0 [ 1145.000400][ T1135] Call Trace: [ 1145.003705][ T1135] [ 1145.006657][ T1135] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1145.012064][ T1135] ? __rwlock_init+0x150/0x150 [ 1145.016861][ T1135] __writeback_single_inode+0x705/0xec0 [ 1145.022435][ T1135] writeback_sb_inodes+0x7cd/0xf50 [ 1145.027584][ T1135] ? queue_io+0x550/0x550 [ 1145.031952][ T1135] ? rcu_is_watching+0x15/0xb0 [ 1145.036752][ T1135] wb_writeback+0x46a/0xbf0 [ 1145.041327][ T1135] ? queue_io+0x351/0x550 [ 1145.045693][ T1135] ? percpu_ref_tryget+0x250/0x250 [ 1145.050833][ T1135] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1145.056844][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.062078][ T1135] wb_workfn+0x400/0xe60 [ 1145.066376][ T1135] ? inode_wait_for_writeback+0x230/0x230 [ 1145.072162][ T1135] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1145.078173][ T1135] ? read_lock_is_recursive+0x20/0x20 [ 1145.083579][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 1145.088801][ T1135] ? process_scheduled_works+0x96f/0x15d0 [ 1145.094585][ T1135] ? process_scheduled_works+0x96f/0x15d0 [ 1145.100333][ T1135] process_scheduled_works+0xa5d/0x15d0 [ 1145.105922][ T1135] ? assign_work+0x430/0x430 [ 1145.110543][ T1135] ? assign_work+0x3d0/0x430 [ 1145.115202][ T1135] worker_thread+0xa55/0xfc0 [ 1145.119839][ T1135] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1145.125772][ T1135] ? _raw_spin_unlock+0x40/0x40 [ 1145.130650][ T1135] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1145.136583][ T1135] kthread+0x2fa/0x390 [ 1145.140676][ T1135] ? pr_cont_work+0x560/0x560 [ 1145.145383][ T1135] ? kthread_blkcg+0xd0/0xd0 [ 1145.149991][ T1135] ret_from_fork+0x48/0x80 [ 1145.154430][ T1135] ? kthread_blkcg+0xd0/0xd0 [ 1145.159042][ T1135] ret_from_fork_asm+0x11/0x20 [ 1145.163852][ T1135] [ 1145.166891][ T1135] Modules linked in: [ 1145.185896][T21810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13781'. [ 1145.196331][T21810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13781'. [ 1145.208427][T21810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13781'. [ 1145.248445][T21817] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1145.248445][T21817] The task syz.2.13782 (21817) triggered the difference, watch for misbehavior. [ 1145.286476][ T1135] ---[ end trace 0000000000000000 ]--- [ 1145.292148][ T1135] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1145.297927][ T1135] Code: c7 c1 00 93 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 93 30 97 e8 b0 0f 84 ff e9 62 fe ff ff e8 b6 e6 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1145.319842][ T1135] RSP: 0018:ffffc9000466f340 EFLAGS: 00010293 [ 1145.327094][ T1135] RAX: ffffffff825b2cea RBX: ffff88807d653c28 RCX: ffff888023f60000 [ 1145.335508][ T1135] RDX: 0000000000000000 RSI: ffffffff8d339760 RDI: 0000000000000000 [ 1145.343605][ T1135] RBP: ffffc9000466f4d0 R08: ffff888023f60000 R09: 0000000000000003 [ 1145.353415][ T1135] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1145.362931][ T1135] R13: 1ffff920008cde6c R14: ffff88807d653bd8 R15: 0000000000000000 [ 1145.371510][ T1135] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1145.381732][ T1135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1145.388855][ T1135] CR2: 00007f7ef0de42f8 CR3: 000000005fb49000 CR4: 00000000003506f0 [ 1145.397177][ T1135] Kernel panic - not syncing: Fatal exception [ 1145.403891][ T1135] Kernel Offset: disabled [ 1145.408224][ T1135] Rebooting in 86400 seconds..