last executing test programs: 2.539985273s ago: executing program 3 (id=1597): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigpending(0x0, 0x0) 2.194956822s ago: executing program 2 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.952463683s ago: executing program 4 (id=1606): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.934273964s ago: executing program 2 (id=1607): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./bus\x00', 0x4042, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$eJzs271u2lAUwPFj7GKgX7S0HapKRerQLsVAW6Ru7aNQcBGqaaKQBcRA8gJ5hrxfGKIsmULk648oBoNCAIP8/w3Y3HM/zgWudIRkAZBav6QsmmiScd98yBXPSlrSKQHYkql/vZkCSB/92ruWk04EwJZNfouq/S8uRy3Rs2FdENy58XEQz5gz9cPkROS94ce1nOSj9cW5yOdgvFaIDr9yWwph/GkknFXzf/kUrP9MnssLeSlFeSWvpeSv3w7Hv3to+TO7IQAAUkCTyrJ4TIcn6jUvf7uOXVU9I/58V73ceC12/qyK1xfG9Y/x+ZlqfKV14LQX7gPArMzK59+jh+d/PmPJ+QeQnP5g+K/pOPbRDtzk7uczNUU2uKi5C1ve3xtToi3GWmbOx4ZOZV7I/dGsc18j/2Bs9jMcR1vcajrJ79TwVtf9NPhfDEgB67h3aPUHw6/dXrNjd+z/9Wr1Z+PHt1qjbqnK3lpc3wPYX3dlQNKZAAAAAAAAAAAAAACAVb2Rt0mnAAAAAGBLlj4YJIbX8REPGCW9RwAAds5tAAAA//8YBw3V") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.034107411s ago: executing program 4 (id=1609): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x17, 0x0, 0x0) 1.033360321s ago: executing program 0 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) 1.032823871s ago: executing program 2 (id=1611): mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.032734111s ago: executing program 3 (id=1612): openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 916.393581ms ago: executing program 0 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 915.833691ms ago: executing program 1 (id=1614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x7fffffff, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 872.686205ms ago: executing program 3 (id=1615): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 793.473322ms ago: executing program 0 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) 738.916476ms ago: executing program 1 (id=1617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth1_macvtap\x00'}) 638.058665ms ago: executing program 2 (id=1618): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "734bc0bb69c6f63eeff0f65542"}, @NL80211_KEY_SEQ={0x4}]}]}, 0x48}}, 0x0) 637.464945ms ago: executing program 4 (id=1620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a801000048007000980"], 0x34}}, 0x0) 519.840445ms ago: executing program 2 (id=1621): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) llistxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=""/10, 0xa) 519.513205ms ago: executing program 0 (id=1622): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 519.125055ms ago: executing program 4 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 453.234691ms ago: executing program 1 (id=1624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 452.870411ms ago: executing program 0 (id=1625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000/0x4000)=nil}) 412.332764ms ago: executing program 3 (id=1626): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 335.839511ms ago: executing program 1 (id=1627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000700)={{0x3, @bcast, 0x8000007}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 328.655841ms ago: executing program 1 (id=1628): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 270.440826ms ago: executing program 4 (id=1629): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000001340), 0x4) 261.820387ms ago: executing program 1 (id=1630): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9d}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 122.526999ms ago: executing program 2 (id=1631): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 108.11715ms ago: executing program 3 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = dup(r0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x8, 0xa, 0xe82a82f9509a8fcd, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 90.373482ms ago: executing program 0 (id=1633): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000000)={[{@filestreams}, {}, {@bsdgroups}, {@gquota}, {@qnoenforce}, {@nogrpid}, {@discard}, {@qnoenforce}, {@uqnoenforce}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0xff, 0x9715, &(0x7f0000012ec0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 55.338535ms ago: executing program 3 (id=1634): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiBRzVQnKoLHPScbjddZp4p1dn99PcmaePTPeM/l7PLuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZiXH0bEkdhsjuciYrAYUa+/+c8zEeci4qNDEfc2bq3WD5/ZYz/On7p5/ZPvf+cfv/vTnSM/ffMnH7Tbf/TZsx/+/nbE4R++9uEnt5/MtgMAAEApqqqqeult/tH0/r7fdacAgKnIx/8qyY+r1Wq1+onWf+zPVn/UhdZN1Xi3m0VErDfXqV8zOB0PAHNmPT7uugt0SP5FG0bEU113Aphpva47wL64t3FrtZfy7TWPB8e22vPfKbflv967f3/HbtNJ2teYTOvn604M4tld+rM8pT7Mkpx/v53/5a32UVpuv/Oflt3yH23d+lScnP+gnX/Ltvz/HBFzm39/bP6lyvkPHyX/9cEc7//yBwAAAADg4Mt//z/c8fnfxcfflD152PnfY1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVW/V6/95dCDx3b7LLb68Uu9iKdbywOFSTfLrHTdDwAAAAAAAAAAAAAoyXDrGt5LvYiFiHh6ZaWqqvqrqV0/qsddf96Vvv1Qsq5/yQMAwJaPDrXu5e9FLEXEpfRZfwsrKytVtbS8Uq1Uy4v59exocalabryvzdP6scXRHl4QD0dV/c2WGus1TXq/PKm9/f3q5xpVgz10bDo6DBwAImLraHTPEemAqapnoutXOcwH+//BY/9nL7r+OQUAAAD2X1VVVS99nPfRdM6/33WnAIBpWMrH//Z5AbVarVar1QevbqrGu90sImK9uU79msFw/AAwZ9bj4667QIfkX7RhRBzpuhPATOt13QH2xb2NW6u9lG+veTxI47vna0G25b/e21wvrz9uOkn7GpNp/XzdiUE8u0t/nptSH2ZJzr/fzv/yVvsoLbff+U/LbvnX23m4g/50Lec/aOffcnDy74/Nv1Q5/+Ej5T+QPwAAAAAAzLD89//Dzv/mTQYAAAAAAACAuXNv49Zqvu81n////Jjles05938eGDn/3p7zd//vQZLz77fzb12QM2jM333jQf7/3ri1+sHNf30uT2c+/4XBqH7uhV5/MEzX/FQLb8XVuBZrcWrH8sNt7ad3tC9saz8zof3sjvZR3b6c20/EavwirsWb99sXJ1wYtTShvZrQnvMf2P+LlPMfNr7q/FdSe681rd19v79jv29Oxz3Pxb/998Wde9f03YnB/W1rqrfveAf92fw/eWoUv7qxdv3Eb67cvHn9dKTJtkfPRJo8YTn/hfSV83/pha32/Hu/ub/efX/0yPnPijsx3DX/Fxrz9fa+POW+dSHnP0pfOf98BBq//89z/rvv/6900B8AAAAAAAAAAAAAAAB4mKqqNm8RvRgRF9L9P13dmwkATNUffpBmqiTUarVarVYf2LqpGu/1ZhFL29e5EBG/HffNAIBZ9r+I+GfXnaAz8i9Y/ry/evqFrjsDTNWNd9/72ZVr19au3+i6JwAAAAAAAADAp5XH/zzWGP958zqg1rjR28Z/fSOOze34n/3RYHOs87RBz8fDx/8+Hg8f/3s44fkWJrSPJrQvTmhfmtA+9kaPhpz/8ynjnP/RtGEljf/6Ugf96VrO/3ga6znn/6XWcs38q7/Oc/79bfmfvPnOL0/eePe9V6++c+XttbfXfn761IVzZ8+fO3v+/Mm3rl5bO7X1b4c93l85/zz2tetAy5Lzz5nLvyw5/y+mWv5lyfm/mGr5lyXnn1/vyb8sOf/83kf+Zcn5v5xq+Zcl5//lVMu/LDn/V1It/7Lk/L+SavmXJef/aqrlX5ac/4lUy78sOf+TqZZ/WXL++QyX/MuS889XNsi/LDn/M6mWf1ly/mdTLf+y5PzPpVr+Zcn5n0+1/MuS87+QavmXJef/1VTLvyw5/6+lWv5lyfm/lmr5lyXn//VUy78sOf9vpFr+Zcn5fzPV8i9Lzv9bqZZ/WXL+3061/MuS83891fIvy4PP/zcz5Zn//D1iBrphxsy4ma5/MwEAAAAAAAAAAAAAbdO4nLjrbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjwMDi3fUXOMRgkpBS0qaUhLRpSY1jr40Tf9W7TgChshTaEgWpSO0FvWiaRGkUqa1AUaSmEo2QGqm9K1eJuIlaiQtLhcpBSaVUga3OnPd9d2Z2dmb9sXjOOb8fwn/vzJmZd86cmd1nrWcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZhs+Nv3nA1mW5f83/liXZZfmf1+T7cm/nNt5sVcIAAAAnK+3Gn/+w2XphD3LuFDTNv/2of/4/vz8/Hz2hTdPv/2X8/PpjLEsG1qdZY3zon//5S/mm7cJnspGBwabvh7scfNDPc4f7nH+SI/zV/U4f3WP80d7nL9oByyypvh9TOPKNjX+uq7YpdkV2UjjvE0dLvXUwOrBwfi7nIaBxmXmRw5mh7Mj2XQ2uegyA43/suylDflt3ZPF2xpsuq31WZad+dnj++MaBsI+3pS13FhD82P3xl3Z2Js/e3z/d2Zff3+n2XM3LFpplm3emK/z6Sxb+HVVNpCtTvskrnOwaZ3rO6xzqGWdA43L5X9vX+eZZa4z3u/RsM5XuqxzfTjtkWuzLJvLltym3VPZYLa27VbT/h4tjoj8OvKH8j3Z8FkdJxuWcZzkl3nt2tbjpP2YjPt/Q9gnw0usofnheOPJVYv2+7keJ/m97odjNb/u+/IbHR1t/tVqy7Gab/P4dUsfAx0fuw7HQDqWm46Bjb2OgcFVQ41jYHBhzRtbjoGpRZcZzAYat3X6uu7HwMTs0RMTM48+dsvho/sOTR+aPjY1uXP7th3bt+3YMXHw8JHpyeLPs9ulJbI2G0zH4MbwWhOPwRvatm0+JOe/eeGeB6N98jzI7/tnrs8XdOlgtsQxnm/z9Obzfx6k7/tNz4PhpudBx9fUDs+D4WU8D/Jtzmxe3vfM4ab/O61hpV4L1zUdAxfz+2F+mw/euPRr4fqwrmduOtvvh0OLjoF4twbCcy8/Jf28N3pb2C+Lj4ur8zMuWZWdmpk+ueWRfbOzJ6eyMN4Rlzc9Vu3Hy9qm+5QtOl4Gz/p42fP3v7r+6g6nrwv7avTm7o9Vvs328e6PVePVvXV/rsqK/dly6tYsjAvsnd6fnb6b5fszZYku+zPf5ulbzv9nwZRLml7/Rnq9/g2NDBevf0Npb4y0vP4tfmiGGivLsjO3LO/1byT8/06//l3RJ69/+b56cEv3YyDf5pmJsz0Ghru+/l0b5kBYz40hMYw25f63G+fPFYdp02PZ87gZHh4Jx81wvMXW42bbosvk15bf9ubJcztuNl/b+li1/NxSweMm31d/Ndn9uMm3eXnq/F871sS/Nr12rOp1DIwMrcrXO5IOguL1bn5NPAa2ZPuz49mR7EC6TP4o57c1vnV5x8Cq8P87/dpxVZ8cA/m+en5r92Mg3+ZH2y7sz06bwylpm6afndp/v7BU5r96eOH62nfbhc78+To//uNPpdM6ZYh8m9e3n23O6L6fbg6nXNJhP7U/f5Y6pg9k78x+uiqs88iO7r+byre5Yucyj6c9WZa9OvVq4/dd4fe73zv14++3/N630++UX5169d6J+39yNusHAODcvd34c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/4dt2vfDWE1l6N8D5IJ4fd8N9dxTbxY73XPh6bH5BfvpHvz3ywlefWN5tD2ZZ9qt7P9Bx+4fviOsqnIjr/HDr6Ytcdc2ybv+hBxa2a37/hDO7iuuP92e5h0HsKr80sbVxvWOPTjXmy/dmjXn/3DNPFddffB23P72t2P5vwpuW7Dk40HL5zWE9m8IcC+8pc9+ehf2Qz3i5F9Z/6F8v/+zC7cXLDWx8d+NuPv/HxfXG94h67vJi+3i/l1r/v3ztuy/k2z9yXef1PzHYef2nw/W+FuYvdxfbN+/zrzat/0/D+uPtxctt+dYPO67/xfcV278YjotvhNm+/rv+4oNvdXq84u3sub24XLz9yf/d3rhcvL54/e3rH31iqmV/tF//y28W17P7yz8fat4+nh5vJ3ro9tbjeyA8vi098izLvvtnWct+zj5SXO6f29Yfr+/E7Z3Xf3PbOk8MXNO4/ML9Wddyv77+d1s73t+4nj3/uK7l/jx3d9h/b078KL/e0/eH4zGc/3+vFNfX/l6mL97d+noTt//GuuJ5G69vom39z7Wtf+6afN/1Xv89bxbrf/HO1S3r3/OJcDzdU8xe6z/0t5e1XP6b3ykej5NfGT92fObU4QNNe7X5ebx6dM3aSy5917svC6+l7V/vPT778PTJscmxySwbK+FbBq70+r8V5v8UY+7C30LhJz8vjrtnP1l837rhF8XXz4XTHwqPZ/z++PW/Hmk5Xtsf97k7i3m+678prGO53ve1/7pmWRue/vxLp/7pT15v/7kg3p8T7x1t3L/nN1zZOG/g5eL89terXv7zva3P658OTzbmD8J+nQ/vzLzxyuL22q8/vjfJs58unr/xJ7l4+azt/UTWDbXej/Nd/0/DzzE/vKr19S8eHz94ou3dnNdlA/kS5sLrQzZXnB+3ivv72TNXdry9+D482dz7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jr8gvP77WN5/eB6Z3bs8az/XgxVtjFXv+JB/YfuHXy+gPTB/edOjj7wInpk4f2z8zsnz4wc/2+gwenv9Lr8ocP7J7aumvbrVvHDx0+sPu2Xbu27Ro/fOx4voxiUT3snPzS+LGTexsXmdm9fdfUjh3bJ8ePHj8wvfvWycnxU70u3/jeNJ5f+svjJ6eP7Js9fHR6fObwY9O7p3bt3Lm157s/Hj1xcGZs4uSpYxOnZqZPThT3ZWy2cXL+va/X5amHmePh9a7NQPjp/HM370zvj5v79pNLXlWxSeuPp9kb4b2g4ve3Xl/H3D8SZlKT/A8AAAB1EHN/eOP/hTPkfwAAAKiMmPtXh5nI/wAAAFAZMfcXyX80ffx7XfL/her/P6n/36D/r/+f6f8n+v/6/5n+v/5/D/r/+v9lXr/+v/4/vfVb/z/k/mxNlvn3fwAAAKiomPvXhpnI/wAAAFAZMfdfEmYi/wMAAEBlxNx/aZhJTfK/z//X/9f/79b/j9vq/2f6//3Q/9/03/r/i+j/6/9n+v/n7GL358u+/j7s/6/R/6ff9Fv/P+b+d4WZ1CT/AwAAQB3E3P/uMBP5HwAAACoj5v7LwkzkfwAAAKiMmPvXhZnUJP/r/+v/6//7/H/9/9L0/33+fwf6//r/mf7/ObvY/fmyr78P+/8+/5++02/9/5j7fy3MpCb5HwAAAOog5v73hJnI/wAAAFAZMfdfHmYi/wMAAEBlxNx/RZhJTfJ/Pfv/r2VZpv+f6f/r/7etU/9f/38l6P/r/3ej/6//X+b16//r/9Nbv/X/Y+5/b5hJTfI/AAAA1EHM/VeGmcj/AAAAUBkx978vzET+BwAAgMqIuf+qMJOa5P969v99/r/+f0H/v3Wd+v/6/ytB/1//vxv9f/3/Mq9f/1//n976rf8fc//7w0xqkv8BAACgDmLuvzrMRP4HAACAyoi5/wNhJvI/AAAAVEbM/evDTGqS//X/9f/1//X/9f/1/1dSufr/g0ueo/9f0P9vdeH6/3MLC9D/L8369f/1/+mt3/r/Mfd/MMykJvkfAAAA6iDm/g+Fmcj/AAAAUBkx918TZiL/AwAAQGXE3D8WZlKT/K//r/+v/6//r/+v/7+SytX/X5r+f0H/v5XP/9f/1//X/6e7fuv/x9y/IcykJvkfAAAA6iDm/o1hJvI/AAAAVEbM/deGmcj/AAAAUBkx928KM6lJ/tf/1//X/9f/1//X/19J+v/6/93o/+v/l3n9+v/6//TWb/3/mPuvCzOpSf4HAACAOoi5//owE/kfAAAAKiPm/hvCTOR/AAAAqIyY+zeHmdQk/+v/6//r/5e4/z+k/5/p//c9/X/9/270//X/y7x+/X/9f3rrt/5/zP03hpnUJP8DAABAHcTcf1OYifwPAAAAlRFz/81hJvI/AAAAVEbM/eNhJjXJ//r/+v/6/yXu//v8/5b16//3J/1//f9u9P/1/8u8fv1//X9667f+f8z9t4SZ1CT/AwAAQB3E3L8lzET+BwAAgMqIuX8izET+BwAAgMqIuX8yzKQm+V//X/9f/1//X/9f/38l6f/r/3ej/6//X+b16//r/9Nbv/X/Y+6fCjOpSf4HAACAOoi5f2uYifwPAAAAlRFz/7YwE/kfAAAAKiPm/u1hJjXJ/yXp/29JBSj9f/1//X/9f/3/UtH/1//vRv9f/7/M69f/1/+n1WCH0/qt/x9z/44wk5rkfwAAAKiDmPt3hpnI/wAAAFAZMfffGmYi/wMAAEBlxNx/W5hJTfJ/Sfr/Pv9f/1//v4n+v/5/mej/6/93o/+v/1/m9ev/6//TW7/1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUOn0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fff36/ytL/1//vxv9f/3/Mq9f/1//n976rf8fc//uMJOa5H8AAACog5j77wgzkf8BAACgMmLuvzPMRP4HAACAyoi5f0+YSU3yv/5/1fv/Pv9f/1//v9f69f9Xlv6//n83+v/l7P+HH1v0//uo/58fQ/r/9KN+6//H3H9XmElN8j8AAADUQcz9Hw0zkf8BAACgMmLu/1iYifwPAAAAlRFz/8fDTGqS//X/9f/1//X/9f/1/1eS/v+K9f8bL4X6/wX9/3NzsfvzZV9/P/X/ff4//arf+v8x998dZlKT/A8AAAB1EHP/J8JM5H8AAACojJj7fz3MRP4HAACAyoi5/54wk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mff/RphJTfI/AAAA1EHM/feGmcj/AAAAUBkx938yzET+BwAAgJJZteQ5Mff/ZphJTfJ/+fr/Y6Xs/w+m69f/1//X/9f/1/+/kPT/9f8z/f9zdrH782Vfv/6//j+99Vv/P+b+3wozqUn+BwAAgDqIuf9TYSbyPwAAAFRGzP2/HWYi/wMAAEBlxNx/X5hJTfL/he7/t1++G5//r/+f6f/r/+v/6/+fJ/1//f9M//+cXez+fNnXr/+v/09v/db/j7n/d8JMapL/AQAAoA5i7r8/zET+BwAAgD718FlfIub+T4eZyP8AAABQGTH3fybMpCb5v3yf/6//r/+v/6//r/9fJvr/+v/d6P/r/5d5/fr/+v/01m/9/5j7HwgzqUn+BwAAgDqIuf+zYSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/e2EmNcn/+v/6//r/+v/6//r/K0n/f3H/P38N0/8v6P/r/5d5/fr/+v/01m/9/5j7PxdmUpP8DwAAAHUQc//vh5nI/wAAAFAZMff/QZiJ/A8AAACVEXP/g2EmNcn/+v/6//r/+v/6//r/K0n/3+f/d6P/r/9f5vXr/+v/01u/9f9j7v98mElN8j8AAADUQcz9fxhmIv8DAABAZcTcvzfMRP4HAACAyoi5/6Ewk5rkf/1//X/9f/1//X/9/5Wk/6//343+v/5/mdev/6//T2/91v+PuX9fmMme1psBAAAAyivm/i+EmdTk3/8BAACgDmLu3x9mIv8DAABAZcTcfyDMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7p8OM6lJ/gcAAIA6iLn/YJiJ/A8AAACVEXP/oTAT+R8AAAAqI+b+h8NMapL/9f/1//X/a9v/f+V7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+w+HmdQk/wMAAEAdxNz/xTAT+R8AAAAqI+b+L4WZyP8AAABQGTH3HwkzqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4X+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/qNhJjXJ/wAAAFAHMfcfCzOR/wEAAKAyYu4/HmYi/wMAAEBlxNx/IsykJvlf///s+v8DS3QD9f87r1//vwL9/yb6//r/50L/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/MsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afCTGqS/wEAAKAO/p+9+8zV66riOPziYHCEmEOmwAgYAmNAYgz0ktBDh9B7C72ZDqH33nvvPRB6lUC5XmsFO77nXNv39d1nr+f5kAU3SNlRzIe/nJ9O7v77xy32PwAAAEwjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+B8UtTfY/AAAAdJC7/8Fxi/0PAAAA08jd/5C4xf4HAACAaeTuf2jc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/9hcUuT/Q8AAAAd5O5/eNxi/wMAAMA0cvc/Im6x/wEAAGAaufuvj1ua7H/9v/5f/7/B/v+u+n/9/3bo//X/S/T/+v8tv1//r/9n3Wj9f+7+G+KWJvsfAAAAOsjd/8i4xf4HAACAaeTuf1TcYv8DAADANHL3PzpuabL/9f/6f/3/Bvt/3//X/2+I/l//v0T/r//f8vv1//p/1o3W/+fuf0zc0mT/AwAAQAe5+x8bt9j/AAAAMI3c/Y+LW+x/AAAAmEbu/sfHLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8fv2//p91e+//73PjwT1q/5+7/8a4pcn+BwAAgA5y9z8hbrH/AQAAYBq5+58Yt9j/AAAAMI3c/U+KW5rsf/2//v+O/v+/d9H/6//1/3f8XP9/PPT/+v8l+n/9/5bfr//X/7Nu7/3/Su9/4X/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/7f9//1//p//f8+6f+H7f8v/L/e+fT/R6L/1/8f1v/f+wjv1//TwWj9f+7+p8ctTfY/AAAAdJC7/xlxi/0PAAAA08jdf1PcYv8DAADANHL3PzNuabL/9f/6f/2//v/8/v9Uy/7/9p/p//dD/z9s/79M/38k+n/9v+//6/9ZNlr/n7v/WXFLk/0PAAAAHeTuf3bcYv8DAADANHL3Pydusf8BAABgGrn7nxu3NNn/+n/9v/5f/39F3/+/Zo7+3/f/90f/r/9fov/X/2/5/fp//T/rRuv/c/c/L25psv8BAABgeqd2tfufH7fY/wAAADCN3P0viFvsfwAAAJhG7v4Xxi1N9r/+X/+v/9f/X1H/P8n3//X/+6P/1/8vOWr/v9P/19+L/n+c9+v/9f+sG63/z93/orilyf4HAACADnL3vzhusf8BAABgGrn7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6//3Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6XxS1N9j8AAAB0kLv/5XGL/Q8AAADTyN3/irjF/gcAAIBp5O5/Zdxy4f4/dTVfdfXo//X/+n/9v/5f/79P+n/9/xL9/8X7/zOH/PX0/2O9X/+v/2fdaP1/7v6b4xa//w8AAADTyN3/qrjF/gcAAIBp5O5/ddxi/wMAAMA0cve/Jm5psv8P6/9vu8e5P6//Pxr9/8Xfr//X/+v/9f/6f/3/Ev2/7/9v+f36f/0/60br/3P3vzZuabL/AQAAoIPc/a+LW+x/AAAAmEbu/tfHLfY/AAAATCN3/xvilib7//i//3+d/l//r/+Pq//X/+v/9f/6/2X6f/3/lt+v/9f/s260/j93/xvjlib7HwAAADrI3f+muMX+BwAAgGnk7n9z3GL/AwAAwDRy978lbmmy/4+///f9f/3/Jfb/p/T/Sf8f/1z1//r/S6D/1//v9P+X7aT7+a2/X/+v/2fdaP1/7v6zB1Ov3/4HAACADs4e/PHM7q1xi/0PAAAA08jd/7a4xf4HAACAaeTuf3vc0mT/6//1/yfe//v+f9H/xz9X/b/+/xLo//X/O/3/ZTvpfn7r79f/6/9ZN1r/n7v/HXFLk/0PAAAAHeTuf2fcYv8DAADANGL3n/uX3+1/AAAAmNK7Dv54ZvfuuKXJ/m/c/193pf3/tf/3n/X/F3+//v9Y+v+zF/7a0//r/7dE/6//X6L/1/9v+f3j9P/xg+v1/4xntP4/d/974pYm+x8AAAA6yN3/3rjF/gcAAIBp5O6/JW6x/wEAAGAaufvfF7c02f+N+/9Jvv9/31vjBfr/eft/3/+Pq//X/1+M/l//v9P/X7aT7ue3/v5x+n/f/2dco/X/ufvfH7c02f8AAADQQe7+D8Qt9j8AAABMI3f/B+MW+x8AAACmkbv/Q3FLk/2v/996/+/7//p//b/+f2z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADANHL3fzRusf8BAABgGrn7Pxa3NNn/+n/9/776/9v/Ivr/Jv3/Dfr/nf7/UPp//f8S/b/+f8vv1//r/1k3Wv+fu//jcUuT/Q8AAAAd5O7/RNxi/wMAAMA0cvd/Mm6x/wEAAGAaufs/FTfc654n96TjdfqQn0dvrv/X//v+v/7f9//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Px23+P1/AAAAmEbu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/N9v/X6v/P//9+v8x6f/1/0v0//r/Lb9f/6//Z91o/X/u/s/HLU32PwAAAHSQu/8LcYv9DwAAANPI3f/FuMX+BwAAgGnk7v9S3NJk/+v/9f/6/832/77/f8H79f9j0v/r/5fo//X/W36//l//z7rR+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAKaRu/+rcYv9DwAAANPI3f+1uKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/1+OWJvsfAAAAOsjd/424xf4HAACAaeTu/2bcYv8DAADANHL3fytuabL/Z+7/l/5n+v9z9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//bcUuT/Q8AAAAd5O7/Ttxi/wMAAMA0cvd/N26x/wEAAGAaufu/F7c02f8z9/9L9P/n6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07tD+v/c/d+PW5rsfwAAAOggd/8P4hb7HwAAAKaRu/+HcYv9DwAAANPI3f+juGWe/X+/Wxb+pP7/2Pv/g19E+n/9/07/r//X/x/Q/+v/l+j/9f9bfr/+X//PutG+/5+7/8dxyzz7HwAAANrL3f+TuMX+BwAAgGnk7v9p3GL/AwAAwDRy9/8sbmmy//X/vv+v/2/V/1+z0//r/68y/b/+f4n+X/+/5ffr//X/rBut/8/d//O4pcn+BwAAgA5y9/8ibrH/AQAAYBq5+38Zt9j/AAAAMI3c/b+KW5rsf/2//l//36r/9/1//f9Vp//X/y/R/+v/t/z+7P/z153+X//PnY3W/+fu/3Xc0mT/AwAAQAe5+38Tt9j/AAAAMI3c/b+NW+x/AAAAmEbu/t/FLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8ft//1/+zbrT+P3f/rXFLk/0PAAAAHeTu/33cYv8DAADANHL3/yFusf8BAABgGrn7b4tbmux//b/+f8r+/+76f/2//n8U+n/9/xL9v/5/y+/X/+v/WTda/5+7/49xS5P9DwAAAB3k7v9T3GL/AwAAwDRy9/85brH/AQAAYBq5+/8StzTZ//p//f+l9/+n6+972P7f9//1//r/Yczb/99N/6//v+L+/6abz/1Y/7/N9+v/9f+sG63/z93/17ilyf4HAACADnL3/y1usf8BAABgGrn7/x632P8AAAAwjdz9/4hbmux//b/+f8rv/+v/9f/6/2HM2//7/r/+3/f/9f/6f/0/a0br/3P3/zNuabL/AQAAoIPc/f+KW+x/AAAAmEbu/n/HLfY/AAAATCN3/3/ilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3/CwAA//8gszKL") r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240), 0xfb3f) truncate(&(0x7f0000000000)='./file0\x00', 0x6) 0s ago: executing program 4 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): becomes ready [ 172.037686][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.050271][ T5986] device veth0_macvtap entered promiscuous mode [ 172.083220][ T5986] device veth1_macvtap entered promiscuous mode [ 172.121756][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.140785][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.170771][ T3759] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.178331][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.196951][ T6293] loop3: detected capacity change from 0 to 32768 [ 172.203807][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.213828][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.224688][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.235305][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.246829][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.256106][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.281573][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.284759][ T6293] XFS (loop3): Mounting V5 Filesystem [ 172.289736][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.303620][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.315649][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.327231][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.344116][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.367210][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.390740][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.412994][ T6293] XFS (loop3): Ending clean mount [ 172.418564][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.431593][ T6293] XFS (loop3): Quotacheck needed: Please wait. [ 172.442707][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.451639][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.460964][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 172.466179][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.484170][ T5986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.498563][ T5986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.499173][ T6293] XFS (loop3): Quotacheck: Done. [ 172.526358][ T5986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.544367][ T5986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.594270][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 172.601318][ T3759] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.622622][ T3642] XFS (loop3): Unmounting Filesystem [ 172.638734][ T3759] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.664328][ T3759] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.680295][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.690907][ T3759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.709693][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.759735][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.771397][ T6301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.782074][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 172.804756][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.819933][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.844089][ T14] usb 2-1: Product: syz [ 172.860272][ T14] usb 2-1: Manufacturer: syz [ 172.862918][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.867451][ T14] usb 2-1: SerialNumber: syz [ 172.908722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.917023][ T14] usb 2-1: config 0 descriptor?? [ 172.996360][ T14] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 173.046453][ T14] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 173.073145][ T6319] Zero length message leads to an empty skb [ 173.080176][ T6319] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 173.109332][ T3873] usb 3-1: USB disconnect, device number 6 [ 173.121058][ T6319] team0: Cannot enslave team device to itself [ 173.222565][ T6321] loop4: detected capacity change from 0 to 4096 [ 173.265645][ T6321] NILFS (loop4): invalid segment: Checksum error in segment payload [ 173.284811][ T6321] NILFS (loop4): trying rollback from an earlier position [ 173.338083][ T6321] NILFS (loop4): recovery complete [ 173.373219][ T6327] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.641598][ T14] em28xx 2-1:0.0: chip ID is em2884 [ 173.998924][ T14] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 174.024054][ T14] em28xx 2-1:0.0: board has no eeprom [ 174.050087][ T6324] loop0: detected capacity change from 0 to 32768 [ 174.087740][ T6324] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.817 (6324) [ 174.112201][ T6343] loop2: detected capacity change from 0 to 1024 [ 174.134466][ T6324] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 174.154891][ T14] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 174.173352][ T14] em28xx 2-1:0.0: dvb set to bulk mode. [ 174.179110][ T6324] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 174.204458][ T14] usb 2-1: USB disconnect, device number 10 [ 174.210485][ T6324] BTRFS info (device loop0): using free space tree [ 174.231877][ T3873] em28xx 2-1:0.0: Binding DVB extension [ 174.253723][ T14] em28xx 2-1:0.0: Disconnecting em28xx [ 174.338676][ T6337] loop4: detected capacity change from 0 to 32768 [ 174.350007][ T5916] hfsplus: bad catalog entry type [ 174.414020][ T6337] XFS (loop4): Mounting V5 Filesystem [ 174.537639][ T3873] em28xx 2-1:0.0: Registering input extension [ 174.553244][ T6324] BTRFS info (device loop0): enabling ssd optimizations [ 174.711377][ T6337] XFS (loop4): Ending clean mount [ 174.775017][ T3873] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 174.801256][ T3873] Registered IR keymap rc-empty [ 174.809050][ T5986] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 174.824240][ T3873] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 174.857969][ T3873] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 174.917549][ T3873] em28xx 2-1:0.0: Input extension successfully initialized [ 174.948424][ T14] em28xx 2-1:0.0: Closing input extension [ 175.305523][ T3637] XFS (loop4): Unmounting Filesystem [ 175.388789][ T14] em28xx 2-1:0.0: Freeing device [ 175.537411][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.557099][ T6376] loop3: detected capacity change from 0 to 32768 [ 175.739651][ T6376] XFS (loop3): Mounting V5 Filesystem [ 175.872457][ T6376] XFS (loop3): Ending clean mount [ 175.872514][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.887913][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 175.887956][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 175.981708][ T26] audit: type=1800 audit(1728943820.040:12): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.829" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 176.011243][ T3653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.027673][ T3642] XFS (loop3): Unmounting Filesystem [ 176.033283][ T3653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.056992][ T3653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.067352][ T3653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.076625][ T3653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.086210][ T3653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.162679][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.341511][ T6404] program syz.4.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.434466][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.185031][ T6427] loop1: detected capacity change from 0 to 128 [ 177.246900][ T6427] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 177.263365][ T6396] chnl_net:caif_netlink_parms(): no params data found [ 177.503147][ T6413] loop0: detected capacity change from 0 to 40427 [ 177.517992][ T6413] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 177.525405][ T6413] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.595714][ T6413] F2FS-fs (loop0): invalid crc value [ 177.710542][ T6413] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.765100][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.797956][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.822433][ T6396] device bridge_slave_0 entered promiscuous mode [ 177.893083][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.897891][ T6413] F2FS-fs (loop0): Start checkpoint disabled! [ 177.906787][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.936402][ T6396] device bridge_slave_1 entered promiscuous mode [ 177.995201][ T6413] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.010761][ T6413] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 178.076165][ T3860] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 178.121058][ T3644] Bluetooth: hci3: command tx timeout [ 178.217357][ T6396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.239552][ T6396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.301172][ T11] kworker/u4:1: attempt to access beyond end of device [ 178.301172][ T11] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 178.459955][ T6396] team0: Port device team_slave_0 added [ 178.481022][ T3860] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 178.489808][ T3860] usb 5-1: config 0 has no interface number 0 [ 178.496804][ T6396] team0: Port device team_slave_1 added [ 178.512087][ T6444] loop1: detected capacity change from 0 to 32768 [ 178.516823][ T3860] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 178.607276][ T6444] XFS (loop1): Mounting V5 Filesystem [ 178.656006][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.679482][ T6472] loop0: detected capacity change from 0 to 64 [ 178.693189][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.711014][ T3860] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 178.720331][ T6396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.797781][ T3860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.797944][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.806399][ T3860] usb 5-1: Product: syz [ 178.817824][ T3860] usb 5-1: Manufacturer: syz [ 178.818265][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.822844][ T3860] usb 5-1: SerialNumber: syz [ 178.851147][ T6396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.866682][ T3860] usb 5-1: config 0 descriptor?? [ 178.883445][ T6444] XFS (loop1): Ending clean mount [ 178.893711][ T6451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.927248][ T3860] usb-storage 5-1:0.20: USB Mass Storage device detected [ 178.947591][ T6444] XFS (loop1): Quotacheck needed: Please wait. [ 178.979795][ T3860] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 179.036227][ T6444] XFS (loop1): Quotacheck: Done. [ 179.170971][ T4548] XFS (loop1): Unmounting Filesystem [ 179.187397][ T3860] scsi host1: usb-storage 5-1:0.20 [ 179.216032][ T3860] usb 5-1: USB disconnect, device number 8 [ 179.333381][ T6396] device hsr_slave_0 entered promiscuous mode [ 179.358023][ T6396] device hsr_slave_1 entered promiscuous mode [ 179.381285][ T6396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.417705][ T6396] Cannot create hsr debugfs directory [ 179.773066][ T9] device hsr_slave_0 left promiscuous mode [ 179.793069][ T9] device hsr_slave_1 left promiscuous mode [ 179.812427][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.820742][ T3769] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.846726][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.875014][ T6495] loop3: detected capacity change from 0 to 4096 [ 179.928498][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.930832][ T6495] NILFS (loop3): invalid segment: Checksum error in segment payload [ 179.959331][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.980225][ T6505] loop4: detected capacity change from 0 to 64 [ 179.987399][ T9] device bridge_slave_1 left promiscuous mode [ 179.990821][ T6495] NILFS (loop3): trying rollback from an earlier position [ 179.995494][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.057363][ T6495] NILFS (loop3): recovery complete [ 180.094566][ T6507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.132916][ T9] device bridge_slave_0 left promiscuous mode [ 180.148044][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.181107][ T3769] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 180.200816][ T3644] Bluetooth: hci3: command tx timeout [ 180.211108][ T3769] usb 1-1: config 0 has no interface number 0 [ 180.217260][ T3769] usb 1-1: config 0 interface 233 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 180.227853][ T3769] usb 1-1: config 0 interface 233 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 180.386270][ T9] device veth1_macvtap left promiscuous mode [ 180.401016][ T3769] usb 1-1: New USB device found, idVendor=19d2, idProduct=1291, bcdDevice=64.71 [ 180.415012][ T3769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.426487][ T9] device veth0_macvtap left promiscuous mode [ 180.447003][ T3769] usb 1-1: Product: syz [ 180.448337][ T9] device veth1_vlan left promiscuous mode [ 180.455749][ T3769] usb 1-1: Manufacturer: syz [ 180.475934][ T3769] usb 1-1: SerialNumber: syz [ 180.476240][ T9] device veth0_vlan left promiscuous mode [ 180.491850][ T3769] usb 1-1: config 0 descriptor?? [ 180.510991][ T6491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.521876][ T6491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.572502][ T3769] option 1-1:0.233: GSM modem (1-port) converter detected [ 180.594450][ T3769] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 181.261280][ T9] team0 (unregistering): Port device team_slave_1 removed [ 181.308335][ T9] team0 (unregistering): Port device team_slave_0 removed [ 181.327246][ T3769] usb 1-1: USB disconnect, device number 8 [ 181.365293][ T3769] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 181.382580][ T3769] option 1-1:0.233: device disconnected [ 181.493725][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.570490][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.724434][ T6534] loop4: detected capacity change from 0 to 512 [ 181.860290][ T6534] EXT4-fs (loop4): 1 truncate cleaned up [ 181.870304][ T6534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.062446][ T6537] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.874: attempt to clear invalid blocks 1886221359 len 1 [ 182.109892][ T6537] EXT4-fs (loop4): Remounting filesystem read-only [ 182.186341][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 182.294591][ T3644] Bluetooth: hci3: command tx timeout [ 182.354162][ T9] bond0 (unregistering): Released all slaves [ 182.472381][ T6519] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 182.512869][ T6519] team0: Cannot enslave team device to itself [ 183.059321][ T6558] loop1: detected capacity change from 0 to 1024 [ 183.089304][ T6558] EXT4-fs: Ignoring removed orlov option [ 183.097614][ T6558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.110263][ T6558] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.130903][ T6558] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 183.158944][ T6558] EXT4-fs (loop1): invalid journal inode [ 183.178258][ T6558] EXT4-fs (loop1): can't get journal size [ 183.251641][ T6558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.381859][ T4548] EXT4-fs (loop1): unmounting filesystem. [ 183.421096][ T3769] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.472358][ T6578] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 183.710749][ T3769] usb 1-1: Using ep0 maxpacket: 8 [ 183.850880][ T3769] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.859611][ T3769] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.900781][ T3769] usb 1-1: config 1 has no interface number 1 [ 183.907389][ T3769] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.937333][ T6396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.963933][ T3769] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.988574][ T6396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.023774][ T6396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.050340][ T6396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.151091][ T3769] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.160183][ T3769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.190898][ T3769] usb 1-1: Product: syz [ 184.198659][ T3769] usb 1-1: Manufacturer: syz [ 184.218667][ T3769] usb 1-1: SerialNumber: syz [ 184.278768][ T6573] loop4: detected capacity change from 0 to 32768 [ 184.360993][ T3644] Bluetooth: hci3: command tx timeout [ 184.425292][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.436121][ T6573] XFS (loop4): Mounting V5 Filesystem [ 184.541008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.554902][ T6573] XFS (loop4): Ending clean mount [ 184.561235][ T3769] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.562677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.576042][ T6573] XFS (loop4): Quotacheck needed: Please wait. [ 184.630668][ T3769] usb 1-1: USB disconnect, device number 9 [ 184.651414][ T6396] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.663882][ T3848] udevd[3848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.722838][ T6573] XFS (loop4): Quotacheck: Done. [ 184.736951][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.781195][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.821315][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.828457][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.867381][ T3637] XFS (loop4): Unmounting Filesystem [ 184.889775][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.921711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.934997][ T6588] loop3: detected capacity change from 0 to 32768 [ 184.966551][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.973765][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.108203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.157711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.178165][ T6588] XFS (loop3): Mounting V5 Filesystem [ 185.265018][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.285053][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.295968][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.305532][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.315161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.328832][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.349135][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.362812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.374317][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.387569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.412541][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.419908][ T6588] XFS (loop3): Ending clean mount [ 185.456021][ T6588] XFS (loop3): Quotacheck needed: Please wait. [ 185.560872][ T41] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 185.562550][ T6588] XFS (loop3): Quotacheck: Done. [ 185.728259][ T3642] XFS (loop3): Unmounting Filesystem [ 185.965687][ T41] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 185.993976][ T41] usb 2-1: config 0 has no interface number 0 [ 186.000130][ T41] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 186.013980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.030480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.097004][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.192104][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.210903][ T41] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 186.211264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.237342][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.261645][ T41] usb 2-1: Product: syz [ 186.269845][ T41] usb 2-1: Manufacturer: syz [ 186.286294][ T41] usb 2-1: SerialNumber: syz [ 186.298233][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.315399][ T41] usb 2-1: config 0 descriptor?? [ 186.331558][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.371805][ T6630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.380434][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.402422][ T41] usb-storage 2-1:0.20: USB Mass Storage device detected [ 186.419684][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.436843][ T41] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 186.463058][ T6396] device veth0_vlan entered promiscuous mode [ 186.585934][ T6396] device veth1_vlan entered promiscuous mode [ 186.629805][ T41] scsi host1: usb-storage 2-1:0.20 [ 186.691313][ T41] usb 2-1: USB disconnect, device number 11 [ 186.745695][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.759566][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.797645][ T6396] device veth0_macvtap entered promiscuous mode [ 186.827405][ T6396] device veth1_macvtap entered promiscuous mode [ 186.899438][ T6672] loop4: detected capacity change from 0 to 64 [ 186.912840][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.943354][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.974256][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.018276][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.058991][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.090433][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.125857][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.154238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.172251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.202724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.246975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.285189][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.309977][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.332303][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.357974][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.388351][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.412562][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.436282][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.458788][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.500541][ T6660] loop0: detected capacity change from 0 to 32768 [ 187.501673][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.549003][ T6396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.576129][ T6396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.622551][ T6660] XFS (loop0): Mounting V5 Filesystem [ 187.640701][ T6396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.649605][ T6396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.750674][ T6660] XFS (loop0): Ending clean mount [ 187.759268][ T6660] XFS (loop0): Quotacheck needed: Please wait. [ 187.872031][ T6660] XFS (loop0): Quotacheck: Done. [ 187.924953][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.954214][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.985752][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.002050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.020528][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.034084][ T5986] XFS (loop0): Unmounting Filesystem [ 188.066808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.924073][ T6722] loop3: detected capacity change from 0 to 256 [ 188.959014][ T6722] exfat: Deprecated parameter 'utf8' [ 188.984431][ T6725] loop4: detected capacity change from 0 to 1024 [ 188.992629][ T6722] exfat: Deprecated parameter 'namecase' [ 189.009930][ T6722] exfat: Deprecated parameter 'namecase' [ 189.131337][ T6722] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 189.807529][ T6705] loop1: detected capacity change from 0 to 65536 [ 189.926456][ T6705] XFS (loop1): Mounting V5 Filesystem [ 190.027074][ T6705] XFS (loop1): Ending clean mount [ 190.105808][ T6705] XFS (loop1): Quotacheck needed: Please wait. [ 190.206092][ T6776] loop4: detected capacity change from 0 to 1024 [ 190.219528][ T6705] XFS (loop1): Quotacheck: Done. [ 190.278790][ T6781] loop3: detected capacity change from 0 to 2048 [ 190.318262][ T3692] hfsplus: b-tree write err: -5, ino 4 [ 190.384786][ T6781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.408379][ T4548] XFS (loop1): Unmounting Filesystem [ 190.591775][ T6790] loop4: detected capacity change from 0 to 512 [ 190.648497][ T6790] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.932: casefold flag without casefold feature [ 190.664716][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 190.789853][ T6790] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.932: couldn't read orphan inode 15 (err -117) [ 190.858390][ T6790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.890178][ T6794] loop3: detected capacity change from 0 to 2048 [ 190.969717][ T6790] EXT4-fs (loop4): shut down requested (0) [ 190.982332][ T6794] loop3: p2 p3 p7 [ 191.212616][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 191.344089][ T6778] loop0: detected capacity change from 0 to 32768 [ 191.415586][ T6778] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 191.434251][ T6802] loop3: detected capacity change from 0 to 128 [ 191.454402][ T6778] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.506733][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.559574][ T6807] loop2: detected capacity change from 0 to 8 [ 191.566170][ T6802] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038 (0x7fffffff) [ 191.682599][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 191.695600][ T6778] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 191.770106][ T154] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 191.788061][ T154] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 191.894541][ T154] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 191.935767][ T154] gfs2: fsid=syz:syz.0: jid=0: Done [ 191.944243][ T6778] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 191.962310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 192.095302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.252363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.281189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 192.391105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.399629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.413697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 192.422730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 192.433932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.632092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 192.696676][ T6813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.737595][ T6813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.755711][ T6813] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 192.758394][ T6841] loop4: detected capacity change from 0 to 1024 [ 192.780768][ T6813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.788771][ T6813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.807708][ T6813] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 192.816386][ T6841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.825926][ T6813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.856223][ T6813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.863232][ T6813] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 192.877981][ T6813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.886954][ T6813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.894944][ T6813] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 192.915421][ T6813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.922014][ T6813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.937265][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 192.944305][ T6813] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 193.108378][ T6855] loop3: detected capacity change from 0 to 64 [ 193.159972][ T6849] loop0: detected capacity change from 0 to 8192 [ 193.207355][ T6849] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.221398][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.294930][ T6849] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 193.304673][ T6849] REISERFS (device loop0): using ordered data mode [ 193.312345][ T6849] reiserfs: using flush barriers [ 193.389390][ T6862] loop4: detected capacity change from 0 to 4096 [ 193.398396][ T6849] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.451210][ T6849] REISERFS (device loop0): checking transaction log (loop0) [ 193.454769][ T6862] ntfs3: loop4: ino=9, ntfs_iget5 [ 193.461041][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 193.489657][ T6849] REISERFS (device loop0): Using r5 hash to sort names [ 193.491923][ T6862] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 193.515435][ T6849] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 193.558503][ T6849] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 193.741535][ T14] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 193.756126][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.779050][ T14] usb 2-1: Product: syz [ 193.815200][ T14] usb 2-1: Manufacturer: syz [ 193.821498][ T14] usb 2-1: SerialNumber: syz [ 193.849967][ T14] usb 2-1: config 0 descriptor?? [ 193.904689][ T14] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 194.119020][ T14] usb 2-1: USB disconnect, device number 12 [ 194.123234][ T6889] loop4: detected capacity change from 0 to 512 [ 194.200860][ T3644] Bluetooth: hci4: command 0x0406 tx timeout [ 194.215328][ T6889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.224583][ T6889] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038 (0x7fffffff) [ 194.274463][ T6896] loop3: detected capacity change from 0 to 1024 [ 194.285507][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459454][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 194.812220][ T6908] loop4: detected capacity change from 0 to 256 [ 194.841871][ T3644] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.848011][ T3644] Bluetooth: hci2: command 0x0406 tx timeout [ 194.858094][ T6908] exfat: Deprecated parameter 'namecase' [ 194.873721][ T6908] exfat: Deprecated parameter 'utf8' [ 194.897330][ T6908] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 194.931189][ T3644] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.937361][ T3644] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.157113][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 195.692863][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.950708][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 196.073049][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.088513][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 196.098268][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.129164][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.149639][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.178954][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.228643][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.280950][ T3644] Bluetooth: hci4: command 0x0406 tx timeout [ 196.352229][ T6934] loop3: detected capacity change from 0 to 32768 [ 196.418037][ T6934] XFS (loop3): Mounting V5 Filesystem [ 196.429054][ T6939] loop0: detected capacity change from 0 to 32768 [ 196.462488][ T6939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.996 (6939) [ 196.491286][ T6939] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.508438][ T6939] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 196.517422][ T6939] BTRFS info (device loop0): turning on async discard [ 196.524539][ T14] usb 5-1: GET_CAPABILITIES returned 0 [ 196.530257][ T14] usbtmc 5-1:16.0: can't read capabilities [ 196.530910][ T154] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.539128][ T6939] BTRFS info (device loop0): using free space tree [ 196.566111][ T6934] XFS (loop3): Ending clean mount [ 196.635878][ T3642] XFS (loop3): Unmounting Filesystem [ 196.655780][ T6945] loop2: detected capacity change from 0 to 32768 [ 196.782378][ T3860] usb 5-1: USB disconnect, device number 9 [ 196.790850][ T6945] XFS (loop2): Mounting V5 Filesystem [ 196.800814][ T6939] BTRFS info (device loop0): enabling ssd optimizations [ 196.820826][ T154] usb 2-1: Using ep0 maxpacket: 8 [ 196.921213][ T3644] Bluetooth: hci2: command 0x0406 tx timeout [ 196.927315][ T3644] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.953779][ T154] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.963726][ T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.981870][ T154] usb 2-1: config 0 descriptor?? [ 196.986649][ T6945] XFS (loop2): Ending clean mount [ 197.000829][ T3644] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.006943][ T3644] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.043675][ T6945] XFS (loop2): Quotacheck needed: Please wait. [ 197.097890][ T6945] XFS (loop2): Quotacheck: Done. [ 197.128306][ T5986] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.184150][ T6396] XFS (loop2): Unmounting Filesystem [ 197.311082][ T3759] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.549658][ T6989] loop0: detected capacity change from 0 to 64 [ 197.620570][ T6989] hfs: keylen 94 too large [ 197.700997][ T3759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.729778][ T3759] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.759571][ T3759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.784337][ T3759] usb 4-1: config 0 descriptor?? [ 197.892050][ T154] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 197.915538][ T154] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 197.971038][ T154] asix: probe of 2-1:0.0 failed with error -71 [ 197.988839][ T154] usb 2-1: USB disconnect, device number 13 [ 198.038656][ T7004] loop2: detected capacity change from 0 to 512 [ 198.068265][ T7006] loop4: detected capacity change from 0 to 512 [ 198.091757][ T7004] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1009: corrupted in-inode xattr [ 198.117803][ T7006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.124992][ T7004] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1009: couldn't read orphan inode 15 (err -117) [ 198.145404][ T7004] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.177740][ T7006] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 198.186573][ T7006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 198.195301][ T7006] System zones: 0-1, 15-15, 18-18, 34-34 [ 198.203694][ T7006] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.210142][ T7006] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 198.219843][ T7006] EXT4-fs warning (device loop4): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.235075][ T7006] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 198.242491][ T7006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1010: bg 0: block 40: padding at end of block bitmap is not set [ 198.259208][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 198.266725][ T3759] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 198.289622][ T7006] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 198.301388][ T3759] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input7 [ 198.309050][ T7006] EXT4-fs (loop4): 1 truncate cleaned up [ 198.319192][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.413222][ T3759] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 198.438473][ T7006] EXT4-fs (loop4): shut down requested (2) [ 198.561044][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 198.710303][ T7024] loop4: detected capacity change from 0 to 512 [ 198.793179][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.819091][ T7024] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038 (0x7fffffff) [ 199.040162][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 199.184665][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 199.217135][ T7027] loop0: detected capacity change from 0 to 32768 [ 199.325403][ T7044] find_entry called with index = 0 [ 199.333498][ T7044] find_entry called with index = 0 [ 199.452195][ T3769] usb 4-1: USB disconnect, device number 9 [ 200.196288][ T7050] loop1: detected capacity change from 0 to 32768 [ 200.275897][ T7050] XFS (loop1): Mounting V5 Filesystem [ 200.365393][ T7050] XFS (loop1): Ending clean mount [ 200.378428][ T7050] XFS (loop1): Quotacheck needed: Please wait. [ 200.473986][ T7050] XFS (loop1): Quotacheck: Done. [ 200.539094][ T7070] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 200.576894][ T7052] loop2: detected capacity change from 0 to 40427 [ 200.624052][ T7052] F2FS-fs (loop2): invalid crc value [ 200.676140][ T7073] loop4: detected capacity change from 0 to 64 [ 200.688686][ T7052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.751601][ T7073] hfs: keylen 94 too large [ 200.864619][ T7052] F2FS-fs (loop2): Start checkpoint disabled! [ 200.923819][ T4548] XFS (loop1): Unmounting Filesystem [ 200.957922][ T7052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 201.036472][ T7052] syz.2.1030: attempt to access beyond end of device [ 201.036472][ T7052] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.104871][ T7052] syz.2.1030: attempt to access beyond end of device [ 201.104871][ T7052] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 201.350417][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 201.401314][ T3747] kworker/u4:7: attempt to access beyond end of device [ 201.401314][ T3747] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 201.445773][ T3747] kworker/u4:7: attempt to access beyond end of device [ 201.445773][ T3747] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 202.188329][ T7117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.192107][ T7118] loop0: detected capacity change from 0 to 8192 [ 202.207153][ T7117] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.227765][ T7118] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.241441][ T7117] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 202.251482][ T7118] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 202.261718][ T7118] REISERFS (device loop0): using ordered data mode [ 202.268340][ T7118] reiserfs: using flush barriers [ 202.277966][ T7117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.286991][ T7118] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.307648][ T7117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.317827][ T7118] REISERFS (device loop0): checking transaction log (loop0) [ 202.336942][ T7117] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 202.381533][ T7117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.401431][ T7117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.426574][ T7117] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 202.459800][ T7117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.476552][ T7117] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.496790][ T7118] REISERFS (device loop0): Using tea hash to sort names [ 202.507695][ T7117] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 202.521926][ T7118] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 202.546898][ T7117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.564458][ T7117] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.578038][ T7117] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 202.898800][ T7140] loop2: detected capacity change from 0 to 4096 [ 203.018044][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1055'. [ 203.049415][ T7140] ntfs3: loop2: ino=9, ntfs_iget5 [ 203.058639][ T7140] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 203.310858][ T3626] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.925772][ T7178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.932157][ T3626] usb 1-1: unable to read config index 0 descriptor/all [ 203.948477][ T3626] usb 1-1: can't read configurations, error -71 [ 203.959611][ T7178] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.979636][ T7189] loop1: detected capacity change from 0 to 256 [ 203.986822][ T7178] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 204.004576][ T7178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.017823][ T7178] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.034289][ T7178] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 204.048295][ T7189] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.093230][ T7178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.103965][ T7178] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.124083][ T7178] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 204.152344][ T7178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.159752][ T7178] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.177229][ T7178] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 204.188100][ T7178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.208459][ T7178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.229350][ T7178] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 204.368183][ T7199] loop4: detected capacity change from 0 to 2048 [ 204.403568][ T7199] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002] [ 204.420841][ T7199] System zones: 0-7 [ 204.434891][ T7199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.489605][ T7187] loop2: detected capacity change from 0 to 32768 [ 204.497598][ T7187] XFS: noikeep mount option is deprecated. [ 204.536599][ T3637] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.565834][ T7187] XFS (loop2): Mounting V5 Filesystem [ 204.596823][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 204.696907][ T7220] loop1: detected capacity change from 0 to 4096 [ 204.714257][ T7215] loop3: detected capacity change from 0 to 2048 [ 204.721025][ T7187] XFS (loop2): Ending clean mount [ 204.736900][ T7187] XFS (loop2): Quotacheck needed: Please wait. [ 204.798147][ T7187] XFS (loop2): Quotacheck: Done. [ 204.801211][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.874059][ T7215] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.966953][ T7215] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 204.986509][ T7232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.018711][ T7215] EXT4-fs (loop3): This should not happen!! Data will be lost [ 205.018711][ T7215] [ 205.038443][ T6396] XFS (loop2): Unmounting Filesystem [ 205.041006][ T7215] EXT4-fs (loop3): Total free blocks count 0 [ 205.083043][ T7215] EXT4-fs (loop3): Free/Dirty block details [ 205.106213][ T7215] EXT4-fs (loop3): free_blocks=2415919104 [ 205.114395][ T7215] EXT4-fs (loop3): dirty_blocks=48 [ 205.133440][ T7215] EXT4-fs (loop3): Block reservation details [ 205.169745][ T7215] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 205.201161][ T7230] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 205.529597][ T7236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.540967][ T7236] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.542436][ T7225] loop4: detected capacity change from 0 to 40427 [ 205.554754][ T7236] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 205.564994][ T7236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.575205][ T7236] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.586427][ T7225] F2FS-fs (loop4): invalid crc value [ 205.594592][ T7236] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 205.595659][ T7225] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 205.618838][ T7236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.629773][ T7236] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.638335][ T7225] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.644925][ T7236] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 205.657807][ T7236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.666860][ T7236] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.685063][ T7236] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 205.695393][ T7248] loop2: detected capacity change from 0 to 512 [ 205.696942][ T7236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.715755][ T7236] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.719913][ T7225] F2FS-fs (loop4): recover fsync data on readonly fs [ 205.735257][ T7248] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 205.739049][ T7236] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 205.748780][ T7248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.756097][ T7225] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 205.777699][ T7225] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 205.785353][ T7225] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.785414][ T7248] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 205.811519][ T7248] EXT4-fs (loop2): 1 truncate cleaned up [ 205.817294][ T7248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 205.939086][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 205.957728][ T7258] loop3: detected capacity change from 0 to 128 [ 206.022488][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.053345][ T7258] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038 (0x7fffffff) [ 206.056326][ T7264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1096'. [ 206.080889][ T3769] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 206.179091][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 206.484083][ T3769] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.495232][ T3769] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.505772][ T3769] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.516665][ T3769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.541075][ T7242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.586160][ T3689] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 206.631073][ T3626] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.676690][ T7290] loop3: detected capacity change from 0 to 128 [ 206.700297][ T7281] loop4: detected capacity change from 0 to 32768 [ 206.716239][ T7281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1104 (7281) [ 206.742457][ T7281] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.753575][ T7281] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 206.776118][ T7281] BTRFS info (device loop4): turning on async discard [ 206.784770][ T7281] BTRFS info (device loop4): using free space tree [ 206.815990][ T7296] loop3: detected capacity change from 0 to 1024 [ 206.822051][ T7281] BTRFS info (device loop4): enabling ssd optimizations [ 206.823265][ T7296] EXT4-fs: Ignoring removed orlov option [ 206.836816][ T7296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.842696][ T154] usb 2-1: USB disconnect, device number 14 [ 206.876976][ T7296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.942240][ T3637] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.951531][ T3689] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 206.963052][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.976183][ T3689] usb 3-1: config 0 descriptor?? [ 207.001031][ T3626] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.012985][ T3626] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.023290][ T3626] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.035500][ T3626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.055708][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 207.073920][ T7279] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 207.250810][ T3689] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 207.257992][ T3689] hackrf 3-1:0.0: Could not detect board [ 207.281607][ T3689] hackrf: probe of 3-1:0.0 failed with error -71 [ 207.296041][ T3689] usb 3-1: USB disconnect, device number 7 [ 207.412880][ T3867] usb 1-1: USB disconnect, device number 12 [ 207.480913][ T3644] Bluetooth: hci4: command 0x0406 tx timeout [ 207.640853][ T3644] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.645176][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 207.721086][ T3655] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.727470][ T3655] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.355772][ T7360] loop3: detected capacity change from 0 to 1024 [ 208.382613][ T7360] EXT4-fs: Ignoring removed nobh option [ 208.418570][ T7363] loop4: detected capacity change from 0 to 128 [ 208.427039][ T7360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 208.459116][ T7363] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 208.510152][ T7363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.550342][ T7342] loop1: detected capacity change from 0 to 32768 [ 208.558983][ T7342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1123 (7342) [ 208.559809][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 208.623142][ T7342] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.648432][ T7342] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.679404][ T7342] BTRFS info (device loop1): turning on async discard [ 208.700723][ T7342] BTRFS info (device loop1): using free space tree [ 208.843038][ T7342] BTRFS info (device loop1): enabling ssd optimizations [ 208.997830][ T7402] loop3: detected capacity change from 0 to 256 [ 209.005509][ T7402] exfat: Deprecated parameter 'utf8' [ 209.016622][ T7402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 209.071332][ T4548] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.319177][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 209.560815][ T3653] Bluetooth: hci4: command 0x0406 tx timeout [ 209.720720][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.731380][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 209.800796][ T3653] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.806878][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.078801][ T7434] loop4: detected capacity change from 0 to 1024 [ 210.145633][ T7432] loop1: detected capacity change from 0 to 4096 [ 210.177600][ T7432] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 210.513942][ T7447] loop1: detected capacity change from 0 to 4096 [ 210.530367][ T7447] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 210.568112][ T7447] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 210.589379][ T7452] loop3: detected capacity change from 0 to 256 [ 210.597510][ T7452] MINIX-fs: mounting file system with errors, running fsck is recommended [ 210.611191][ T7447] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 210.635863][ T7452] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 210.656289][ T7447] ntfs: volume version 3.1. [ 210.677985][ T7452] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 210.817756][ T7438] loop2: detected capacity change from 0 to 32768 [ 210.841685][ T7438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1155 (7438) [ 210.881188][ T7438] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.900376][ T7438] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 210.920401][ T4548] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 210.920502][ T7438] BTRFS info (device loop2): turning on async discard [ 210.920527][ T7438] BTRFS info (device loop2): using free space tree [ 211.127269][ T7481] loop4: detected capacity change from 0 to 4096 [ 211.135515][ T7481] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 211.157463][ T7481] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 211.166660][ T7483] loop1: detected capacity change from 0 to 4096 [ 211.176071][ T7438] BTRFS info (device loop2): enabling ssd optimizations [ 211.179407][ T7481] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 211.194101][ T7481] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 211.214644][ T7481] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 211.220283][ T7483] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 211.223764][ T7481] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 211.255884][ T7481] ntfs: volume version 3.1. [ 211.298496][ T7483] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 211.319830][ T7483] ntfs3: loop1: Failed to load $Extend. [ 211.383139][ T6396] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.453969][ T7493] loop0: detected capacity change from 0 to 2048 [ 211.549831][ T7493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.637837][ T7493] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 211.650772][ T3653] Bluetooth: hci4: command 0x0406 tx timeout [ 211.687620][ T7493] fs-verity: sha256 using implementation "sha256-avx2" [ 211.706109][ T7493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1185: bg 0: block 288: padding at end of block bitmap is not set [ 211.732937][ T7493] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 211.790980][ T5986] EXT4-fs (loop0): unmounting filesystem. [ 211.809984][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 211.820102][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.880833][ T3655] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.886940][ T3655] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.910976][ T3760] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.150855][ T3760] usb 4-1: Using ep0 maxpacket: 16 [ 212.271085][ T3760] usb 4-1: config 0 has no interfaces? [ 212.435577][ T3760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.445819][ T3760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.465483][ T3760] usb 4-1: Product: syz [ 212.469695][ T3760] usb 4-1: Manufacturer: syz [ 212.484604][ T3760] usb 4-1: SerialNumber: syz [ 212.511224][ T3760] usb 4-1: config 0 descriptor?? [ 212.568898][ T7539] loop0: detected capacity change from 0 to 164 [ 212.595743][ T7539] Unable to read rock-ridge attributes [ 212.616804][ T7539] Unable to read rock-ridge attributes [ 212.652337][ T7539] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 212.782039][ T152] usb 4-1: USB disconnect, device number 10 [ 212.816355][ T7521] loop1: detected capacity change from 0 to 32768 [ 212.844653][ T7521] XFS: attr2 mount option is deprecated. [ 212.870953][ T7521] XFS: ikeep mount option is deprecated. [ 212.876802][ T7521] XFS: noikeep mount option is deprecated. [ 212.908866][ T7521] XFS (loop1): Mounting V5 Filesystem [ 213.038265][ T7521] XFS (loop1): Ending clean mount [ 213.056729][ T7521] XFS (loop1): Quotacheck needed: Please wait. [ 213.122530][ T7536] loop2: detected capacity change from 0 to 40427 [ 213.137704][ T7521] XFS (loop1): Quotacheck: Done. [ 213.150287][ T7536] F2FS-fs (loop2): Found nat_bits in checkpoint [ 213.226297][ T7536] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 213.227118][ T4548] XFS (loop1): Unmounting Filesystem [ 213.285776][ T7545] loop4: detected capacity change from 0 to 32768 [ 213.372145][ T6396] syz-executor: attempt to access beyond end of device [ 213.372145][ T6396] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.407083][ T7545] XFS (loop4): Mounting V5 Filesystem [ 213.586458][ T7545] XFS (loop4): Ending clean mount [ 213.606627][ T7545] XFS (loop4): Quotacheck needed: Please wait. [ 213.680224][ T7545] XFS (loop4): Quotacheck: Done. [ 213.701570][ T7576] loop1: detected capacity change from 0 to 4096 [ 213.720942][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 213.746044][ T7576] NILFS (loop1): invalid segment: Checksum error in segment payload [ 213.761025][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 213.781756][ T7576] NILFS (loop1): trying rollback from an earlier position [ 213.815248][ T7576] NILFS (loop1): recovery complete [ 213.845509][ T7581] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.880917][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 213.887015][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.933409][ T7585] loop0: detected capacity change from 0 to 128 [ 213.960791][ T3655] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.966862][ T3655] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.350823][ T3637] XFS (loop4): Unmounting Filesystem [ 214.494273][ T7602] loop1: detected capacity change from 0 to 1024 [ 214.528974][ T3760] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 214.661358][ T3692] hfsplus: b-tree write err: -5, ino 4 [ 214.935219][ T3760] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 214.960976][ T3760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.981708][ T3760] usb 1-1: config 0 descriptor?? [ 215.110143][ T7617] loop2: detected capacity change from 0 to 2048 [ 215.183627][ T7618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.260896][ T3760] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 215.281182][ T3760] hackrf 1-1:0.0: Could not detect board [ 215.286895][ T3760] hackrf: probe of 1-1:0.0 failed with error -71 [ 215.300874][ T7604] loop3: detected capacity change from 0 to 32768 [ 215.319825][ T3760] usb 1-1: USB disconnect, device number 13 [ 215.384894][ T7604] XFS (loop3): Mounting V5 Filesystem [ 215.511056][ T7604] XFS (loop3): Ending clean mount [ 215.597788][ T3642] XFS (loop3): Unmounting Filesystem [ 215.704719][ T7614] loop4: detected capacity change from 0 to 32768 [ 215.723830][ T7614] XFS: noikeep mount option is deprecated. [ 215.849221][ T7614] XFS (loop4): Mounting V5 Filesystem [ 215.975962][ T7614] XFS (loop4): Ending clean mount [ 216.008639][ T7614] XFS (loop4): Quotacheck needed: Please wait. [ 216.032950][ T7651] loop3: detected capacity change from 0 to 64 [ 216.059069][ T7641] loop1: detected capacity change from 0 to 4096 [ 216.068408][ T7641] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 216.116072][ T7614] XFS (loop4): Quotacheck: Done. [ 216.144976][ T7653] loop0: detected capacity change from 0 to 8 [ 216.152842][ T7653] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 216.268167][ T3637] XFS (loop4): Unmounting Filesystem [ 216.744964][ T7679] loop2: detected capacity change from 0 to 256 [ 216.760313][ T7681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.784696][ T7679] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 216.825645][ T7678] loop1: detected capacity change from 0 to 2048 [ 216.841002][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.945954][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.146839][ T4548] EXT4-fs (loop1): unmounting filesystem. [ 217.505573][ T7706] loop3: detected capacity change from 0 to 256 [ 217.517037][ T7683] loop4: detected capacity change from 0 to 32768 [ 217.533960][ T7683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1235 (7683) [ 217.537352][ T7706] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0619d298, utbl_chksum : 0xe619d30d) [ 217.573781][ T7683] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.600672][ T7683] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 217.612796][ T7683] BTRFS info (device loop4): using free space tree [ 217.670584][ T7683] BTRFS info (device loop4): enabling ssd optimizations [ 217.842420][ T3637] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.845813][ T7725] loop1: detected capacity change from 0 to 2048 [ 217.931766][ T7730] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.099381][ T7734] loop3: detected capacity change from 0 to 4096 [ 218.121754][ T7734] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 218.407571][ T7742] loop1: detected capacity change from 0 to 4096 [ 218.416998][ T7740] loop2: detected capacity change from 0 to 4096 [ 218.446094][ T7740] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 218.470590][ T7742] ntfs: volume version 3.1. [ 218.482650][ T7742] __ntfs_error: 18 callbacks suppressed [ 218.482669][ T7742] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 218.491449][ T7740] ntfs3: loop2: Failed to load $Extend. [ 218.527389][ T3640] kernel write not supported for file /678/projid_map (pid: 3640 comm: kworker/0:4) [ 218.537590][ T7742] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 218.572608][ T7742] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 218.917986][ T7765] loop0: detected capacity change from 0 to 512 [ 218.952681][ T7765] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.988021][ T3640] kernel write not supported for file /amidi2 (pid: 3640 comm: kworker/0:4) [ 219.019815][ T7765] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.1274: iget: bad i_size value: -6917529027641081756 [ 219.070769][ T7765] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1274: couldn't read orphan inode 17 (err -117) [ 219.090826][ T7765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 219.129680][ T7765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1274: bg 0: block 65: padding at end of block bitmap is not set [ 219.221578][ T7765] Quota error (device loop0): write_blk: dquota write failed [ 219.262907][ T7765] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 219.293105][ T7782] Quota error (device loop0): write_blk: dquota write failed [ 219.304446][ T7782] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 219.340429][ T7789] loop1: detected capacity change from 0 to 512 [ 219.347258][ T7765] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1274: Failed to acquire dquot type 0 [ 219.365647][ T7789] EXT4-fs: Ignoring removed i_version option [ 219.369314][ T7782] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1274: Failed to acquire dquot type 0 [ 219.383711][ T7789] EXT4-fs: Ignoring removed nobh option [ 219.409010][ T7789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.421245][ T7793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1284'. [ 219.450899][ T7789] EXT4-fs (loop1): 1 truncate cleaned up [ 219.452232][ T7795] loop3: detected capacity change from 0 to 1024 [ 219.465655][ T7789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.479793][ T5986] EXT4-fs (loop0): unmounting filesystem. [ 219.606350][ T32] hfsplus: b-tree write err: -5, ino 4 [ 219.674254][ T4548] EXT4-fs (loop1): unmounting filesystem. [ 220.103430][ T7831] kvm [7828]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x40 [ 220.126609][ T7834] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 220.653487][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 220.818051][ T7822] loop0: detected capacity change from 0 to 40427 [ 220.845099][ T7822] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 220.856905][ T7822] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 220.946231][ T7822] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.056615][ T7822] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.076569][ T7822] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.156385][ T7822] syz.0.1296: attempt to access beyond end of device [ 221.156385][ T7822] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 221.163798][ T7863] loop1: detected capacity change from 0 to 2048 [ 221.215505][ T7866] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.350523][ T5986] syz-executor: attempt to access beyond end of device [ 221.350523][ T5986] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.382782][ T7849] loop2: detected capacity change from 0 to 32768 [ 221.403742][ T7870] loop3: detected capacity change from 0 to 4096 [ 221.412170][ T7870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 221.427554][ T7849] XFS (loop2): Mounting V5 Filesystem [ 221.465607][ T7870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 221.481168][ T7883] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1320'. [ 221.501304][ T7886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.572953][ T7849] XFS (loop2): Ending clean mount [ 221.602920][ T26] audit: type=1800 audit(1728943865.670:18): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1309" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 221.657870][ T3863] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 221.679819][ T3863] XFS (loop2): Unmount and run xfs_repair [ 221.695807][ T3863] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 221.714784][ T3863] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 221.735087][ T3863] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 221.754979][ T3863] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 221.774813][ T3863] 00000030: 00 00 00 00 05 1b 0d e2 00 00 00 00 00 00 00 01 ................ [ 221.790810][ T3863] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 221.799760][ T3863] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 221.825852][ T3863] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 221.848261][ T3863] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 221.872630][ T7849] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 221.909213][ T7849] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 221.965131][ T7849] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 222.061639][ T6396] XFS (loop2): Unmounting Filesystem [ 222.768526][ T7913] loop0: detected capacity change from 0 to 2048 [ 222.850899][ T7916] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.897809][ T7919] loop2: detected capacity change from 0 to 512 [ 222.909380][ T3653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.920396][ T3653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.939045][ T3653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.939551][ T7919] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1333: attempt to clear invalid blocks 2 len 1 [ 222.962512][ T3653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.972289][ T3653] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.979684][ T3653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.016367][ T7919] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 223.035036][ T7919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1333: invalid indirect mapped block 1819239214 (level 0) [ 223.049853][ T7919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1333: invalid indirect mapped block 1819239214 (level 1) [ 223.065479][ T7919] EXT4-fs (loop2): 1 truncate cleaned up [ 223.071625][ T7919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.089321][ T7919] EXT4-fs (loop2): shut down requested (2) [ 223.135189][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 223.185548][ T7932] loop2: detected capacity change from 0 to 16 [ 223.217172][ T7932] erofs: (device loop2): mounted with root inode @ nid 36. [ 223.571339][ T7921] chnl_net:caif_netlink_parms(): no params data found [ 223.630461][ T7953] loop2: detected capacity change from 0 to 512 [ 223.731991][ T7953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1350: inode #1: comm syz.2.1350: iget: illegal inode # [ 223.760309][ T7953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1350: error while reading EA inode 1 err=-117 [ 223.782361][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.791066][ T7953] EXT4-fs (loop2): 1 orphan inode deleted [ 223.796885][ T7953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.818135][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.856408][ T7921] device bridge_slave_0 entered promiscuous mode [ 223.930234][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.940290][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.954848][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 223.975268][ T7921] device bridge_slave_1 entered promiscuous mode [ 224.087716][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.119183][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.165714][ T7943] loop4: detected capacity change from 0 to 40427 [ 224.182757][ T7943] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 224.210715][ T7943] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 224.242413][ T7921] team0: Port device team_slave_0 added [ 224.287626][ T7943] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.293702][ T7921] team0: Port device team_slave_1 added [ 224.357391][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.378725][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.381532][ T7943] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 224.404634][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.440474][ T7962] loop0: detected capacity change from 0 to 32768 [ 224.451872][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.455464][ T7943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.476606][ T7962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1351 (7962) [ 224.496600][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.517555][ T7962] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.525377][ T7984] syz.1.1358[7984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.527749][ T7984] syz.1.1358[7984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.539423][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.539560][ T7962] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 224.557881][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.589684][ T7979] loop2: detected capacity change from 0 to 8192 [ 224.607680][ T7962] BTRFS info (device loop0): using free space tree [ 224.608366][ T7979] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.630846][ T7979] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 224.664763][ T7979] REISERFS (device loop2): using journaled data mode [ 224.678233][ T7921] device hsr_slave_0 entered promiscuous mode [ 224.690234][ T7979] reiserfs: using flush barriers [ 224.706395][ T7921] device hsr_slave_1 entered promiscuous mode [ 224.716615][ T7921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.724747][ T7979] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.748146][ T7921] Cannot create hsr debugfs directory [ 224.778145][ T7979] REISERFS (device loop2): checking transaction log (loop2) [ 224.801867][ T7979] REISERFS (device loop2): Using r5 hash to sort names [ 224.809062][ T7979] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 224.846002][ T7979] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 224.916793][ T7962] BTRFS info (device loop0): enabling ssd optimizations [ 225.047904][ T8002] loop1: detected capacity change from 0 to 4096 [ 225.080907][ T3655] Bluetooth: hci4: command tx timeout [ 225.082299][ T8002] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 225.133208][ T5986] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.323688][ T7921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.683791][ T7921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.846683][ T7921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.858736][ T8013] loop4: detected capacity change from 0 to 32768 [ 225.931714][ T8027] Context (ID=0x0) not attached to queue pair (handle=0x4d4:0x0) [ 225.969880][ T7921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.994282][ T8013] XFS (loop4): Mounting V5 Filesystem [ 226.182498][ T8013] XFS (loop4): Ending clean mount [ 226.198705][ T8013] XFS (loop4): Quotacheck needed: Please wait. [ 226.209738][ T8015] loop2: detected capacity change from 0 to 32768 [ 226.287356][ T8013] XFS (loop4): Quotacheck: Done. [ 226.296672][ T8015] XFS (loop2): Mounting V5 Filesystem [ 226.331860][ T7921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.352209][ T7921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.381296][ T7921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.393780][ T3637] XFS (loop4): Unmounting Filesystem [ 226.415034][ T8015] XFS (loop2): Ending clean mount [ 226.424813][ T7921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.435905][ T8019] loop0: detected capacity change from 0 to 32768 [ 226.477082][ T8015] XFS (loop2): Quotacheck needed: Please wait. [ 226.535721][ T8019] jfs_readdir called with invalid offset! [ 226.582501][ T8015] XFS (loop2): Quotacheck: Done. [ 226.678843][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.741277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.750458][ T6396] XFS (loop2): Unmounting Filesystem [ 226.828932][ T8049] loop1: detected capacity change from 0 to 1024 [ 226.830320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.877344][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.910049][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.945653][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.965153][ T11] hfsplus: b-tree write err: -5, ino 4 [ 226.977363][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.984574][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.013374][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.038271][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.056133][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.069661][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.076875][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.094882][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.115562][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.142400][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.160767][ T3655] Bluetooth: hci4: command tx timeout [ 227.177192][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.203966][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.211655][ T8059] loop1: detected capacity change from 0 to 256 [ 227.227953][ T8059] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 227.240553][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.267165][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.303467][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.319536][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.339904][ T7921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.353906][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.376618][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.387198][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.422430][ T8066] loop0: detected capacity change from 0 to 1024 [ 227.537281][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 227.626925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.645680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.665224][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.680928][ T3760] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.701315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.711767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.739289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.748278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.757922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.767472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.788845][ T7921] device veth0_vlan entered promiscuous mode [ 227.813753][ T7921] device veth1_vlan entered promiscuous mode [ 227.873210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.896991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.928082][ T7921] device veth0_macvtap entered promiscuous mode [ 227.941674][ T8083] IPv6: Can't replace route, no match found [ 227.945908][ T3760] usb 3-1: Using ep0 maxpacket: 16 [ 227.949597][ T7921] device veth1_macvtap entered promiscuous mode [ 227.993020][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.020946][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.035119][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.050490][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.066884][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.077533][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.090523][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.104369][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.115906][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.133354][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 228.148196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.172327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.187509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.204563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.207907][ T8094] loop0: detected capacity change from 0 to 16 [ 228.226723][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.241352][ T8094] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 228.253428][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.265877][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.276764][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.290427][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.301219][ T3760] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 228.310273][ T3760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.318402][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.328411][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.339861][ T3760] usb 3-1: Product: syz [ 228.344608][ T3760] usb 3-1: Manufacturer: syz [ 228.349529][ T3760] usb 3-1: SerialNumber: syz [ 228.354728][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.365899][ T3760] r8152-cfgselector 3-1: config 0 descriptor?? [ 228.373449][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.388309][ T7921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.397266][ T7921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.406655][ T7921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.415875][ T7921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.431363][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.453064][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.455433][ T8098] loop0: detected capacity change from 0 to 128 [ 228.507849][ T8100] loop1: detected capacity change from 0 to 256 [ 228.566159][ T8098] syz.0.1394: attempt to access beyond end of device [ 228.566159][ T8098] loop0: rw=2049, sector=145, nr_sectors = 33 limit=128 [ 228.586105][ T8100] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 228.608900][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.635760][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.650853][ T3760] r8152-cfgselector 3-1: Unknown version 0x0000 [ 228.670892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.672221][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.703006][ T3760] r8152-cfgselector 3-1: Unknown version 0x0000 [ 228.709412][ T3760] r8152-cfgselector 3-1: bad CDC descriptors [ 228.721104][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.783156][ T3760] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 228.801320][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.821940][ T3746] usb 3-1: config 0 descriptor?? [ 228.905494][ T8106] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat md_clear arch_capabilities [ 228.905494][ T8106] vmx flags ' [ 228.986581][ T3945] usb 3-1: USB disconnect, device number 8 [ 229.001090][ T3746] usb 3-1: can't set config #0, error -71 [ 229.230721][ T3760] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.244693][ T3655] Bluetooth: hci4: command tx timeout [ 229.458041][ T8109] loop4: detected capacity change from 0 to 32768 [ 229.641030][ T3760] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 229.660377][ T3760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.673755][ T3760] usb 4-1: config 0 descriptor?? [ 229.724119][ T3760] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 229.917786][ T8140] loop2: detected capacity change from 0 to 2048 [ 229.943480][ T8140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.996639][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 230.153701][ T3760] cpia1 4-1:0.0: unexpected state after lo power cmd: 8a [ 230.582243][ T3760] gspca_cpia1: usb_control_msg 02, error -71 [ 230.603354][ T3760] gspca_cpia1: usb_control_msg 05, error -71 [ 230.627555][ T3760] cpia1 4-1:0.0: unexpected systemstate: 8a [ 230.636314][ T3760] usb 4-1: USB disconnect, device number 11 [ 231.110095][ T8163] loop1: detected capacity change from 0 to 32768 [ 231.152814][ T8174] loop0: detected capacity change from 0 to 32768 [ 231.162828][ T8174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1424 (8174) [ 231.175521][ T8163] XFS (loop1): Mounting V5 Filesystem [ 231.184402][ T8174] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.216156][ T8174] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 231.253502][ T8174] BTRFS info (device loop0): using free space tree [ 231.318147][ T8163] XFS (loop1): Ending clean mount [ 231.320809][ T3655] Bluetooth: hci4: command tx timeout [ 231.372565][ T8172] loop2: detected capacity change from 0 to 32768 [ 231.387560][ T8172] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1423 (8172) [ 231.395988][ T8196] loop3: detected capacity change from 0 to 128 [ 231.444297][ T4548] XFS (loop1): Unmounting Filesystem [ 231.474790][ T8196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.506399][ T8196] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 231.607147][ T8174] BTRFS info (device loop0): enabling ssd optimizations [ 231.753503][ T5986] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.855906][ T7921] EXT4-fs (loop3): unmounting filesystem. [ 231.882464][ T8208] loop2: detected capacity change from 0 to 4096 [ 232.393795][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1436'. [ 232.410400][ T8229] binder: 8228:8229 ioctl c00c620f 20000340 returned -22 [ 232.590789][ T3945] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 232.857578][ T8225] loop2: detected capacity change from 0 to 32768 [ 232.883691][ T8225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1434 (8225) [ 232.910907][ T8225] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.921683][ T8225] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 232.930408][ T8225] BTRFS info (device loop2): using free space tree [ 232.980995][ T3945] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.990106][ T3945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.002624][ T3945] usb 1-1: config 0 descriptor?? [ 233.051758][ T3945] cp210x 1-1:0.0: cp210x converter detected [ 233.077278][ T8241] loop4: detected capacity change from 0 to 32768 [ 233.085722][ T8225] BTRFS info (device loop2): enabling ssd optimizations [ 233.097072][ T8241] XFS (loop4): Mounting V5 Filesystem [ 233.148927][ T8241] XFS (loop4): Ending clean mount [ 233.150767][ T3867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.188397][ T6396] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.242271][ T3637] XFS (loop4): Unmounting Filesystem [ 233.401077][ T3867] usb 2-1: Using ep0 maxpacket: 16 [ 233.489989][ T3945] usb 1-1: cp210x converter now attached to ttyUSB0 [ 233.521121][ T3867] usb 2-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 233.540956][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 233.543909][ T3867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.570057][ T3867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 233.586737][ T3867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 233.598172][ T3867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.689480][ T3945] usb 1-1: USB disconnect, device number 14 [ 233.695962][ T3867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.699825][ T8283] loop3: detected capacity change from 0 to 256 [ 233.710858][ T3867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.719456][ T3867] usb 2-1: Manufacturer: syz [ 233.724968][ T3945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.742525][ T3867] usb 2-1: config 0 descriptor?? [ 233.746131][ T3945] cp210x 1-1:0.0: device disconnected [ 233.766961][ T8283] FAT-fs (loop3): Directory bread(block 64) failed [ 233.779301][ T8283] FAT-fs (loop3): Directory bread(block 65) failed [ 233.782292][ T3867] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 233.787668][ T8283] FAT-fs (loop3): Directory bread(block 66) failed [ 233.800745][ T3867] mceusb: probe of 2-1:0.0 failed with error -12 [ 233.805637][ T8283] FAT-fs (loop3): Directory bread(block 67) failed [ 233.808030][ T3867] usbhid 2-1:0.0: can't add hid device: -22 [ 233.814308][ T8283] FAT-fs (loop3): Directory bread(block 68) failed [ 233.819645][ T3867] usbhid: probe of 2-1:0.0 failed with error -22 [ 233.831483][ T8283] FAT-fs (loop3): Directory bread(block 69) failed [ 233.839355][ T8283] FAT-fs (loop3): Directory bread(block 70) failed [ 233.852571][ T8283] FAT-fs (loop3): Directory bread(block 71) failed [ 233.859214][ T8283] FAT-fs (loop3): Directory bread(block 72) failed [ 233.873269][ T8283] FAT-fs (loop3): Directory bread(block 73) failed [ 234.007396][ T3873] usb 2-1: USB disconnect, device number 15 [ 234.114751][ T8279] loop2: detected capacity change from 0 to 40427 [ 234.128899][ T8279] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.173345][ T8279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.224106][ T6396] syz-executor: attempt to access beyond end of device [ 234.224106][ T6396] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.673631][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 234.882812][ T8306] loop4: detected capacity change from 0 to 4096 [ 234.900920][ T8306] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 234.934075][ T8306] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 234.986265][ T8306] ntfs3: loop4: Failed to load $Extend. [ 235.045726][ T8298] loop0: detected capacity change from 0 to 32768 [ 235.069062][ T8298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1457 (8298) [ 235.106280][ T8298] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.120878][ T8298] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 235.150028][ T8298] BTRFS info (device loop0): using free space tree [ 235.222226][ T9] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 235.240194][ T3637] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 235.363258][ T8298] BTRFS info (device loop0): enabling ssd optimizations [ 235.499433][ T8304] loop2: detected capacity change from 0 to 32768 [ 235.507165][ T8334] loop4: detected capacity change from 0 to 4096 [ 235.520503][ T8304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1458 (8304) [ 235.543926][ T8334] ntfs: (device loop4): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 235.558871][ T8334] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 235.572125][ T5986] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.582478][ T8304] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.592864][ T8304] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 235.605685][ T8334] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 235.619346][ T8304] BTRFS info (device loop2): using free space tree [ 235.662678][ T8334] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 235.725374][ T8334] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 235.778627][ T8334] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 235.787353][ T8334] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 235.827846][ T8334] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 235.856514][ T8334] ntfs: (device loop4): load_system_files(): Failed to load $Volume. [ 235.868347][ T8348] loop3: detected capacity change from 0 to 16 [ 235.895218][ T8311] loop1: detected capacity change from 0 to 32768 [ 235.904774][ T8334] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 235.918779][ T8348] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 235.929474][ T8311] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.1462 (8311) [ 235.968331][ T8311] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 235.986175][ T8311] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 236.011190][ T8311] BTRFS info (device loop1): using free space tree [ 236.028001][ T8304] BTRFS info (device loop2): enabling ssd optimizations [ 236.086500][ T8368] binder: 8363:8368 ioctl c00c620f 0 returned -14 [ 236.194586][ T8311] BTRFS info (device loop1): enabling ssd optimizations [ 236.234239][ T6396] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.466916][ T4548] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 236.643206][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 237.125578][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1479'. [ 237.647785][ T8423] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1490'. [ 237.709728][ T8389] loop2: detected capacity change from 0 to 32768 [ 237.792757][ T8389] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 237.932730][ T8433] tap0: tun_chr_ioctl cmd 1074812118 [ 237.947979][ T6396] ocfs2: Unmounting device (7,2) on (node local) [ 238.241958][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 238.342644][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 238.386754][ T8417] loop3: detected capacity change from 0 to 32768 [ 238.405515][ T8451] loop1: detected capacity change from 0 to 1024 [ 238.418521][ T8417] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1487 (8417) [ 238.457517][ T8417] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 238.478425][ T8451] hfsplus: bad catalog entry type [ 238.488470][ T8417] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 238.510932][ T8417] BTRFS info (device loop3): using free space tree [ 238.535199][ T9] hfsplus: b-tree write err: -5, ino 4 [ 238.627421][ T8466] loop4: detected capacity change from 0 to 1024 [ 238.716655][ T8477] loop2: detected capacity change from 0 to 128 [ 238.744177][ T8477] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 238.772431][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.772431][ T8477] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 238.797930][ T8477] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 238.807073][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.807073][ T8477] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 238.830546][ T8417] BTRFS info (device loop3): enabling ssd optimizations [ 238.834955][ T8477] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 238.847846][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.847846][ T8477] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 238.870765][ T8477] Buffer I/O error on dev loop2, logical block 1157, async page read [ 238.879013][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.879013][ T8477] loop2: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 238.895627][ T8477] Buffer I/O error on dev loop2, logical block 3211264, async page read [ 238.904838][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.904838][ T8477] loop2: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 238.919225][ T8477] Buffer I/O error on dev loop2, logical block 8768635, async page read [ 238.929005][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.929005][ T8477] loop2: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 238.974005][ T8490] loop0: detected capacity change from 0 to 1024 [ 238.980516][ T8477] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 238.991431][ T8477] syz.2.1510: attempt to access beyond end of device [ 238.991431][ T8477] loop2: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 239.036838][ T8490] hfsplus: bad catalog entry type [ 239.040779][ T8477] Buffer I/O error on dev loop2, logical block 209285, async page read [ 239.051358][ T7921] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 239.214236][ T8488] sysv_free_block: trying to free block not in datazone [ 239.502772][ T8505] loop1: detected capacity change from 0 to 1024 [ 239.524472][ T8505] EXT4-fs: Ignoring removed orlov option [ 239.539547][ T8505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.597584][ T6396] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 239.653337][ T8505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.727626][ T8505] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2738: inode #14: comm syz.1.1519: corrupted in-inode xattr [ 239.796045][ T8505] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.1519: attempt to clear invalid blocks 1634560256 len 1 [ 239.936995][ T4548] EXT4-fs (loop1): unmounting filesystem. [ 240.090211][ T8521] loop3: detected capacity change from 0 to 1024 [ 240.441110][ T8502] loop0: detected capacity change from 0 to 32768 [ 240.528615][ T8502] XFS (loop0): Mounting V5 Filesystem [ 240.635800][ T8514] loop2: detected capacity change from 0 to 32768 [ 240.667863][ T8502] XFS (loop0): Ending clean mount [ 240.680897][ T8502] XFS (loop0): Quotacheck needed: Please wait. [ 240.776915][ T8502] XFS (loop0): Quotacheck: Done. [ 240.777673][ T8514] XFS (loop2): Mounting V5 Filesystem [ 240.841735][ T5986] XFS (loop0): Unmounting Filesystem [ 240.919849][ T8525] loop3: detected capacity change from 0 to 32768 [ 240.930370][ T8520] loop1: detected capacity change from 0 to 32768 [ 240.955804][ T8525] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 240.955804][ T8525] [ 240.957045][ T8514] XFS (loop2): Ending clean mount [ 240.975251][ T8525] ERROR: (device loop3): remounting filesystem as read-only [ 240.998683][ T8525] xtLookup: xtSearch returned -5 [ 241.000274][ T8514] XFS (loop2): Quotacheck needed: Please wait. [ 241.005433][ T8525] free_index: error reading directory table [ 241.028300][ T8520] XFS (loop1): Mounting V5 Filesystem [ 241.250844][ T8514] XFS (loop2): Quotacheck: Done. [ 241.258957][ T8520] XFS (loop1): Ending clean mount [ 241.307757][ T8553] serio: Serial port ttynull [ 241.331084][ T8520] XFS (loop1): User initiated shutdown received. [ 241.338294][ T8520] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 241.426589][ T8520] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 241.453632][ T6396] XFS (loop2): Unmounting Filesystem [ 241.500287][ T4548] XFS (loop1): Unmounting Filesystem [ 241.585518][ T8557] loop0: detected capacity change from 0 to 2048 [ 241.627298][ T8557] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.717728][ T8561] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.893064][ T8557] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 241.970889][ T8557] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 242.019432][ T8557] Remounting filesystem read-only [ 242.030754][ T8557] NILFS (loop0): error -5 truncating bmap (ino=15) [ 242.106980][ T8540] loop4: detected capacity change from 0 to 40427 [ 242.107624][ T8564] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 242.140370][ T8564] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1532'. [ 242.161044][ T8540] F2FS-fs (loop4): invalid crc value [ 242.177417][ T8540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.203602][ T5986] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 242.250774][ T5986] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 242.254268][ T8567] loop2: detected capacity change from 0 to 4096 [ 242.270517][ T5986] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 242.296397][ T5986] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 242.304936][ T8567] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 242.319044][ T5986] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 242.339807][ T5986] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 242.349570][ T8540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.366299][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 242.366313][ T26] audit: type=1800 audit(1728943886.430:21): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1527" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 242.379672][ T8567] ntfs3: loop2: failed to convert "c46c" to macturkish [ 242.440014][ T8535] syz.4.1527: attempt to access beyond end of device [ 242.440014][ T8535] loop4: rw=34817, sector=77824, nr_sectors = 4096 limit=40427 [ 242.481120][ T8578] loop0: detected capacity change from 0 to 128 [ 242.498917][ T8578] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 242.557478][ T3637] syz-executor: attempt to access beyond end of device [ 242.557478][ T3637] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.589558][ T5986] sysv_free_block: flc_count > flc_size [ 242.608920][ T5986] sysv_free_block: flc_count > flc_size [ 242.620843][ T5986] sysv_free_block: flc_count > flc_size [ 242.626466][ T5986] sysv_free_block: flc_count > flc_size [ 242.640705][ T5986] sysv_free_block: flc_count > flc_size [ 242.656466][ T5986] sysv_free_block: flc_count > flc_size [ 242.671086][ T5986] sysv_free_block: flc_count > flc_size [ 242.676715][ T5986] sysv_free_block: flc_count > flc_size [ 242.690744][ T5986] sysv_free_block: flc_count > flc_size [ 242.700931][ T5986] sysv_free_block: flc_count > flc_size [ 242.718735][ T5986] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 242.740835][ T3945] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.005015][ T8573] loop1: detected capacity change from 0 to 32768 [ 243.023002][ T8573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1536 (8573) [ 243.074254][ T8573] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.108269][ T8573] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 243.114548][ T8586] loop0: detected capacity change from 0 to 128 [ 243.127285][ T8573] BTRFS info (device loop1): using free space tree [ 243.146515][ T3945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.172315][ T3945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.180481][ T8580] loop2: detected capacity change from 0 to 40427 [ 243.190328][ T8580] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 243.198299][ T8580] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 243.210434][ T8580] F2FS-fs (loop2): invalid crc value [ 243.229777][ T8580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.297125][ T8580] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 243.304734][ T8580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.321209][ T3945] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.334751][ T8573] BTRFS info (device loop1): enabling ssd optimizations [ 243.345967][ T3945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.367025][ T3945] usb 4-1: SerialNumber: syz [ 243.491067][ T4548] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.733428][ T3945] usb 4-1: 0:2 : does not exist [ 243.757215][ T3945] usb 4-1: USB disconnect, device number 12 [ 243.926176][ T8617] loop2: detected capacity change from 0 to 4096 [ 243.967503][ T8617] ntfs: volume version 3.1. [ 244.130583][ T8635] virtio-fs: tag <(null)> not found [ 244.252099][ T8641] loop1: detected capacity change from 0 to 1024 [ 244.477958][ T8650] loop0: detected capacity change from 0 to 4096 [ 244.526802][ T8650] NILFS (loop0): invalid segment: Checksum error in segment payload [ 244.570680][ T8650] NILFS (loop0): trying rollback from an earlier position [ 244.596479][ T8650] NILFS (loop0): recovery complete [ 244.606788][ T8661] loop1: detected capacity change from 0 to 2048 [ 244.612594][ T8662] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.659803][ T8661] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.692330][ T8661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.993091][ T8677] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.170775][ T3760] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.312027][ T3640] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.450794][ T3760] usb 4-1: Using ep0 maxpacket: 8 [ 245.515589][ T8685] loop4: detected capacity change from 0 to 32768 [ 245.523212][ T8685] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1576 (8685) [ 245.538577][ T8685] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.548819][ T8685] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 245.557637][ T8685] BTRFS info (device loop4): setting nodatacow, compression disabled [ 245.566017][ T8685] BTRFS info (device loop4): setting datacow [ 245.572362][ T8685] BTRFS info (device loop4): doing ref verification [ 245.578987][ T8685] BTRFS info (device loop4): force clearing of disk cache [ 245.586179][ T8685] BTRFS info (device loop4): turning off barriers [ 245.590805][ T3760] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 245.595563][ T8685] BTRFS info (device loop4): enabling ssd optimizations [ 245.607923][ T8685] BTRFS info (device loop4): using spread ssd allocation scheme [ 245.612466][ T3760] usb 4-1: config 179 has no interface number 0 [ 245.616161][ T8685] BTRFS info (device loop4): not using ssd optimizations [ 245.629042][ T8685] BTRFS info (device loop4): not using spread ssd allocation scheme [ 245.629944][ T3760] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.637646][ T8685] BTRFS info (device loop4): using free space tree [ 245.649325][ T3760] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 245.666970][ T3760] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.671168][ T3640] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.682737][ T3760] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 245.687364][ T3640] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.699772][ T3760] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.709023][ T3640] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.727506][ T3760] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.731367][ T3640] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 245.751615][ T3640] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 245.767078][ T3760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.789610][ T8685] BTRFS info (device loop4): rebuilding free space tree [ 245.801263][ T8673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.876505][ T3637] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.890806][ T3640] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.908883][ T3640] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.918681][ T3640] usb 1-1: Product: syz [ 245.919515][ T8707] loop2: detected capacity change from 0 to 1024 [ 245.930157][ T3640] usb 1-1: Manufacturer: syz [ 246.009981][ T3640] cdc_wdm 1-1:1.0: skipping garbage [ 246.046446][ T3640] cdc_wdm 1-1:1.0: skipping garbage [ 246.073596][ T3640] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 246.092558][ T3640] cdc_wdm 1-1:1.0: Unknown control protocol [ 246.214753][ T3759] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 246.260280][ T3868] usb 1-1: USB disconnect, device number 15 [ 246.318881][ T3945] usb 4-1: USB disconnect, device number 13 [ 246.324910][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 246.325089][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.382164][ T8713] device bond1 entered promiscuous mode [ 246.385406][ T3945] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 246.389990][ T8713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.739794][ T8713] bond1 (unregistering): Released all slaves [ 246.925470][ T8718] loop4: detected capacity change from 0 to 32768 [ 246.938485][ T8718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1578 (8718) [ 246.974467][ T8718] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.987915][ T8718] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 247.000275][ T8718] BTRFS info (device loop4): using free space tree [ 247.059114][ T8718] BTRFS info (device loop4): enabling ssd optimizations [ 247.107750][ T8747] loop2: detected capacity change from 0 to 4096 [ 247.128437][ T8747] ntfs: (device loop2): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 247.145797][ T8747] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 247.156058][ T8747] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 247.175965][ T8747] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 247.198837][ T8747] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 247.214796][ T8747] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 247.214863][ T3637] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.223755][ T8747] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 247.247296][ T8747] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 247.282501][ T8747] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 247.745606][ T8772] loop4: detected capacity change from 0 to 256 [ 247.752900][ T8770] loop0: detected capacity change from 0 to 512 [ 247.788097][ T8772] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 247.817545][ T8770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.860970][ T8770] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1601: casefold flag without casefold feature [ 247.883382][ T8770] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1601: couldn't read orphan inode 15 (err -117) [ 247.920726][ T8770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.015274][ T8770] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1601: Directory hole found for htree leaf block 0 [ 248.158401][ T8787] loop2: detected capacity change from 0 to 47 [ 248.166703][ T5986] EXT4-fs (loop0): unmounting filesystem. [ 248.372221][ T8783] loop1: detected capacity change from 0 to 32768 [ 248.379594][ T8783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1605 (8783) [ 248.395338][ T8783] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.406379][ T8783] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 248.415128][ T8783] BTRFS info (device loop1): using free space tree [ 248.438544][ T8783] BTRFS info (device loop1): enabling ssd optimizations [ 248.484800][ T4548] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.238107][ T8825] loop3: detected capacity change from 0 to 512 [ 249.307006][ T8825] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1615: casefold flag without casefold feature [ 249.341100][ T8825] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1615: couldn't read orphan inode 15 (err -117) [ 249.369646][ T8825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.492086][ T3862] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 249.503391][ T8837] loop0: detected capacity change from 0 to 128 [ 249.511499][ T3862] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.544075][ T8839] loop2: detected capacity change from 0 to 128 [ 249.622277][ T8839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 249.683672][ T8839] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 249.779887][ T8853] loop1: detected capacity change from 0 to 1024 [ 249.795351][ T7921] EXT4-fs (loop3): unmounting filesystem. [ 249.796566][ T8853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.856510][ T6396] EXT4-fs (loop2): unmounting filesystem. [ 249.878055][ T8853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 250.064766][ T8853] ------------[ cut here ]------------ [ 250.070266][ T8853] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 250.083902][ T8853] WARNING: CPU: 0 PID: 8853 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 250.093829][ T8853] Modules linked in: [ 250.097738][ T8853] CPU: 0 PID: 8853 Comm: syz.1.1630 Not tainted 6.1.112-syzkaller #0 [ 250.105812][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.115886][ T8853] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 250.121629][ T8853] Code: 8b 16 48 c7 c0 20 d1 d9 90 48 39 c2 74 46 f6 05 03 f4 de 03 01 75 3d c6 05 fa f3 de 03 01 48 c7 c7 e0 23 0c 8b e8 0e f2 ab f6 <0f> 0b eb 26 e8 35 e1 8f f9 48 c7 c7 20 23 0c 8b 89 de e8 07 f8 fd [ 250.141267][ T8853] RSP: 0018:ffffc90008f4f5b0 EFLAGS: 00010046 [ 250.147361][ T8853] RAX: 2b19f989b2cc0600 RBX: ffffffff90c5e320 RCX: 0000000000040000 [ 250.155353][ T8853] RDX: ffffc900179a8000 RSI: 0000000000006f5b RDI: 0000000000006f5c [ 250.163342][ T8853] RBP: ffffc90008f4f6b0 R08: ffffffff8152a48e R09: ffffed10171c4f1c [ 250.171347][ T8853] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 250.179333][ T8853] R13: 1ffff920011e9ec4 R14: ffff8880767666d8 R15: ffffffff974c0f41 [ 250.187320][ T8853] FS: 00007fcb177036c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 250.196268][ T8853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.202869][ T8853] CR2: 0000001b3321eff8 CR3: 00000000589ca000 CR4: 00000000003506f0 [ 250.210857][ T8853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.218845][ T8853] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.226833][ T8853] Call Trace: [ 250.230120][ T8853] [ 250.233055][ T8853] ? __warn+0x15a/0x520 [ 250.237222][ T8853] ? look_up_lock_class+0xc2/0x140 [ 250.242351][ T8853] ? report_bug+0x2af/0x500 [ 250.246870][ T8853] ? look_up_lock_class+0xc2/0x140 [ 250.252013][ T8853] ? handle_bug+0x3d/0x70 [ 250.256356][ T8853] ? exc_invalid_op+0x16/0x40 [ 250.261046][ T8853] ? asm_exc_invalid_op+0x16/0x20 [ 250.266092][ T8853] ? __warn_printk+0x28e/0x350 [ 250.270870][ T8853] ? look_up_lock_class+0xc2/0x140 [ 250.275995][ T8853] register_lock_class+0x100/0x990 [ 250.281125][ T8853] ? __ext4_iget+0x2d00/0x3ee0 [ 250.285906][ T8853] ? is_dynamic_key+0x260/0x260 [ 250.290772][ T8853] ? mark_lock+0x9a/0x340 [ 250.295119][ T8853] __lock_acquire+0xd3/0x1f80 [ 250.299825][ T8853] lock_acquire+0x1f8/0x5a0 [ 250.304344][ T8853] ? ext4_ioctl+0x460f/0x5f60 [ 250.309037][ T8853] ? read_lock_is_recursive+0x10/0x10 [ 250.314428][ T8853] ? __might_sleep+0xb0/0xb0 [ 250.319031][ T8853] ? rwsem_write_trylock+0x166/0x210 [ 250.324337][ T8853] ? clear_nonspinnable+0x60/0x60 [ 250.329384][ T8853] down_write_nested+0x39/0x60 [ 250.334168][ T8853] ? ext4_ioctl+0x460f/0x5f60 [ 250.338865][ T8853] ext4_ioctl+0x460f/0x5f60 [ 250.343386][ T8853] ? kasan_set_track+0x4b/0x70 [ 250.348177][ T8853] ? ext4_fileattr_set+0x1770/0x1770 [ 250.353491][ T8853] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 250.358362][ T8853] ? __x64_compat_sys_ioctl+0x80/0x80 [ 250.363751][ T8853] ? __lock_acquire+0x1f80/0x1f80 [ 250.368796][ T8853] ? lockdep_hardirqs_on+0x94/0x130 [ 250.374019][ T8853] ? __kmem_cache_free+0x25c/0x3c0 [ 250.379147][ T8853] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 250.384794][ T8853] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 250.390442][ T8853] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 250.396093][ T8853] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 250.401575][ T8853] ? __fget_files+0x28/0x4a0 [ 250.406192][ T8853] ? __fget_files+0x28/0x4a0 [ 250.410807][ T8853] ? __fget_files+0x435/0x4a0 [ 250.415497][ T8853] ? __fget_files+0x28/0x4a0 [ 250.420104][ T8853] ? bpf_lsm_file_ioctl+0x5/0x10 [ 250.425054][ T8853] ? security_file_ioctl+0x7d/0xa0 [ 250.430178][ T8853] ? ext4_fileattr_set+0x1770/0x1770 [ 250.435482][ T8853] __se_sys_ioctl+0xf1/0x160 [ 250.440085][ T8853] do_syscall_64+0x3b/0xb0 [ 250.444509][ T8853] ? clear_bhb_loop+0x45/0xa0 [ 250.449200][ T8853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.455117][ T8853] RIP: 0033:0x7fcb1697dff9 [ 250.459555][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.479182][ T8853] RSP: 002b:00007fcb17703038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.487619][ T8853] RAX: ffffffffffffffda RBX: 00007fcb16b35f80 RCX: 00007fcb1697dff9 [ 250.495613][ T8853] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 250.503610][ T8853] RBP: 00007fcb169f0296 R08: 0000000000000000 R09: 0000000000000000 [ 250.511601][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.519595][ T8853] R13: 0000000000000000 R14: 00007fcb16b35f80 R15: 00007fffbf3249a8 [ 250.527598][ T8853] [ 250.530636][ T8853] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.537930][ T8853] CPU: 0 PID: 8853 Comm: syz.1.1630 Not tainted 6.1.112-syzkaller #0 [ 250.546009][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.556080][ T8853] Call Trace: [ 250.559365][ T8853] [ 250.562306][ T8853] dump_stack_lvl+0x1e3/0x2cb [ 250.567006][ T8853] ? nf_tcp_handle_invalid+0x642/0x642 [ 250.572488][ T8853] ? panic+0x764/0x764 [ 250.576574][ T8853] ? vscnprintf+0x59/0x80 [ 250.580926][ T8853] panic+0x318/0x764 [ 250.584834][ T8853] ? __warn+0x169/0x520 [ 250.588999][ T8853] ? memcpy_page_flushcache+0xfc/0xfc [ 250.594399][ T8853] __warn+0x348/0x520 [ 250.598391][ T8853] ? look_up_lock_class+0xc2/0x140 [ 250.603516][ T8853] report_bug+0x2af/0x500 [ 250.607860][ T8853] ? look_up_lock_class+0xc2/0x140 [ 250.612985][ T8853] handle_bug+0x3d/0x70 [ 250.617159][ T8853] exc_invalid_op+0x16/0x40 [ 250.621693][ T8853] asm_exc_invalid_op+0x16/0x20 [ 250.626563][ T8853] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 250.632300][ T8853] Code: 8b 16 48 c7 c0 20 d1 d9 90 48 39 c2 74 46 f6 05 03 f4 de 03 01 75 3d c6 05 fa f3 de 03 01 48 c7 c7 e0 23 0c 8b e8 0e f2 ab f6 <0f> 0b eb 26 e8 35 e1 8f f9 48 c7 c7 20 23 0c 8b 89 de e8 07 f8 fd [ 250.651925][ T8853] RSP: 0018:ffffc90008f4f5b0 EFLAGS: 00010046 [ 250.658010][ T8853] RAX: 2b19f989b2cc0600 RBX: ffffffff90c5e320 RCX: 0000000000040000 [ 250.665996][ T8853] RDX: ffffc900179a8000 RSI: 0000000000006f5b RDI: 0000000000006f5c [ 250.673988][ T8853] RBP: ffffc90008f4f6b0 R08: ffffffff8152a48e R09: ffffed10171c4f1c [ 250.681978][ T8853] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 250.689964][ T8853] R13: 1ffff920011e9ec4 R14: ffff8880767666d8 R15: ffffffff974c0f41 [ 250.697954][ T8853] ? __warn_printk+0x28e/0x350 [ 250.702745][ T8853] register_lock_class+0x100/0x990 [ 250.707885][ T8853] ? __ext4_iget+0x2d00/0x3ee0 [ 250.709340][ T8862] loop0: detected capacity change from 0 to 32768 [ 250.719064][ T8853] ? is_dynamic_key+0x260/0x260 [ 250.723944][ T8853] ? mark_lock+0x9a/0x340 [ 250.728298][ T8853] __lock_acquire+0xd3/0x1f80 [ 250.733003][ T8853] lock_acquire+0x1f8/0x5a0 [ 250.737531][ T8853] ? ext4_ioctl+0x460f/0x5f60 [ 250.742226][ T8853] ? read_lock_is_recursive+0x10/0x10 [ 250.747618][ T8853] ? __might_sleep+0xb0/0xb0 [ 250.752219][ T8853] ? rwsem_write_trylock+0x166/0x210 [ 250.757524][ T8853] ? clear_nonspinnable+0x60/0x60 [ 250.762569][ T8853] down_write_nested+0x39/0x60 [ 250.767354][ T8853] ? ext4_ioctl+0x460f/0x5f60 [ 250.772051][ T8853] ext4_ioctl+0x460f/0x5f60 [ 250.776566][ T8853] ? kasan_set_track+0x4b/0x70 [ 250.781365][ T8853] ? ext4_fileattr_set+0x1770/0x1770 [ 250.786097][ T8865] loop3: detected capacity change from 0 to 32768 [ 250.793160][ T8853] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 250.798039][ T8853] ? __x64_compat_sys_ioctl+0x80/0x80 [ 250.803422][ T8853] ? __lock_acquire+0x1f80/0x1f80 [ 250.808469][ T8853] ? lockdep_hardirqs_on+0x94/0x130 [ 250.813692][ T8853] ? __kmem_cache_free+0x25c/0x3c0 [ 250.818825][ T8853] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 250.824483][ T8853] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 250.830134][ T8853] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 250.835782][ T8853] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 250.841257][ T8853] ? __fget_files+0x28/0x4a0 [ 250.845864][ T8853] ? __fget_files+0x28/0x4a0 [ 250.850473][ T8853] ? __fget_files+0x435/0x4a0 [ 250.855168][ T8853] ? __fget_files+0x28/0x4a0 [ 250.859770][ T8853] ? bpf_lsm_file_ioctl+0x5/0x10 [ 250.864728][ T8853] ? security_file_ioctl+0x7d/0xa0 [ 250.869852][ T8853] ? ext4_fileattr_set+0x1770/0x1770 [ 250.875157][ T8853] __se_sys_ioctl+0xf1/0x160 [ 250.879756][ T8853] do_syscall_64+0x3b/0xb0 [ 250.884179][ T8853] ? clear_bhb_loop+0x45/0xa0 [ 250.888866][ T8853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.894774][ T8853] RIP: 0033:0x7fcb1697dff9 [ 250.899194][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.918810][ T8853] RSP: 002b:00007fcb17703038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.927241][ T8853] RAX: ffffffffffffffda RBX: 00007fcb16b35f80 RCX: 00007fcb1697dff9 [ 250.935238][ T8853] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 250.943225][ T8853] RBP: 00007fcb169f0296 R08: 0000000000000000 R09: 0000000000000000 [ 250.951221][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.959200][ T8853] R13: 0000000000000000 R14: 00007fcb16b35f80 R15: 00007fffbf3249a8 [ 250.967192][ T8853] [ 250.970529][ T8853] Kernel Offset: disabled [ 250.974868][ T8853] Rebooting in 86400 seconds..