last executing test programs: 6.697116214s ago: executing program 2 (id=438): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xb0000018}) 6.225404482s ago: executing program 2 (id=448): r0 = syz_clone(0x3300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.106804241s ago: executing program 2 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x844) 2.380521229s ago: executing program 2 (id=480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000dc0)={0x1f, 0x1}, 0x7) write$bt_hci(r0, &(0x7f0000000580)=ANY=[], 0x5) 2.107698401s ago: executing program 2 (id=484): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x5, 0x0, 0x0, 0x10000, 0x7}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffe, 0x957}, 0x0, 0x0, 0x0) 1.475156252s ago: executing program 3 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x10001}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@norecovery}, {@delalloc}, {@data_journal}]}, 0x0, 0x506, &(0x7f0000000200)="$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") sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000004000380140000001100"], 0xc0}}, 0x2404c010) 1.305580625s ago: executing program 0 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000188500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.196999334s ago: executing program 3 (id=499): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1048020, &(0x7f0000000200)={[{}, {@gid}]}) 1.116266031s ago: executing program 0 (id=501): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000440)=""/220, 0xfffffffffffffee1, 0x0, 0x2, 0x2}}, 0x48) 1.033169937s ago: executing program 3 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002025702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.025921577s ago: executing program 2 (id=503): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 980.420981ms ago: executing program 1 (id=504): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) 848.508462ms ago: executing program 0 (id=505): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 826.288863ms ago: executing program 3 (id=506): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) 788.561977ms ago: executing program 1 (id=507): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 640.459728ms ago: executing program 3 (id=508): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 640.280768ms ago: executing program 1 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x44, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}]}]}]}, 0x44}}, 0x0) 614.96865ms ago: executing program 0 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 475.833842ms ago: executing program 0 (id=511): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x88000, 0x54) ioctl$FITRIM(r0, 0xc0185879, 0x0) 320.414304ms ago: executing program 1 (id=512): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) 207.968653ms ago: executing program 1 (id=513): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r0, 0x5514) 126.80172ms ago: executing program 1 (id=514): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) 370.37µs ago: executing program 0 (id=515): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0xfffffffffffffffd, r1, r0}}, 0x18) 0s ago: executing program 3 (id=516): r0 = socket(0x1e, 0x2, 0x0) shutdown(r0, 0x2) recvmmsg$unix(r0, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000000280)=""/51, 0x33}], 0x1}}], 0x1, 0x101, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 81.780983][ T5774] cgroup: Unknown subsys name 'net' [ 81.921754][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.629477][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.338704][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.347684][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.355494][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.364292][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.372873][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.380298][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.382646][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.407847][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.413110][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.415344][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.424241][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.431926][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.437135][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.443254][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.452082][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.458491][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.467400][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.474314][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.485846][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.486713][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.501384][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.509322][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.517159][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.524713][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.122902][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.134844][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.174751][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 86.207567][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.376773][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.384191][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.391597][ T5788] bridge_slave_0: entered allmulticast mode [ 86.400413][ T5788] bridge_slave_0: entered promiscuous mode [ 86.442049][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.449352][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.457390][ T5788] bridge_slave_1: entered allmulticast mode [ 86.465550][ T5788] bridge_slave_1: entered promiscuous mode [ 86.510025][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.517295][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.526180][ T5785] bridge_slave_0: entered allmulticast mode [ 86.533394][ T5785] bridge_slave_0: entered promiscuous mode [ 86.580283][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.587754][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.595107][ T5785] bridge_slave_1: entered allmulticast mode [ 86.603384][ T5785] bridge_slave_1: entered promiscuous mode [ 86.613698][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.627043][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.636736][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.643990][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.651191][ T5784] bridge_slave_0: entered allmulticast mode [ 86.658479][ T5784] bridge_slave_0: entered promiscuous mode [ 86.667226][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.674478][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.681812][ T5784] bridge_slave_1: entered allmulticast mode [ 86.688900][ T5784] bridge_slave_1: entered promiscuous mode [ 86.695957][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.703418][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.710709][ T5786] bridge_slave_0: entered allmulticast mode [ 86.718651][ T5786] bridge_slave_0: entered promiscuous mode [ 86.765984][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.774426][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.781705][ T5786] bridge_slave_1: entered allmulticast mode [ 86.789423][ T5786] bridge_slave_1: entered promiscuous mode [ 86.827143][ T5788] team0: Port device team_slave_0 added [ 86.878369][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.890177][ T5788] team0: Port device team_slave_1 added [ 86.899142][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.913148][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.925421][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.937003][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.983927][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.078147][ T5785] team0: Port device team_slave_0 added [ 87.086534][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.093715][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.120808][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.134503][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.141507][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.167896][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.183928][ T5784] team0: Port device team_slave_0 added [ 87.194190][ T5784] team0: Port device team_slave_1 added [ 87.203686][ T5786] team0: Port device team_slave_0 added [ 87.211999][ T5785] team0: Port device team_slave_1 added [ 87.271844][ T5786] team0: Port device team_slave_1 added [ 87.309035][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.316346][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.344007][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.375541][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.382926][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.414157][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.428177][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.435337][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.461694][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.474422][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.481484][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.506392][ T5794] Bluetooth: hci2: command tx timeout [ 87.508409][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.582645][ T5794] Bluetooth: hci1: command tx timeout [ 87.582815][ T5799] Bluetooth: hci0: command tx timeout [ 87.588368][ T5794] Bluetooth: hci3: command tx timeout [ 87.662744][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.669751][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.701631][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.741876][ T5785] hsr_slave_0: entered promiscuous mode [ 87.749855][ T5785] hsr_slave_1: entered promiscuous mode [ 87.763483][ T5788] hsr_slave_0: entered promiscuous mode [ 87.770117][ T5788] hsr_slave_1: entered promiscuous mode [ 87.777759][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.785749][ T5788] Cannot create hsr debugfs directory [ 87.792200][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.800006][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.826256][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.857370][ T5784] hsr_slave_0: entered promiscuous mode [ 87.864457][ T5784] hsr_slave_1: entered promiscuous mode [ 87.870715][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.879510][ T5784] Cannot create hsr debugfs directory [ 88.029064][ T5786] hsr_slave_0: entered promiscuous mode [ 88.036405][ T5786] hsr_slave_1: entered promiscuous mode [ 88.043472][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.051099][ T5786] Cannot create hsr debugfs directory [ 88.434204][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.447653][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.458283][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.471837][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.559753][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.570661][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.582000][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.598709][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.691909][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.704275][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.718268][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.741808][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.831629][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.844953][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.857246][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.868248][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.989844][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.036351][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.067721][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.083024][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.090471][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.107509][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.125681][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.167533][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.174951][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.190221][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.197451][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.241450][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.248663][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.266097][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.291784][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.298989][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.308711][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.315936][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.367029][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.459090][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.500897][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.508161][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.545287][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.552552][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.585262][ T5799] Bluetooth: hci2: command tx timeout [ 89.663336][ T5799] Bluetooth: hci0: command tx timeout [ 89.664126][ T5794] Bluetooth: hci1: command tx timeout [ 89.668790][ T5799] Bluetooth: hci3: command tx timeout [ 89.887397][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.010077][ T5788] veth0_vlan: entered promiscuous mode [ 90.075433][ T5788] veth1_vlan: entered promiscuous mode [ 90.090804][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.116205][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.206967][ T5784] veth0_vlan: entered promiscuous mode [ 90.221311][ T5784] veth1_vlan: entered promiscuous mode [ 90.231678][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.251787][ T5788] veth0_macvtap: entered promiscuous mode [ 90.264739][ T5788] veth1_macvtap: entered promiscuous mode [ 90.310371][ T5785] veth0_vlan: entered promiscuous mode [ 90.348807][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.370105][ T5784] veth0_macvtap: entered promiscuous mode [ 90.387472][ T5785] veth1_vlan: entered promiscuous mode [ 90.406542][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.417323][ T5784] veth1_macvtap: entered promiscuous mode [ 90.438781][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.448182][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457722][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.466991][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.498541][ T5786] veth0_vlan: entered promiscuous mode [ 90.531026][ T5786] veth1_vlan: entered promiscuous mode [ 90.547244][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.558392][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.571586][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.628741][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.639763][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.655603][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.676035][ T5785] veth0_macvtap: entered promiscuous mode [ 90.694471][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.703656][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712378][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724140][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756308][ T5785] veth1_macvtap: entered promiscuous mode [ 90.805150][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.819776][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.830734][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.841832][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.852395][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.863194][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.875337][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.884191][ T5786] veth0_macvtap: entered promiscuous mode [ 90.895194][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.906097][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.916940][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.927598][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.939153][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.964397][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.973380][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983553][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.992841][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046136][ T5786] veth1_macvtap: entered promiscuous mode [ 91.084980][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.089218][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.105858][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.113086][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.124858][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.135834][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.145878][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.156433][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.168042][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.214266][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.217793][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.232628][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.246393][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.256382][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.269416][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.279673][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.290204][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.302004][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.315428][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.324804][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.333746][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.344688][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.490762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.577468][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.607292][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.664082][ T5799] Bluetooth: hci2: command tx timeout [ 91.705657][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.743587][ T5794] Bluetooth: hci0: command tx timeout [ 91.749245][ T5794] Bluetooth: hci3: command tx timeout [ 91.749611][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.755252][ T5799] Bluetooth: hci1: command tx timeout [ 91.859243][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.901074][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.991515][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.012559][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.116302][ T5890] syz.3.8[5890]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.235171][ T9] cfg80211: failed to load regulatory.db [ 92.281566][ T5890] loop3: detected capacity change from 0 to 256 [ 92.293289][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.312268][ T5890] ======================================================= [ 92.312268][ T5890] WARNING: The mand mount option has been deprecated and [ 92.312268][ T5890] and is ignored by this kernel. Remove the mand [ 92.312268][ T5890] option from the mount to silence this warning. [ 92.312268][ T5890] ======================================================= [ 92.379303][ T5890] exfat: Deprecated parameter 'utf8' [ 92.403608][ T5890] exfat: Deprecated parameter 'namecase' [ 92.409357][ T5890] exfat: Deprecated parameter 'utf8' [ 92.482376][ T5890] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 92.623702][ T5896] loop2: detected capacity change from 0 to 4096 [ 92.985104][ T5896] ntfs3: loop2: failed to convert "0080" to cp862 [ 93.001198][ T5896] ntfs3: loop2: failed to convert name for inode 1e. [ 93.088324][ T5908] loop0: detected capacity change from 0 to 4096 [ 93.742693][ T5799] Bluetooth: hci2: command tx timeout [ 93.823953][ T5799] Bluetooth: hci1: command tx timeout [ 93.823999][ T5799] Bluetooth: hci3: command tx timeout [ 93.824032][ T5799] Bluetooth: hci0: command tx timeout [ 94.042178][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.074324][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.087351][ T5928] netlink: 'syz.0.23': attribute type 19 has an invalid length. [ 94.120260][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.536703][ T5942] loop0: detected capacity change from 0 to 256 [ 94.808632][ T5947] loop0: detected capacity change from 0 to 512 [ 94.833594][ T5952] capability: warning: `syz.3.35' uses 32-bit capabilities (legacy support in use) [ 94.889690][ T5947] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.32: Invalid inode bitmap blk 4 in block_group 0 [ 94.964411][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.057855][ T5947] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 95.090860][ T5948] loop2: detected capacity change from 0 to 4096 [ 95.114317][ T5948] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 95.134848][ T5947] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.32: Invalid inode bitmap blk 4 in block_group 0 [ 95.181910][ T5948] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 95.217137][ T5947] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 95.232761][ T5948] ntfs3: loop2: Failed to load $Extend (-22). [ 95.259851][ T5948] ntfs3: loop2: Failed to initialize $Extend. [ 95.397827][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.464192][ T5964] loop1: detected capacity change from 0 to 512 [ 95.473030][ T28] audit: type=1800 audit(1756467890.026:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=33 res=0 errno=0 [ 95.618473][ T5964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.673178][ T5964] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.899603][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.139572][ T5983] loop0: detected capacity change from 0 to 512 [ 96.158393][ T5983] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.247408][ T5983] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 96.247599][ T5985] loop3: detected capacity change from 0 to 1024 [ 96.272764][ T5983] FAT-fs (loop0): Filesystem has been set read-only [ 96.330102][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.2.50'. [ 96.340789][ T5987] gretap0: entered promiscuous mode [ 96.374263][ T5987] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 96.381840][ T5988] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 96.445968][ T5987] netlink: 3 bytes leftover after parsing attributes in process `syz.2.50'. [ 96.464287][ T5794] Bluetooth: hci3: command tx timeout [ 96.523062][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.586511][ T2943] hfsplus: b-tree write err: -5, ino 4 [ 96.658484][ T5992] loop2: detected capacity change from 0 to 256 [ 96.668824][ T5992] exfat: Deprecated parameter 'utf8' [ 96.681038][ T5992] exfat: Deprecated parameter 'namecase' [ 96.689581][ T5992] exfat: Deprecated parameter 'utf8' [ 96.725483][ T5992] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 96.764196][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.801424][ T27] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 96.833022][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.848843][ T5996] warning: `syz.0.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.874632][ T27] usb 2-1: config 0 descriptor?? [ 97.146894][ T6000] loop3: detected capacity change from 0 to 1024 [ 97.149082][ T6002] loop2: detected capacity change from 0 to 256 [ 97.211380][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.284935][ T6002] FAT-fs (loop2): Directory bread(block 64) failed [ 97.302649][ T6002] FAT-fs (loop2): Directory bread(block 65) failed [ 97.309442][ T6002] FAT-fs (loop2): Directory bread(block 66) failed [ 97.316157][ T6002] FAT-fs (loop2): Directory bread(block 67) failed [ 97.322994][ T6002] FAT-fs (loop2): Directory bread(block 68) failed [ 97.332867][ T6002] FAT-fs (loop2): Directory bread(block 69) failed [ 97.344993][ T27] acrux 0003:1A34:F705.0001: item fetching failed at offset 3/7 [ 97.354337][ T6002] FAT-fs (loop2): Directory bread(block 70) failed [ 97.360944][ T6002] FAT-fs (loop2): Directory bread(block 71) failed [ 97.368583][ T27] acrux 0003:1A34:F705.0001: parse failed [ 97.374541][ T27] acrux: probe of 0003:1A34:F705.0001 failed with error -22 [ 97.383034][ T6002] FAT-fs (loop2): Directory bread(block 72) failed [ 97.389632][ T6002] FAT-fs (loop2): Directory bread(block 73) failed [ 97.504106][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.638501][ T5776] usb 2-1: USB disconnect, device number 2 [ 98.208933][ T6029] loop3: detected capacity change from 0 to 256 [ 98.241479][ T6029] exfat: Deprecated parameter 'utf8' [ 98.276397][ T6029] exfat: Deprecated parameter 'namecase' [ 98.358421][ T6029] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 98.954690][ T6052] loop2: detected capacity change from 0 to 1024 [ 99.193560][ T12] hfsplus: b-tree write err: -5, ino 4 [ 99.543407][ T6069] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 99.553071][ T6069] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 99.559653][ T6069] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 99.612538][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.795005][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.815045][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.840038][ T5776] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.864895][ T5776] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 99.876398][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.905585][ T5776] usb 3-1: config 0 descriptor?? [ 99.964659][ T6079] capability: warning: `syz.1.92' uses deprecated v2 capabilities in a way that may be insecure [ 100.384895][ T5776] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 100.412244][ T6093] loop1: detected capacity change from 0 to 256 [ 100.505551][ T6093] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.573136][ T6093] FAT-fs (loop1): Filesystem has been set read-only [ 100.600595][ T6093] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.637380][ T6093] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.663207][ T5840] usb 3-1: USB disconnect, device number 2 [ 100.692357][ T28] audit: type=1800 audit(1756467895.256:3): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.99" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 100.740570][ T6100] loop3: detected capacity change from 0 to 64 [ 100.757059][ T6094] fido_id[6094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.803757][ T5776] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.005920][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.032547][ T5776] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 101.041530][ T5776] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 101.064928][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.077050][ T5776] usb 1-1: config 0 descriptor?? [ 101.099949][ T5776] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 101.112159][ T5776] dvb-usb: bulk message failed: -22 (3/0) [ 101.131638][ T5776] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 101.151138][ T5776] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 101.161269][ T5776] usb 1-1: media controller created [ 101.174399][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.237893][ T5776] dvb-usb: bulk message failed: -22 (6/0) [ 101.246881][ T5776] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 101.268290][ T5776] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 101.312069][ T5776] dvb-usb: schedule remote query interval to 150 msecs. [ 101.332470][ T5776] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 101.360598][ T5776] usb 1-1: USB disconnect, device number 2 [ 101.426121][ T5776] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 101.561140][ T6116] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 101.647907][ T6115] loop3: detected capacity change from 0 to 4096 [ 101.820979][ T6115] ntfs3: loop3: failed to convert "0000" to iso8859-6 [ 101.837377][ T6115] ntfs3: loop3: failed to convert "0030" to iso8859-6 [ 101.849385][ T6115] ntfs3: loop3: failed to convert name for inode 1e. [ 101.859442][ T6115] ntfs3: loop3: failed to convert "0032" to iso8859-6 [ 101.869463][ T6115] ntfs3: loop3: failed to convert "0033" to iso8859-6 [ 102.072534][ T27] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.208079][ T6128] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 102.306099][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.337861][ T27] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 102.373294][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.387013][ T27] usb 2-1: config 0 descriptor?? [ 102.832238][ T6140] loop0: detected capacity change from 0 to 256 [ 102.886421][ T27] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 102.934917][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 103.063430][ T27] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 103.071429][ T27] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 103.102017][ T6140] FAT-fs (loop0): Directory bread(block 64) failed [ 103.139678][ T6140] FAT-fs (loop0): Directory bread(block 65) failed [ 103.148766][ T27] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 103.168098][ T6140] FAT-fs (loop0): Directory bread(block 66) failed [ 103.182638][ T27] nintendo: probe of 0003:057E:200E.0003 failed with error -110 [ 103.202656][ T6140] FAT-fs (loop0): Directory bread(block 67) failed [ 103.209546][ T6140] FAT-fs (loop0): Directory bread(block 68) failed [ 103.233595][ T27] usb 2-1: USB disconnect, device number 3 [ 103.282588][ T6140] FAT-fs (loop0): Directory bread(block 69) failed [ 103.289300][ T6140] FAT-fs (loop0): Directory bread(block 70) failed [ 103.322638][ T6140] FAT-fs (loop0): Directory bread(block 71) failed [ 103.330815][ T6140] FAT-fs (loop0): Directory bread(block 72) failed [ 103.349580][ T6140] FAT-fs (loop0): Directory bread(block 73) failed [ 103.864505][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 104.007615][ T6162] Cannot find add_set index 1 as target [ 105.082611][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.083131][ T6193] loop2: detected capacity change from 0 to 4096 [ 105.158959][ T6193] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.201226][ T6193] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 105.323236][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.349551][ T8] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.372608][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.389525][ T8] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 105.405982][ T5971] udevd[5971]: incorrect nilfs2 checksum on /dev/loop2 [ 105.409403][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.452092][ T8] usb 2-1: config 0 descriptor?? [ 105.484620][ T6210] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.004999][ T6220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 106.027080][ T8] itetech 0003:06CB:73F6.0004: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 106.287074][ T5776] usb 2-1: USB disconnect, device number 4 [ 106.298270][ T6229] loop3: detected capacity change from 0 to 512 [ 106.361021][ T6229] EXT4-fs: Ignoring removed oldalloc option [ 106.369139][ T6229] EXT4-fs: Ignoring removed bh option [ 106.432891][ T6229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 106.443794][ T6229] System zones: 1-12 [ 106.463001][ T6229] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.153: corrupted in-inode xattr: e_value size too large [ 106.510425][ T6229] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.153: couldn't read orphan inode 15 (err -117) [ 106.584105][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.301798][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.537810][ T6253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 107.725254][ T6253] syz.3.158 (6253) used greatest stack depth: 20072 bytes left [ 109.236758][ T6294] loop2: detected capacity change from 0 to 4096 [ 109.259692][ T6276] loop0: detected capacity change from 0 to 32768 [ 109.349917][ T6298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.379859][ T6276] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 109.537884][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 109.628200][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 110.336381][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 110.513017][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.712555][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 110.722567][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 110.753724][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.775303][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.793668][ T5878] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.809044][ T6331] 9p: Unknown Cache mode or invalid value m [ 110.830766][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.842539][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.862573][ T5878] usb 4-1: Product: syz [ 110.866822][ T5878] usb 4-1: Manufacturer: syz [ 110.901191][ T5878] usb 4-1: SerialNumber: syz [ 110.934795][ T5878] cdc_ncm 4-1:1.0: skipping garbage [ 110.944230][ T5878] cdc_ncm 4-1:1.0: skipping garbage [ 110.949513][ T5878] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 110.987316][ T5878] cdc_ncm 4-1:1.0: bind() failure [ 111.194803][ T5878] usb 4-1: USB disconnect, device number 2 [ 111.282838][ T5776] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 111.317969][ T6345] loop0: detected capacity change from 0 to 1024 [ 111.368706][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.464760][ T5776] usb 2-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.482478][ T5776] usb 2-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.492298][ T5776] usb 2-1: config 4 interface 0 has no altsetting 0 [ 111.513299][ T5776] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 111.515100][ T6345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.202: inode #398253073: comm syz.0.202: iget: illegal inode # [ 111.544035][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.582739][ T6345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.202: error while reading EA inode 398253073 err=-117 [ 111.691093][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.851819][ T6350] loop2: detected capacity change from 0 to 4096 [ 111.941743][ T6350] ntfs: volume version 3.1. [ 112.017161][ T5776] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0 [ 112.048504][ T5776] holtek_mouse 0003:04D9:A067.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 112.304814][ T5878] usb 2-1: USB disconnect, device number 5 [ 112.506202][ T6361] netlink: 'syz.3.208': attribute type 30 has an invalid length. [ 112.641858][ T6364] loop2: detected capacity change from 0 to 8192 [ 112.672861][ T6364] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.700109][ T6364] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 112.712035][ T6364] REISERFS (device loop2): using ordered data mode [ 112.719225][ T6364] reiserfs: using flush barriers [ 112.728430][ T6364] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.753829][ T6364] REISERFS (device loop2): checking transaction log (loop2) [ 112.927781][ T6364] REISERFS (device loop2): Using tea hash to sort names [ 112.965359][ T6364] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 113.037679][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 113.251015][ T6378] loop1: detected capacity change from 0 to 1024 [ 113.339109][ T6381] loop3: detected capacity change from 0 to 256 [ 113.357817][ T6378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.392988][ T6378] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.487953][ T6381] FAT-fs (loop3): Directory bread(block 64) failed [ 113.522215][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.524330][ T6381] FAT-fs (loop3): Directory bread(block 65) failed [ 113.572007][ T6381] FAT-fs (loop3): Directory bread(block 66) failed [ 113.597413][ T6381] FAT-fs (loop3): Directory bread(block 67) failed [ 113.629123][ T6381] FAT-fs (loop3): Directory bread(block 68) failed [ 113.656098][ T6381] FAT-fs (loop3): Directory bread(block 69) failed [ 113.676922][ T6381] FAT-fs (loop3): Directory bread(block 70) failed [ 113.691936][ T6381] FAT-fs (loop3): Directory bread(block 71) failed [ 113.729924][ T6381] FAT-fs (loop3): Directory bread(block 72) failed [ 113.758846][ T6381] FAT-fs (loop3): Directory bread(block 73) failed [ 113.773038][ T6389] netlink: 124 bytes leftover after parsing attributes in process `syz.0.220'. [ 113.960894][ T28] audit: type=1326 audit(1756467908.516:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cc38ebe9 code=0x7ffc0000 [ 114.013313][ T28] audit: type=1326 audit(1756467908.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cc38ebe9 code=0x7ffc0000 [ 114.063119][ T28] audit: type=1326 audit(1756467908.566:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb6cc38ebe9 code=0x7ffc0000 [ 114.147147][ T28] audit: type=1326 audit(1756467908.616:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cc38ebe9 code=0x7ffc0000 [ 114.211790][ T6397] loop3: detected capacity change from 0 to 256 [ 114.235654][ T28] audit: type=1326 audit(1756467908.616:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cc38ebe9 code=0x7ffc0000 [ 114.833195][ T6386] loop2: detected capacity change from 0 to 32768 [ 115.062578][ T5840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.273556][ T5840] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 115.284916][ T5840] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 115.307289][ T5840] usb 2-1: Product: syz [ 115.316520][ T5840] usb 2-1: Manufacturer: syz [ 115.327163][ T5840] usb 2-1: SerialNumber: syz [ 115.361451][ T5840] usb 2-1: config 0 descriptor?? [ 115.564832][ T6429] loop3: detected capacity change from 0 to 128 [ 115.619320][ T6429] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 116.042810][ T5840] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 116.068240][ T5840] asix: probe of 2-1:0.0 failed with error -71 [ 116.117595][ T5840] usb 2-1: USB disconnect, device number 6 [ 116.730994][ T6459] loop3: detected capacity change from 0 to 512 [ 116.796728][ T6459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.831692][ T6459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.861457][ T6464] loop0: detected capacity change from 0 to 4096 [ 116.894198][ T6459] EXT4-fs (loop3): 1 orphan inode deleted [ 116.900811][ T6459] EXT4-fs (loop3): 1 truncate cleaned up [ 116.915474][ T6464] NILFS (loop0): invalid segment: Checksum error in segment payload [ 116.926765][ T6464] NILFS (loop0): trying rollback from an earlier position [ 116.945027][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.998519][ T6464] NILFS (loop0): recovery complete [ 117.015357][ T6459] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.252: iget: bad extra_isize 46 (inode size 256) [ 117.032317][ T6459] EXT4-fs (loop3): Remounting filesystem read-only [ 117.047466][ T6469] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.115309][ T6463] loop1: detected capacity change from 0 to 8192 [ 117.117275][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.158807][ T6463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.213024][ T6463] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 117.224554][ T6463] REISERFS (device loop1): using ordered data mode [ 117.231130][ T6463] reiserfs: using flush barriers [ 117.239011][ T6463] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.256053][ T6463] REISERFS (device loop1): checking transaction log (loop1) [ 117.297662][ T6463] REISERFS (device loop1): Using rupasov hash to sort names [ 117.318229][ T6463] REISERFS (device loop1): using 3.5.x disk format [ 117.334912][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.256'. [ 117.366827][ T6463] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 117.389880][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.256'. [ 117.413552][ T6463] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 117.433179][ T6473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.256'. [ 117.452579][ T6463] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 117.483769][ T6463] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 119.758873][ T6551] loop3: detected capacity change from 0 to 512 [ 119.827977][ T6551] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 119.980079][ T6530] loop0: detected capacity change from 0 to 32768 [ 120.088915][ T6530] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.318050][ T6530] XFS (loop0): Ending clean mount [ 120.606025][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.666715][ T6554] loop1: detected capacity change from 0 to 40427 [ 120.731481][ T6554] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 120.749335][ T28] audit: type=1326 audit(1756467915.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff638ebe9 code=0x7ffc0000 [ 120.755142][ T6554] F2FS-fs (loop1): Image doesn't support compression [ 120.778707][ T6554] F2FS-fs (loop1): Image doesn't support compression [ 120.789418][ T28] audit: type=1326 audit(1756467915.346:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff638ebe9 code=0x7ffc0000 [ 120.855207][ T6573] loop2: detected capacity change from 0 to 1024 [ 120.885093][ T6554] F2FS-fs (loop1): invalid crc value [ 120.903551][ T6573] ext4: Unknown parameter 'uid<00000000000000000000' [ 120.916349][ T28] audit: type=1326 audit(1756467915.346:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faff638ebe9 code=0x7ffc0000 [ 120.996264][ T6554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.048117][ T28] audit: type=1326 audit(1756467915.346:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faff638ec23 code=0x7ffc0000 [ 121.135639][ T28] audit: type=1326 audit(1756467915.356:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faff638d69f code=0x7ffc0000 [ 121.257164][ T28] audit: type=1326 audit(1756467915.366:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faff638ec77 code=0x7ffc0000 [ 121.307888][ T6582] loop0: detected capacity change from 0 to 256 [ 121.314019][ T6554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.324825][ T28] audit: type=1326 audit(1756467915.426:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faff638d550 code=0x7ffc0000 [ 121.360447][ T6582] exfat: Deprecated parameter 'utf8' [ 121.402330][ T6582] exfat: Deprecated parameter 'utf8' [ 121.440039][ T6582] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d) [ 121.461475][ T28] audit: type=1326 audit(1756467915.426:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faff638e7eb code=0x7ffc0000 [ 121.518738][ T6586] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 121.547233][ T28] audit: type=1326 audit(1756467915.426:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faff638d84a code=0x7ffc0000 [ 121.613173][ T28] audit: type=1326 audit(1756467915.426:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faff638d84a code=0x7ffc0000 [ 121.647873][ T27] IPVS: starting estimator thread 0... [ 121.782675][ T6589] IPVS: using max 18 ests per chain, 43200 per kthread [ 121.804748][ T6594] loop0: detected capacity change from 0 to 1024 [ 122.596915][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 122.638036][ T6617] loop0: detected capacity change from 0 to 512 [ 122.675487][ T6617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.703180][ T6617] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.714518][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.769884][ T6622] loop2: detected capacity change from 0 to 64 [ 122.783083][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.802452][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.939696][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.961499][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.984281][ T5840] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 122.999619][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.014368][ T27] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 123.022286][ T5840] usb 4-1: config 0 descriptor?? [ 123.029144][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.046593][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.069027][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.090844][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.107205][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.119684][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.131712][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.159097][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.187875][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.200404][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.211244][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.223111][ T6629] binder: 6628:6629 ioctl c0306201 0 returned -14 [ 123.227396][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.238889][ T6629] binder: 6628:6629 ioctl c020f509 0 returned -22 [ 123.251390][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.261654][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.272985][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.293843][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.312123][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.351467][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.386436][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.409302][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.430358][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.448593][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.466793][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.480178][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.505067][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.533170][ T5840] wacom 0003:056A:0325.0006: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 123.542518][ T27] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.575490][ T27] usb 2-1: Product: syz [ 123.579775][ T27] usb 2-1: Manufacturer: syz [ 123.612109][ T27] usb 2-1: SerialNumber: syz [ 123.643928][ T27] usb 2-1: config 0 descriptor?? [ 123.681923][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 123.709578][ T27] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.740119][ T5840] usb 4-1: USB disconnect, device number 3 [ 123.865331][ T6640] tipc: Enabling of bearer rejected, media not registered [ 124.017091][ T3061] usb 2-1: USB disconnect, device number 7 [ 124.034472][ T3061] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 124.183104][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 124.408203][ T6652] loop0: detected capacity change from 0 to 4096 [ 124.479963][ T6657] Bluetooth: MGMT ver 1.22 [ 124.502822][ T6652] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 124.573999][ T6652] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 125.282971][ T6672] 9pnet_rdma: rdma_create_trans (6672): problem binding to privport: 13 [ 125.511765][ T6676] loop0: detected capacity change from 0 to 164 [ 125.582974][ T5971] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.637726][ T6662] loop1: detected capacity change from 0 to 32768 [ 125.639437][ T6664] loop2: detected capacity change from 0 to 32768 [ 126.173963][ T6674] loop3: detected capacity change from 0 to 32768 [ 126.195814][ T6674] JBD2: Ignoring recovery information on journal [ 126.254219][ T6674] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.352730][ T3061] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.421599][ T6674] (syz.3.342,6674,1):ocfs2_reflink_ioctl:4427 ERROR: status = -14 [ 126.543470][ T5794] Bluetooth: hci0: command tx timeout [ 126.605619][ T3061] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.626968][ T3061] usb 1-1: config 0 has no interface number 0 [ 126.628637][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 126.662664][ T3061] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 126.695876][ T3061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.748733][ T3061] usb 1-1: config 0 descriptor?? [ 126.794894][ T3061] usb 1-1: selecting invalid altsetting 1 [ 126.823922][ T3061] dvb_ttusb_budget: ttusb_init_controller: error [ 126.830355][ T3061] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.102862][ T3061] DVB: Unable to find symbol cx22700_attach() [ 127.236032][ T3061] DVB: Unable to find symbol tda10046_attach() [ 127.265569][ T3061] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 127.285105][ T3061] usb 1-1: USB disconnect, device number 3 [ 127.567531][ T6702] loop1: detected capacity change from 0 to 8192 [ 127.582144][ T6702] FAT-fs (loop1): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value [ 128.072521][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.274660][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 128.292504][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 128.322486][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 128.335052][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 128.357072][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 128.376559][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.435581][ T23] usb 1-1: config 0 descriptor?? [ 128.664399][ T23] hdpvr 1-1:0.0: firmware version 0x0 dated [ 128.671003][ T23] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 128.715776][ T6720] loop3: detected capacity change from 0 to 32768 [ 128.730374][ T6734] loop2: detected capacity change from 0 to 2048 [ 128.786730][ T6734] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.819341][ T6720] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.855136][ T6734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.896628][ T6744] loop1: detected capacity change from 0 to 1024 [ 128.989549][ T6720] XFS (loop3): Ending clean mount [ 129.207850][ T23] hdpvr 1-1:0.0: Could not setup controls [ 129.230718][ T23] hdpvr 1-1:0.0: registering videodev failed [ 129.301341][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.321837][ T23] hdpvr: probe of 1-1:0.0 failed with error -71 [ 129.339584][ T23] usb 1-1: USB disconnect, device number 4 [ 129.951603][ T6765] loop0: detected capacity change from 0 to 2048 [ 130.030888][ T6765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.053152][ T6765] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.097284][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.148847][ T6773] loop3: detected capacity change from 0 to 512 [ 130.233251][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.317737][ T5840] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 130.339531][ T6773] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.344869][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.359671][ T5840] usb 2-1: Product: syz [ 130.366662][ T5840] usb 2-1: Manufacturer: syz [ 130.371327][ T5840] usb 2-1: SerialNumber: syz [ 130.375577][ T6773] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.379391][ T5840] usb 2-1: config 0 descriptor?? [ 130.426891][ T6779] loop0: detected capacity change from 0 to 1764 [ 130.432781][ T6773] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.383: Directory hole found for htree leaf block 0 [ 130.473017][ T6773] EXT4-fs (loop3): Remounting filesystem read-only [ 130.482097][ T5840] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 008 [ 130.561493][ T5784] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 130.816515][ T6785] loop2: detected capacity change from 0 to 2048 [ 130.855746][ T6785] NILFS (loop2): invalid segment: Inconsistency found [ 130.885515][ T6785] NILFS (loop2): trying rollback from an earlier position [ 130.938011][ T6785] NILFS (loop2): recovery complete [ 130.953756][ T6788] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.096433][ T5840] i2c i2c-1: failure reading functionality [ 131.144041][ T5840] i2c i2c-1: connected i2c-tiny-usb device [ 131.184365][ T5840] usb 2-1: USB disconnect, device number 8 [ 131.464722][ T6801] loop2: detected capacity change from 0 to 1024 [ 131.551888][ T6801] hfsplus: bad catalog entry type [ 131.742709][ T5799] Bluetooth: hci3: command tx timeout [ 131.846015][ T6812] loop2: detected capacity change from 0 to 512 [ 131.892532][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.934018][ T6812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.977559][ T6812] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.082552][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 132.087777][ T6812] EXT4-fs error (device loop2): ext4_get_first_dir_block:3606: inode #12: comm syz.2.400: directory missing '..' [ 132.107298][ T6812] EXT4-fs (loop2): Remounting filesystem read-only [ 132.110140][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.133680][ T5840] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 132.156261][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.161926][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.168525][ T5840] usb 4-1: config 0 descriptor?? [ 132.207965][ T2943] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 132.208086][ T2943] __quota_error: 9 callbacks suppressed [ 132.208096][ T2943] Quota error (device loop2): write_blk: dquota write failed [ 132.208112][ T2943] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 132.309856][ T27] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 132.360210][ T6824] loop0: detected capacity change from 0 to 1024 [ 132.462959][ T27] usb 2-1: device descriptor read/64, error -71 [ 132.513157][ T135] hfsplus: b-tree write err: -5, ino 4 [ 132.639521][ T5840] kone 0003:1E7D:2CED.0007: item fetching failed at offset 0/2 [ 132.640393][ T5840] kone 0003:1E7D:2CED.0007: parse failed [ 132.640462][ T5840] kone: probe of 0003:1E7D:2CED.0007 failed with error -22 [ 132.749047][ T27] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 132.865443][ T5840] usb 4-1: USB disconnect, device number 4 [ 132.912706][ T27] usb 2-1: device descriptor read/64, error -71 [ 132.964370][ T6828] loop2: detected capacity change from 0 to 32768 [ 132.996486][ T6828] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.037557][ T27] usb usb2-port1: attempt power cycle [ 133.046264][ T6828] XFS (loop2): Ending clean mount [ 133.097529][ T6828] XFS (loop2): Quotacheck needed: Please wait. [ 133.157363][ T6828] XFS (loop2): Quotacheck: Done. [ 133.187774][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.202736][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.224722][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.472652][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 133.536174][ T27] usb 2-1: device descriptor read/8, error -71 [ 133.755210][ T6849] loop2: detected capacity change from 0 to 64 [ 133.834577][ T27] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 133.886375][ T27] usb 2-1: device descriptor read/8, error -71 [ 133.937857][ T6851] loop3: detected capacity change from 0 to 64 [ 134.032589][ T27] usb usb2-port1: unable to enumerate USB device [ 134.083450][ T6840] loop0: detected capacity change from 0 to 32768 [ 134.194631][ T6840] loop0: p1 p3 < > [ 134.511627][ T6865] mmap: syz.2.419 (6865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.725505][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.772500][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.780355][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.802911][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.810858][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.829227][ T5971] udevd[5971]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 134.842951][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 134.862740][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.870576][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.908987][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.932501][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.940345][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 134.986534][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.012519][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.020343][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.050528][ T6876] loop3: detected capacity change from 0 to 2048 [ 135.061220][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.079420][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.088174][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.096871][ T6876] NILFS (loop3): invalid segment: Inconsistency found [ 135.114501][ T6876] NILFS (loop3): trying rollback from an earlier position [ 135.116357][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.132169][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.149471][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.159911][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.162016][ T6876] NILFS (loop3): recovery complete [ 135.169208][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.181321][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.205309][ T6880] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.229706][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.271796][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.287110][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.316247][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.351922][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.372971][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.380854][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.398592][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.431825][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.447976][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.476374][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.511871][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.536007][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.552869][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.566966][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.590753][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.614956][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.643250][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.651070][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.682607][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.700707][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.712545][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.730662][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.739046][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.771577][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.789773][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.802574][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.807419][ T6894] macsec1: entered promiscuous mode [ 135.820616][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.838968][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.858426][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.872501][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.894441][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.902296][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.912863][ T5840] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 135.923289][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.931222][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.956721][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.977704][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.985887][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 135.996678][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.004889][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.013152][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.021125][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.029759][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.038018][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.046243][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.056291][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.074916][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.088591][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.097068][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.106489][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 136.111866][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.120873][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.123984][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.142832][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.156450][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.166748][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.171365][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.186299][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.189388][ T5840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.207614][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.215047][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.240933][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.248381][ T5840] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.259296][ T5840] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.269659][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.280676][ T5840] usb 2-1: Manufacturer: syz [ 136.288871][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.305973][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.310752][ T5840] usb 2-1: config 0 descriptor?? [ 136.326312][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.346438][ T27] hid-generic 0000:0002:FFFFFFFE.0008: unknown main item tag 0x0 [ 136.378966][ T27] hid-generic 0000:0002:FFFFFFFE.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 136.600764][ T6899] fido_id[6899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.732578][ T5840] rc_core: IR keymap rc-hauppauge not found [ 136.758941][ T5840] Registered IR keymap rc-empty [ 136.779658][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.808014][ T6906] loop0: detected capacity change from 0 to 2048 [ 136.832719][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.848285][ T6906] NILFS (loop0): invalid segment: Inconsistency found [ 136.868795][ T6906] NILFS (loop0): trying rollback from an earlier position [ 136.888568][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 136.928791][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 136.970647][ T6906] NILFS (loop0): recovery complete [ 136.976730][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.001855][ T6912] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.018571][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.054840][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.122673][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.152574][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.186803][ T6914] loop3: detected capacity change from 0 to 2048 [ 137.195206][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.228561][ T6914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.256202][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.315944][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.353712][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.394770][ T5840] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.435159][ T5840] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.459218][ T5840] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.497548][ T5840] usb 2-1: USB disconnect, device number 13 [ 137.813297][ T6925] loop0: detected capacity change from 0 to 1024 [ 138.189795][ T6932] loop0: detected capacity change from 0 to 1024 [ 138.262018][ T6932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.315938][ T6922] loop2: detected capacity change from 0 to 32768 [ 138.410962][ T6922] loop2: p1 p3 < > [ 138.503722][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.117418][ T6951] loop0: detected capacity change from 0 to 4096 [ 140.200180][ T6965] loop3: detected capacity change from 0 to 32768 [ 140.587827][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 140.946917][ T6993] loop1: detected capacity change from 0 to 4096 [ 140.990774][ T6993] NILFS (loop1): invalid segment: Checksum error in segment payload [ 141.019462][ T6993] NILFS (loop1): trying rollback from an earlier position [ 141.068984][ T6993] NILFS (loop1): recovery complete [ 141.122795][ T7000] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.609718][ T7015] netlink: 'syz.3.485': attribute type 2 has an invalid length. [ 141.699741][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 141.762429][ T7023] [U] [ 142.224072][ T7039] loop3: detected capacity change from 0 to 512 [ 142.246293][ T7039] EXT4-fs: Ignoring removed orlov option [ 142.282123][ T7039] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 142.692264][ T7055] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.504'. [ 142.713083][ T7055] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 142.721425][ T7055] openvswitch: netlink: Message has 1 unknown bytes. [ 142.922595][ T8] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 143.001997][ T7064] loop3: detected capacity change from 0 to 64 [ 143.093917][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.125154][ T8] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 143.128784][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.154721][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.172967][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 143.184656][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.198300][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.200905][ T7070] loop0: detected capacity change from 0 to 512 [ 143.210373][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.229210][ T8] usb 3-1: config 0 descriptor?? [ 143.251280][ T7052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.275263][ T7070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.289559][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.315908][ T7070] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.327005][ T7064] hfs: request for non-existent node 237 in B*Tree [ 143.415804][ T7077] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.513' resets device [ 143.547845][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.564722][ T2943] ------------[ cut here ]------------ [ 143.570355][ T2943] kernel BUG at fs/hfs/inode.c:449! [ 143.598672][ T2943] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 143.604849][ T2943] CPU: 1 PID: 2943 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 143.612525][ T2943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.622628][ T2943] Workqueue: writeback wb_workfn (flush-7:3) [ 143.628677][ T2943] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 143.634259][ T2943] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 143.653895][ T2943] RSP: 0000:ffffc9000bd17360 EFLAGS: 00010293 [ 143.659994][ T2943] RAX: ffffffff825700e4 RBX: ffff888020f08ea8 RCX: ffff88802b66bc00 [ 143.668258][ T2943] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 143.676275][ T2943] RBP: ffffc9000bd174f0 R08: ffff88802b66bc00 R09: 0000000000000003 [ 143.684286][ T2943] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 143.692282][ T2943] R13: 1ffff920017a2e70 R14: ffff888020f08e58 R15: 0000000000000000 [ 143.700363][ T2943] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 143.709313][ T2943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.715914][ T2943] CR2: 00007fb6cc5b7dac CR3: 0000000030ece000 CR4: 00000000003506e0 [ 143.723912][ T2943] Call Trace: [ 143.727327][ T2943] [ 143.730277][ T2943] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 143.735706][ T2943] ? __rwlock_init+0x150/0x150 [ 143.740577][ T2943] __writeback_single_inode+0x705/0xee0 [ 143.746155][ T2943] writeback_sb_inodes+0x77c/0xef0 [ 143.751303][ T2943] ? queue_io+0x560/0x560 [ 143.755678][ T2943] ? rcu_is_watching+0x15/0xb0 [ 143.760467][ T2943] wb_writeback+0x450/0xba0 [ 143.765004][ T2943] ? queue_io+0x3a1/0x560 [ 143.769361][ T2943] ? percpu_ref_tryget+0x250/0x250 [ 143.774504][ T2943] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 143.780547][ T2943] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.785790][ T2943] wb_workfn+0x3ff/0xe20 [ 143.790149][ T2943] ? inode_wait_for_writeback+0x200/0x200 [ 143.795908][ T2943] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 143.801949][ T2943] ? read_lock_is_recursive+0x20/0x20 [ 143.807353][ T2943] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.812575][ T2943] ? process_scheduled_works+0x957/0x15b0 [ 143.818352][ T2943] ? process_scheduled_works+0x957/0x15b0 [ 143.824101][ T2943] process_scheduled_works+0xa45/0x15b0 [ 143.829713][ T2943] ? assign_work+0x400/0x400 [ 143.834364][ T2943] ? assign_work+0x39e/0x400 [ 143.839083][ T2943] worker_thread+0xa55/0xfc0 [ 143.843706][ T2943] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 143.849640][ T2943] ? _raw_spin_unlock+0x40/0x40 [ 143.854537][ T2943] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 143.860472][ T2943] kthread+0x2fa/0x390 [ 143.864575][ T2943] ? pr_cont_work+0x560/0x560 [ 143.869285][ T2943] ? kthread_blkcg+0xd0/0xd0 [ 143.873892][ T2943] ret_from_fork+0x48/0x80 [ 143.878324][ T2943] ? kthread_blkcg+0xd0/0xd0 [ 143.882927][ T2943] ret_from_fork_asm+0x11/0x20 [ 143.887717][ T2943] [ 143.890760][ T2943] Modules linked in: [ 143.894745][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.921240][ T2943] ---[ end trace 0000000000000000 ]--- [ 143.938298][ T8] lenovo 0003:17EF:60B5.0009: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 143.957580][ T2943] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 143.979317][ T2943] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 144.000578][ T2943] RSP: 0000:ffffc9000bd17360 EFLAGS: 00010293 [ 144.015385][ T2943] RAX: ffffffff825700e4 RBX: ffff888020f08ea8 RCX: ffff88802b66bc00 [ 144.031137][ T2943] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 144.045761][ T2943] RBP: ffffc9000bd174f0 R08: ffff88802b66bc00 R09: 0000000000000003 [ 144.053933][ T2943] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 144.062038][ T2943] R13: 1ffff920017a2e70 R14: ffff888020f08e58 R15: 0000000000000000 [ 144.071672][ T2943] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 144.080903][ T2943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.087705][ T2943] CR2: 00007faa2ed212c0 CR3: 000000007b289000 CR4: 00000000003506f0 [ 144.096077][ T2943] Kernel panic - not syncing: Fatal exception [ 144.102538][ T2943] Kernel Offset: disabled [ 144.106881][ T2943] Rebooting in 86400 seconds..