last executing test programs: 7.339117676s ago: executing program 3 (id=544): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x67, 0x2d, 0x32, 0x37, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000005c0)={{r0}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x6, {0x4, 0x4, 0x10, 0xb9, 0x5}}}, @devid}) 5.727846031s ago: executing program 1 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)={0x38, r2, 0x5, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x38}}, 0x4004054) 5.455766595s ago: executing program 1 (id=560): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x554e, &(0x7f0000008740)="$eJzs3M2LG/UbAPAnu91u3379LeLBWweKsAtNaLYv6K1qiy/YUqoeBEGzSRrSJpllk6ZrTz14FA/+J6LgyYvg3+BB8OZNPCjeBCXznWi3WOhLsrutnw9MnplvvvPM8w3LwjMTEsB/1kr2+6+VOB6HI2IxIo5FFPuVcitcSOGFiDgREQv3bJVy/O+BgxFxJCKOx6Hp6ZXyrc9PjU+e++Wt3775fvnA0S++/mFPFgzsCy9GRH8z7d/up5h3UrxRjjfG3SL2z47LmN7o3yyP8xRvtzeKDLcb03mNIp7ppPn55q3hJF7vNZqT2OleL8Y3B+mCw3Fnmqc44UZjqzhutTeK2B3mRezcSXVt30n/L+8MRylPq8z3cZE+RqNpTOPt7XZaz+bNIjYHo3I85c1b7e1JHJexvFw0816rqGPjST7p/e3t7uDWdjZubw27+SA7V6u/VPvxg2/XtvJWe9Q+W230W+fPZqud3mRaddRu9C908rzTa9eaeX8tW+00m9V6PVu92N7oNgZZvV47UztdPbdW7p3KXr/yXtZrZauT+Gp3cGvU7Q2z6/lWls5Yy9ZrZ15ey07Ws3cuX82uXrt06fLVdz+8+P6VVy6/+Vo5KZVVP1+tl2Vlq+un19er9dPV9fraA5d29zHXf8+F9tn6PymLfrj1w/xVHm368rzqAHiKzLH/j1hJOfX/wP3m1/9vXYuYf/8f+v+ZeKr630fr/60f5u0R+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4dPy19+Uaxs5KOj5bj/yuHniuPKxGxEBF//ovFOLgj52KZZ+kB85fuq+G7ShQZJtdYLrcjEXGh3P74/7w/BQAAAHh2fXX3xGepW08vK3tdELsp3bRZOPbRE+Y5XMZKRCyt/PzEdSULk5fnZ5Ss+Ps+ENszylbcwDo0o2TpltuBWWV7KIs7wqF7QiWFhV0tBwAA2BU7O4Hd7UIAAADYTZ/udQHsjUpMH2VOnwUX37z/54Hg4R1HAAAAwF5afrzTKrOuAwAAANh3iv7f7/8BAADAsy39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFzt3kKs0EMcB+N+WCopEYlyaeBTdwTE8gkuXhgN4CY6AV/ACnAF3HsGAoVOJJZhoOi2+l+9L2mGa4ccMgcXMJAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEP6Vu/WXz69+dw353jqJ89oAAAAgFsO9W7dvFim+rx9vmgfvWzrRUSUEXFr7l7Fk05mFRGvI6L+Q/v6qg9fI5qE82dM2+tZRLxrrx8vhv4WAAAA4PHab7arNFtPt+W9O8SY0qJN+fx9prwiIurl90xp5TnvVaaw5vc9iY+Z0poFrFmmsLTkNsmV9leav/tl1W72W1Gkorx6w6JbzTZ2AABgRFWnGHcWAgAAwJg+nG9v790L+qv+rXkRv7YyL1uB01S023tPOzUAAADgASru3QEAAABgcM38f6jz/+bO/wMAAID/Qjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCEd6t16v9mu+uYcT/3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GR/3lEgBMIgDPau70zm/oeVBk1NTapA+PgbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi/35zYAYhqI4emcm8+9bZf+LrUuqS6hyDuEnT8IDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbuR/xGOdM16NLclI8my8ez2TfDpqfDtq/Ppgrg/HvHAjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnZ37eY2jigMA/t2fTaviGiWHiFjwoBebbmtrb+JBCR78E4SQbmvs1h9tDrYUIRdvknMvokcRQYm3/A89t5BLvfWQQwXPlZmdSV7SoKslM5vs5wNv3neG6bzvm4WS776XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LH9/m7cyg69Udwsrt1/fGc56x/s6zOb61vzm7E1n8WNKpM+Gl5LTxpzyclM9ckAAAAwHVplfR8RDzsbi1nf7OX1f6e8J6v5f3hhFJf1/P66v+zz2r9ov//26JWdgXqjcbKHXlkZDs4+nUr78GY52V781zva+ZvPv3tp5R9I86O1l7c7+ftsfHfv3gfdPDxRRbYAwP9xpuyLoPx5KOv7dSYGwNRoJ4V3Wf+3evXmBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCF7bV4rowbETHf3o0zDx7fWT6o31zfms9advvFu3fX02dm1zoRcWVlODgbMxXOZrLdvHX72tJwOLhRffB6RNQ1+nvF9K99MsbNEYeUxuma3vyUBc3iw56UfI5GUON/SgAAHEudomV1/cPOxmJ2rTEb8eTHvfX/m0kcY9T/WXv06cX76Vhp/d+vbIaTb2H1+pcLN2/dfnvl+tLVwdXB5++c67/bP3/pwoVLC/l3JaNj3WkCAABwhHWLltb/zdmn1/9PJXH8Q/0/E7v1/1ff979Jx2qp/w+0u+hXdyYAAADT7aXTf/3ZOOB6o9uNr5dWV2/0R8ed83OjYw2p/mcnipbW/63ZurMCAAAAqrC91tiz/n85iWPM/f/P//TqL+kzWxFxslj/P7P8xfByddOZaM/wG8LRHvOf1z1HAAAAqvVk30aGk0VL1/87+f7/5s6dzYh4641RXPwZwLHq/9aH3/6cjpXu/z9/yPOcdM250fvI+7mI9lzdGQEAAHCczeStl9f/f3Q2Fj/79dTHXfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKr2dwAAAP//prM7zw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000140)='./file1\x00') fdatasync(r0) 5.227804047s ago: executing program 3 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 4.810955509s ago: executing program 3 (id=567): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2}}, 0x20) 1.095115853s ago: executing program 2 (id=584): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), 0x4) 986.446109ms ago: executing program 2 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x101}, {0x8, 0x0, 0x800}, {0xfe51, 0x0, 0x3ff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xdf}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}]}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x0, 0x0, @random="de9c4f44badc2ba69a3495d56850e17e680c44049b15acf3e5"}, {0x0, 0x0, @default_ibss_ssid}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) 911.843723ms ago: executing program 0 (id=586): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 871.919805ms ago: executing program 2 (id=587): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x245, &(0x7f0000001200)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 693.849244ms ago: executing program 2 (id=588): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000600)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$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") 687.910695ms ago: executing program 0 (id=589): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "00000000000000000000000000061000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 553.399912ms ago: executing program 0 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003100)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000400)=0x2) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xffe) 271.953337ms ago: executing program 0 (id=591): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x3, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 0s ago: executing program 1 (id=592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001ac0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x28, r2, 0x205, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 62.860423][ T5750] cgroup: Unknown subsys name 'net' [ 62.990619][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.332498][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.717968][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.728447][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.736080][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.746786][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.754610][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.756164][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.762953][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.770990][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.777044][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.787024][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.792823][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.797285][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.804684][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.813148][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.825701][ T5766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.825745][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.844930][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.844935][ T5766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.860584][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.868529][ T5766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.878491][ T5766] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.878896][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.893647][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.901219][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.289911][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 66.349453][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 66.376451][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 66.489217][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.497145][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.505032][ T5762] bridge_slave_0: entered allmulticast mode [ 66.511772][ T5762] bridge_slave_0: entered promiscuous mode [ 66.537688][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.544971][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.552209][ T5762] bridge_slave_1: entered allmulticast mode [ 66.559318][ T5762] bridge_slave_1: entered promiscuous mode [ 66.567094][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 66.591459][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.598606][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.606187][ T5764] bridge_slave_0: entered allmulticast mode [ 66.612905][ T5764] bridge_slave_0: entered promiscuous mode [ 66.652678][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.660042][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.667897][ T5764] bridge_slave_1: entered allmulticast mode [ 66.675495][ T5764] bridge_slave_1: entered promiscuous mode [ 66.692262][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.716789][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.723964][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.731710][ T5769] bridge_slave_0: entered allmulticast mode [ 66.740542][ T5769] bridge_slave_0: entered promiscuous mode [ 66.749536][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.788466][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.795880][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.803050][ T5769] bridge_slave_1: entered allmulticast mode [ 66.809916][ T5769] bridge_slave_1: entered promiscuous mode [ 66.841354][ T5762] team0: Port device team_slave_0 added [ 66.849791][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.868307][ T5762] team0: Port device team_slave_1 added [ 66.882177][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.893662][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.921960][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.929056][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.955181][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.988338][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.997978][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.005212][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.031179][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.087605][ T5769] team0: Port device team_slave_0 added [ 67.093704][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.101460][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.109016][ T5768] bridge_slave_0: entered allmulticast mode [ 67.115817][ T5768] bridge_slave_0: entered promiscuous mode [ 67.123204][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.130413][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.137694][ T5768] bridge_slave_1: entered allmulticast mode [ 67.144815][ T5768] bridge_slave_1: entered promiscuous mode [ 67.153816][ T5764] team0: Port device team_slave_0 added [ 67.161807][ T5769] team0: Port device team_slave_1 added [ 67.187065][ T5764] team0: Port device team_slave_1 added [ 67.213071][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.259523][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.276745][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.283730][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.309682][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.333198][ T5762] hsr_slave_0: entered promiscuous mode [ 67.339843][ T5762] hsr_slave_1: entered promiscuous mode [ 67.360371][ T5768] team0: Port device team_slave_0 added [ 67.367270][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.375774][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.404285][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.417590][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.424843][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.450924][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.472297][ T5768] team0: Port device team_slave_1 added [ 67.486863][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.493832][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.520198][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.585729][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.592710][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.619137][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.639990][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.647020][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.673113][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.701419][ T5764] hsr_slave_0: entered promiscuous mode [ 67.708016][ T5764] hsr_slave_1: entered promiscuous mode [ 67.714130][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.722009][ T5764] Cannot create hsr debugfs directory [ 67.760866][ T5769] hsr_slave_0: entered promiscuous mode [ 67.767676][ T5769] hsr_slave_1: entered promiscuous mode [ 67.773679][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.781586][ T5769] Cannot create hsr debugfs directory [ 67.835112][ T5775] Bluetooth: hci0: command tx timeout [ 67.862885][ T5768] hsr_slave_0: entered promiscuous mode [ 67.869147][ T5768] hsr_slave_1: entered promiscuous mode [ 67.875645][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.883218][ T5768] Cannot create hsr debugfs directory [ 67.914558][ T5775] Bluetooth: hci2: command tx timeout [ 67.994336][ T5775] Bluetooth: hci1: command tx timeout [ 68.000193][ T5775] Bluetooth: hci3: command tx timeout [ 68.169930][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.187465][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.198070][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.212752][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.286801][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.301137][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.311089][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.324089][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.412980][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.423929][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.442584][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.465480][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.556757][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.566773][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.577149][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.588795][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.598712][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.639890][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.668069][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.682605][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.689947][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.741784][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.748968][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.769041][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.819187][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.826505][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.845006][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.862772][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.869980][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.907033][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.990044][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.009347][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.039235][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.056214][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.063373][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.095477][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.102640][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.112886][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.120073][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.148740][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.156146][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.312907][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.407882][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.423830][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.516892][ T5762] veth0_vlan: entered promiscuous mode [ 69.544063][ T5762] veth1_vlan: entered promiscuous mode [ 69.603353][ T5764] veth0_vlan: entered promiscuous mode [ 69.629584][ T5764] veth1_vlan: entered promiscuous mode [ 69.668884][ T5762] veth0_macvtap: entered promiscuous mode [ 69.688413][ T5762] veth1_macvtap: entered promiscuous mode [ 69.726755][ T5764] veth0_macvtap: entered promiscuous mode [ 69.745507][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.767153][ T5764] veth1_macvtap: entered promiscuous mode [ 69.783794][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.809339][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.828069][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.838395][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847524][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.856692][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.873109][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.886035][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.899060][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.912795][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.920810][ T5766] Bluetooth: hci0: command tx timeout [ 69.955078][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.968712][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.980328][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.991957][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.002003][ T5766] Bluetooth: hci2: command tx timeout [ 70.003206][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.018374][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.027357][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.074863][ T5766] Bluetooth: hci3: command tx timeout [ 70.074960][ T5775] Bluetooth: hci1: command tx timeout [ 70.091956][ T5769] veth0_vlan: entered promiscuous mode [ 70.130956][ T5769] veth1_vlan: entered promiscuous mode [ 70.217752][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.230037][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.253082][ T5768] veth0_vlan: entered promiscuous mode [ 70.271028][ T5769] veth0_macvtap: entered promiscuous mode [ 70.296530][ T5769] veth1_macvtap: entered promiscuous mode [ 70.310162][ T5768] veth1_vlan: entered promiscuous mode [ 70.333042][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.350690][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.376815][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.386466][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.418256][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.432204][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.442366][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.453005][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.468280][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.482171][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.493989][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.500013][ T5768] veth0_macvtap: entered promiscuous mode [ 70.518694][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.530597][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.540578][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.551629][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.569111][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.585500][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.594665][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.603352][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.612367][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.628456][ T5768] veth1_macvtap: entered promiscuous mode [ 70.739386][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.785692][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.802438][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.813363][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.826121][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.837492][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.849745][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.893275][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.915732][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.933931][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.945114][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.960786][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.971353][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.986427][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.042039][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.063357][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.083331][ T5832] syz.0.7[5832]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.091503][ T5834] loop2: detected capacity change from 0 to 128 [ 71.092400][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.117344][ T5834] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.126889][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.151363][ T5834] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.221697][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.264883][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.298878][ T991] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.407402][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.432824][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.472502][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.483464][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.546579][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.576575][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.608034][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.624942][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.821675][ T5844] Zero length message leads to an empty skb [ 71.973218][ T5832] loop0: detected capacity change from 0 to 32768 [ 71.995405][ T5775] Bluetooth: hci0: command tx timeout [ 72.060813][ T5832] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 72.074573][ T5775] Bluetooth: hci2: command tx timeout [ 72.155942][ T5775] Bluetooth: hci3: command tx timeout [ 72.161456][ T5775] Bluetooth: hci1: command tx timeout [ 72.218871][ T5832] XFS (loop0): Ending clean mount [ 72.417837][ T5764] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 72.668703][ T5875] tap0: tun_chr_ioctl cmd 1074025677 [ 72.679502][ T5875] tap0: linktype set to 768 [ 72.692010][ T5876] loop3: detected capacity change from 0 to 512 [ 72.724450][ T5830] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 72.749238][ T5876] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.19: inode has both inline data and extents flags [ 72.767934][ T5876] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 72.785649][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.972802][ T5830] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.021499][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 73.045095][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.081652][ T5830] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 73.092841][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.099690][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.137300][ T5830] usb 3-1: config 0 descriptor?? [ 73.156532][ T5868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.293657][ T5891] loop0: detected capacity change from 0 to 512 [ 73.301279][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.332318][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.339286][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.346179][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.352991][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.359911][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.366761][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.373575][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.380454][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.387330][ T5892] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.432590][ T5894] loop3: detected capacity change from 0 to 256 [ 73.468315][ T5894] ======================================================= [ 73.468315][ T5894] WARNING: The mand mount option has been deprecated and [ 73.468315][ T5894] and is ignored by this kernel. Remove the mand [ 73.468315][ T5894] option from the mount to silence this warning. [ 73.468315][ T5894] ======================================================= [ 73.643314][ T5830] hid (null): unknown global tag 0xe [ 73.659597][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.690616][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.698534][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.715531][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.723455][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.739968][ T5830] itetech 0003:048D:8595.0001: unknown main item tag 0x0 [ 73.761820][ T5830] itetech 0003:048D:8595.0001: unknown global tag 0xe [ 73.769545][ T5830] itetech 0003:048D:8595.0001: item 0 0 1 14 parsing failed [ 73.785252][ T5830] itetech: probe of 0003:048D:8595.0001 failed with error -22 [ 73.921604][ T9] usb 3-1: USB disconnect, device number 2 [ 74.091333][ T5775] Bluetooth: hci0: command tx timeout [ 74.159405][ T5775] Bluetooth: hci2: command tx timeout [ 74.234937][ T5766] Bluetooth: hci1: command tx timeout [ 74.240817][ T5775] Bluetooth: hci3: command tx timeout [ 74.468660][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 74.769641][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.103474][ T5927] Bluetooth: MGMT ver 1.22 [ 75.191438][ T5931] loop1: detected capacity change from 0 to 128 [ 75.200978][ T5929] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 75.210900][ T5929] pim6reg1: linktype set to 823 [ 75.436810][ T5931] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.479215][ T5931] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.491224][ T5940] loop0: detected capacity change from 0 to 2048 [ 75.518174][ T5942] netlink: 87 bytes leftover after parsing attributes in process `syz.2.45'. [ 75.536133][ T5940] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.546462][ T5931] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.578276][ T5755] udevd[5755]: incorrect nilfs2 checksum on /dev/loop0 [ 75.692491][ T5943] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.780652][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.428885][ T5959] kvm: kvm [5957]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 76.510784][ T5966] raw_sendmsg: syz.2.55 forgot to set AF_INET. Fix it! [ 76.665423][ T5949] loop1: detected capacity change from 0 to 32768 [ 77.349197][ T5979] loop0: detected capacity change from 0 to 64 [ 77.402998][ T5979] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 77.546534][ T5970] loop3: detected capacity change from 0 to 32768 [ 77.634328][ T5970] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 77.809368][ T5970] XFS (loop3): Ending clean mount [ 77.910253][ T5803] XFS (loop3): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 77.957634][ T5803] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 77.984937][ T5803] XFS (loop3): Unmount and run xfs_repair [ 77.990462][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 78.007061][ T5803] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 78.027590][ T5803] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 78.040885][ T5803] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 78.049941][ T5803] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 78.059128][ T5803] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 78.068478][ T5803] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 78.081717][ T5803] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 78.093624][ T5803] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 78.107421][ T5803] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 78.122645][ T5970] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 78.140955][ T5970] XFS (loop3): Failed to initialize disk quotas. [ 78.274073][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 78.344620][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.536267][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.562011][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.587991][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.607627][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.627886][ T9] usb 3-1: Product: syz [ 78.632115][ T9] usb 3-1: Manufacturer: syz [ 78.644618][ T9] usb 3-1: SerialNumber: syz [ 78.652645][ T9] usb 3-1: config 0 descriptor?? [ 78.666046][ T9] usb 3-1: selecting invalid altsetting 0 [ 78.703112][ T6019] process 'syz.3.71' launched './file1' with NULL argv: empty string added [ 78.893269][ T6024] loop3: detected capacity change from 0 to 256 [ 78.942956][ T6024] exfat: Deprecated parameter 'namecase' [ 78.969118][ T9] usb 3-1: USB disconnect, device number 3 [ 79.032716][ T6024] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 79.309893][ T6030] loop3: detected capacity change from 0 to 1024 [ 79.365917][ T6030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 79.393923][ T6030] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.417175][ T6030] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #32: comm syz.3.80: iget: special inode unallocated [ 79.447020][ T6030] EXT4-fs (loop3): no journal found [ 79.464985][ T6020] loop1: detected capacity change from 0 to 32768 [ 79.483846][ T6030] EXT4-fs (loop3): can't get journal size [ 79.503826][ T6030] EXT4-fs (loop3): filesystem is read-only [ 79.512453][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.565265][ T6020] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 79.626612][ T6030] EXT4-fs (loop3): shut down requested (1) [ 79.758962][ T6020] XFS (loop1): Ending clean mount [ 79.782658][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.801476][ T6020] XFS (loop1): Quotacheck needed: Please wait. [ 79.826817][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 79.938209][ T6020] XFS (loop1): Quotacheck: Done. [ 80.091270][ T6050] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 80.119642][ T28] audit: type=1800 audit(1777039034.099:2): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="bus" dev="loop1" ino=6155 res=0 errno=0 [ 80.179087][ T28] audit: type=1800 audit(1777039034.129:3): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 80.186788][ T6050] (null): rxe_set_mtu: Set mtu to 256 [ 80.224317][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.238703][ T6050] lo speed is unknown, defaulting to 1000 [ 80.252082][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.275957][ T6050] lo speed is unknown, defaulting to 1000 [ 80.286060][ T6050] lo speed is unknown, defaulting to 1000 [ 80.431989][ T9] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.474827][ T9] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.508259][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 80.538118][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 80.568846][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.596132][ T9] usb 4-1: config 0 descriptor?? [ 80.679736][ T27] lo speed is unknown, defaulting to 1000 [ 80.688552][ T6050] infiniband sz1: set down [ 80.696280][ T6050] infiniband sz1: added lo [ 80.753584][ T6057] loop1: detected capacity change from 0 to 2048 [ 80.824019][ T6059] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.897587][ T6050] RDS/IB: sz1: added [ 80.932949][ T6050] smc: adding ib device sz1 with port count 1 [ 80.965292][ T6050] smc: ib device sz1 port 1 has pnetid [ 80.976810][ T5803] lo speed is unknown, defaulting to 1000 [ 80.985266][ T6050] lo speed is unknown, defaulting to 1000 [ 81.037430][ T9] wacom 0003:056A:0144.0002: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 81.287445][ T5803] usb 4-1: USB disconnect, device number 2 [ 81.360165][ T6064] loop1: detected capacity change from 0 to 256 [ 81.416556][ T6050] lo speed is unknown, defaulting to 1000 [ 81.419015][ T6064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 81.780503][ T6050] lo speed is unknown, defaulting to 1000 [ 81.850087][ T786] cfg80211: failed to load regulatory.db [ 82.225984][ T6050] lo speed is unknown, defaulting to 1000 [ 82.455930][ T6082] netlink: 11 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.478969][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.488573][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.975006][ T6077] loop0: detected capacity change from 0 to 40427 [ 83.006141][ T6077] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 83.043094][ T6077] F2FS-fs (loop0): heap/no_heap options were deprecated [ 83.068248][ T6077] F2FS-fs (loop0): invalid crc value [ 83.088239][ T6077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.254008][ T6077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.439496][ T6077] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xf6b/0x1360 [ 83.474279][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.482421][ T6077] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 83.492205][ T6077] overlayfs: upper fs does not support tmpfile. [ 83.661614][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.673374][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.696635][ T6101] loop1: detected capacity change from 0 to 32768 [ 83.697858][ T9] usb 4-1: config 0 descriptor?? [ 83.717241][ T9] cp210x 4-1:0.0: cp210x converter detected [ 83.795283][ T28] audit: type=1800 audit(1777039037.779:4): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 84.136894][ T9] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 84.189386][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 84.206844][ T991] read_mapping_page failed! [ 84.221876][ T991] ERROR: (device loop1): txCommit: [ 84.221876][ T991] [ 84.249857][ T991] ERROR: (device loop1): remounting filesystem as read-only [ 84.270296][ T991] jfs_write_inode: jfs_commit_inode failed! [ 84.446484][ T786] usb 4-1: USB disconnect, device number 3 [ 84.467004][ T786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.503520][ T786] cp210x 4-1:0.0: device disconnected [ 84.539248][ T6121] loop2: detected capacity change from 0 to 256 [ 84.539336][ T6123] loop1: detected capacity change from 0 to 8 [ 84.608593][ T6123] SQUASHFS error: Unable to read directory block [629:fe] [ 84.784395][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.989316][ T6136] loop1: detected capacity change from 0 to 256 [ 84.995882][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 85.009101][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 85.019976][ T6136] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 85.050462][ T9] usb 1-1: config 0 has no interface number 0 [ 85.129454][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 85.149271][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.174267][ T9] usb 1-1: Product: syz [ 85.181798][ T9] usb 1-1: Manufacturer: syz [ 85.195298][ T9] usb 1-1: SerialNumber: syz [ 85.210955][ T9] usb 1-1: config 0 descriptor?? [ 85.228530][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 85.263161][ T6144] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 85.263161][ T6144] The task syz.3.124 (6144) triggered the difference, watch for misbehavior. [ 85.444079][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 85.465178][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 85.604366][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.734259][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.787027][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.799448][ T23] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 85.809621][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.817875][ T23] usb 2-1: Product: syz [ 85.822416][ T23] usb 2-1: Manufacturer: syz [ 85.827067][ T23] usb 2-1: SerialNumber: syz [ 85.869629][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 85.877635][ T9] usb 1-1: USB disconnect, device number 2 [ 85.893130][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 85.914042][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 85.928027][ T9] quatech2 1-1:0.51: device disconnected [ 85.937740][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 85.956175][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.968483][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.977634][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.989028][ T27] usb 3-1: config 0 descriptor?? [ 86.091725][ T23] usb 2-1: BAAD HEADSET c_chmask mismatch [ 86.152045][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 86.174679][ T23] usb 2-1: USB disconnect, device number 2 [ 86.267599][ T27] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.282595][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.695429][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 86.720445][ T23] usb 3-1: USB disconnect, device number 4 [ 87.251249][ T6189] loop3: detected capacity change from 0 to 512 [ 87.283766][ T6189] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.303805][ T6189] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.327176][ T6189] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.147: bg 0: block 104: invalid block bitmap [ 87.387998][ T6189] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 87.428039][ T6189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.147: invalid indirect mapped block 1 (level 1) [ 87.467103][ T6189] EXT4-fs (loop3): 1 truncate cleaned up [ 87.484465][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.603743][ T28] audit: type=1800 audit(1777039041.579:5): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 87.720302][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.781186][ T6183] loop1: detected capacity change from 0 to 32768 [ 88.520319][ T6222] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 88.537086][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 88.550023][ T6226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.644317][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.824962][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 88.838279][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 88.852013][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.862605][ T9] usb 4-1: Product: syz [ 88.872101][ T9] usb 4-1: Manufacturer: syz [ 88.884427][ T5803] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.892077][ T9] usb 4-1: SerialNumber: syz [ 88.913087][ T9] usb 4-1: config 0 descriptor?? [ 89.086479][ T5803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.107202][ T5803] usb 1-1: config 0 has no interface number 0 [ 89.113400][ T5803] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.140456][ T5803] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.161082][ T5803] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.194333][ T5803] usb 1-1: config 0 interface 1 has no altsetting 0 [ 89.206060][ T6235] loop2: detected capacity change from 0 to 32768 [ 89.212786][ T5803] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 89.225546][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.265188][ T5803] usb 1-1: config 0 descriptor?? [ 89.270094][ T6235] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.364383][ T6235] XFS (loop2): Ending clean mount [ 89.377040][ T9] airspy 4-1:0.0: Board ID: 00 [ 89.402420][ T9] airspy 4-1:0.0: Firmware version: [ 89.442777][ T6235] XFS (loop2): User initiated shutdown received. [ 89.449785][ T6235] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 89.465648][ T6235] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 89.527167][ T5762] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.783293][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 89.806599][ T9] airspy 4-1:0.0: Registered as swradio24 [ 89.817938][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 89.838011][ T9] usb 4-1: USB disconnect, device number 4 [ 89.924451][ T5803] uclogic 0003:145F:0212.0003: pen parameters not found [ 89.949340][ T5803] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 89.981804][ T5803] usb 1-1: USB disconnect, device number 3 [ 90.573883][ T6275] loop1: detected capacity change from 0 to 40427 [ 90.595506][ T6275] F2FS-fs (loop1): invalid crc value [ 90.609093][ T6275] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.708260][ T6275] F2FS-fs (loop1): Start checkpoint disabled! [ 90.782730][ T6275] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 91.210045][ T49] kworker/u4:3: attempt to access beyond end of device [ 91.210045][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.216119][ T6293] loop2: detected capacity change from 0 to 2048 [ 91.245659][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 91.276074][ T6293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.276083][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 91.405539][ T6296] netlink: 'syz.3.191': attribute type 32 has an invalid length. [ 91.413332][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 91.444649][ T6296] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 91.545333][ T6298] warning: `syz.0.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.708295][ T6302] capability: warning: `syz.0.195' uses deprecated v2 capabilities in a way that may be insecure [ 91.862799][ T6308] loop0: detected capacity change from 0 to 512 [ 91.890677][ T6309] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 91.909276][ T6308] EXT4-fs (loop0): 1 truncate cleaned up [ 91.932754][ T6308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.978986][ T6313] loop1: detected capacity change from 0 to 256 [ 92.009583][ T6313] FAT-fs (loop1): Directory bread(block 64) failed [ 92.018579][ T6313] FAT-fs (loop1): Directory bread(block 65) failed [ 92.034357][ T6313] FAT-fs (loop1): Directory bread(block 66) failed [ 92.061308][ T6313] FAT-fs (loop1): Directory bread(block 67) failed [ 92.074938][ T28] audit: type=1800 audit(1777039046.059:6): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 92.094605][ T6308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.196: invalid indirect mapped block 4294901760 (level 0) [ 92.120585][ T6313] FAT-fs (loop1): Directory bread(block 68) failed [ 92.145292][ T6313] FAT-fs (loop1): Directory bread(block 69) failed [ 92.178143][ T6308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.196: invalid indirect mapped block 4294967295 (level 1) [ 92.201296][ T6313] FAT-fs (loop1): Directory bread(block 70) failed [ 92.224790][ T6313] FAT-fs (loop1): Directory bread(block 71) failed [ 92.231918][ T6308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.196: invalid indirect mapped block 65535 (level 2) [ 92.261196][ T6313] FAT-fs (loop1): Directory bread(block 72) failed [ 92.269268][ T6313] FAT-fs (loop1): Directory bread(block 73) failed [ 92.310585][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.440067][ T6319] loop0: detected capacity change from 0 to 512 [ 92.455657][ T6319] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.752988][ T6317] loop2: detected capacity change from 0 to 32768 [ 92.805263][ T6317] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 92.880703][ T6326] loop0: detected capacity change from 0 to 8192 [ 92.884000][ T6317] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.972826][ T6326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.986524][ T6326] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 92.995959][ T6326] REISERFS (device loop0): using ordered data mode [ 93.002611][ T6326] reiserfs: using flush barriers [ 93.013897][ T6326] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.030952][ T6326] REISERFS (device loop0): checking transaction log (loop0) [ 93.233908][ T6326] REISERFS (device loop0): Using r5 hash to sort names [ 93.245974][ T6332] overlayfs: upper fs does not support tmpfile. [ 93.259290][ T6326] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 93.286484][ T6332] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.295257][ T6332] overlayfs: failed to set xattr on upper [ 93.301481][ T6332] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.308868][ T6332] overlayfs: ...falling back to index=off. [ 93.314822][ T6332] overlayfs: ...falling back to uuid=null. [ 93.320747][ T6332] overlayfs: upper fs missing required features. [ 93.619226][ T6340] loop1: detected capacity change from 0 to 512 [ 93.628624][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 94.125832][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'. [ 94.224378][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.429058][ T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 94.445471][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.469477][ T23] usb 1-1: Product: syz [ 94.476450][ T23] usb 1-1: Manufacturer: syz [ 94.481157][ T23] usb 1-1: SerialNumber: syz [ 94.490768][ T23] usb 1-1: config 0 descriptor?? [ 94.830010][ T6373] loop3: detected capacity change from 0 to 1024 [ 94.863184][ T6373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 94.883893][ T6373] System zones: 0-1, 3-36 [ 94.892089][ T6373] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.222: bad orphan inode 134217728 [ 94.908238][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.012522][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.330271][ T23] usb 1-1: Firmware version (0.0) predates our first public release. [ 95.350904][ T23] usb 1-1: Please update to version 0.2 or newer [ 95.451585][ T23] usb 1-1: USB disconnect, device number 4 [ 95.698444][ T6389] loop3: detected capacity change from 0 to 32768 [ 95.769936][ T6389] JBD2: Ignoring recovery information on journal [ 95.866202][ T6389] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.127801][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 96.294555][ T5803] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.504340][ T5803] usb 1-1: Using ep0 maxpacket: 32 [ 96.523895][ T5803] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 96.543282][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.570864][ T5803] usb 1-1: Product: syz [ 96.579860][ T5803] usb 1-1: Manufacturer: syz [ 96.590149][ T5803] usb 1-1: SerialNumber: syz [ 96.609319][ T5803] usb 1-1: config 0 descriptor?? [ 96.754266][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.815776][ T6414] loop1: detected capacity change from 0 to 32768 [ 96.867855][ T6414] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 96.916352][ T6414] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.951329][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.004809][ T9] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 97.034590][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.053278][ T5803] airspy 1-1:0.0: Board ID: 00 [ 97.062269][ T5803] airspy 1-1:0.0: Firmware version: [ 97.074229][ T9] usb 4-1: Product: syz [ 97.078474][ T9] usb 4-1: Manufacturer: syz [ 97.094102][ T9] usb 4-1: SerialNumber: syz [ 97.105942][ T6414] overlayfs: upper fs does not support tmpfile. [ 97.127135][ T6414] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.144545][ T6414] overlayfs: failed to set xattr on upper [ 97.154331][ T6414] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.171545][ T6414] overlayfs: ...falling back to index=off. [ 97.181679][ T6414] overlayfs: ...falling back to uuid=null. [ 97.196456][ T6414] overlayfs: upper fs missing required features. [ 97.283410][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 97.360157][ T9] usb 4-1: BAAD HEADSET c_chmask mismatch [ 97.412963][ T9] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 97.430335][ T9] usb 4-1: USB disconnect, device number 5 [ 97.447219][ T5803] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 97.479101][ T5803] airspy 1-1:0.0: Registered as swradio24 [ 97.489137][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.514514][ T5803] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 97.538191][ T5803] usb 1-1: USB disconnect, device number 5 [ 97.683710][ T6424] loop1: detected capacity change from 0 to 1024 [ 98.200782][ T6432] loop0: detected capacity change from 0 to 1024 [ 98.229904][ T6432] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 98.274630][ T6432] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.316738][ T6432] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #32: comm syz.0.243: iget: special inode unallocated [ 98.366967][ T6432] EXT4-fs (loop0): no journal found [ 98.372234][ T6432] EXT4-fs (loop0): can't get journal size [ 98.399000][ T6432] EXT4-fs (loop0): filesystem is read-only [ 98.456377][ T6432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.512257][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 98.566478][ T6432] EXT4-fs (loop0): shut down requested (1) [ 98.682660][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.974329][ T1527] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.169206][ T6453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.179991][ T1527] usb 4-1: Using ep0 maxpacket: 8 [ 99.207558][ T1527] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.222934][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.245940][ T1527] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 99.284319][ T1527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.292373][ T1527] usb 4-1: Product: syz [ 99.305208][ T1527] usb 4-1: Manufacturer: syz [ 99.330167][ T1527] usb 4-1: SerialNumber: syz [ 99.355467][ T1527] usb 4-1: config 0 descriptor?? [ 99.502887][ T1527] msi2500 4-1:0.0: Registered as swradio24 [ 99.525768][ T1527] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 99.600103][ T6462] loop2: detected capacity change from 0 to 4096 [ 99.661060][ T6462] NILFS (loop2): invalid segment: Checksum error in segment payload [ 99.711552][ T23] usb 4-1: USB disconnect, device number 6 [ 99.715625][ T6462] NILFS (loop2): trying rollback from an earlier position [ 99.813314][ T6462] NILFS (loop2): recovery complete [ 99.841743][ T6468] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.553204][ T6485] loop1: detected capacity change from 0 to 512 [ 100.588835][ T6485] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.652335][ T6485] EXT4-fs (loop1): 1 truncate cleaned up [ 100.713807][ T6485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.802913][ T28] audit: type=1800 audit(1777039054.779:7): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 100.984300][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.047884][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.192413][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 101.214792][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 101.229137][ T6501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.272'. [ 101.242697][ T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 101.265950][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.279192][ T9] usb 4-1: Product: syz [ 101.283414][ T9] usb 4-1: Manufacturer: syz [ 101.288331][ T9] usb 4-1: SerialNumber: syz [ 101.303814][ T9] usb 4-1: config 0 descriptor?? [ 101.337248][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.347142][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.586143][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.613293][ T6492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.644024][ T6515] capability: warning: `syz.0.277' uses 32-bit capabilities (legacy support in use) [ 101.668880][ T6515] program syz.0.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.802337][ T6521] loop2: detected capacity change from 0 to 8 [ 102.034836][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 102.133182][ T6529] netlink: 188 bytes leftover after parsing attributes in process `syz.2.284'. [ 102.247858][ T9] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 102.289615][ T9] usb 4-1: USB disconnect, device number 7 [ 102.325520][ T6537] vcan0: entered allmulticast mode [ 102.332523][ T6535] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.333007][ T6537] vcan0: left allmulticast mode [ 102.486331][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 102.501299][ T6542] loop0: detected capacity change from 0 to 128 [ 102.526542][ T6542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.542589][ T6542] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.603872][ T6542] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 102.651065][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.754656][ T5752] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 102.946404][ T5752] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.970062][ T5752] usb 2-1: config 0 has no interface number 0 [ 102.996835][ T5752] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 103.032634][ T5752] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 103.049721][ T5752] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.060788][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.080054][ T5752] usb 2-1: config 0 descriptor?? [ 103.087114][ T6543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.117261][ T5752] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.350813][ T5752] usb 2-1: USB disconnect, device number 3 [ 103.600075][ T6559] loop2: detected capacity change from 0 to 32768 [ 103.632402][ T6559] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.297 (6559) [ 103.681423][ T6563] loop3: detected capacity change from 0 to 40427 [ 103.684035][ T6561] loop0: detected capacity change from 0 to 32768 [ 103.713873][ T6561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.298 (6561) [ 103.728641][ T6559] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.741133][ T6559] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.751883][ T6563] F2FS-fs (loop3): invalid crc value [ 103.772484][ T6561] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.783066][ T6563] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.790208][ T6559] BTRFS info (device loop2): enabling disk space caching [ 103.804735][ T6559] BTRFS info (device loop2): force clearing of disk cache [ 103.824996][ T6561] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.833696][ T6561] BTRFS info (device loop0): using free space tree [ 103.854570][ T6559] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.882466][ T6559] BTRFS info (device loop2): use zstd compression, level 3 [ 103.913976][ T6559] BTRFS info (device loop2): disk space caching is enabled [ 103.971953][ T6563] F2FS-fs (loop3): Start checkpoint disabled! [ 104.043444][ T6561] BTRFS info (device loop0): enabling ssd optimizations [ 104.052627][ T6563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 104.054400][ T6561] BTRFS info (device loop0): auto enabling async discard [ 104.113414][ T6559] BTRFS info (device loop2): enabling ssd optimizations [ 104.142712][ T6559] BTRFS info (device loop2): auto enabling async discard [ 104.187918][ T6559] BTRFS info (device loop2): rebuilding free space tree [ 104.354299][ T5752] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.383908][ T6559] BTRFS info (device loop2): disabling free space tree [ 104.405904][ T6559] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.421829][ T6559] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.432711][ T59] kworker/u4:4: attempt to access beyond end of device [ 104.432711][ T59] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.457098][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 104.459691][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.556195][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 104.563261][ T5752] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.616671][ T5752] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 104.626951][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.670207][ T5752] usb 2-1: Product: syz [ 104.680333][ T5752] usb 2-1: Manufacturer: syz [ 104.697752][ T5752] usb 2-1: SerialNumber: syz [ 104.761582][ T5752] usb 2-1: config 0 descriptor?? [ 104.811689][ T5762] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.918219][ T5752] msi2500 2-1:0.0: Registered as swradio24 [ 104.924095][ T5752] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 105.022822][ T5752] usb 2-1: USB disconnect, device number 4 [ 105.416372][ T5775] Bluetooth: hci2: hcon ffff8880300e6000 sent 0 < count 137 [ 106.146058][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.223062][ T6635] netlink: 884 bytes leftover after parsing attributes in process `syz.0.313'. [ 106.323749][ T6637] loop2: detected capacity change from 0 to 128 [ 106.356572][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 106.363465][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.392249][ T27] usb 2-1: config 179 has no interface number 0 [ 106.412377][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.441828][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.466019][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.480986][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 106.494751][ T27] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.508437][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 106.517914][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.536004][ T6627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.748678][ T6639] loop0: detected capacity change from 0 to 32768 [ 106.789347][ T6639] JBD2: Ignoring recovery information on journal [ 106.851429][ T6639] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.926863][ T6645] loop3: detected capacity change from 0 to 256 [ 106.937408][ T6645] exfat: Deprecated parameter 'utf8' [ 106.943113][ T6645] exfat: Deprecated parameter 'utf8' [ 107.022175][ T6645] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x33bfe6af, utbl_chksum : 0xe619d30d) [ 107.061785][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 107.078163][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.163859][ T6639] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 107.163988][ T6639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.205170][ T6639] OCFS2: File system is now read-only. [ 107.247738][ T6639] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 107.247771][ T6639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.285770][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 107.326207][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.347997][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.363589][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 107.381600][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.398061][ T5752] usb 2-1: USB disconnect, device number 5 [ 107.398068][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.398109][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.420838][ T5752] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 107.443600][ T27] usb 3-1: config 0 descriptor?? [ 107.477658][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 107.774788][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'. [ 107.900844][ T27] apple 0003:05AC:024B.0004: fixing up MacBook JIS keyboard report descriptor [ 107.912510][ T27] apple 0003:05AC:024B.0004: unknown global tag 0xe [ 107.923196][ T27] apple 0003:05AC:024B.0004: item 0 1 1 14 parsing failed [ 107.937163][ T27] apple 0003:05AC:024B.0004: parse failed [ 107.944317][ T27] apple: probe of 0003:05AC:024B.0004 failed with error -22 [ 108.126938][ T5803] usb 3-1: USB disconnect, device number 5 [ 109.062655][ T6677] loop0: detected capacity change from 0 to 4096 [ 109.110113][ T6677] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 109.259801][ T6679] loop2: detected capacity change from 0 to 128 [ 109.283634][ T6682] loop1: detected capacity change from 0 to 256 [ 109.308469][ T6682] exfat: Deprecated parameter 'namecase' [ 109.388572][ T6682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 109.939284][ T6683] loop3: detected capacity change from 0 to 32768 [ 109.946839][ T6693] loop0: detected capacity change from 0 to 2048 [ 109.965954][ T6683] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (6683) [ 110.045042][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.118554][ T6683] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 110.184427][ T6683] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.192208][ T6704] loop2: detected capacity change from 0 to 256 [ 110.196054][ T6683] BTRFS info (device loop3): enabling disk space caching [ 110.207288][ T6683] BTRFS info (device loop3): force clearing of disk cache [ 110.223401][ T6683] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.247509][ T6683] BTRFS info (device loop3): use zstd compression, level 3 [ 110.259680][ T6683] BTRFS info (device loop3): disk space caching is enabled [ 110.270714][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.429485][ T6683] BTRFS info (device loop3): enabling ssd optimizations [ 110.454568][ T6683] BTRFS info (device loop3): auto enabling async discard [ 110.477182][ T6683] BTRFS info (device loop3): rebuilding free space tree [ 110.480177][ T5752] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.528741][ T6683] BTRFS info (device loop3): disabling free space tree [ 110.548395][ T6683] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.561057][ T6722] loop0: detected capacity change from 0 to 4096 [ 110.575008][ T6683] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.605041][ T6722] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.696782][ T6722] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 110.714466][ T5752] usb 2-1: Using ep0 maxpacket: 32 [ 110.725663][ T5752] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.743822][ T6726] lo speed is unknown, defaulting to 1000 [ 110.756809][ T5752] usb 2-1: config 0 has no interface number 0 [ 110.782077][ T5752] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.802038][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.812682][ T6728] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.822366][ T5752] usb 2-1: Product: syz [ 110.830233][ T5752] usb 2-1: Manufacturer: syz [ 110.835282][ T5752] usb 2-1: SerialNumber: syz [ 110.878981][ T5752] usb 2-1: config 0 descriptor?? [ 110.910615][ T5752] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.971989][ T5769] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 111.018684][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.154578][ T5752] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.235805][ T5752] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.259814][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 111.270580][ T6731] mmap: syz.0.347 (6731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.312854][ T27] usb 3-1: config 0 has no interfaces? [ 111.330876][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 111.340242][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.361620][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.398591][ T27] usb 3-1: Manufacturer: syz [ 111.430343][ T27] usb 3-1: config 0 descriptor?? [ 111.636146][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.652377][ T5752] usb 2-1: USB disconnect, device number 6 [ 111.710987][ T5752] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.768264][ T5752] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.789730][ T5752] quatech2 2-1:0.51: device disconnected [ 111.898899][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 111.953373][ T6739] loop3: detected capacity change from 0 to 4096 [ 111.994618][ T27] usb 3-1: USB disconnect, device number 6 [ 112.339670][ T6745] sctp: Trying to GSO but underlying device doesn't support it. [ 112.469779][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 113.254309][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.474401][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 113.505685][ T6783] loop3: detected capacity change from 0 to 256 [ 113.513237][ T6783] exfat: Deprecated parameter 'utf8' [ 113.524447][ T27] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.554197][ T27] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 113.567419][ T6783] exfat: Deprecated parameter 'utf8' [ 113.572788][ T6783] exfat: Deprecated parameter 'utf8' [ 113.584227][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.590890][ T27] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 113.613370][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.623355][ T6783] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 113.639917][ T27] usb 2-1: config 0 descriptor?? [ 114.086281][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.094875][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.104557][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.111307][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.117648][ T6795] C: renamed from team_slave_0 (while UP) [ 114.137932][ T6795] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 114.144266][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.152330][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.152999][ T6795] netlink: 116 bytes leftover after parsing attributes in process `syz.0.373'. [ 114.161181][ T6781] loop2: detected capacity change from 0 to 32768 [ 114.184286][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.191035][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.200031][ T6795] net_ratelimit: 3321 callbacks suppressed [ 114.200045][ T6795] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 114.203172][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x7 [ 114.292580][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.299819][ T6781] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.309645][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.317308][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.324044][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.332304][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.343600][ T27] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 114.382700][ T27] elo 0003:04E7:0030.0005: unexpected long global item [ 114.426176][ T27] elo 0003:04E7:0030.0005: parse failed [ 114.428092][ T6807] batman_adv: batadv0: Adding interface: macsec1 [ 114.431889][ T27] elo: probe of 0003:04E7:0030.0005 failed with error -22 [ 114.438547][ T6807] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.471080][ T6807] batman_adv: batadv0: Interface activated: macsec1 [ 114.519533][ T27] usb 2-1: USB disconnect, device number 7 [ 114.534137][ T6781] XFS (loop2): Ending clean mount [ 114.740854][ T6810] program syz.3.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.753455][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.465334][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 115.648168][ T6827] loop2: detected capacity change from 0 to 8192 [ 116.077197][ T5803] IPVS: starting estimator thread 0... [ 116.184643][ T6838] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.027551][ T6872] autofs4:pid:6872:autofs_fill_super: could not open pipe file descriptor [ 117.645472][ T6869] loop3: detected capacity change from 0 to 32768 [ 117.688290][ T6869] (syz.3.403,6869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.742201][ T6869] (syz.3.403,6869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.837204][ T6869] JBD2: Ignoring recovery information on journal [ 117.967174][ T6869] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.388980][ T6869] syz.3.403 (6869) used greatest stack depth: 18768 bytes left [ 118.539831][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 118.554629][ T6886] loop2: detected capacity change from 0 to 32768 [ 118.667780][ T6898] loop1: detected capacity change from 0 to 256 [ 118.713348][ T6898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 118.825862][ T28] audit: type=1800 audit(1777039072.809:8): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.414" name="file1" dev="loop1" ino=1048613 res=0 errno=0 [ 118.910073][ T6900] syz.2.416 uses obsolete (PF_INET,SOCK_PACKET) [ 118.934353][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.134307][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 119.170572][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 119.199165][ T9] usb 1-1: config 0 has no interface number 0 [ 119.231080][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 119.290545][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 119.303788][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.338784][ T9] usb 1-1: Product: syz [ 119.343015][ T9] usb 1-1: Manufacturer: syz [ 119.349116][ T9] usb 1-1: SerialNumber: syz [ 119.367601][ T9] usb 1-1: config 0 descriptor?? [ 119.411581][ T6910] loop1: detected capacity change from 0 to 1024 [ 119.424271][ T6910] EXT4-fs: Ignoring removed bh option [ 119.493591][ T6910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 119.610640][ T6906] loop3: detected capacity change from 0 to 32768 [ 119.670894][ T6915] program syz.2.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.819395][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 120.269962][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 120.284748][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 120.292098][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 120.314830][ T9] f81534: probe of 1-1:0.12 failed with error -71 [ 120.338310][ T9] usb 1-1: USB disconnect, device number 6 [ 120.346146][ T6918] loop2: detected capacity change from 0 to 32768 [ 120.381459][ T6918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.422 (6918) [ 120.432860][ T6918] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.457420][ T6918] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 120.491240][ T6918] BTRFS info (device loop2): force clearing of disk cache [ 120.504542][ T6918] BTRFS info (device loop2): enabling disk space caching [ 120.511618][ T6918] BTRFS info (device loop2): turning on sync discard [ 120.542922][ T6918] BTRFS info (device loop2): disabling tree log [ 120.574256][ T6918] BTRFS info (device loop2): metadata ratio 5 [ 120.582805][ T6918] BTRFS info (device loop2): disk space caching is enabled [ 120.689122][ T6918] BTRFS info (device loop2): enabling ssd optimizations [ 120.700954][ T6918] BTRFS info (device loop2): rebuilding free space tree [ 120.738539][ T6918] BTRFS info (device loop2): disabling free space tree [ 120.764415][ T6918] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.785286][ T6918] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.071978][ T5762] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.216003][ T5830] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.404585][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.424283][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 121.433918][ T5830] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.454315][ T5830] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.474505][ T5830] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.518473][ T5830] usb 1-1: config 1 interface 0 has no altsetting 0 [ 121.527903][ T5830] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 121.547356][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.565631][ T5830] usb 1-1: Product: syz [ 121.574413][ T5830] usb 1-1: Manufacturer: syz [ 121.581776][ T5830] usb 1-1: SerialNumber: syz [ 121.614263][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 121.623104][ T27] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 121.643260][ T27] usb 4-1: config 32 has no interface number 0 [ 121.674717][ T27] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.695050][ T27] usb 4-1: config 32 interface 85 has no altsetting 0 [ 121.742976][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.759625][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.768211][ T27] usb 4-1: Product: syz [ 121.772475][ T27] usb 4-1: Manufacturer: syz [ 121.777738][ T27] usb 4-1: SerialNumber: syz [ 121.837286][ T5830] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 122.066177][ T5752] usb 1-1: USB disconnect, device number 7 [ 122.088709][ T5752] usblp0: removed [ 122.107856][ T6965] mkiss: ax0: crc mode is auto. [ 122.414982][ T27] appletouch 4-1:32.85: Geyser mode initialized. [ 122.423202][ T27] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input9 [ 122.553716][ T6977] loop1: detected capacity change from 0 to 8192 [ 122.571822][ T6977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.624283][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.691059][ T5803] usb 4-1: USB disconnect, device number 8 [ 122.734492][ T5803] appletouch 4-1:32.85: input: appletouch disconnected [ 122.824351][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 122.836030][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.854268][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.876310][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.888080][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.911007][ T23] usb 3-1: Product: syz [ 122.918765][ T23] usb 3-1: Manufacturer: syz [ 122.929476][ T23] usb 3-1: SerialNumber: syz [ 122.938046][ T6983] program syz.1.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.364841][ T23] usb 3-1: 0:2 : does not exist [ 123.789426][ T23] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 123.835563][ T23] usb 3-1: USB disconnect, device number 7 [ 123.854955][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.910602][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.075413][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 124.087733][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 124.104585][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 124.112725][ T27] usb 2-1: Product: syz [ 124.119535][ T27] usb 2-1: Manufacturer: syz [ 124.124440][ T27] usb 2-1: SerialNumber: syz [ 124.131437][ T27] usb 2-1: config 0 descriptor?? [ 124.140257][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 124.164375][ T5752] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.184918][ T7017] program syz.0.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.256649][ T7019] loop0: detected capacity change from 0 to 512 [ 124.307796][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.324680][ T7019] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.346062][ T27] gspca_sn9c2028: read1 error -32 [ 124.371754][ T27] gspca_sn9c2028: read1 error -32 [ 124.385419][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 124.396513][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.413908][ T5752] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.425373][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.448649][ T5752] usb 4-1: config 0 descriptor?? [ 124.461281][ T7019] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.461: Directory hole found for htree leaf block 0 [ 124.571941][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.599661][ T5830] usb 2-1: USB disconnect, device number 8 [ 124.689622][ T5752] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.911995][ T5752] usb 4-1: USB disconnect, device number 9 [ 125.140053][ T7038] loop2: detected capacity change from 0 to 4096 [ 125.252288][ T7038] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 125.268362][ T7038] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 125.485276][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 125.493098][ T7042] loop1: detected capacity change from 0 to 256 [ 125.508340][ T5762] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 125.540425][ T5762] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.557184][ T5762] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 125.558442][ T5757] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.573892][ T3505] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 125.810461][ T7052] loop0: detected capacity change from 0 to 512 [ 125.841211][ T7052] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 125.934779][ T7052] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.942071][ T7052] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.473: Block bitmap for bg 0 marked uninitialized [ 126.034737][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.059171][ T7052] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 126.119342][ T7052] EXT4-fs (loop0): 1 orphan inode deleted [ 126.128449][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 126.232844][ T7052] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.259344][ T7052] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 126.273312][ T7052] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.473: Block bitmap for bg 0 marked uninitialized [ 126.286886][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 126.294762][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.301549][ T7063] loop1: detected capacity change from 0 to 1024 [ 126.314009][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.348348][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.384509][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.401331][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.414225][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.451553][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.482703][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.507349][ T7061] loop3: detected capacity change from 0 to 32768 [ 126.526094][ T23] usb 3-1: Manufacturer: syz [ 126.553615][ T23] usb 3-1: config 0 descriptor?? [ 126.603044][ T7061] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.638609][ T7075] program syz.1.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.751555][ T7061] XFS (loop3): Ending clean mount [ 126.849264][ T7061] XFS (loop3): Quotacheck needed: Please wait. [ 127.034761][ T23] rc_core: IR keymap rc-hauppauge not found [ 127.040890][ T23] Registered IR keymap rc-empty [ 127.088143][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.090450][ T7061] XFS (loop3): Quotacheck: Done. [ 127.134419][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.177313][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 127.208249][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.216156][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 127.254583][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.301901][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.346358][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.374351][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.404373][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.444683][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.499197][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.564561][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.595027][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 127.600326][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.614724][ T27] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.617354][ T7084] loop1: detected capacity change from 0 to 40427 [ 127.623030][ T27] usb 1-1: config 0 has no interface number 0 [ 127.640401][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.641713][ T7084] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x7ffff [ 127.661889][ T7084] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 127.670927][ T27] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.671480][ T7084] F2FS-fs (loop1): Image doesn't support compression [ 127.693120][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.703838][ T7084] F2FS-fs (loop1): invalid crc value [ 127.705117][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 127.730389][ T7084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.731414][ T27] usb 1-1: Product: syz [ 127.759762][ T27] usb 1-1: Manufacturer: syz [ 127.769580][ T27] usb 1-1: SerialNumber: syz [ 127.791284][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 127.810687][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.821887][ T27] usb 1-1: config 0 descriptor?? [ 127.837759][ T7084] F2FS-fs (loop1): Start checkpoint disabled! [ 127.850438][ T27] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.869169][ T7084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 127.874477][ T23] usb 3-1: USB disconnect, device number 8 [ 128.065597][ T7098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.490'. [ 128.078389][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.118530][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.219459][ T3505] kworker/u4:8: attempt to access beyond end of device [ 128.219459][ T3505] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 128.255355][ T3505] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.262674][ T7100] loop3: detected capacity change from 0 to 764 [ 128.270877][ T3505] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.280458][ T3505] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.651902][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.652230][ T5803] usb 1-1: USB disconnect, device number 8 [ 128.691662][ T5803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.702309][ T7104] loop3: detected capacity change from 0 to 512 [ 128.736553][ T5803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.751890][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.768850][ T5803] quatech2 1-1:0.51: device disconnected [ 128.793178][ T7107] loop2: detected capacity change from 0 to 4096 [ 128.862848][ T7111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.910463][ T7113] sctp: [Deprecated]: syz.1.496 (pid 7113) Use of int in maxseg socket option. [ 128.910463][ T7113] Use struct sctp_assoc_value instead [ 128.980220][ T28] audit: type=1800 audit(1777039082.959:9): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 129.027465][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.031906][ T28] audit: type=1800 audit(1777039082.989:10): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 129.291892][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 129.465167][ T28] audit: type=1800 audit(1777039083.439:11): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.497" name="/newroot/136/bus/#732//deleted" dev="tmpfs" ino=732 res=0 errno=0 [ 130.009270][ T7147] loop2: detected capacity change from 0 to 512 [ 130.061449][ T7147] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 130.097419][ T7147] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.143241][ T7147] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 130.177012][ T7147] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 130.224781][ T7147] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 130.256882][ T7153] loop3: detected capacity change from 0 to 4096 [ 130.259262][ T7147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.512: bg 0: block 64: padding at end of block bitmap is not set [ 130.286510][ T7147] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 130.333484][ T7147] EXT4-fs (loop2): 1 truncate cleaned up [ 130.364789][ T7147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.466351][ T7156] loop0: detected capacity change from 0 to 128 [ 130.469167][ T7145] loop1: detected capacity change from 0 to 32768 [ 130.576948][ T7145] [ 130.576948][ T7145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.576948][ T7145] [ 130.608757][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.785705][ T3505] read_mapping_page failed! [ 130.790294][ T3505] ERROR: (device loop1): txCommit: [ 130.790294][ T3505] [ 130.824693][ T3505] jfs_write_inode: jfs_commit_inode failed! [ 130.836266][ T5768] [ 130.836266][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.836266][ T5768] [ 130.863049][ T5768] [ 130.863049][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.863049][ T5768] [ 131.018399][ T7166] loop0: detected capacity change from 0 to 256 [ 131.045655][ T7166] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.091782][ T7166] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 131.134985][ T7166] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 131.466628][ T7174] program syz.2.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.528143][ T7176] loop0: detected capacity change from 0 to 16 [ 131.547664][ T7176] erofs: (device loop0): mounted with root inode @ nid 36. [ 131.631181][ T28] audit: type=1800 audit(1777039085.609:12): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.523" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 131.667208][ T7176] syz.0.523: attempt to access beyond end of device [ 131.667208][ T7176] loop0: rw=524288, sector=1348712160, nr_sectors = 256 limit=16 [ 131.705559][ T7176] syz.0.523: attempt to access beyond end of device [ 131.705559][ T7176] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 131.756515][ T7176] syz.0.523: attempt to access beyond end of device [ 131.756515][ T7176] loop0: rw=0, sector=1348712280, nr_sectors = 32 limit=16 [ 132.038210][ T7189] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 132.498060][ T7204] tipc: Started in network mode [ 132.511627][ T7204] tipc: Node identity ac14140f, cluster identity 4711 [ 132.527684][ T7204] tipc: New replicast peer: 255.255.255.255 [ 132.545448][ T7204] tipc: Enabled bearer , priority 10 [ 132.570442][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 132.590581][ T7207] tipc: Disabling bearer [ 132.886663][ T7193] loop3: detected capacity change from 0 to 32768 [ 132.923921][ T7193] (syz.3.532,7193,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.940967][ T7210] loop1: detected capacity change from 0 to 2048 [ 132.959957][ T7193] (syz.3.532,7193,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.995779][ T7210] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.030663][ T7210] NILFS (loop1): mounting unchecked fs [ 133.040920][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048844][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.060771][ T7193] JBD2: Ignoring recovery information on journal [ 133.077017][ T5757] udevd[5757]: incorrect nilfs2 checksum on /dev/loop1 [ 133.134887][ T7210] NILFS (loop1): recovery complete [ 133.135116][ T7193] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.232772][ T7215] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.500193][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 133.611202][ T7225] loop2: detected capacity change from 0 to 128 [ 133.664388][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.864307][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 133.886012][ T786] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 133.924301][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.932774][ T786] usb 1-1: Product: syz [ 133.952119][ T786] usb 1-1: Manufacturer: syz [ 133.966790][ T786] usb 1-1: SerialNumber: syz [ 134.234134][ T786] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 134.304092][ T786] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.378588][ T786] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 134.419815][ T786] usb 1-1: media controller created [ 134.502877][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.541290][ T7230] loop3: detected capacity change from 0 to 32768 [ 134.548325][ T786] zl10353_read_register: readreg error (reg=127, ret==-71) [ 134.590401][ T7230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.544 (7230) [ 134.621100][ T786] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 134.636952][ T786] usb 1-1: USB disconnect, device number 9 [ 134.706477][ T7230] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.740346][ T7230] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.774814][ T7230] BTRFS info (device loop3): force clearing of disk cache [ 134.782454][ T7230] BTRFS info (device loop3): force zlib compression, level 3 [ 134.808072][ T7230] BTRFS info (device loop3): enabling auto defrag [ 134.840799][ T7230] BTRFS info (device loop3): max_inline at 0 [ 134.853470][ T7230] BTRFS info (device loop3): enabling disk space caching [ 134.872281][ T7230] BTRFS info (device loop3): disk space caching is enabled [ 134.995309][ T7255] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.023066][ T7255] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.115333][ T7230] BTRFS info (device loop3): enabling ssd optimizations [ 135.131488][ T7230] BTRFS info (device loop3): auto enabling async discard [ 135.144119][ T7230] BTRFS info (device loop3): rebuilding free space tree [ 135.172589][ T3505] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.210625][ T7230] BTRFS info (device loop3): disabling free space tree [ 135.229365][ T7230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.270530][ T7230] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.574723][ T5769] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.247241][ T7291] set_capacity_and_notify: 2 callbacks suppressed [ 136.247255][ T7291] loop3: detected capacity change from 0 to 4096 [ 136.424099][ T7274] loop1: detected capacity change from 0 to 40427 [ 136.461527][ T7274] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 136.514646][ T7274] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 136.578009][ T7274] F2FS-fs (loop1): invalid crc value [ 136.680047][ T7274] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.039125][ T7274] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.087053][ T7274] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.264161][ C1] sched: RT throttling activated [ 137.329178][ T7294] loop2: detected capacity change from 0 to 131072 [ 137.357373][ T7294] F2FS-fs (loop2): invalid crc value [ 137.398873][ T7297] f2fs_ckpt-7:1: attempt to access beyond end of device [ 137.398873][ T7297] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 137.416251][ T7294] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.466792][ T7294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.526243][ T7297] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.550094][ T7297] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.555822][ T7296] loop0: detected capacity change from 0 to 32768 [ 137.586465][ T7294] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 137.657111][ T7296] find_entry called with index >= next_index [ 137.663495][ T7296] find_entry called with index >= next_index [ 137.696268][ T7296] find_entry called with index >= next_index [ 137.720452][ T7296] find_entry called with index >= next_index [ 137.748953][ T7296] find_entry called with index >= next_index [ 137.760895][ T7296] add_index: next_index = 0. Resetting! [ 137.784530][ T7296] find_entry called with index >= next_index [ 137.790576][ T7296] find_entry called with index >= next_index [ 137.826553][ T7296] find_entry called with index >= next_index [ 137.885833][ T7296] non-latin1 character 0x3ff found in JFS file name [ 137.892826][ T7296] mount with iocharset=utf8 to access [ 138.214908][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 138.428098][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 138.649305][ T7321] loop1: detected capacity change from 0 to 256 [ 138.652629][ T7309] loop3: detected capacity change from 0 to 32768 [ 138.712425][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 138.725681][ T7321] exfat: Deprecated parameter 'utf8' [ 138.790328][ T7309] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.840873][ T7321] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 139.114571][ T7309] XFS (loop3): Ending clean mount [ 139.286923][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.960196][ T7351] loop2: detected capacity change from 0 to 512 [ 140.166281][ T7354] loop2: detected capacity change from 0 to 128 [ 140.203988][ T7354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.233798][ T7341] loop1: detected capacity change from 0 to 40427 [ 140.250717][ T7354] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.277264][ T7341] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 140.294356][ T7341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.312840][ T7341] F2FS-fs (loop1): invalid crc value [ 140.343564][ T7341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.414335][ T7341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.421428][ T7341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.604744][ T7364] F2FS-fs (loop1): Corrupted max_depth of 3: 255 [ 140.627363][ T7364] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 140.741621][ T5768] ------------[ cut here ]------------ [ 140.747289][ T5768] kernel BUG at fs/f2fs/inode.c:948! [ 140.779952][ T5768] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 140.786094][ T5768] CPU: 0 PID: 5768 Comm: syz-executor Not tainted syzkaller #0 [ 140.793649][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.803716][ T5768] RIP: 0010:f2fs_evict_inode+0x1871/0x1890 [ 140.809978][ T5768] Code: c6 bf 02 00 00 00 e8 8e 5e d1 fd 40 84 ed 75 28 e8 f4 5b d1 fd 4c 8b 2c 24 e9 6a e9 ff ff e8 e6 5b d1 fd 0f 0b e8 df 5b d1 fd <0f> 0b e8 d8 5b d1 fd 0f 0b e9 0e ff ff ff e8 cc 5b d1 fd e8 47 d7 [ 140.829768][ T5768] RSP: 0018:ffffc9000464f940 EFLAGS: 00010293 [ 140.835860][ T5768] RAX: ffffffff83b5c621 RBX: ffff8880786cda00 RCX: ffff8880214b3c00 [ 140.843846][ T5768] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 140.851826][ T5768] RBP: ffff8880786cda50 R08: ffff8880786cdeaf R09: 1ffff1100f0d9bd5 [ 140.859807][ T5768] R10: dffffc0000000000 R11: ffffed100f0d9bd6 R12: dffffc0000000000 [ 140.867875][ T5768] R13: ffff888059f5c000 R14: 0000000000000002 R15: ffff8880786cdea8 [ 140.875852][ T5768] FS: 0000555587db0500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 140.884787][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.891376][ T5768] CR2: 0000555587dcba28 CR3: 0000000062174000 CR4: 00000000003506f0 [ 140.899360][ T5768] Call Trace: [ 140.902658][ T5768] [ 140.905659][ T5768] ? bit_waitqueue+0x30/0x30 [ 140.910267][ T5768] ? do_raw_spin_unlock+0x121/0x230 [ 140.915478][ T5768] ? f2fs_remove_donate_inode+0x1e0/0x1e0 [ 140.921205][ T5768] evict+0x4ca/0x8d0 [ 140.925128][ T5768] ? proc_nr_inodes+0x230/0x230 [ 140.929984][ T5768] ? do_raw_spin_unlock+0x121/0x230 [ 140.935217][ T5768] ? do_raw_spin_unlock+0x121/0x230 [ 140.940441][ T5768] evict_inodes+0x606/0x6a0 [ 140.944957][ T5768] ? __dentry_kill+0x530/0x650 [ 140.949735][ T5768] ? clear_inode+0x150/0x150 [ 140.954336][ T5768] ? dput+0x3b/0x1e0 [ 140.958265][ T5768] generic_shutdown_super+0x97/0x2b0 [ 140.963561][ T5768] kill_block_super+0x44/0x90 [ 140.968332][ T5768] kill_f2fs_super+0x326/0x3d0 [ 140.973114][ T5768] ? f2fs_mount+0x40/0x40 [ 140.977448][ T5768] ? unregister_shrinker+0x24b/0x300 [ 140.982749][ T5768] ? kfree+0x31/0x190 [ 140.986753][ T5768] ? unregister_shrinker+0x24b/0x300 [ 140.992189][ T5768] deactivate_locked_super+0x97/0x100 [ 140.997591][ T5768] cleanup_mnt+0x43b/0x4d0 [ 141.002025][ T5768] task_work_run+0x1d4/0x260 [ 141.006636][ T5768] ? task_work_cancel+0x220/0x220 [ 141.011677][ T5768] ? exit_to_user_mode_loop+0x3b/0x110 [ 141.017154][ T5768] exit_to_user_mode_loop+0xe6/0x110 [ 141.022459][ T5768] exit_to_user_mode_prepare+0xee/0x180 [ 141.028027][ T5768] syscall_exit_to_user_mode+0x1a/0x50 [ 141.033496][ T5768] do_syscall_64+0x61/0xa0 [ 141.037919][ T5768] ? clear_bhb_loop+0x40/0x90 [ 141.042608][ T5768] ? clear_bhb_loop+0x40/0x90 [ 141.047301][ T5768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.053206][ T5768] RIP: 0033:0x7f85e4d9e017 [ 141.057654][ T5768] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 141.077273][ T5768] RSP: 002b:00007ffec445bed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.085743][ T5768] RAX: 0000000000000000 RBX: 00007f85e4e32120 RCX: 00007f85e4d9e017 [ 141.093728][ T5768] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec445bf90 [ 141.101713][ T5768] RBP: 00007ffec445bf90 R08: 00007ffec445cf90 R09: 00000000ffffffff [ 141.109699][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec445d020 [ 141.117705][ T5768] R13: 00007f85e4e32120 R14: 0000000000022566 R15: 00007ffec445d060 [ 141.125669][ T5768] [ 141.128702][ T5768] Modules linked in: [ 141.133900][ T5768] ---[ end trace 0000000000000000 ]--- [ 141.139414][ T5768] RIP: 0010:f2fs_evict_inode+0x1871/0x1890 [ 141.146994][ T5768] Code: c6 bf 02 00 00 00 e8 8e 5e d1 fd 40 84 ed 75 28 e8 f4 5b d1 fd 4c 8b 2c 24 e9 6a e9 ff ff e8 e6 5b d1 fd 0f 0b e8 df 5b d1 fd <0f> 0b e8 d8 5b d1 fd 0f 0b e9 0e ff ff ff e8 cc 5b d1 fd e8 47 d7 [ 141.169037][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.178556][ T5768] RSP: 0018:ffffc9000464f940 EFLAGS: 00010293 [ 141.186469][ T5768] RAX: ffffffff83b5c621 RBX: ffff8880786cda00 RCX: ffff8880214b3c00 [ 141.194821][ T5768] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 141.203408][ T5768] RBP: ffff8880786cda50 R08: ffff8880786cdeaf R09: 1ffff1100f0d9bd5 [ 141.211572][ T5768] R10: dffffc0000000000 R11: ffffed100f0d9bd6 R12: dffffc0000000000 [ 141.220555][ T5768] R13: ffff888059f5c000 R14: 0000000000000002 R15: ffff8880786cdea8 [ 141.228625][ T5768] FS: 0000555587db0500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 141.237752][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.244417][ T5768] CR2: 0000555587dcba28 CR3: 0000000062174000 CR4: 00000000003506f0 [ 141.252419][ T5768] Kernel panic - not syncing: Fatal exception [ 141.258809][ T5768] Kernel Offset: disabled [ 141.263122][ T5768] Rebooting in 86400 seconds..