last executing test programs: 4.752538203s ago: executing program 4 (id=765): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "e02c179a84c0e2e80f95bc82fd6e0e4ff274df4ae2ee92f6680d99749d27a439", "4a65a99b958aa4cca452011d35eef32b", {"94837a326f05cb8422720228290ddb99", "ab4750f241b21ed2ce4a61b96385e0e5"}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "326c12fc085875fb75273d6d6477871bb6d9b6e2cf246d5e3619a8a3037ea675", "5f364935d48376cc6849ea35368d15a5a7bfe2c4d862da14494aba15f8a1370745f32693553151d985dd2998950deb19", "22fb7707a7ddac87fcc3cc4043c34b3f91a9880000e800", {"c83993c193f40300000000000000bf45", "5f5bc595f616da75118dea3287aafa22"}}}}}}}, 0x0) 4.564304059s ago: executing program 4 (id=768): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@bsdgroups}, {@oldalloc}]}, 0x3, 0x460, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) 4.05650929s ago: executing program 4 (id=774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000140)) 4.008422124s ago: executing program 2 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="580000001440834b80", 0x9}, {&(0x7f0000000080)='R', 0x1}], 0x2) 3.783708992s ago: executing program 2 (id=778): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x8, 0xb4, 0x1}) 3.699724349s ago: executing program 4 (id=779): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r0, 0x4, 0x0) 3.582139889s ago: executing program 4 (id=780): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x11, 0x2, 0x3fffe) 2.70851626s ago: executing program 0 (id=785): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x27, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0, 0x40, 0x1, {0x3}}) io_uring_enter(r0, 0x47f6, 0x810002, 0x4, 0x0, 0x0) 2.041121925s ago: executing program 2 (id=790): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1.903664325s ago: executing program 1 (id=791): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x501, 0x48001060, r1, 0x0) 1.738243289s ago: executing program 0 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x35}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x89cb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.672554134s ago: executing program 1 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000009c0003809800038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe4bce142b8971a5f2be0a4b037a87c58f573ded72407080001"], 0xc8}}, 0x0) 1.564729923s ago: executing program 0 (id=796): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1.523337337s ago: executing program 1 (id=797): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x9, 0x2}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.437805413s ago: executing program 3 (id=798): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r1, 0x0, 0x0, 0x21, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x4) 1.264536778s ago: executing program 3 (id=799): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000380)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {}, {@session={'session', 0x3d, 0x38}}, {@nocompress}, {@overriderock}, {@cruft}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@cruft}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000600)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.223514281s ago: executing program 0 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1e) 1.128574618s ago: executing program 2 (id=801): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.128057468s ago: executing program 1 (id=802): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = eventfd2(0x856a, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 989.52654ms ago: executing program 0 (id=803): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) 891.997828ms ago: executing program 3 (id=804): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 856.182401ms ago: executing program 2 (id=805): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@noquota}, {}, {@errors_continue}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 756.542859ms ago: executing program 1 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xfffff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 667.991066ms ago: executing program 3 (id=807): symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)=""/159, 0x9f) 635.308309ms ago: executing program 4 (id=808): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000002c0)={0x130, 0x0, r1, {0x4000000000007, 0x8, 0x0, '\x00', {0x1, 0x200, 0x4, 0x412, 0xffffffffffffffff, 0x0, 0x2000, '\x00', 0x3, 0x8000, 0x8, 0x7, {0x1, 0xdc3d}, {0x3d82, 0x5}, {0xc, 0x9}, {0xfffffffffffffefd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 552.440365ms ago: executing program 1 (id=809): syz_usbip_server_init(0xaa7f3cec63cbb9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) 484.212531ms ago: executing program 3 (id=810): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14}}, 0x1c}}, 0x4020) 400.511778ms ago: executing program 3 (id=811): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, 0x0) 584µs ago: executing program 2 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000a000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=813): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): 1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.859178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.867666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.875796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.885732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.894202][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.901292][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.910100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.919120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.944458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.954604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.962989][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.970086][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.979337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.990166][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.008147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.018256][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.026748][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.033789][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.070144][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.081737][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.095752][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.106248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.115809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.124971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.133453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.143468][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.152441][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.161906][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.171187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.180193][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.188725][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.198203][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.220835][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.229684][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.240419][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.249636][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.259934][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.268567][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.277501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.294712][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.309750][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.320244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.329831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.347482][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.359649][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.373678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.391523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.482917][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.545829][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.554006][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.579171][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.596706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.618863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.648848][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.656016][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.720835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.731833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.741066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.750397][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.757562][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.767835][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.798350][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.807258][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.826193][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.833703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.843114][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.852021][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.861004][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.870786][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.879594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.903282][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.916511][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.923826][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.931957][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.941606][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.950582][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.958977][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.966914][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.976053][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.985029][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.999371][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.012968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.023225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.032972][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.040127][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.054986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.063757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.073785][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080962][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.099973][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 64.106171][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 64.112189][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 64.114387][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 64.118892][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 64.134620][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.157924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.186415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.205912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.215397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.233588][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.271778][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.302867][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.313693][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.332699][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.351318][ T4265] device veth0_vlan entered promiscuous mode [ 64.372518][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.380618][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.389642][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.402330][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.411892][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.421768][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.431413][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.440201][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.451844][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.461147][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.469247][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.487342][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.498442][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.510517][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.517675][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.530767][ T4265] device veth1_vlan entered promiscuous mode [ 64.554813][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.563701][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.573756][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.586882][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.595846][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.609700][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.619450][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.633611][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.640785][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.657295][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.670397][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.681325][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.715712][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.727447][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.740878][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.750308][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.758009][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.767811][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.776395][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.825016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.833821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.848892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.859429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.872680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.882759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.891570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.901143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.914948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.929141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.937779][ T4263] device veth0_vlan entered promiscuous mode [ 64.955065][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.972730][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.987387][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.002498][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.015551][ T4265] device veth0_macvtap entered promiscuous mode [ 65.027021][ T4263] device veth1_vlan entered promiscuous mode [ 65.068979][ T4265] device veth1_macvtap entered promiscuous mode [ 65.090271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.107738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.125469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.139535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.148128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.157457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.197017][ T4263] device veth0_macvtap entered promiscuous mode [ 65.212336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.222358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.236818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.247260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.257979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.266114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.273791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.282616][ T4272] device veth0_vlan entered promiscuous mode [ 65.291948][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.306729][ T4263] device veth1_macvtap entered promiscuous mode [ 65.322416][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.336534][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.347245][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.362147][ T4272] device veth1_vlan entered promiscuous mode [ 65.372322][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.388189][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.397390][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.411177][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.432627][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.456339][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.465226][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.474653][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.492619][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.501809][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511246][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.520779][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.532916][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.546323][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.558249][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.577487][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.593191][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.602261][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.611159][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.622305][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.632939][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.643872][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.655367][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.666576][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.675698][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.684925][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695011][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726838][ T4272] device veth0_macvtap entered promiscuous mode [ 65.739449][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.749608][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.758602][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.767800][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.782954][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.803085][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.812355][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.825725][ T4272] device veth1_macvtap entered promiscuous mode [ 65.854683][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.862613][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.873479][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.891332][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.900151][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.908951][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.917639][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.944991][ T4264] device veth0_vlan entered promiscuous mode [ 65.979291][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.991232][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.001199][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.012008][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.026310][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.036368][ T4264] device veth1_vlan entered promiscuous mode [ 66.048984][ T4275] device veth0_vlan entered promiscuous mode [ 66.058149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.066979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.076892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.090706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.100116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.110039][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.121278][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.131433][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.141897][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.152835][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.174548][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 66.176475][ T4275] device veth1_vlan entered promiscuous mode [ 66.180583][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 66.193171][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 66.193189][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 66.200552][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 66.214610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.222619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.230472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.238369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.246809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.255973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.286639][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.296816][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.305636][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.314563][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.353666][ T4264] device veth0_macvtap entered promiscuous mode [ 66.377021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.386492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.387167][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.396577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.410562][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.419302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.427849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.459860][ T4275] device veth0_macvtap entered promiscuous mode [ 66.470622][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.479511][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.491878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.502938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.512817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.523508][ T4264] device veth1_macvtap entered promiscuous mode [ 66.541273][ T4275] device veth1_macvtap entered promiscuous mode [ 66.554839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.563597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.572208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.586012][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.597013][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.607021][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.617558][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.627933][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.638631][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.650151][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.664949][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.675507][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.691422][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.702779][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.712975][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.723726][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.737886][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.750851][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760149][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.769936][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779189][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.790777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.799616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.808651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.822392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.843466][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.845390][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.852401][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.877742][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.895803][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.907754][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.947442][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.967120][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.978273][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.989341][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.999257][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.009766][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.020570][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.031521][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.043475][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.068543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.078801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.089900][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.101791][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.111741][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.122203][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.132314][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.143592][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.153621][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.164624][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.175940][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.205083][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.217034][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.230529][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.242061][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250885][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.265292][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.279261][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291027][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.308842][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.425850][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.433859][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.462912][ T4384] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.499644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.500413][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.522204][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.548796][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.570754][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.581829][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.593251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.595176][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.630447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.696374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.720390][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.743225][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.772481][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.831399][ T4387] loop3: detected capacity change from 0 to 4096 [ 68.007909][ T4387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.057726][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 68.254782][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 68.260994][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 68.280088][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 68.286379][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 68.292406][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 68.387864][ T4412] loop0: detected capacity change from 0 to 512 [ 68.405140][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.500260][ T4417] loop4: detected capacity change from 0 to 164 [ 68.514236][ T4412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.648730][ T4412] EXT4-fs (loop0): 1 truncate cleaned up [ 68.698131][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.904849][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 69.183413][ T4407] loop3: detected capacity change from 0 to 32768 [ 69.215613][ T4407] ======================================================= [ 69.215613][ T4407] WARNING: The mand mount option has been deprecated and [ 69.215613][ T4407] and is ignored by this kernel. Remove the mand [ 69.215613][ T4407] option from the mount to silence this warning. [ 69.215613][ T4407] ======================================================= [ 69.288311][ T4407] JBD2: Ignoring recovery information on journal [ 69.393188][ T4407] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 69.597830][ T4265] ocfs2: Unmounting device (7,3) on (node local) [ 69.639873][ T26] audit: type=1400 audit(1755839548.294:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=4446 comm="syz.1.26" [ 69.802823][ T4450] loop3: detected capacity change from 0 to 1024 [ 69.885123][ T4450] EXT4-fs: Ignoring removed bh option [ 70.030953][ T4453] loop4: detected capacity change from 0 to 32768 [ 70.075261][ T4453] JBD2: Ignoring recovery information on journal [ 70.082895][ T4453] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 70.091429][ T4453] JBD2: bad block at offset 32 [ 70.134990][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 70.145303][ T4450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.153824][ T4450] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.179480][ T4467] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 70.193242][ T4453] (syz.4.28,4453,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 70.203015][ T4453] (syz.4.28,4453,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 70.210978][ T4453] (syz.4.28,4453,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 70.218690][ T4453] (syz.4.28,4453,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 70.226412][ T4453] (syz.4.28,4453,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 70.256426][ T4453] (syz.4.28,4453,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 70.498495][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 70.723089][ T4482] loop1: detected capacity change from 0 to 1024 [ 70.817423][ T4482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.067331][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 71.297949][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306466][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.833149][ T4499] loop2: detected capacity change from 0 to 32768 [ 71.892725][ T4517] loop3: detected capacity change from 0 to 4096 [ 72.282200][ T4265] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 72.308285][ T4265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 72.799358][ T4550] tmpfs: Unexpected value for 'inode32' [ 73.061874][ T4560] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 73.090408][ T4560] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 73.144627][ T4560] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.75'. [ 73.671264][ T4544] loop3: detected capacity change from 0 to 32768 [ 73.853887][ T4586] loop2: detected capacity change from 0 to 1024 [ 73.909177][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.996438][ T4593] loop0: detected capacity change from 0 to 512 [ 74.032643][ T4593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.046976][ T4586] EXT4-fs: Ignoring sb option on remount [ 74.053268][ T4586] EXT4-fs: Ignoring removed orlov option [ 74.059098][ T4586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.065859][ T4586] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 74.075664][ T4586] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 74.083398][ T4586] EXT4-fs: can't change dax mount option while remounting [ 74.142028][ T4593] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.166158][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 74.200465][ T4593] EXT4-fs (loop0): 1 truncate cleaned up [ 74.229966][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.352024][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 74.508308][ T4602] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 74.558573][ T4607] loop0: detected capacity change from 0 to 128 [ 74.618747][ T4607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 74.733049][ T4581] loop4: detected capacity change from 0 to 40427 [ 74.743476][ T4607] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.800012][ T4581] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.808576][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 74.862048][ T4581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.051599][ T4623] loop0: detected capacity change from 0 to 1764 [ 75.155335][ T4263] syz-executor: attempt to access beyond end of device [ 75.155335][ T4263] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.410867][ T4632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.109'. [ 75.441862][ T4632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 75.508265][ T4632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 75.554308][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 75.859819][ T4645] ubi31: attaching mtd0 [ 76.013755][ T4647] loop2: detected capacity change from 0 to 64 [ 76.416287][ T126] cfg80211: failed to load regulatory.db [ 76.587533][ T4670] loop1: detected capacity change from 0 to 512 [ 76.712232][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.753856][ T4670] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.843244][ T4673] loop0: detected capacity change from 0 to 4096 [ 76.869858][ T4670] fscrypt (loop1, inode 15): Error -61 getting encryption context [ 76.943457][ T4673] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.024038][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.131'. [ 77.091918][ T4673] ntfs3: loop0: ino=21, "memory.events.local" mmap(write) compressed not supported [ 77.118917][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 77.209583][ T4691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 77.373419][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 78.261377][ T4737] loop0: detected capacity change from 0 to 64 [ 78.298271][ T4737] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 78.406913][ T4741] loop1: detected capacity change from 0 to 1024 [ 78.495016][ T4741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.572244][ T4749] loop0: detected capacity change from 0 to 2048 [ 78.629682][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 78.683264][ T4752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.712475][ T4751] netlink: 312 bytes leftover after parsing attributes in process `syz.3.162'. [ 78.739277][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 79.844887][ T4793] loop0: detected capacity change from 0 to 128 [ 79.888152][ T4793] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.987261][ T4796] loop3: detected capacity change from 0 to 512 [ 79.999488][ T4793] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.071197][ T4796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.130171][ T4796] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.184: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 80.261843][ T4796] EXT4-fs error (device loop3): ext4_quota_enable:7025: comm syz.3.184: Bad quota inode: 4, type: 1 [ 80.327249][ T4796] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.347608][ T4784] loop1: detected capacity change from 0 to 131072 [ 80.368662][ T4784] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9) [ 80.377655][ T4784] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 80.387842][ T4796] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 80.394894][ T4796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.424376][ T4784] F2FS-fs (loop1): invalid crc value [ 80.442187][ T4784] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 80.506368][ T4784] F2FS-fs (loop1): recover fsync data on readonly fs [ 80.513194][ T4784] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 80.543307][ T4784] F2FS-fs (loop1): Bad quota inode 2:50331648 [ 80.549554][ T4784] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 80.559904][ T4784] F2FS-fs (loop1): Cannot turn on quota_ino: -22 [ 80.568057][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.576573][ T4784] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 80.583842][ T4784] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 80.624873][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 80.784068][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 80.801172][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.844099][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.853873][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.860453][ T4806] loop0: detected capacity change from 0 to 8 [ 80.935902][ T126] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 80.961134][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.018741][ T126] usb 5-1: config 0 descriptor?? [ 81.276068][ T4815] tipc: Invalid UDP bearer configuration [ 81.276108][ T4815] tipc: Enabling of bearer rejected, failed to enable media [ 81.314692][ T4799] loop2: detected capacity change from 0 to 32768 [ 81.485784][ T126] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 81.663391][ T4799] XFS (loop2): Mounting V5 Filesystem [ 81.762551][ T4333] usb 5-1: USB disconnect, device number 2 [ 81.836682][ T4799] XFS (loop2): Ending clean mount [ 81.889834][ T4799] XFS (loop2): Quotacheck needed: Please wait. [ 81.980372][ T4838] loop7: detected capacity change from 0 to 7 [ 82.004205][ T4799] XFS (loop2): Quotacheck: Done. [ 82.043795][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.047905][ T4833] fido_id[4833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 82.053186][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.104205][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.113434][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.175552][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.184873][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.239823][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.249084][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.298401][ T4275] XFS (loop2): Unmounting Filesystem [ 82.300206][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.313078][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.377675][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.386897][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.421355][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.430594][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.438976][ T4838] ldm_validate_partition_table(): Disk read failed. [ 82.451660][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.460900][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.476654][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.485886][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.501350][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.510576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.521197][ T4838] Dev loop7: unable to read RDB block 0 [ 82.554955][ T4838] loop7: unable to read partition table [ 82.577297][ T4838] loop7: partition table beyond EOD, truncated [ 82.595634][ T4838] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 82.625333][ T4333] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.821002][ T4333] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.861299][ T4333] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.892706][ T4333] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.942753][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.965654][ T4845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.010416][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 83.262009][ T4333] usb 2-1: USB disconnect, device number 2 [ 83.456239][ T4875] loop0: detected capacity change from 0 to 1024 [ 83.507421][ T4878] Illegal XDP return value 32768 on prog (id 17) dev N/A, expect packet loss! [ 83.552895][ T4858] loop4: detected capacity change from 0 to 32768 [ 83.652150][ T4882] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 83.671753][ T4858] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 83.805914][ T4858] (syz.4.211,4858,1):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 83.812417][ T4889] Invalid ELF header magic: != ELF [ 83.883026][ T4891] ptrace attach of "./syz-executor exec"[4275] was attempted by "\x22"[4891] [ 83.949344][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 84.013829][ T4894] netlink: 844 bytes leftover after parsing attributes in process `syz.1.224'. [ 84.054385][ T4894] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 84.508794][ T4910] loop2: detected capacity change from 0 to 4096 [ 84.538078][ T4910] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 84.599307][ T4910] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.701708][ T4910] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 84.811376][ T4275] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 85.041909][ T4922] loop4: detected capacity change from 0 to 1024 [ 85.112846][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.133002][ T4912] loop1: detected capacity change from 0 to 32768 [ 85.161359][ T4922] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.238: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 85.188627][ T4906] loop3: detected capacity change from 0 to 32768 [ 85.223206][ T4906] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.274535][ T4906] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.343368][ T4906] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 85.394258][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.401310][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.411172][ T4922] EXT4-fs (loop4): Remounting filesystem read-only [ 85.521354][ T4922] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 85.586801][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms [ 85.590860][ T4922] EXT4-fs (loop4): Remounting filesystem read-only [ 85.633813][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.655488][ T4906] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.723240][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 85.777051][ T4936] loop2: detected capacity change from 0 to 8192 [ 85.810319][ T4936] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.811001][ T4906] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 85.835529][ T4906] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 85.835529][ T4906] inode = 12 2341 [ 85.835529][ T4906] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 85.859449][ T4906] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 85.870174][ T4906] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4906 [syz.3.231] __gfs2_lookup+0x8c/0x260 [ 85.881406][ T4906] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 85.890387][ T4906] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.898505][ T4906] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 85.907610][ T4906] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 85.915134][ T4906] gfs2: fsid=syz:syz.0: File system withdrawn [ 85.921247][ T4906] CPU: 1 PID: 4906 Comm: syz.3.231 Not tainted 6.1.148-syzkaller #0 [ 85.929240][ T4906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.939305][ T4906] Call Trace: [ 85.942663][ T4906] [ 85.945591][ T4906] dump_stack_lvl+0x168/0x22e [ 85.950262][ T4906] ? kobject_uevent_env+0x35f/0x8a0 [ 85.955454][ T4906] ? show_regs_print_info+0x12/0x12 [ 85.960643][ T4906] ? load_image+0x3b0/0x3b0 [ 85.965139][ T4906] ? kobject_uevent_env+0x35f/0x8a0 [ 85.970333][ T4906] gfs2_withdraw+0x143f/0x1780 [ 85.975100][ T4906] ? gfs2_lm+0x220/0x220 [ 85.979332][ T4906] ? load_image+0x3b0/0x3b0 [ 85.983836][ T4906] ? gfs2_consist_inode_i+0xf1/0x110 [ 85.989116][ T4906] gfs2_dirent_scan+0x525/0x650 [ 85.993966][ T4906] ? gfs2_dirent_search+0x7e0/0x7e0 [ 85.999152][ T4906] ? gfs2_dirent_search+0x7e0/0x7e0 [ 86.004339][ T4906] gfs2_dirent_search+0x2dd/0x7e0 [ 86.009362][ T4906] ? gfs2_permission+0x3f1/0x4c0 [ 86.014299][ T4906] ? gfs2_dir_search+0x220/0x220 [ 86.019228][ T4906] ? gfs2_lookupi+0x640/0x640 [ 86.024003][ T4906] gfs2_dir_search+0x49/0x220 [ 86.028677][ T4906] gfs2_lookupi+0x45f/0x640 [ 86.033173][ T4906] ? __lock_acquire+0x7c50/0x7c50 [ 86.038194][ T4906] ? gfs2_lookup_simple+0xf0/0xf0 [ 86.043214][ T4906] ? __gfs2_lookup+0x8c/0x260 [ 86.047902][ T4906] ? d_alloc_parallel+0x136f/0x1480 [ 86.053096][ T4906] ? __d_lookup+0x8b/0x7c0 [ 86.057512][ T4906] __gfs2_lookup+0x8c/0x260 [ 86.062008][ T4906] ? gfs2_atomic_open+0x210/0x210 [ 86.067018][ T4906] ? __d_lookup+0x8b/0x7c0 [ 86.071424][ T4906] ? d_hash_and_lookup+0x1b0/0x1b0 [ 86.076526][ T4906] ? rwsem_write_trylock+0x12f/0x1b0 [ 86.081804][ T4906] gfs2_atomic_open+0x8e/0x210 [ 86.086566][ T4906] ? gfs2_rename2+0x1d70/0x1d70 [ 86.091407][ T4906] path_openat+0xe20/0x2e70 [ 86.095922][ T4906] ? do_filp_open+0x3c0/0x3c0 [ 86.100621][ T4906] do_filp_open+0x1c1/0x3c0 [ 86.105123][ T4906] ? vfs_tmpfile+0x480/0x480 [ 86.109719][ T4906] ? _raw_spin_unlock+0x24/0x40 [ 86.114564][ T4906] ? alloc_fd+0x58f/0x630 [ 86.118892][ T4906] do_sys_openat2+0x142/0x490 [ 86.123568][ T4906] ? do_sys_open+0xe0/0xe0 [ 86.127974][ T4906] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 86.133947][ T4906] ? lock_chain_count+0x20/0x20 [ 86.138788][ T4906] __x64_sys_openat+0x135/0x160 [ 86.143636][ T4906] do_syscall_64+0x4c/0xa0 [ 86.148045][ T4906] ? clear_bhb_loop+0x60/0xb0 [ 86.152796][ T4906] ? clear_bhb_loop+0x60/0xb0 [ 86.157467][ T4906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.163351][ T4906] RIP: 0033:0x7fb10f98ebe9 [ 86.167857][ T4906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.187450][ T4906] RSP: 002b:00007fb1108ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.195857][ T4906] RAX: ffffffffffffffda RBX: 00007fb10fbb5fa0 RCX: 00007fb10f98ebe9 [ 86.203821][ T4906] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 86.211779][ T4906] RBP: 00007fb10fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 86.219742][ T4906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.227710][ T4906] R13: 00007fb10fbb6038 R14: 00007fb10fbb5fa0 R15: 00007fff5ddfd348 [ 86.235680][ T4906] [ 86.244011][ T4936] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 86.253354][ T4936] REISERFS (device loop2): using ordered data mode [ 86.343991][ T4936] reiserfs: using flush barriers [ 86.372010][ T4936] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.458326][ T4936] REISERFS (device loop2): checking transaction log (loop2) [ 86.512278][ T4936] REISERFS (device loop2): Using r5 hash to sort names [ 86.592547][ T4936] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 87.400978][ T4967] loop1: detected capacity change from 0 to 4096 [ 87.409849][ T4956] loop0: detected capacity change from 0 to 32768 [ 87.466961][ T4967] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 87.549738][ T4956] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.620712][ T4967] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 87.922341][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 88.478732][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.641310][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 88.651365][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 88.680586][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 88.692488][ T4318] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 88.722077][ T4318] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 88.738182][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.750001][ T5022] netlink: 'syz.4.281': attribute type 15 has an invalid length. [ 88.777763][ T4318] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 88.796352][ T5024] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 88.947147][ T5027] loop1: detected capacity change from 0 to 128 [ 89.130893][ T26] audit: type=1400 audit(1755839567.784:3): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5032 comm="syz.4.287" [ 89.230061][ T5020] loop0: detected capacity change from 0 to 32768 [ 89.535841][ T5047] loop4: detected capacity change from 0 to 1024 [ 89.610991][ T5047] hfsplus: bad catalog entry type [ 89.731616][ T9] hfsplus: b-tree write err: -5, ino 4 [ 89.859128][ T4318] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 89.869986][ T4318] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 89.880385][ T4318] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 89.911250][ T5056] loop4: detected capacity change from 0 to 64 [ 90.093267][ T4318] usb 4-1: USB disconnect, device number 2 [ 90.125133][ T5058] loop1: detected capacity change from 0 to 2048 [ 90.189440][ T5058] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 90.294094][ T5058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.383551][ T5068] loop0: detected capacity change from 0 to 256 [ 90.456878][ T5068] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.492058][ T5068] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 90.518031][ T5070] loop2: detected capacity change from 0 to 512 [ 90.520938][ T5068] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 90.550484][ T5070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.641552][ T5074] use of bytesused == 0 is deprecated and will be removed in the future, [ 90.653368][ T5070] EXT4-fs (loop2): 1 truncate cleaned up [ 90.683711][ T5070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.754480][ T5074] use the actual size instead. [ 91.075214][ T4275] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 91.113889][ T5091] loop3: detected capacity change from 0 to 64 [ 91.126961][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 91.199297][ T5093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 91.349821][ T5097] loop0: detected capacity change from 0 to 512 [ 91.410313][ T5097] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.440828][ T5097] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 91.490298][ T5099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 91.497236][ T5099] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.506545][ T5097] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 91.525009][ T5097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.535855][ T5099] vhci_hcd vhci_hcd.0: Device attached [ 91.551752][ T5107] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 91.558412][ T5107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.570404][ T5097] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.317: Invalid block bitmap block 0 in block_group 0 [ 91.602319][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 91.607583][ T5107] vhci_hcd vhci_hcd.0: Device attached [ 91.636721][ T5097] Quota error (device loop0): write_blk: dquota write failed [ 91.673843][ T5097] Quota error (device loop0): write_blk: dquota write failed [ 91.686191][ T5109] vhci_hcd: connection closed [ 91.686345][ T5101] vhci_hcd: connection closed [ 91.689476][ T37] vhci_hcd: stop threads [ 91.714064][ T37] vhci_hcd: release socket [ 91.714381][ T5097] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 91.738297][ T37] vhci_hcd: disconnect device [ 91.738982][ T5097] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.317: Failed to acquire dquot type 1 [ 91.745138][ T4354] vhci_hcd: vhci_device speed not set [ 91.772183][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 91.772710][ T37] vhci_hcd: stop threads [ 91.801222][ T5097] Quota error (device loop0): write_blk: dquota write failed [ 91.814708][ T5097] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 91.819706][ T37] vhci_hcd: release socket [ 91.832822][ T5097] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.317: Failed to acquire dquot type 1 [ 91.843401][ T5088] loop4: detected capacity change from 0 to 40427 [ 91.853603][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 91.859419][ T37] vhci_hcd: disconnect device [ 91.873998][ T4354] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 91.885022][ T5088] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 91.886649][ T5097] Quota error (device loop0): write_blk: dquota write failed [ 91.892138][ T5088] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.933339][ T5088] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 91.943146][ T5097] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 91.978217][ T5088] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 91.989877][ T5097] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.317: Failed to acquire dquot type 1 [ 92.002515][ T5088] F2FS-fs (loop4): invalid crc value [ 92.030840][ T5088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.073025][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 92.091281][ T5097] EXT4-fs (loop0): 1 orphan inode deleted [ 92.122458][ T5088] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.134291][ T5088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.135863][ T5123] loop2: detected capacity change from 0 to 256 [ 92.154121][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.241560][ T5123] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.280919][ T5123] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 92.335912][ T4263] syz-executor: attempt to access beyond end of device [ 92.335912][ T4263] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.356955][ T5123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.457203][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 92.646283][ T5132] loop3: detected capacity change from 0 to 1024 [ 92.784897][ T37] hfsplus: b-tree write err: -5, ino 4 [ 92.882756][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 92.920005][ T5138] device dummy0 entered promiscuous mode [ 92.943765][ T5138] device dummy0 left promiscuous mode [ 93.414279][ T4310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.454033][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.564492][ T5159] loop4: detected capacity change from 0 to 64 [ 93.582195][ T5140] loop2: detected capacity change from 0 to 40427 [ 93.605264][ T4310] usb 4-1: Using ep0 maxpacket: 32 [ 93.613550][ T4310] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 93.631773][ T5140] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 93.649896][ T5140] F2FS-fs (loop2): invalid crc value [ 93.656402][ T4310] usb 4-1: config 0 has no interface number 0 [ 93.674847][ T4318] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 93.698038][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.703077][ T5140] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.706762][ T4310] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 93.738107][ T4318] usb 1-1: config 0 descriptor?? [ 93.746793][ T4318] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 93.764572][ T4310] usb 4-1: config 0 interface 196 has no altsetting 0 [ 93.778714][ T4310] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 93.808496][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.833564][ T4310] usb 4-1: Product: syz [ 93.843065][ T5164] loop1: detected capacity change from 0 to 16 [ 93.854175][ T5140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.861754][ T4310] usb 4-1: Manufacturer: syz [ 93.869595][ T4310] usb 4-1: SerialNumber: syz [ 93.892207][ T4310] usb 4-1: config 0 descriptor?? [ 93.908043][ T5164] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.927629][ T5145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.018775][ T5140] F2FS-fs (loop2): access invalid blkaddr:2816 [ 94.048782][ T5140] CPU: 1 PID: 5140 Comm: syz.2.333 Not tainted 6.1.148-syzkaller #0 [ 94.056824][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.066901][ T5140] Call Trace: [ 94.070200][ T5140] [ 94.073145][ T5140] dump_stack_lvl+0x168/0x22e [ 94.077843][ T5140] ? show_regs_print_info+0x12/0x12 [ 94.083059][ T5140] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 94.088890][ T5140] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 94.094285][ T5140] f2fs_map_blocks+0xd37/0x3840 [ 94.099165][ T5140] ? f2fs_do_map_lock+0x70/0x70 [ 94.104015][ T5140] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.110174][ T5140] ? f2fs_fiemap+0x675/0x1990 [ 94.114848][ T5140] f2fs_fiemap+0x93d/0x1990 [ 94.119346][ T5140] ? do_syscall_64+0x4c/0xa0 [ 94.123945][ T5140] ? f2fs_overwrite_io+0x1e0/0x1e0 [ 94.129074][ T5140] ? __lock_acquire+0x7c50/0x7c50 [ 94.134100][ T5140] ? __might_fault+0xc2/0x120 [ 94.138857][ T5140] ? __might_fault+0xa6/0x120 [ 94.143532][ T5140] do_vfs_ioctl+0x1425/0x1d10 [ 94.148211][ T5140] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 94.153857][ T5140] ? tomoyo_path_number_perm+0x1b6/0x600 [ 94.159482][ T5140] ? __lock_acquire+0x7c50/0x7c50 [ 94.164498][ T5140] ? slab_free_freelist_hook+0x131/0x1a0 [ 94.170257][ T5140] ? tomoyo_path_number_perm+0x4ae/0x600 [ 94.175884][ T5140] ? __kmem_cache_free+0xb6/0x1f0 [ 94.180901][ T5140] ? tomoyo_path_number_perm+0x503/0x600 [ 94.186618][ T5140] ? tomoyo_path_number_perm+0x1b6/0x600 [ 94.192251][ T5140] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 94.197723][ T5140] ? __fget_files+0x28/0x4d0 [ 94.202399][ T5140] ? bpf_lsm_file_ioctl+0x5/0x10 [ 94.207337][ T5140] ? security_file_ioctl+0x7c/0xa0 [ 94.212443][ T5140] __se_sys_ioctl+0x83/0x170 [ 94.217051][ T5140] do_syscall_64+0x4c/0xa0 [ 94.221471][ T5140] ? clear_bhb_loop+0x60/0xb0 [ 94.226145][ T5140] ? clear_bhb_loop+0x60/0xb0 [ 94.230817][ T5140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.236717][ T5140] RIP: 0033:0x7fdbd5b8ebe9 [ 94.241128][ T5140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.260731][ T5140] RSP: 002b:00007fdbd6939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.269139][ T5140] RAX: ffffffffffffffda RBX: 00007fdbd5db5fa0 RCX: 00007fdbd5b8ebe9 [ 94.277111][ T5140] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 94.285080][ T5140] RBP: 00007fdbd5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 94.293065][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.301026][ T5140] R13: 00007fdbd5db6038 R14: 00007fdbd5db5fa0 R15: 00007ffede167ac8 [ 94.309041][ T5140] [ 94.324531][ T4318] gspca_cpia1: usb_control_msg 03, error -71 [ 94.334419][ T4318] gspca_cpia1: usb_control_msg 01, error -71 [ 94.340501][ T4318] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 94.433450][ T4318] usb 1-1: USB disconnect, device number 2 [ 94.545425][ T4310] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 94.782841][ T4317] usb 4-1: USB disconnect, device number 3 [ 94.913157][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 94.928300][ T4317] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 95.911311][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 95.953510][ T5230] loop4: detected capacity change from 0 to 128 [ 96.046722][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.074861][ T5230] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.194107][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.247233][ T5236] loop3: detected capacity change from 0 to 4096 [ 96.293265][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 96.383165][ T5236] ntfs3: loop3: failed to convert "0000" to maccroatian [ 96.391394][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 96.398322][ T126] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 96.438184][ T126] usb 1-1: config 0 has no interface number 0 [ 96.472204][ T126] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 96.488388][ T5243] loop2: detected capacity change from 0 to 4096 [ 96.512672][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.536607][ T5243] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 96.570373][ T126] usb 1-1: Product: syz [ 96.584364][ T126] usb 1-1: Manufacturer: syz [ 96.594565][ T126] usb 1-1: SerialNumber: syz [ 96.629601][ T126] usb 1-1: config 0 descriptor?? [ 96.659765][ T5243] ntfs: volume version 3.1. [ 96.679412][ T126] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 96.733587][ T5243] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 96.835771][ T5243] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 96.893036][ T126] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 96.909115][ T4310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.979937][ T126] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.990348][ T4354] vhci_hcd: vhci_device speed not set [ 97.104126][ T4310] usb 4-1: Using ep0 maxpacket: 16 [ 97.112183][ T4310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.124376][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 97.134302][ T4318] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.156674][ T4310] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 97.175550][ T4310] usb 4-1: config 9 has no interface number 0 [ 97.189407][ T4310] usb 4-1: config 9 interface 48 has no altsetting 0 [ 97.213501][ T4310] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 97.228474][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.247190][ T4310] usb 4-1: Product: syz [ 97.251401][ T4310] usb 4-1: Manufacturer: syz [ 97.267520][ T4310] usb 4-1: SerialNumber: syz [ 97.277127][ T5240] loop1: detected capacity change from 0 to 32768 [ 97.334345][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 97.335649][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.345180][ T4271] usb 1-1: USB disconnect, device number 3 [ 97.352977][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.371327][ T4318] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 97.389573][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.401792][ T4318] usb 5-1: config 0 descriptor?? [ 97.436122][ T5240] XFS (loop1): Mounting V5 Filesystem [ 97.445255][ T4271] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.488867][ T4310] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 97.502473][ T4271] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.553432][ T4271] quatech2 1-1:0.51: device disconnected [ 97.624350][ T5240] XFS (loop1): Ending clean mount [ 97.674732][ T5240] XFS (loop1): Quotacheck needed: Please wait. [ 97.744678][ T5240] XFS (loop1): Quotacheck: Done. [ 97.828262][ T4318] ortek 0003:05A4:2000.0002: item fetching failed at offset 3/5 [ 97.847846][ T4318] ortek: probe of 0003:05A4:2000.0002 failed with error -22 [ 97.903057][ T4264] XFS (loop1): Unmounting Filesystem [ 97.912670][ T4310] gspca_vc032x: reg_w err -71 [ 97.929333][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.944201][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.980797][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.003709][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.020742][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.054286][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.072792][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.093034][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.113289][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.128429][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.146223][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.164273][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.194593][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.200267][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.214852][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.225576][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.244016][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.254378][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.279128][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.293990][ T4310] gspca_vc032x: Unknown sensor... [ 98.305094][ T4310] vc032x: probe of 4-1:9.48 failed with error -22 [ 98.324848][ T4310] usb 4-1: USB disconnect, device number 4 [ 98.353151][ T4318] usb 5-1: USB disconnect, device number 3 [ 98.457570][ T5290] usb usb8: usbfs: process 5290 (syz.0.380) did not claim interface 0 before use [ 98.492203][ T5274] loop2: detected capacity change from 0 to 32768 [ 98.527138][ T5274] XFS: ikeep mount option is deprecated. [ 98.615154][ T5274] XFS (loop2): Mounting V5 Filesystem [ 98.782525][ T5274] XFS (loop2): Ending clean mount [ 98.833800][ T5274] XFS (loop2): Quotacheck needed: Please wait. [ 98.854203][ T4310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.898758][ T5306] loop1: detected capacity change from 0 to 4096 [ 98.905605][ T5274] XFS (loop2): Quotacheck: Done. [ 98.935314][ T5306] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 99.031077][ T26] audit: type=1800 audit(1755839577.684:4): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.376" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 99.051855][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 99.069585][ T4310] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.083405][ T4275] XFS (loop2): Unmounting Filesystem [ 99.102495][ T4310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.123087][ T4310] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 99.179384][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.206447][ T4310] usb 4-1: config 0 descriptor?? [ 99.235677][ T4357] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 99.242985][ T4357] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 99.302160][ T5315] loop4: detected capacity change from 0 to 1024 [ 99.354631][ T4264] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 99.412326][ T5304] loop0: detected capacity change from 0 to 32768 [ 99.645368][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.664375][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.671994][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.709813][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.738266][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.760948][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.789619][ T5320] loop2: detected capacity change from 0 to 2048 [ 99.806731][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: unknown main item tag 0x0 [ 99.828307][ T5320] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 99.853208][ T4310] cmedia_hs100b 0003:0D8C:0014.0003: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 99.887339][ T5320] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 99.919520][ T4310] usb 4-1: USB disconnect, device number 5 [ 99.974022][ T5320] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 100.018848][ T5320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.112289][ T5327] fido_id[5327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 100.297474][ T5335] mmap: syz.0.390 (5335): VmData 54239232 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 101.261964][ T5349] loop1: detected capacity change from 0 to 32768 [ 101.321783][ T5355] loop4: detected capacity change from 0 to 32768 [ 101.428973][ T5355] JBD2: Ignoring recovery information on journal [ 101.456100][ T5366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.596049][ T5361] loop2: detected capacity change from 0 to 32768 [ 101.617313][ T5355] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 101.679251][ T5361] XFS (loop2): Mounting V5 Filesystem [ 101.804215][ T5361] XFS (loop2): Ending clean mount [ 101.821510][ T5355] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 101.821598][ T5355] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 101.972190][ T4275] XFS (loop2): Unmounting Filesystem [ 102.056385][ T5355] OCFS2: File system is now read-only. [ 102.061897][ T5355] (syz.4.403,5355,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 102.098388][ T5355] (syz.4.403,5355,1):ocfs2_mknod:334 ERROR: status = -117 [ 102.154740][ T5355] (syz.4.403,5355,1):ocfs2_mknod:502 ERROR: status = -117 [ 102.162308][ T5355] (syz.4.403,5355,1):ocfs2_create:676 ERROR: status = -117 [ 102.320530][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 102.593460][ T5400] loop2: detected capacity change from 0 to 1024 [ 102.895567][ T5404] loop4: detected capacity change from 0 to 4096 [ 103.004751][ T5404] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 103.069608][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 103.210097][ T5416] vim2m vim2m.0: vidioc_s_fmt queue busy [ 103.221640][ T5392] loop3: detected capacity change from 0 to 32768 [ 103.322751][ T5392] JBD2: Ignoring recovery information on journal [ 103.422440][ T5426] loop2: detected capacity change from 0 to 512 [ 103.469559][ T5431] syz.4.434 uses obsolete (PF_INET,SOCK_PACKET) [ 103.480923][ T5426] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.493356][ T5426] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 103.533173][ T5392] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.569472][ T5426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.581997][ T5426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.621847][ T5426] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.432: Invalid block bitmap block 0 in block_group 0 [ 103.681327][ T5426] EXT4-fs (loop2): Remounting filesystem read-only [ 103.688333][ T5426] Quota error (device loop2): write_blk: dquota write failed [ 103.697200][ T5426] Quota error (device loop2): write_blk: dquota write failed [ 103.706508][ T5426] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 103.712778][ T4265] ocfs2: Unmounting device (7,3) on (node local) [ 103.716928][ T5426] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.432: Failed to acquire dquot type 1 [ 103.763168][ T5426] EXT4-fs (loop2): Remounting filesystem read-only [ 103.770234][ T5426] Quota error (device loop2): write_blk: dquota write failed [ 103.792907][ T5426] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 103.815636][ T5426] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.432: Failed to acquire dquot type 1 [ 103.847747][ T5426] EXT4-fs (loop2): Remounting filesystem read-only [ 103.869730][ T5426] Quota error (device loop2): write_blk: dquota write failed [ 103.892952][ T5426] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 103.922949][ T5426] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.432: Failed to acquire dquot type 1 [ 103.968658][ T5426] EXT4-fs (loop2): Remounting filesystem read-only [ 103.993320][ T5426] EXT4-fs (loop2): 1 orphan inode deleted [ 104.025595][ T5426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.065743][ T5446] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 104.145748][ T5448] netlink: 25 bytes leftover after parsing attributes in process `syz.1.441'. [ 104.161621][ T5448] device gretap0 entered promiscuous mode [ 104.204286][ T5449] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.441'. [ 104.228392][ T5449] 0XD: renamed from gretap0 [ 104.240285][ T5449] device 00XD left promiscuous mode [ 104.262392][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 104.285513][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 104.421490][ T5455] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 104.431446][ T5457] loop3: detected capacity change from 0 to 16 [ 104.437530][ T5455] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 104.468361][ T5455] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 104.475710][ T5457] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 104.477956][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop3 [ 104.503002][ T5455] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 104.544029][ T5455] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 104.572578][ T5455] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 104.600568][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop3 [ 104.608227][ T5455] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 104.624074][ T5455] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 104.640616][ T5455] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 104.666126][ T5455] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 104.683825][ T5455] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 104.814174][ T5469] Bluetooth: MGMT ver 1.22 [ 104.834034][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.921891][ T5475] loop3: detected capacity change from 0 to 64 [ 104.952182][ T26] audit: type=1800 audit(1755839583.604:5): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.454" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 104.979547][ T4271] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.038103][ T4317] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.044793][ T5477] loop2: detected capacity change from 0 to 128 [ 105.061178][ T4317] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.089929][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.109620][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.111211][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 105.135523][ T5483] loop3: detected capacity change from 0 to 16 [ 105.142671][ T5477] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.147545][ T5483] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 105.163326][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.180385][ T4271] usb 5-1: Using ep0 maxpacket: 16 [ 105.205670][ T5485] netlink: 208 bytes leftover after parsing attributes in process `syz.0.458'. [ 105.212811][ T4271] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 105.227046][ T4283] udevd[4283]: incorrect cramfs checksum on /dev/loop3 [ 105.251125][ T4271] usb 5-1: config 0 has no interface number 0 [ 105.267116][ T4317] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.276547][ T4271] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.289301][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.297812][ T4271] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.309335][ T4317] usb 2-1: Product: syz [ 105.313586][ T4317] usb 2-1: Manufacturer: syz [ 105.319317][ T4271] usb 5-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.336314][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 105.341768][ T4317] cdc_wdm 2-1:1.0: skipping garbage [ 105.347719][ T4271] usb 5-1: config 0 interface 63 has no altsetting 0 [ 105.358924][ T4271] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 105.370779][ T4317] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.376971][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.385653][ T4317] cdc_wdm 2-1:1.0: Unknown control protocol [ 105.407286][ T4271] usb 5-1: config 0 descriptor?? [ 105.444471][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 105.827709][ T4271] uclogic 0003:28BD:0909.0004: interface is invalid, ignoring [ 105.849848][ T5499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.030184][ T4271] usb 5-1: USB disconnect, device number 4 [ 106.244072][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.285776][ T5515] loop0: detected capacity change from 0 to 1024 [ 106.366629][ T5515] syz.0.473: attempt to access beyond end of device [ 106.366629][ T5515] loop0: rw=0, sector=393220, nr_sectors = 2 limit=1024 [ 106.436120][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.452640][ T4317] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 106.481710][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.502148][ T4317] usb 4-1: config 0 descriptor?? [ 106.946777][ T4317] wacom 0003:056A:0331.0005: unknown main item tag 0x2 [ 106.975040][ T4317] wacom 0003:056A:0331.0005: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 107.133093][ T5523] loop0: detected capacity change from 0 to 32768 [ 107.150667][ T4354] usb 4-1: USB disconnect, device number 6 [ 107.210607][ T5523] JBD2: Ignoring recovery information on journal [ 107.291573][ T5534] fido_id[5534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.308336][ T5537] loop2: detected capacity change from 0 to 1024 [ 107.332677][ T5537] EXT4-fs: Ignoring removed nobh option [ 107.342642][ T5537] EXT4-fs: Ignoring removed bh option [ 107.352131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 107.363076][ T5523] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.424492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.468343][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.523186][ T5523] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 107.523217][ T5523] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.554254][ T5523] OCFS2: File system is now read-only. [ 107.559802][ T5523] (syz.0.478,5523,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 107.569546][ T5523] (syz.0.478,5523,0):ocfs2_mknod:334 ERROR: status = -117 [ 107.575924][ T4379] usb 2-1: USB disconnect, device number 3 [ 107.576943][ T5523] (syz.0.478,5523,0):ocfs2_mknod:502 ERROR: status = -117 [ 107.589878][ T5523] (syz.0.478,5523,0):ocfs2_create:676 ERROR: status = -117 [ 107.687051][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 107.838817][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 107.962961][ T5549] loop4: detected capacity change from 0 to 128 [ 108.024467][ T5549] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.061273][ T5549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.137953][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 108.312606][ T5559] loop2: detected capacity change from 0 to 512 [ 108.345924][ T5561] kernel read not supported for file / -9mZr7âW)s!Qfsl{Tr)rO2:"T+͟v|ղ (pid: 5561 comm: syz.0.487) [ 108.371845][ T26] audit: type=1800 audit(1755839587.024:6): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.487" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=36811 res=0 errno=0 [ 108.402718][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.448683][ T5559] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.496749][ T5559] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 108.564367][ T5559] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.492: Corrupt directory, running e2fsck is recommended [ 108.571576][ T5567] loop4: detected capacity change from 0 to 8192 [ 108.585784][ T26] audit: type=1804 audit(1755839587.034:7): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.487" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=36811 res=1 errno=0 [ 108.616621][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.628576][ T5559] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 108.703705][ T5567] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.714157][ T5559] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.492: corrupted in-inode xattr [ 108.736695][ T5567] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 108.746605][ T5567] REISERFS (device loop4): using ordered data mode [ 108.753138][ T5567] reiserfs: using flush barriers [ 108.758310][ T5559] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.492: couldn't read orphan inode 15 (err -117) [ 108.768327][ T5568] loop1: detected capacity change from 0 to 4096 [ 108.779446][ T5567] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.808635][ T5567] REISERFS (device loop4): checking transaction log (loop4) [ 108.817083][ T5568] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 108.817351][ T5559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.858842][ T5567] REISERFS (device loop4): Using r5 hash to sort names [ 108.940139][ T5567] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 109.103367][ T4264] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 109.129968][ T4264] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 109.142980][ T5559] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 109.177773][ T5559] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 109.186573][ T4264] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.234192][ T5559] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.492: Corrupt directory, running e2fsck is recommended [ 109.284415][ T5559] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.492: path /108/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 109.553577][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 109.737701][ T5599] loop0: detected capacity change from 0 to 2048 [ 109.813966][ T5599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.954655][ T5608] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0 [ 109.984937][ T5607] IPVS: stopping backup sync thread 5608 ... [ 110.533992][ T4318] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 110.654944][ T5636] loop1: detected capacity change from 0 to 16 [ 110.715220][ T5636] erofs: (device loop1): mounted with root inode @ nid 36. [ 110.746523][ T4318] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.766085][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.775773][ T26] audit: type=1800 audit(1755839589.434:8): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 110.805893][ T4318] usb 3-1: config 0 descriptor?? [ 110.822215][ T4318] cp210x 3-1:0.0: cp210x converter detected [ 111.173774][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 111.229751][ T4318] usb 3-1: cp210x converter now attached to ttyUSB0 [ 111.414811][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 111.429601][ T4318] usb 3-1: USB disconnect, device number 2 [ 111.447304][ T4318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.467857][ T4318] cp210x 3-1:0.0: device disconnected [ 111.762959][ T5675] loop0: detected capacity change from 0 to 64 [ 111.961895][ T5662] loop1: detected capacity change from 0 to 32768 [ 111.970500][ T5679] loop0: detected capacity change from 0 to 1024 [ 112.022341][ T5679] hfsplus: small file entry [ 112.031222][ T4318] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.046224][ T5681] program syz.3.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.054346][ T5662] JBD2: Ignoring recovery information on journal [ 112.184503][ T5688] loop3: detected capacity change from 0 to 1024 [ 112.187218][ T5662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.207556][ T5690] loop0: detected capacity change from 0 to 128 [ 112.271278][ T5690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.273196][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.291253][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.301557][ T4318] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 112.314641][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.324591][ T4318] usb 5-1: config 0 descriptor?? [ 112.399844][ T5690] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.424098][ T5662] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 112.424129][ T5662] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 112.485125][ T5662] OCFS2: File system is now read-only. [ 112.508021][ T5662] (syz.1.539,5662,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 112.518443][ T46] hfsplus: b-tree write err: -5, ino 4 [ 112.554665][ T5662] (syz.1.539,5662,1):ocfs2_mknod:334 ERROR: status = -117 [ 112.609221][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 112.614305][ T5662] (syz.1.539,5662,1):ocfs2_mknod:502 ERROR: status = -117 [ 112.652643][ T5662] (syz.1.539,5662,1):ocfs2_create:676 ERROR: status = -117 [ 112.762447][ T4318] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 112.779234][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 112.786156][ T4318] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 112.793327][ T4318] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 112.808398][ T5705] loop0: detected capacity change from 0 to 256 [ 112.842859][ T4318] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 112.858864][ T4318] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0 [ 112.859823][ T5707] binder: 5706:5707 ioctl c018620c 200000000540 returned -22 [ 112.873321][ T4318] petalynx 0003:18B1:0037.0006: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 112.888186][ T5705] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.899323][ T4271] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.903467][ T5705] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 112.955534][ T4318] usb 5-1: USB disconnect, device number 5 [ 113.002123][ T5705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 113.096790][ T4271] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.121702][ T5705] exFAT-fs (loop0): hint_cluster is invalid (17) [ 113.126169][ T4271] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.137658][ T5710] loop1: detected capacity change from 0 to 1024 [ 113.162408][ T4271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.182060][ T5710] EXT4-fs: Ignoring removed nobh option [ 113.187919][ T4271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.212732][ T5708] fido_id[5708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 113.212788][ T5710] EXT4-fs: Ignoring removed bh option [ 113.264072][ T4271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 113.305174][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.315860][ T4271] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.334000][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.342152][ T4271] usb 4-1: Product: syz [ 113.347127][ T4271] usb 4-1: Manufacturer: syz [ 113.368522][ T4271] cdc_wdm 4-1:1.0: skipping garbage [ 113.378106][ T4271] cdc_wdm 4-1:1.0: skipping garbage [ 113.390848][ T4271] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.400765][ T4271] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.435773][ T5716] loop2: detected capacity change from 0 to 1024 [ 113.498235][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 113.525288][ T5716] hfsplus: bad catalog entry type [ 113.681417][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 113.715848][ T5721] loop1: detected capacity change from 0 to 1764 [ 113.759324][ T5721] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 114.198642][ T26] audit: type=1326 audit(1755839592.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec398ebe9 code=0x7ffc0000 [ 114.296130][ T26] audit: type=1326 audit(1755839592.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fdec398ebe9 code=0x7ffc0000 [ 114.355911][ T26] audit: type=1326 audit(1755839592.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.0.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec398ebe9 code=0x7ffc0000 [ 114.482597][ T5747] loop1: detected capacity change from 0 to 8192 [ 114.720117][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.924221][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 114.931582][ T4318] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 114.966533][ T4318] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 114.967212][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 114.996755][ T4318] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 115.023999][ T4318] usb 1-1: Product: syz [ 115.029069][ T4318] usb 1-1: Manufacturer: syz [ 115.044436][ T4318] usb 1-1: SerialNumber: syz [ 115.054154][ T4318] usb 1-1: config 0 descriptor?? [ 115.063624][ T4318] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 115.268871][ T4318] gspca_zc3xx: reg_w_i err -71 [ 115.345592][ T5780] process 'syz.2.591' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 115.381340][ T5782] IPVS: stopping backup sync thread 5024 ... [ 115.607841][ T4310] usb 4-1: USB disconnect, device number 7 [ 115.778604][ T5798] loop1: detected capacity change from 0 to 1024 [ 115.904279][ T4318] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 115.918597][ T5796] loop2: detected capacity change from 0 to 4096 [ 115.920887][ T4318] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 115.962865][ T4318] usb 1-1: USB disconnect, device number 4 [ 115.986286][ T5796] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 116.001486][ T37] hfsplus: b-tree write err: -5, ino 4 [ 116.125276][ T5796] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 116.238108][ T11] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 116.238251][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 116.254267][ T4333] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.306091][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 116.306118][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 116.307243][ T37] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 116.308820][ T4275] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 116.375091][ T5810] IPVS: stopping backup sync thread 5812 ... [ 116.455133][ T4333] usb 5-1: Using ep0 maxpacket: 16 [ 116.456947][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.530530][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.552704][ T4333] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 116.570987][ T5819] loop2: detected capacity change from 0 to 128 [ 116.589050][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.612902][ T4333] usb 5-1: config 0 descriptor?? [ 116.620242][ T5819] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 116.693768][ T4379] Process accounting resumed [ 116.700573][ T4379] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 116.732045][ T4379] FAT-fs (loop2): Filesystem has been set read-only [ 116.890653][ T4275] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 117.067693][ T4333] topre 0003:0853:0148.0007: unknown main item tag 0xd [ 117.091287][ T4333] topre 0003:0853:0148.0007: unexpected long global item [ 117.111632][ T4333] topre: probe of 0003:0853:0148.0007 failed with error -22 [ 117.127919][ T5833] loop1: detected capacity change from 0 to 4096 [ 117.166951][ T5837] loop3: detected capacity change from 0 to 4096 [ 117.174241][ T5838] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.220241][ T5837] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 117.270816][ T4333] usb 5-1: USB disconnect, device number 6 [ 117.469773][ T5841] overlayfs: upper fs does not support tmpfile. [ 117.502405][ T5841] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.506645][ T5841] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 117.537172][ T5841] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 117.537288][ T5841] overlayfs: failed to verify upper root origin [ 117.601495][ T4265] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 117.622819][ T4265] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 117.629890][ T4265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.799336][ T5853] loop1: detected capacity change from 0 to 512 [ 117.859480][ T5855] tipc: Enabling of bearer rejected, failed to enable media [ 117.892105][ T5851] loop3: detected capacity change from 0 to 4096 [ 117.910124][ T5853] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 117.969840][ T5853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 117.994055][ T5853] System zones: 1-12 [ 117.999023][ T5853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.024620][ T5853] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.627: bg 0: block 361: padding at end of block bitmap is not set [ 118.068371][ T5861] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.089451][ T5864] netlink: 'syz.0.632': attribute type 5 has an invalid length. [ 118.095579][ T5853] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 118.124218][ T5853] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.627: invalid indirect mapped block 12 (level 1) [ 118.157605][ T5853] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.627: invalid indirect mapped block 2 (level 2) [ 118.188550][ T5853] EXT4-fs (loop1): 1 truncate cleaned up [ 118.197869][ T5853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.222500][ T5860] loop4: detected capacity change from 0 to 4096 [ 118.288476][ T5860] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 118.383584][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 118.678879][ T5873] loop0: detected capacity change from 0 to 512 [ 118.766455][ T5877] loop3: detected capacity change from 0 to 1024 [ 118.778831][ T5879] loop4: detected capacity change from 0 to 1024 [ 118.846277][ T5873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.883842][ T5873] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.098291][ T5865] loop2: detected capacity change from 0 to 40427 [ 119.144011][ T5865] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 119.170702][ T5865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.192053][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 119.219202][ T5865] F2FS-fs (loop2): invalid crc value [ 119.299585][ T5865] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.449585][ T5865] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.461283][ T5865] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.541921][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 119.929636][ T5916] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 120.089535][ T5921] sp0: Synchronizing with TNC [ 120.194380][ T5927] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.658'. [ 120.213645][ T5927] netlink: zone id is out of range [ 120.240151][ T5927] netlink: zone id is out of range [ 120.272289][ T5927] netlink: del zone limit has 4 unknown bytes [ 120.505567][ T5937] loop2: detected capacity change from 0 to 2048 [ 120.528671][ T5941] MTD: Couldn't look up 'memory.events': -15 [ 120.605048][ T5943] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.234007][ T4354] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.294580][ T4268] Bluetooth: hci4: command 0x0405 tx timeout [ 121.350545][ T5974] loop4: detected capacity change from 0 to 764 [ 121.394331][ T4271] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.426999][ T5959] loop1: detected capacity change from 0 to 32768 [ 121.436706][ T4354] usb 4-1: Using ep0 maxpacket: 32 [ 121.450972][ T4354] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 121.521553][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.579075][ T4354] usb 4-1: Product: syz [ 121.593086][ T4354] usb 4-1: Manufacturer: syz [ 121.598966][ T4271] usb 1-1: Using ep0 maxpacket: 8 [ 121.613627][ T4271] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 121.633121][ T4354] usb 4-1: SerialNumber: syz [ 121.638254][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.653180][ T4271] usb 1-1: Product: syz [ 121.658364][ T4354] usb 4-1: config 0 descriptor?? [ 121.669941][ T4271] usb 1-1: Manufacturer: syz [ 121.677901][ T4354] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 121.691383][ T4271] usb 1-1: SerialNumber: syz [ 121.717212][ T4271] usb 1-1: config 0 descriptor?? [ 121.727354][ T5959] XFS (loop1): Mounting V5 Filesystem [ 121.741103][ T4271] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 121.757732][ T5990] loop4: detected capacity change from 0 to 128 [ 121.773076][ T5990] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 121.830904][ T5959] XFS (loop1): Ending clean mount [ 121.844396][ T7] Process accounting resumed [ 121.849128][ T7] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 121.859785][ T7] FAT-fs (loop4): Filesystem has been set read-only [ 121.863373][ T5959] XFS (loop1): Quotacheck needed: Please wait. [ 121.901049][ T4263] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 121.914028][ T4379] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.969730][ T5959] XFS (loop1): Quotacheck: Done. [ 122.098908][ T4264] XFS (loop1): Unmounting Filesystem [ 122.124261][ T4379] usb 3-1: Using ep0 maxpacket: 32 [ 122.166267][ T4379] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 122.184154][ T4379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.194254][ T4379] usb 3-1: config 0 descriptor?? [ 122.202720][ T4379] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 122.212863][ T4354] gspca_ov534_9: reg_w failed -110 [ 122.367554][ T4271] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 122.394453][ T4271] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 122.427426][ T4271] usb 1-1: USB disconnect, device number 5 [ 122.499181][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 122.525144][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 122.726964][ T4354] gspca_ov534_9: Unknown sensor 0000 [ 122.727029][ T4354] ov534_9: probe of 4-1:0.0 failed with error -22 [ 122.757310][ T4354] usb 4-1: USB disconnect, device number 8 [ 122.806913][ T6006] loop1: detected capacity change from 0 to 64 [ 122.813771][ T4379] gspca_vc032x: reg_w err -71 [ 122.821681][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.828232][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.851172][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.881755][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.900919][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.916889][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.936122][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.947412][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.963040][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.975120][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.980966][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.984562][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 122.998205][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.004451][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.010130][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.017028][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.022629][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.029314][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.034929][ T4379] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.040393][ T4379] gspca_vc032x: Unknown sensor... [ 123.056288][ T4379] vc032x: probe of 3-1:0.0 failed with error -22 [ 123.075910][ T4271] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.088508][ T4379] usb 3-1: USB disconnect, device number 3 [ 123.153128][ T6016] loop0: detected capacity change from 0 to 128 [ 123.181185][ T6016] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 322) [ 123.193652][ T6016] FAT-fs (loop0): Filesystem has been set read-only [ 123.257454][ T6016] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 322) [ 123.275054][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 123.281842][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 123.306985][ T6016] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 322) [ 123.310186][ T4271] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 123.351732][ T4271] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 123.371685][ T4271] usb 5-1: Product: syz [ 123.379812][ T4271] usb 5-1: Manufacturer: syz [ 123.395305][ T4271] usb 5-1: SerialNumber: syz [ 123.402853][ T4271] usb 5-1: config 0 descriptor?? [ 123.433395][ T4271] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 123.502780][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 123.643481][ T4271] gspca_zc3xx: reg_w_i err -71 [ 123.685089][ T6027] loop0: detected capacity change from 0 to 1024 [ 123.697992][ T6028] device bridge0 entered promiscuous mode [ 123.733008][ T6028] device macvlan2 entered promiscuous mode [ 123.810483][ T6027] hfsplus: keylen 65060 too large [ 123.834074][ T6027] hfsplus: xattr searching failed [ 124.045224][ T6018] loop1: detected capacity change from 0 to 40427 [ 124.084908][ T6018] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.130677][ T6018] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 124.165995][ T6018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.264074][ T4271] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 124.276982][ T4271] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 124.295608][ T6026] loop3: detected capacity change from 0 to 32768 [ 124.306744][ T4271] usb 5-1: USB disconnect, device number 7 [ 124.318069][ T6040] loop0: detected capacity change from 0 to 128 [ 124.332780][ T4264] syz-executor: attempt to access beyond end of device [ 124.332780][ T4264] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.366104][ T6040] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 124.495013][ T4379] Process accounting resumed [ 124.505842][ T4379] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 124.527306][ T4379] FAT-fs (loop0): Filesystem has been set read-only [ 124.672931][ T4272] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 125.185076][ T6061] atomic_op ffff888058411998 conn xmit_atomic 0000000000000000 [ 125.239998][ T6065] loop1: detected capacity change from 0 to 256 [ 125.301546][ T6065] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 125.674000][ T4271] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.769585][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.826246][ T6075] loop0: detected capacity change from 0 to 32768 [ 125.884112][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 125.891807][ T4271] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 125.921756][ T4271] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 125.962284][ T4271] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 125.979167][ T7] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.007646][ T7] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.021013][ T6089] netlink: 260 bytes leftover after parsing attributes in process `syz.3.731'. [ 126.024289][ T4271] usb 3-1: Product: syz [ 126.035447][ T7] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 126.048885][ T4271] usb 3-1: Manufacturer: syz [ 126.053518][ T4271] usb 3-1: SerialNumber: syz [ 126.060213][ T7] usb 2-1: config 220 has no interface number 2 [ 126.098556][ T7] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.114138][ T4271] usb 3-1: config 0 descriptor?? [ 126.123073][ T4271] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 126.130381][ T7] usb 2-1: config 220 interface 0 has no altsetting 0 [ 126.138027][ T7] usb 2-1: config 220 interface 76 has no altsetting 0 [ 126.145239][ T7] usb 2-1: config 220 interface 1 has no altsetting 0 [ 126.149711][ T6091] loop3: detected capacity change from 0 to 1024 [ 126.164910][ T7] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.195267][ T6091] EXT4-fs: Ignoring removed nobh option [ 126.204177][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.212418][ T7] usb 2-1: Product: syz [ 126.224112][ T7] usb 2-1: Manufacturer: syz [ 126.228774][ T7] usb 2-1: SerialNumber: syz [ 126.309273][ T6091] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.733: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 126.325857][ T4271] gspca_zc3xx: reg_w_i err -71 [ 126.350886][ T6091] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.733: couldn't read orphan inode 11 (err -117) [ 126.389910][ T6091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.448085][ T6091] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.733: Invalid block bitmap block 0 in block_group 0 [ 126.503777][ T6091] Quota error (device loop3): write_blk: dquota write failed [ 126.522324][ T7] usb 2-1: selecting invalid altsetting 0 [ 126.541987][ T6091] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 126.542878][ T7] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 126.563028][ T7] usb 2-1: No valid video chain found. [ 126.571416][ T6104] netlink: 76 bytes leftover after parsing attributes in process `syz.0.735'. [ 126.591734][ T6091] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.733: Failed to acquire dquot type 0 [ 126.598694][ T7] usb 2-1: selecting invalid altsetting 0 [ 126.623140][ T7] usbtest: probe of 2-1:220.1 failed with error -22 [ 126.648565][ T7] usb 2-1: USB disconnect, device number 4 [ 126.708747][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 126.715022][ T9] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 126.741474][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0 [ 126.944201][ T4271] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 126.950540][ T4271] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 126.992928][ T4271] usb 3-1: USB disconnect, device number 4 [ 127.484849][ T6137] loop1: detected capacity change from 0 to 2048 [ 127.534593][ T4333] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.592292][ T6139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.744379][ T4333] usb 3-1: Using ep0 maxpacket: 8 [ 127.755074][ T4333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.776453][ T4333] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 127.803272][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 127.826721][ T4333] usb 3-1: SerialNumber: syz [ 127.846789][ T4333] usb 3-1: config 0 descriptor?? [ 127.863861][ T4333] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 127.895295][ T4333] usb 3-1: No valid video chain found. [ 127.933811][ T6145] loop1: detected capacity change from 0 to 128 [ 127.993782][ T6132] loop4: detected capacity change from 0 to 40427 [ 128.001221][ T6145] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 322) [ 128.025916][ T6132] F2FS-fs (loop4): invalid crc value [ 128.045528][ T6132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.052917][ T6145] FAT-fs (loop1): Filesystem has been set read-only [ 128.062492][ T4333] usb 3-1: USB disconnect, device number 5 [ 128.073735][ T6145] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 322) [ 128.104240][ T6145] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 322) [ 128.125476][ T6133] overlayfs: statfs failed on './file0' [ 128.156532][ T6132] F2FS-fs (loop4): recover fsync data on readonly fs [ 128.185193][ T6141] loop3: detected capacity change from 0 to 32768 [ 128.190162][ T6132] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 128.201887][ T6132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.482498][ T6150] loop1: detected capacity change from 0 to 1024 [ 128.603768][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 128.751550][ T6156] device bridge0 entered promiscuous mode [ 128.768634][ T6156] device macvlan2 entered promiscuous mode [ 128.828558][ T4271] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.044151][ T4271] usb 4-1: Using ep0 maxpacket: 8 [ 129.046100][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.046129][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.046159][ T4271] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 129.046180][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.047859][ T4271] usb 4-1: config 0 descriptor?? [ 129.181683][ T6173] loop4: detected capacity change from 0 to 512 [ 129.193346][ T6173] EXT4-fs: Ignoring removed oldalloc option [ 129.194982][ T6173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.316608][ T6173] EXT4-fs (loop4): 1 truncate cleaned up [ 129.317805][ T6173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.347715][ T6173] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.768: corrupted in-inode xattr [ 129.410060][ T6173] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.768: unable to update i_inline_off [ 129.455319][ T4271] uclogic 0003:2179:0053.0008: interface is invalid, ignoring [ 129.462693][ T6173] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz.4.768: corrupted in-inode xattr [ 129.607660][ T6173] syz.4.768 (6173) used greatest stack depth: 20400 bytes left [ 129.650139][ T6185] loop1: detected capacity change from 0 to 1024 [ 129.674635][ T4271] usb 4-1: USB disconnect, device number 9 [ 129.675108][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 129.707279][ T6185] hfsplus: bad catalog entry type [ 129.808796][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 130.306990][ T6201] loop3: detected capacity change from 0 to 64 [ 130.352082][ T6201] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 130.431217][ T6189] loop0: detected capacity change from 0 to 32768 [ 130.604203][ T6189] XFS (loop0): Mounting V5 Filesystem [ 130.707582][ T6193] loop1: detected capacity change from 0 to 32768 [ 130.735243][ T6189] XFS (loop0): Ending clean mount [ 130.892631][ T6195] loop2: detected capacity change from 0 to 40427 [ 130.924479][ T4272] XFS (loop0): Unmounting Filesystem [ 130.943117][ T6195] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 130.947493][ T6199] loop4: detected capacity change from 0 to 32768 [ 130.966399][ T6195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.028102][ T6199] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.780 (6199) [ 131.094598][ T6195] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.265999][ T6199] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.298612][ T6195] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.308530][ T6219] hub 9-0:1.0: USB hub found [ 131.328901][ T6199] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.339899][ T6195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.362234][ T6199] BTRFS info (device loop4): setting nodatacow, compression disabled [ 131.367962][ T6219] hub 9-0:1.0: 1 port detected [ 131.403239][ T6199] BTRFS info (device loop4): max_inline at 0 [ 131.431193][ T6199] BTRFS info (device loop4): enabling disk space caching [ 131.452008][ T6199] BTRFS info (device loop4): turning off barriers [ 131.519253][ T6199] BTRFS info (device loop4): turning on flush-on-commit [ 131.557781][ T6199] BTRFS info (device loop4): doing ref verification [ 131.598215][ T6199] BTRFS info (device loop4): force clearing of disk cache [ 131.624894][ T4275] syz-executor: attempt to access beyond end of device [ 131.624894][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.654310][ T6199] BTRFS info (device loop4): enabling ssd optimizations [ 131.661368][ T6199] BTRFS info (device loop4): max_inline at 4096 [ 131.729115][ T6199] BTRFS info (device loop4): disk space caching is enabled [ 132.275327][ T6259] loop2: detected capacity change from 0 to 2048 [ 132.284316][ T6259] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.309793][ T6259] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 132.317811][ T6199] BTRFS info (device loop4): rebuilding free space tree [ 132.352010][ T6259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.533631][ T6265] loop3: detected capacity change from 0 to 1764 [ 132.603110][ T6199] BTRFS info (device loop4): disabling free space tree [ 132.667376][ T6199] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.728065][ T6199] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.740997][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741093][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.156517][ T4263] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.488961][ T6280] loop2: detected capacity change from 0 to 32768 [ 133.566818][ T6280] read_mapping_page failed! [ 133.571754][ T6280] ERROR: (device loop2): txCommit: [ 133.571754][ T6280] [ 133.614326][ T4318] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 133.652166][ T108] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 133.661086][ T6302] CUSE: unknown device info "" [ 133.666560][ T108] ------------[ cut here ]------------ [ 133.672063][ T108] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 133.692117][ T6302] CUSE: unknown device info "" [ 133.711073][ T6302] CUSE: unknown device info "" [ 133.730365][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 133.736663][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted 6.1.148-syzkaller #0 [ 133.744565][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.754331][ T6302] CUSE: unknown device info "" [ 133.754612][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 133.759524][ T6302] CUSE: zero length info key specified [ 133.764370][ T108] Code: af 37 1d 07 0f 0b e8 d8 af 92 fe 48 c7 c7 40 3b c6 8a 48 c7 c6 39 37 c6 8a ba a3 03 00 00 48 c7 c1 20 48 c6 8a e8 89 37 1d 07 <0f> 0b e8 b2 af 92 fe 48 c7 c7 40 3b c6 8a 48 c7 c6 39 37 c6 8a ba [ 133.764388][ T108] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 133.764403][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 191605fe96f11d00 [ 133.764412][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 133.764421][ T108] RBP: ffffc9000288a0d8 R08: dffffc0000000000 R09: fffff520005a2f45 [ 133.764430][ T108] R10: fffff520005a2f45 R11: 1ffff920005a2f44 R12: ffff8880291beba0 [ 133.764440][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888078ae8294 [ 133.764450][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.764463][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.851051][ T108] CR2: 000000110c379f62 CR3: 000000005dbf0000 CR4: 00000000003506f0 [ 133.859016][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.866977][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 133.874938][ T108] Call Trace: [ 133.878202][ T108] [ 133.881122][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 133.886320][ T108] jfs_lazycommit+0x56c/0xa50 [ 133.891003][ T108] ? txFreelock+0x5a0/0x5a0 [ 133.895506][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 133.901397][ T108] ? do_task_dead+0xd0/0xd0 [ 133.906155][ T108] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 133.912036][ T108] ? __kthread_parkme+0x162/0x1c0 [ 133.917066][ T108] kthread+0x29d/0x330 [ 133.921124][ T108] ? txFreelock+0x5a0/0x5a0 [ 133.925615][ T108] ? kthread_blkcg+0xd0/0xd0 [ 133.930192][ T108] ret_from_fork+0x1f/0x30 [ 133.934600][ T108] [ 133.937614][ T108] Modules linked in: [ 133.946751][ T4318] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.957961][ T108] ---[ end trace 0000000000000000 ]--- [ 133.969686][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 133.969796][ T4318] usb 4-1: config 0 has no interface number 0 [ 133.975374][ T108] Code: af 37 1d 07 0f 0b e8 d8 af 92 fe 48 c7 c7 40 3b c6 8a 48 c7 c6 39 37 c6 8a ba a3 03 00 00 48 c7 c1 20 48 c6 8a e8 89 37 1d 07 <0f> 0b e8 b2 af 92 fe 48 c7 c7 40 3b c6 8a 48 c7 c6 39 37 c6 8a ba [ 133.981436][ T4318] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 134.002221][ T108] RSP: 0018:ffffc90002d17d28 EFLAGS: 00010246 [ 134.010532][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.018482][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 191605fe96f11d00 [ 134.029811][ T4318] usb 4-1: config 0 descriptor?? [ 134.032658][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 134.041966][ T4318] usb 4-1: selecting invalid altsetting 1 [ 134.049326][ T108] RBP: ffffc9000288a0d8 R08: dffffc0000000000 R09: fffff520005a2f45 [ 134.051921][ T4318] dvb_ttusb_budget: ttusb_init_controller: error [ 134.060393][ T108] R10: fffff520005a2f45 R11: 1ffff920005a2f44 R12: ffff8880291beba0 [ 134.066787][ T4318] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 134.084363][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888078ae8294 [ 134.092447][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 134.102714][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.110187][ T108] CR2: 0000200000001000 CR3: 000000005dbf0000 CR4: 00000000003506f0 [ 134.119306][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.128215][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.136425][ T4318] DVB: Unable to find symbol cx22700_attach() [ 134.137319][ T108] Kernel panic - not syncing: Fatal exception [ 134.142691][ T108] Kernel Offset: disabled [ 134.153100][ T108] Rebooting in 86400 seconds..