last executing test programs: 1m51.032482514s ago: executing program 4 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m50.910239264s ago: executing program 4 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8, 0x400, 0x67d0, 0xe, 0x4, 0x100]}}]}]}]}, 0x44}}, 0x0) 1m50.745830736s ago: executing program 4 (id=64): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r1=>0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) 1m50.549506507s ago: executing program 4 (id=65): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@nobh}]}, 0x1, 0x790, &(0x7f0000000f80)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 1m50.18865218s ago: executing program 4 (id=69): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond0\x00', <r2=>0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES64=r0], 0x1c}}, 0x0) 1m48.261241523s ago: executing program 4 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r0], 0x3c}}, 0x10) 1m48.052202835s ago: executing program 32 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r0], 0x3c}}, 0x10) 1m15.71568151s ago: executing program 1 (id=402): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1400004, &(0x7f0000001000)=ANY=[], 0x1, 0x197, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0xec) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x3208040, &(0x7f0000000780)=ANY=[@ANYBLOB='nocase,shortname=mixed,nonumtail=0,rodir,utf8=1,rodir,nfs=stale_rw,uni_xlate=0,iocharset=cp949,iocharset=ascii,uni_xlate=0,utf8=1,rodir,shortname=mixed,dos1xfloppy,nocase,uni_xlate=1,errors=continue,iocharset=cp737,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c8f94be93150452", @ANYRESDEC=0x0, @ANYBLOB="a900"], 0xf9, 0x307, &(0x7f00000008c0)="$eJzs3ctrE1scwPFf3kkfN11cLhdROFQQRTo0AXcuLNKCGFDaRrCCMLVTDZkmJRMKKWKzENy6E1x04VIEEdy5EXHbhf4FvnbddGfB4shkMumYjmms9On3s2hOzvx+c87MmenjtD2zev7hXHHW0r7ZUfH0iciAhCXSfF+XM2+XP56YeNPnvldqbGQyk1UqLCI37j4bfF3tvfbyn1cJWRm4ubqW/bJyfFLk++QdCauCpUq2bdtqulyuhpzkmYJV1JS6ahq6ZahCyTIqVaU3tuvTpqFmzfL8fE3ppZn+nvmKYVlKL9VU0aipallVKzWl39YLJaVpmurvETQGyxPesi3UKTH/dN22Zc0ZoGhdbNsOiK57hVjzNfFnncVB0hr/RGP8O8ZuuTgiu9kz7IV1O9oa//g244+jx73/Pz3u5v7H0TNxferySC43Oq5UUmTuwUJ+Ie++uts/9EpBTDFkefzs1IY410iThJyPY5dyo8OqYUBOzS0185cW8u4Xh5HZZn5G0s73Kb588fIzbr76OT8mPf78rKTl3+D8rJcvYV9+XE6f9OVrkpb3t6QspsyIk7uZfy+j1MUrubb2U404AAAAAAAAAAAOI021bM7fh1q/6k1pWqLxFx+t7Smn2olzA1rz68OSlo3g+fnhwPn9qByL7uOBAwAAAADwF7Fqi0XdNI3K7hQiT1IdmoiJiFMQuT/odMY0KnURCQ7+r9nj7lqPB+4nIt13PnXObe/5uLhZspsnaoeFsIj4a9x/1nAO3nzhxaQkKD0sj1bdA+ymraF44JlP7ukhSzfBktzZhZ3o+tJqL4Q2vJr/A2Ps0Pb7sXUz5tZ4N6Y/JtU2yk7hwm/dDr8sJNtP1NBnd79mh08aX1tTfAAAAAAOEd8PTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ/saPEwb93+zZp3Vm1Rmo+I37okW/tz4ln3HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAB9CMAAP//hMauKA==") pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m15.136099045s ago: executing program 1 (id=411): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) ioctl$TCXONC(r0, 0x5608, 0x3) 1m13.898067343s ago: executing program 1 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x71}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 1m13.601885705s ago: executing program 1 (id=420): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@nobh}]}, 0x1, 0x790, &(0x7f0000000f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 1m13.01739585s ago: executing program 1 (id=429): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @quote={{0x2, 0x5}, 0xe}}], 0x38) 1m10.895564945s ago: executing program 1 (id=457): r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000340)={<r1=>0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$search(0x4, r0, 0x0, 0x0, 0x0) 1m10.691540446s ago: executing program 33 (id=457): r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000340)={<r1=>0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$search(0x4, r0, 0x0, 0x0, 0x0) 3.309024556s ago: executing program 5 (id=1258): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x800000, &(0x7f0000000100)={[{@nls={'nls', 0x3d, 'cp950'}}, {@force}, {@gid}, {@creator={'creator', 0x3d, "d1a7bc99"}}, {@nobarrier}, {@nodecompose}, {@barrier}, {@uid}, {@nobarrier}, {@nodecompose}, {@nodecompose}, {@uid}]}, 0x4, 0x5f0, &(0x7f0000001980)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000e40)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'cp865'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.302594616s ago: executing program 0 (id=1259): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffd}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.956927929s ago: executing program 5 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2.903917329s ago: executing program 0 (id=1266): mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000003, 0x5d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x7, &(0x7f00000005c0)=0x3, &(0x7f0000000680)=0x1) 2.453310423s ago: executing program 5 (id=1272): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) 2.319467994s ago: executing program 5 (id=1274): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)={0x14, r2, 0x301, 0x0, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x404c841}, 0x0) 2.231733634s ago: executing program 0 (id=1275): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) 2.208948184s ago: executing program 5 (id=1276): syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003fcc78d0d50970d2495e8cc0042e86aa03967add36b5cfd0647cbc5708d625d2a17f34aad805d071190000"], 0x1, 0x5dcc, &(0x7f0000005ec0)="$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") setxattr$incfs_metadata(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)="6fc7612750e2de413ceff05162fdf37cc15289e0b292308c85c7d2accbe401c5217332030662263a62a97ca3291e32491ada5fd3237be307cf", 0x39, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x563, &(0x7f0000000640)="$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") lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) 2.074815086s ago: executing program 0 (id=1278): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000011}) 1.813129307s ago: executing program 0 (id=1281): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@noquota}, {}, {@errors_continue}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/173, 0xad) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.220156611s ago: executing program 2 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x11f0f14e, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffe00}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x6}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x0) 1.038274272s ago: executing program 5 (id=1292): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6e6f657874656e745f63616368652c6a71666d743d76667376312c66617374626f6f742c757365725f78617474722c6772706a71756f74613d00233f5b2c7768696e745f6d6f64653d757365722d62617365642c6673796e635f6d6f64653d7374726963742c6e6f657874656e0c5f63616368652cba727f3e50c9f1da74722c00"], 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x41009432, &(0x7f0000000000)={0x10, 0x9, "31eacb679f3f4fd24dab671ab3445ed5"}) 1.037527183s ago: executing program 2 (id=1293): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f00000006c0)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'osx.', 'trusted.overlay.upper\x00'}, 0x0, 0x0) 1.016523623s ago: executing program 6 (id=1294): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5f0403ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a2", 0x28}], 0x1) 890.775734ms ago: executing program 6 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x3, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) 807.582354ms ago: executing program 3 (id=1297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/186, 0xba}], 0x1) 804.511475ms ago: executing program 6 (id=1298): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x30}}, 0x40004) 781.172625ms ago: executing program 0 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 714.314725ms ago: executing program 2 (id=1300): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 698.245565ms ago: executing program 3 (id=1301): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 691.718785ms ago: executing program 6 (id=1302): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000001a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496c6f6ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8491ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058312dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cd673b5c2f965fcecbf0d62972a98e12a14a3d980d6a37926d88c7c32c4"], 0x1, 0x2e0, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 616.096646ms ago: executing program 2 (id=1303): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r1, <r2=>0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000440)={r2, 0x487d60c11958e33, 0x4, 0x0, &(0x7f0000000340)}) 610.430586ms ago: executing program 3 (id=1304): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=<r1=>0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x46]}, 0x76) 513.028807ms ago: executing program 3 (id=1305): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='file_umask=00000000000000000000001,part=0x0000000000000009,codepage=cp866,umask=00000000000000000000001,iocharset=cp936,\x00'], 0x1, 0x30e, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 512.281567ms ago: executing program 2 (id=1306): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0) 389.746807ms ago: executing program 6 (id=1307): eventfd2(0xfb2, 0x80800) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000040)=ANY=[], 0x1, 0x22a, &(0x7f00000005c0)="$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") setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='wg2\x00', 0x4) lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) 327.307118ms ago: executing program 3 (id=1308): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x12001) 170.323899ms ago: executing program 3 (id=1309): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) read(r0, &(0x7f00000002c0)=""/114, 0x72) 74.200139ms ago: executing program 6 (id=1310): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x800030, 0x0) 0s ago: executing program 2 (id=1311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) kernel console output (not intermixed with test programs): 99][ T5127] loop0: detected capacity change from 0 to 32768 [ 83.037116][ T5127] XFS: ikeep mount option is deprecated. [ 83.049119][ T5127] XFS: noikeep mount option is deprecated. [ 83.071897][ T5138] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 83.175741][ T5127] XFS (loop0): Mounting V5 Filesystem [ 83.252220][ T5100] ryos 0003:1E7D:3138.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 83.339459][ T5127] XFS (loop0): Ending clean mount [ 83.347056][ T5127] XFS (loop0): Quotacheck needed: Please wait. [ 83.470080][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.247'. [ 83.482469][ T5127] XFS (loop0): Quotacheck: Done. [ 83.574745][ T4444] usb 2-1: USB disconnect, device number 3 [ 83.686538][ T4168] XFS (loop0): Unmounting Filesystem [ 84.073569][ T5163] loop5: detected capacity change from 0 to 32768 [ 84.141463][ T5163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.249 (5163) [ 84.242128][ T5163] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 84.263028][ T5163] BTRFS info (device loop5): enabling disk space caching [ 84.270093][ T5163] BTRFS info (device loop5): turning off barriers [ 84.333167][ T5163] BTRFS info (device loop5): doing ref verification [ 84.338418][ T5159] loop2: detected capacity change from 0 to 40427 [ 84.339792][ T5163] BTRFS info (device loop5): use no compression [ 84.339809][ T5163] BTRFS info (device loop5): force clearing of disk cache [ 84.339826][ T5163] BTRFS info (device loop5): setting nodatacow, compression disabled [ 84.339841][ T5163] BTRFS info (device loop5): turning on barriers [ 84.432554][ T5159] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 84.517928][ T5159] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.548128][ T5163] BTRFS info (device loop5): doing ref verification [ 84.602746][ T5163] BTRFS info (device loop5): disk space caching is enabled [ 84.610085][ T5163] BTRFS info (device loop5): has skinny extents [ 84.672756][ T5159] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.811089][ T5170] loop3: detected capacity change from 0 to 32768 [ 84.878913][ T4180] attempt to access beyond end of device [ 84.878913][ T4180] loop2: rw=2049, want=45104, limit=40427 [ 84.919003][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 84.935947][ T5170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.253 (5170) [ 85.025877][ T5215] loop1: detected capacity change from 0 to 256 [ 85.104152][ T5163] BTRFS info (device loop5): enabling ssd optimizations [ 85.111838][ T5170] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 85.129233][ T5163] BTRFS info (device loop5): clearing free space tree [ 85.142798][ T5163] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.154620][ T5163] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.189430][ T5170] BTRFS info (device loop3): setting nodatacow, compression disabled [ 85.231432][ T5215] MINIX-fs: mounting file system with errors, running fsck is recommended [ 85.264741][ T5170] BTRFS info (device loop3): max_inline at 0 [ 85.270766][ T5170] BTRFS info (device loop3): enabling disk space caching [ 85.319372][ T5170] BTRFS info (device loop3): turning off barriers [ 85.337099][ T5170] BTRFS info (device loop3): turning on flush-on-commit [ 85.350451][ T5179] loop0: detected capacity change from 0 to 32768 [ 85.361864][ T5170] BTRFS info (device loop3): doing ref verification [ 85.382724][ T5170] BTRFS info (device loop3): force clearing of disk cache [ 85.405887][ T5170] BTRFS info (device loop3): enabling ssd optimizations [ 85.449778][ T5170] BTRFS info (device loop3): max_inline at 4096 [ 85.482694][ T5170] BTRFS info (device loop3): disk space caching is enabled [ 85.515069][ T5170] BTRFS info (device loop3): has skinny extents [ 85.621773][ T5179] XFS (loop0): Mounting V5 Filesystem [ 85.761727][ T5179] XFS (loop0): Ending clean mount [ 85.764508][ T5251] loop2: detected capacity change from 0 to 2048 [ 85.888045][ T5251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.922102][ T5170] BTRFS info (device loop3): clearing free space tree [ 85.949097][ T5179] XFS (loop0): Quotacheck needed: Please wait. [ 85.957880][ T5170] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.973732][ T5170] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.133920][ T26] audit: type=1800 audit(1741744161.869:7): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 86.154950][ T5179] XFS (loop0): Quotacheck: Done. [ 86.344968][ T5274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.269'. [ 86.512196][ T4168] XFS (loop0): Unmounting Filesystem [ 87.028369][ T5305] loop5: detected capacity change from 0 to 8 [ 87.039291][ T5303] loop2: detected capacity change from 0 to 256 [ 87.545518][ T5326] loop1: detected capacity change from 0 to 1024 [ 87.662794][ T4213] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.777453][ T5338] loop0: detected capacity change from 0 to 256 [ 87.818501][ T4233] hfsplus: b-tree write err: -5, ino 4 [ 87.910844][ T5338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 87.933638][ T4213] usb 3-1: Using ep0 maxpacket: 32 [ 88.082972][ T4213] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.091242][ T4213] usb 3-1: config 0 has no interface number 0 [ 88.249144][ T5370] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 88.302853][ T4213] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.326354][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.326950][ T5375] loop3: detected capacity change from 0 to 1024 [ 88.346600][ T4213] usb 3-1: Product: syz [ 88.357178][ T4213] usb 3-1: Manufacturer: syz [ 88.362102][ T4213] usb 3-1: SerialNumber: syz [ 88.426783][ T4213] usb 3-1: config 0 descriptor?? [ 88.484240][ T4213] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.517229][ T9] hfsplus: b-tree write err: -5, ino 4 [ 88.631158][ T5385] loop3: detected capacity change from 0 to 64 [ 88.705885][ T4213] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.722668][ T4248] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.783791][ T4213] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 88.898547][ T5378] loop5: detected capacity change from 0 to 40427 [ 88.899687][ T4166] hfs: node 4:3 still has 2 user(s)! [ 88.988420][ T5378] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 89.002771][ T4248] usb 2-1: Using ep0 maxpacket: 16 [ 89.031863][ T5378] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 89.060887][ T5378] F2FS-fs (loop5): invalid crc value [ 89.145140][ T4248] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.155004][ T5378] F2FS-fs (loop5): Found nat_bits in checkpoint [ 89.158660][ T5404] loop0: detected capacity change from 0 to 1024 [ 89.172643][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.187838][ T4248] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.211711][ T4248] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 89.235641][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.262723][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,jqfmt=vfsv1,barrier=0x0000000000080000,max_batch_time=0x0000000000000008,block_validity,resuid=0x0000000000000000,nombcache,noauto_da_alloc,nolazytime,,errors=continue. Quota mode: none. [ 89.264309][ T4248] usb 2-1: config 0 descriptor?? [ 89.297640][ T4213] usb 3-1: USB disconnect, device number 3 [ 89.302487][ T5378] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 89.307983][ T4213] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.327311][ T4213] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.345223][ T4213] quatech2 3-1:0.51: device disconnected [ 89.374068][ T5378] F2FS-fs (loop5): Start checkpoint disabled! [ 89.412109][ T5378] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 89.420162][ T5378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 89.441045][ T5404] EXT4-fs (loop0): shut down requested (2) [ 89.709862][ T4616] attempt to access beyond end of device [ 89.709862][ T4616] loop5: rw=2049, want=40976, limit=40427 [ 89.799270][ T4248] hid (null): unknown global tag 0xe [ 89.815024][ T4248] hid (null): report_id 15736 is invalid [ 89.820727][ T4248] hid (null): unknown global tag 0xe [ 89.875999][ T4248] cougar 0003:060B:500A.0003: unexpected long global item [ 89.907824][ T4248] cougar 0003:060B:500A.0003: parse failed [ 89.954167][ T4248] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 90.021220][ T4248] usb 2-1: USB disconnect, device number 4 [ 90.435543][ T5460] loop2: detected capacity change from 0 to 512 [ 90.570340][ T5460] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 90.649253][ T5460] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.820990][ T26] audit: type=1800 audit(1741744166.549:8): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.324" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 91.105320][ T5457] loop5: detected capacity change from 0 to 32768 [ 91.137873][ T5482] loop3: detected capacity change from 0 to 256 [ 91.240379][ T5482] FAT-fs (loop3): Directory bread(block 64) failed [ 91.276842][ T5447] loop0: detected capacity change from 0 to 32768 [ 91.286129][ T5482] FAT-fs (loop3): Directory bread(block 65) failed [ 91.336725][ T5482] FAT-fs (loop3): Directory bread(block 66) failed [ 91.351577][ T5457] XFS (loop5): Mounting V5 Filesystem [ 91.363181][ T5482] FAT-fs (loop3): Directory bread(block 67) failed [ 91.389382][ T5482] FAT-fs (loop3): Directory bread(block 68) failed [ 91.403838][ T5482] FAT-fs (loop3): Directory bread(block 69) failed [ 91.410470][ T5482] FAT-fs (loop3): Directory bread(block 70) failed [ 91.417559][ T5482] FAT-fs (loop3): Directory bread(block 71) failed [ 91.426858][ T5482] FAT-fs (loop3): Directory bread(block 72) failed [ 91.436078][ T5482] FAT-fs (loop3): Directory bread(block 73) failed [ 91.500030][ T5447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.321 (5447) [ 91.615679][ T5447] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 91.627607][ T5457] XFS (loop5): Ending clean mount [ 91.674723][ T5457] XFS (loop5): Quotacheck needed: Please wait. [ 91.681689][ T5447] BTRFS info (device loop0): metadata ratio 2 [ 91.727086][ T5447] BTRFS info (device loop0): force zlib compression, level 3 [ 91.759179][ T5457] XFS (loop5): Quotacheck: Done. [ 91.780919][ T5447] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 91.877822][ T5447] BTRFS info (device loop0): use lzo compression, level 0 [ 91.926987][ T5447] BTRFS info (device loop0): force clearing of disk cache [ 91.952827][ T5447] BTRFS info (device loop0): max_inline at 4096 [ 91.970324][ T5447] BTRFS info (device loop0): using free space tree [ 91.982960][ T5447] BTRFS info (device loop0): has skinny extents [ 92.033158][ T4535] XFS (loop5): Unmounting Filesystem [ 92.452606][ T5447] BTRFS info (device loop0): enabling ssd optimizations [ 92.494738][ T5447] BTRFS info (device loop0): clearing free space tree [ 92.542864][ T5447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.552541][ T5447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.635728][ T5447] BTRFS info (device loop0): creating free space tree [ 92.679167][ T5447] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.702848][ T5447] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.917362][ T5564] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 93.170902][ T5577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 93.502200][ T5590] netlink: 'syz.3.352': attribute type 2 has an invalid length. [ 93.747950][ T5604] loop3: detected capacity change from 0 to 1024 [ 93.980391][ T5604] EXT4-fs (loop3): Ignoring removed orlov option [ 94.299614][ T5614] tap0: tun_chr_ioctl cmd 1074025678 [ 94.373405][ T5614] tap0: group set to 0 [ 94.475830][ T5604] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.522760][ T5604] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.592500][ T5618] loop0: detected capacity change from 0 to 4096 [ 94.598652][ T5606] loop2: detected capacity change from 0 to 131072 [ 94.606859][ T2855] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.615648][ T5604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 94.626010][ T5604] EXT4-fs (loop3): invalid journal inode [ 94.631707][ T5604] EXT4-fs (loop3): can't get journal size [ 94.647045][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 94.704817][ T5618] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.739465][ T5606] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 94.747763][ T5606] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.759973][ T5606] F2FS-fs (loop2): invalid crc value [ 94.794489][ T5606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.870542][ T5606] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.877722][ T5606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 94.886411][ T2855] usb 2-1: Using ep0 maxpacket: 8 [ 95.000396][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.363'. [ 95.023062][ T2855] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.052617][ T2855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.099377][ T2855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.101512][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'. [ 95.128547][ T2855] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.149535][ T2855] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.168767][ T2855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.484083][ T2855] usb 2-1: GET_CAPABILITIES returned 0 [ 95.489642][ T2855] usbtmc 2-1:16.0: can't read capabilities [ 95.780428][ T2855] usb 2-1: USB disconnect, device number 5 [ 95.954534][ T5636] loop3: detected capacity change from 0 to 40427 [ 96.006822][ T5636] F2FS-fs (loop3): invalid crc value [ 96.124085][ T5636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.266172][ T5636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.522329][ T5662] loop5: detected capacity change from 0 to 2048 [ 96.544185][ T4166] attempt to access beyond end of device [ 96.544185][ T4166] loop3: rw=2049, want=45104, limit=40427 [ 96.611189][ T5662] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.679074][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.847389][ T5673] loop0: detected capacity change from 0 to 256 [ 96.973411][ T5673] exfat: Deprecated parameter 'namecase' [ 96.979143][ T5673] exfat: Deprecated parameter 'namecase' [ 97.112088][ T5673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 97.148666][ T5682] loop2: detected capacity change from 0 to 2048 [ 97.194840][ T5682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 97.273734][ T5682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.623570][ T5688] loop3: detected capacity change from 0 to 4096 [ 97.637228][ T5691] loop2: detected capacity change from 0 to 2048 [ 97.781132][ T5691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.870223][ T5698] loop0: detected capacity change from 0 to 4096 [ 97.969654][ T4166] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 97.985687][ T5698] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 98.004955][ T4166] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.055514][ T5698] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.223321][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 98.315060][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 98.443696][ T5698] ntfs3: loop0: ino=1b, Correct links count -> 1. [ 98.632222][ T5724] loop3: detected capacity change from 0 to 256 [ 98.666014][ T4168] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 98.708701][ T5727] loop1: detected capacity change from 0 to 64 [ 98.726557][ T5724] exfat: Deprecated parameter 'utf8' [ 98.731950][ T5724] exfat: Deprecated parameter 'utf8' [ 98.772860][ T5724] exfat: Deprecated parameter 'utf8' [ 98.809849][ T5724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 99.067394][ T5738] loop0: detected capacity change from 0 to 512 [ 99.271867][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.769029][ T5722] loop5: detected capacity change from 0 to 32768 [ 99.919424][ T26] audit: type=1800 audit(1741744175.649:9): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.401" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 99.919466][ T5740] loop3: detected capacity change from 0 to 131072 [ 100.078603][ T5740] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 100.088862][ T5740] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.103003][ T5740] F2FS-fs (loop3): invalid crc value [ 100.125134][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.132294][ T5745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.154863][ T5740] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.209210][ T5740] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.216399][ T5740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.478722][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.518345][ T5758] team0: Port device batadv1 added [ 100.533293][ T5760] sch_fq: defrate 113 ignored. [ 100.771229][ T5764] loop1: detected capacity change from 0 to 2048 [ 100.897627][ T5764] EXT4-fs (loop1): Ignoring removed nobh option [ 101.024450][ T5764] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,resuid=0x0000000000000000,block_validity,resuid=0x000000000000ee01,discard,noblock_validity,nobh,,errors=continue. Quota mode: writeback. [ 101.131846][ T5764] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 101.280312][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.343185][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.438878][ T4174] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 101.510677][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 101.553011][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.629325][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.713452][ T4174] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 101.758805][ T5772] loop0: detected capacity change from 0 to 32768 [ 101.789895][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 101.826199][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.832792][ T5801] loop5: detected capacity change from 0 to 1024 [ 101.876932][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.877622][ T5772] XFS (loop0): Mounting V5 Filesystem [ 101.908489][ T4174] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 101.927673][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 101.951436][ T4174] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz-executor: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.980817][ T5772] XFS (loop0): Ending clean mount [ 101.986823][ T4169] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 101.994581][ T5801] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 102.005383][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.032368][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.064476][ T5801] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 102.082373][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.123552][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.169740][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.200510][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.202012][ T5815] loop2: detected capacity change from 0 to 256 [ 102.225656][ T4168] XFS (loop0): Unmounting Filesystem [ 102.226053][ T4174] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.383140][ T4169] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.397343][ T4169] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 102.593087][ T4169] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.622318][ T4169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.670471][ T4169] usb 4-1: Product: syz [ 102.692719][ T4169] usb 4-1: Manufacturer: syz [ 102.707582][ T4169] usb 4-1: SerialNumber: syz [ 102.834644][ T5827] sp0: Synchronizing with TNC [ 102.885446][ T5826] [U] � [ 102.906409][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.445'. [ 103.006674][ T5797] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.301643][ T5853] loop5: detected capacity change from 0 to 256 [ 103.375273][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.393249][ T5853] MINIX-fs: mounting file system with errors, running fsck is recommended [ 103.542245][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.640514][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.692912][ T4169] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 103.715985][ T5864] cifs: Unknown parameter 'mode' [ 103.731832][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.743640][ T4169] cdc_ncm 4-1:1.0: bind() failure [ 103.751914][ T4169] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 103.781335][ T4169] cdc_ncm 4-1:1.1: bind() failure [ 103.854662][ T4169] usb 4-1: USB disconnect, device number 3 [ 104.049859][ T5849] loop2: detected capacity change from 0 to 32768 [ 104.275946][ T5849] XFS (loop2): Mounting V5 Filesystem [ 104.579371][ T5849] XFS (loop2): Ending clean mount [ 104.611125][ T5849] XFS (loop2): Quotacheck needed: Please wait. [ 104.758245][ T5883] loop5: detected capacity change from 0 to 32768 [ 104.776443][ T5849] XFS (loop2): Quotacheck: Done. [ 104.831215][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 105.019259][ T4180] XFS (loop2): Unmounting Filesystem [ 105.288756][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.304458][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.317089][ T5873] device bridge_slave_0 entered promiscuous mode [ 105.325779][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.332954][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.341027][ T5873] device bridge_slave_1 entered promiscuous mode [ 105.456343][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.479015][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.480335][ T5933] capability: warning: `syz.5.479' uses deprecated v2 capabilities in a way that may be insecure [ 105.546179][ T5873] team0: Port device team_slave_0 added [ 105.576684][ T5873] team0: Port device team_slave_1 added [ 105.685865][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.722608][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.812972][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.903835][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.910829][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.994712][ T5956] loop0: detected capacity change from 0 to 2048 [ 106.002797][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.021687][ T4435] Bluetooth: hci3: command 0x0409 tx timeout [ 106.074310][ T5956] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 106.107557][ T5960] loop2: detected capacity change from 0 to 512 [ 106.134476][ T5956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.177447][ T5873] device hsr_slave_0 entered promiscuous mode [ 106.208920][ T5873] device hsr_slave_1 entered promiscuous mode [ 106.294684][ T5960] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 106.348252][ T5945] loop5: detected capacity change from 0 to 32768 [ 106.355607][ T5960] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.378423][ T144] device hsr_slave_0 left promiscuous mode [ 106.394503][ T144] device hsr_slave_1 left promiscuous mode [ 106.435987][ T5945] XFS (loop5): Mounting V5 Filesystem [ 106.444620][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.480192][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.488746][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.496602][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.506258][ T144] device bridge_slave_1 left promiscuous mode [ 106.544447][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.555350][ T5945] XFS (loop5): Ending clean mount [ 106.570915][ T5945] XFS (loop5): Quotacheck needed: Please wait. [ 106.578187][ T144] device bridge_slave_0 left promiscuous mode [ 106.609516][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.641815][ T144] device veth1_macvtap left promiscuous mode [ 106.655914][ T144] device veth0_macvtap left promiscuous mode [ 106.669241][ T5945] XFS (loop5): Quotacheck: Done. [ 106.677346][ T144] device veth1_vlan left promiscuous mode [ 106.739824][ T144] device veth0_vlan left promiscuous mode [ 106.793979][ T4535] XFS (loop5): Unmounting Filesystem [ 106.828645][ T5990] loop3: detected capacity change from 0 to 512 [ 106.965118][ T5990] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #16: comm syz.3.488: corrupted xattr block 8 [ 107.001853][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 107.011249][ T5990] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 107.021221][ T5990] EXT4-fs (loop3): 1 orphan inode deleted [ 107.039394][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback. [ 107.064914][ T5990] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.081930][ T144] team0 (unregistering): Port device batadv1 removed [ 107.216016][ T5995] netlink: 344 bytes leftover after parsing attributes in process `syz.5.489'. [ 107.347737][ T144] team0 (unregistering): Port device team_slave_1 removed [ 107.379936][ T144] team0 (unregistering): Port device team_slave_0 removed [ 107.395620][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.416687][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.519651][ T144] bond0 (unregistering): Released all slaves [ 107.603774][ T5986] netlink: 'syz.0.497': attribute type 20 has an invalid length. [ 107.782207][ T5997] loop3: detected capacity change from 0 to 32768 [ 107.810773][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.844595][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 107.969753][ T5997] XFS (loop3): Mounting V5 Filesystem [ 108.105196][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 108.117468][ T5873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.155043][ T5873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.228071][ T5873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 108.241048][ T5997] XFS (loop3): Ending clean mount [ 108.264023][ T5997] XFS (loop3): Quotacheck needed: Please wait. [ 108.281539][ T5873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 108.353299][ T5997] XFS (loop3): Quotacheck: Done. [ 108.524809][ T4166] XFS (loop3): Unmounting Filesystem [ 108.723758][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.773029][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.788935][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.834804][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.880271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.917447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.936536][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.943675][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.016167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.034734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.061227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.110800][ T6031] loop2: detected capacity change from 0 to 32768 [ 109.113256][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.124347][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.172702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.214902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.243639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.252473][ T6031] XFS (loop2): Mounting V5 Filesystem [ 109.255555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.300546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.352117][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.362060][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.371551][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.434422][ T6031] XFS (loop2): Ending clean mount [ 109.482959][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.512343][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.534430][ T6031] XFS (loop2): Quotacheck needed: Please wait. [ 109.557910][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.565054][ T6069] loop3: detected capacity change from 0 to 1024 [ 109.574981][ T5873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.625230][ T6031] XFS (loop2): Quotacheck: Done. [ 109.723515][ T6053] loop0: detected capacity change from 0 to 32768 [ 109.764969][ T4180] XFS (loop2): Unmounting Filesystem [ 109.826662][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 109.835514][ T6053] jfs_strtoUCS: char2uni returned -22. [ 109.962712][ T6053] charset = cp874, char = 0xfc [ 110.186983][ T4444] Bluetooth: hci3: command 0x040f tx timeout [ 110.233600][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.241124][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.357335][ T6095] loop3: detected capacity change from 0 to 512 [ 110.522915][ T6094] loop5: detected capacity change from 0 to 32768 [ 110.533839][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.572077][ T6095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.633381][ T6095] EXT4-fs (loop3): 1 truncate cleaned up [ 110.642439][ T6094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.518 (6094) [ 110.662670][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.685368][ T6094] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 110.694241][ T6094] BTRFS info (device loop5): using free space tree [ 110.700761][ T6094] BTRFS info (device loop5): has skinny extents [ 110.735431][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 110.848407][ T6095] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 111.133383][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.140525][ T6094] BTRFS info (device loop5): enabling ssd optimizations [ 111.173805][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.270423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.281841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.367011][ T5873] device veth0_vlan entered promiscuous mode [ 111.406197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.429413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.528113][ T5873] device veth1_vlan entered promiscuous mode [ 111.622142][ T5873] device veth0_macvtap entered promiscuous mode [ 111.746290][ T5873] device veth1_macvtap entered promiscuous mode [ 111.804001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.812204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.838612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.867766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.897080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.912794][ T6162] futex_wake_op: syz.3.530 tries to shift op by -1; fix this program [ 111.974408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.048591][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.102601][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.142618][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.194707][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.242676][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.253129][ T4215] Bluetooth: hci3: command 0x0419 tx timeout [ 112.279197][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.310096][ T6117] loop0: detected capacity change from 0 to 40427 [ 112.317820][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.331497][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.345611][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.357418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.383479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.427525][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.444485][ T6117] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 112.457379][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.482728][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.520585][ T6117] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.540939][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.578395][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.609221][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.628523][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.641991][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.657287][ T6117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.658682][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.697489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.726061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.750310][ T5873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.766417][ T5873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.779944][ T5873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.814815][ T5873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.877136][ T6174] loop3: detected capacity change from 0 to 32768 [ 113.043933][ T4168] attempt to access beyond end of device [ 113.043933][ T4168] loop0: rw=2049, want=45104, limit=40427 [ 113.103036][ T6195] loop2: detected capacity change from 0 to 32768 [ 113.175244][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.203665][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.264025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.312162][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.405828][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.462696][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.976802][ T6220] loop3: detected capacity change from 0 to 4096 [ 114.029510][ T6220] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 114.181546][ T6220] ntfs3: loop3: Failed to load $Extend. [ 114.261181][ T26] audit: type=1800 audit(1741744189.989:10): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 114.291025][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.549'. [ 114.325947][ T6239] lo speed is unknown, defaulting to 1000 [ 114.332152][ T6239] lo speed is unknown, defaulting to 1000 [ 114.377104][ T6239] lo speed is unknown, defaulting to 1000 [ 114.425376][ T6239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.492867][ T6197] loop5: detected capacity change from 0 to 32768 [ 114.513037][ T6239] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 114.548425][ T6250] loop3: detected capacity change from 0 to 1024 [ 114.578913][ T6197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.539 (6197) [ 114.640174][ T6197] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 114.673373][ T6239] lo speed is unknown, defaulting to 1000 [ 114.689926][ T6197] BTRFS info (device loop5): using free space tree [ 114.729921][ T6239] lo speed is unknown, defaulting to 1000 [ 114.737093][ T6197] BTRFS info (device loop5): has skinny extents [ 114.763307][ T6239] lo speed is unknown, defaulting to 1000 [ 114.769978][ T6239] lo speed is unknown, defaulting to 1000 [ 114.795975][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 114.859720][ T6265] loop6: detected capacity change from 0 to 1024 [ 114.875863][ T6239] lo speed is unknown, defaulting to 1000 [ 115.054665][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'. [ 115.185243][ T144] hfsplus: b-tree write err: -5, ino 4 [ 115.226292][ T6197] BTRFS info (device loop5): enabling ssd optimizations [ 115.226371][ T6296] loop2: detected capacity change from 0 to 256 [ 115.319887][ T6296] FAT-fs (loop2): unable to read block(4294967296) for building NFS inode [ 115.390485][ T6305] loop0: detected capacity change from 0 to 512 [ 115.514337][ T6313] program syz.2.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.539121][ T6305] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #16: comm syz.0.566: corrupted xattr block 8 [ 115.652845][ T6165] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.652896][ T6305] EXT4-fs (loop0): Remounting filesystem read-only [ 115.756234][ T6305] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 115.782518][ T6305] EXT4-fs (loop0): 1 orphan inode deleted [ 115.793707][ T6305] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback. [ 115.932729][ T6165] usb 7-1: Using ep0 maxpacket: 16 [ 115.944885][ T6305] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.220401][ T6325] loop2: detected capacity change from 0 to 4096 [ 116.302903][ T6165] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 116.332305][ T6165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.364939][ T6165] usb 7-1: Product: syz [ 116.369136][ T6165] usb 7-1: Manufacturer: syz [ 116.379825][ T6165] usb 7-1: SerialNumber: syz [ 116.385705][ T6325] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 116.405939][ T26] audit: type=1326 audit(1741744192.139:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.3.575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460ef4f169 code=0x0 [ 116.441321][ T6165] usb 7-1: config 0 descriptor?? [ 116.464931][ T6325] ntfs3: loop2: Failed to load $Extend. [ 116.560864][ T26] audit: type=1800 audit(1741744192.289:12): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 116.906205][ T6335] loop0: detected capacity change from 0 to 32768 [ 116.933653][ T6350] capability: warning: `syz.5.578' uses 32-bit capabilities (legacy support in use) [ 116.962840][ T6165] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 116.991999][ T6165] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.033219][ T6165] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 117.053839][ T6165] usb 7-1: media controller created [ 117.107069][ T6165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.229329][ T6165] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 117.249120][ T6165] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 117.341102][ T6365] ALSA: mixer_oss: invalid OSS volume 'P�}VIN' [ 117.527596][ T6165] usb 7-1: USB disconnect, device number 2 [ 117.639271][ T6165] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 117.914146][ T6398] netlink: 40 bytes leftover after parsing attributes in process `syz.5.597'. [ 118.270227][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.606'. [ 118.524601][ T6425] loop6: detected capacity change from 0 to 256 [ 118.543783][ T6415] lo speed is unknown, defaulting to 1000 [ 118.693274][ T6425] FAT-fs (loop6): Directory bread(block 64) failed [ 118.699848][ T6425] FAT-fs (loop6): Directory bread(block 65) failed [ 118.750784][ T6425] FAT-fs (loop6): Directory bread(block 66) failed [ 118.798601][ T6425] FAT-fs (loop6): Directory bread(block 67) failed [ 118.831362][ T6427] loop2: detected capacity change from 0 to 4096 [ 118.848947][ T6425] FAT-fs (loop6): Directory bread(block 68) failed [ 118.888907][ T6425] FAT-fs (loop6): Directory bread(block 69) failed [ 118.899782][ T6408] loop0: detected capacity change from 0 to 131072 [ 118.962187][ T6408] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 118.967007][ T6425] FAT-fs (loop6): Directory bread(block 70) failed [ 118.970371][ T6408] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.013941][ T6408] F2FS-fs (loop0): invalid crc value [ 119.045867][ T6425] FAT-fs (loop6): Directory bread(block 71) failed [ 119.056767][ T6427] ntfs: volume version 3.1. [ 119.062220][ T6425] FAT-fs (loop6): Directory bread(block 72) failed [ 119.065491][ T6408] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.082003][ T6425] FAT-fs (loop6): Directory bread(block 73) failed [ 119.120370][ T6408] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.127612][ T6408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 119.178249][ T6427] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 119.202673][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.247582][ T6427] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 119.462646][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 119.748839][ T21] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.766899][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.790627][ T21] usb 6-1: Product: syz [ 119.806145][ T21] usb 6-1: Manufacturer: syz [ 119.821678][ T21] usb 6-1: SerialNumber: syz [ 119.850611][ T21] r8152-cfgselector 6-1: config 0 descriptor?? [ 120.067457][ T6442] loop2: detected capacity change from 0 to 32768 [ 120.137902][ T21] r8152-cfgselector 6-1: Unknown version 0x0000 [ 120.234366][ T6442] XFS (loop2): Mounting V5 Filesystem [ 120.262350][ T6457] loop3: detected capacity change from 0 to 2048 [ 120.400299][ T6442] XFS (loop2): Ending clean mount [ 120.405714][ T21] r8152-cfgselector 6-1: Unknown version 0x0000 [ 120.416234][ T21] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 120.454570][ T6442] XFS (loop2): Quotacheck needed: Please wait. [ 120.516978][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.555996][ T6442] XFS (loop2): Quotacheck: Done. [ 120.588485][ T6457] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.663670][ T6457] fs-verity: sha512 using implementation "sha512-avx2" [ 120.779460][ T4180] XFS (loop2): Unmounting Filesystem [ 120.897887][ T6479] ALSA: mixer_oss: invalid OSS volume 'P�}VIN' [ 121.594252][ T6496] loop0: detected capacity change from 0 to 4096 [ 121.715112][ T6496] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.784013][ T6496] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 121.824068][ T6496] System zones: 0-5 [ 121.881073][ T6496] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 122.124239][ T6485] loop6: detected capacity change from 0 to 32768 [ 122.165814][ T6485] XFS: noikeep mount option is deprecated. [ 122.181486][ T6516] siw: device registration error -23 [ 122.250443][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 122.300530][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 122.327191][ T6485] XFS (loop6): Mounting V5 Filesystem [ 122.574081][ T6167] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.581835][ T6485] XFS (loop6): Ending clean mount [ 122.606854][ T6485] XFS (loop6): Quotacheck needed: Please wait. [ 122.782856][ T6485] XFS (loop6): Quotacheck: Done. [ 122.791505][ T6505] loop3: detected capacity change from 0 to 32768 [ 122.832717][ T6167] usb 3-1: Using ep0 maxpacket: 8 [ 122.919156][ T5873] XFS (loop6): Unmounting Filesystem [ 122.992984][ T6167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.112174][ T6505] XFS (loop3): Mounting V5 Filesystem [ 123.112927][ T6167] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 123.137343][ T6167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 123.183253][ T6167] usb 3-1: SerialNumber: syz [ 123.220070][ T6505] XFS (loop3): Ending clean mount [ 123.229304][ T6167] usb 3-1: config 0 descriptor?? [ 123.232089][ T6505] XFS (loop3): Quotacheck needed: Please wait. [ 123.300528][ T6541] loop5: detected capacity change from 0 to 32768 [ 123.359939][ T6505] XFS (loop3): Quotacheck: Done. [ 123.489342][ T4166] XFS (loop3): Unmounting Filesystem [ 123.533090][ T6167] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501) [ 123.540051][ T6167] usb 3-1: No valid video chain found. [ 123.751670][ T4213] usb 3-1: USB disconnect, device number 4 [ 124.532687][ T6168] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 124.549232][ T6571] loop6: detected capacity change from 0 to 32768 [ 124.563903][ T6596] loop2: detected capacity change from 0 to 128 [ 124.670542][ T6571] XFS (loop6): Mounting V5 Filesystem [ 124.864324][ T6580] loop3: detected capacity change from 0 to 40427 [ 124.892104][ T6571] XFS (loop6): Ending clean mount [ 124.908602][ T6571] XFS (loop6): Quotacheck needed: Please wait. [ 124.951692][ T6614] loop2: detected capacity change from 0 to 256 [ 124.952823][ T6168] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.978438][ T6580] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.999245][ T6168] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.012025][ T6614] exfat: Deprecated parameter 'namecase' [ 125.012211][ T6168] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.018484][ T6614] exfat: Deprecated parameter 'namecase' [ 125.041007][ T6571] XFS (loop6): Quotacheck: Done. [ 125.043291][ T6168] usb 6-1: config 1 has no interface number 1 [ 125.052052][ T6168] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.097589][ T6614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 125.114402][ T6580] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 125.151851][ T6580] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.156590][ T6168] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 125.162018][ T6624] loop0: detected capacity change from 0 to 256 [ 125.224881][ T6624] exfat: Deprecated parameter 'namecase' [ 125.264707][ T5873] XFS (loop6): Unmounting Filesystem [ 125.297901][ T6624] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 125.392318][ T6627] loop2: detected capacity change from 0 to 256 [ 125.393123][ T6168] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.413077][ T6168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.431314][ T6168] usb 6-1: Product: syz [ 125.442624][ T6168] usb 6-1: Manufacturer: syz [ 125.463610][ T6168] usb 6-1: SerialNumber: syz [ 125.523175][ T6627] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 125.853056][ T6168] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 126.046326][ T6168] usb 6-1: USB disconnect, device number 3 [ 126.384731][ T6631] loop3: detected capacity change from 0 to 40427 [ 126.409227][ T4247] udevd[4247]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.448442][ T6631] F2FS-fs (loop3): invalid crc value [ 126.468649][ T6631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.683030][ T6631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.735127][ T6662] loop0: detected capacity change from 0 to 4096 [ 126.781121][ T4166] attempt to access beyond end of device [ 126.781121][ T4166] loop3: rw=2049, want=45104, limit=40427 [ 126.870659][ T6662] ntfs: volume version 3.1. [ 126.970998][ T6649] loop2: detected capacity change from 0 to 32768 [ 127.070697][ T6649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.688 (6649) [ 127.142247][ T6649] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.220796][ T6649] BTRFS info (device loop2): setting nodatacow, compression disabled [ 127.250848][ T154] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 127.272514][ T6649] BTRFS info (device loop2): max_inline at 0 [ 127.278636][ T6649] BTRFS info (device loop2): enabling disk space caching [ 127.329136][ T6649] BTRFS info (device loop2): turning off barriers [ 127.357300][ T6649] BTRFS info (device loop2): turning on flush-on-commit [ 127.386540][ T6649] BTRFS info (device loop2): doing ref verification [ 127.452459][ T6649] BTRFS info (device loop2): force clearing of disk cache [ 127.481268][ T6649] BTRFS info (device loop2): enabling ssd optimizations [ 127.520812][ T6649] BTRFS info (device loop2): max_inline at 4096 [ 127.533337][ T6649] BTRFS info (device loop2): disk space caching is enabled [ 127.571994][ T6649] BTRFS info (device loop2): has skinny extents [ 127.580457][ T6652] loop6: detected capacity change from 0 to 40427 [ 127.593414][ T6659] loop5: detected capacity change from 0 to 32768 [ 127.667573][ T6652] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 127.698826][ T6652] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 127.712122][ T6687] hpfs: Bad magic ... probably not HPFS [ 127.736382][ T6659] XFS (loop5): Mounting V5 Filesystem [ 127.757734][ T6652] F2FS-fs (loop6): invalid crc value [ 127.816142][ T6652] F2FS-fs (loop6): Found nat_bits in checkpoint [ 127.910480][ T6659] XFS (loop5): Ending clean mount [ 127.920103][ T6659] XFS (loop5): Quotacheck needed: Please wait. [ 128.005122][ T6649] BTRFS info (device loop2): clearing free space tree [ 128.023048][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.063860][ T6659] XFS (loop5): Quotacheck: Done. [ 128.066807][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.165535][ T4535] XFS (loop5): Unmounting Filesystem [ 128.172650][ T6652] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 128.179798][ T6652] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 128.313382][ T26] audit: type=1800 audit(1741744204.049:13): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.688" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 128.494794][ T6742] loop0: detected capacity change from 0 to 4096 [ 128.630723][ T144] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 128.641258][ T6742] NILFS (loop0): invalid segment: Checksum error in segment payload [ 128.641393][ T6742] NILFS (loop0): trying rollback from an earlier position [ 128.750494][ T6742] NILFS (loop0): recovery complete [ 128.792829][ T144] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 128.868978][ T6751] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.300439][ T6719] loop3: detected capacity change from 0 to 40427 [ 129.407752][ T6719] F2FS-fs (loop3): invalid crc value [ 129.518596][ T6719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.577254][ T6771] loop0: detected capacity change from 0 to 2048 [ 129.605454][ T6762] loop2: detected capacity change from 0 to 8192 [ 129.676461][ T6719] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 129.683699][ T6771] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.700073][ T6719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.710994][ T6762] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 129.800449][ T6771] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 129.812907][ T6762] REISERFS (device loop2): using ordered data mode [ 129.822843][ T6762] reiserfs: using flush barriers [ 129.831886][ T6785] loop5: detected capacity change from 0 to 1024 [ 129.845877][ T6762] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.893507][ T6762] REISERFS (device loop2): checking transaction log (loop2) [ 129.897448][ T6771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.940935][ T6785] EXT4-fs (loop5): Ignoring removed nobh option [ 129.946850][ T4166] attempt to access beyond end of device [ 129.946850][ T4166] loop3: rw=2049, want=45104, limit=40427 [ 129.969750][ T6785] EXT4-fs (loop5): Ignoring removed bh option [ 130.032781][ T6785] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.143676][ T6785] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 130.279099][ T6762] REISERFS (device loop2): Using tea hash to sort names [ 130.329030][ T6762] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 130.535740][ T6805] loop0: detected capacity change from 0 to 64 [ 130.557448][ T6783] loop6: detected capacity change from 0 to 40427 [ 130.636283][ T6783] F2FS-fs (loop6): invalid crc value [ 130.650925][ T6805] hfs: unable to locate alternate MDB [ 130.682263][ T6805] hfs: continuing without an alternate MDB [ 130.703912][ T4455] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.719089][ T6783] F2FS-fs (loop6): Found nat_bits in checkpoint [ 130.924739][ T6821] loop3: detected capacity change from 0 to 128 [ 130.964476][ T6783] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 130.972718][ T4455] usb 6-1: Using ep0 maxpacket: 16 [ 131.035469][ T6826] loop0: detected capacity change from 0 to 8 [ 131.093150][ T4455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.139117][ T4455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.189753][ T6830] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 131.198014][ T4455] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.412507][ T6833] loop2: detected capacity change from 0 to 32768 [ 131.419819][ T4455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.429671][ T4455] usb 6-1: config 0 descriptor?? [ 131.509893][ T6833] (syz.2.715,6833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.526470][ T6833] (syz.2.715,6833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.578403][ T6833] JBD2: Ignoring recovery information on journal [ 131.606247][ T6833] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.671993][ T6848] loop0: detected capacity change from 0 to 2048 [ 131.762521][ T6833] (syz.2.715,6833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 131.777076][ T6833] (syz.2.715,6833,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 131.789651][ T6833] (syz.2.715,6833,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 131.798861][ T6833] (syz.2.715,6833,1):ocfs2_quota_read:201 ERROR: status = -5 [ 131.806368][ T6833] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 131.815684][ T6833] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 131.825204][ T6833] (syz.2.715,6833,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 131.836476][ T6833] (syz.2.715,6833,1):ocfs2_mknod:314 ERROR: status = -5 [ 131.843563][ T6833] (syz.2.715,6833,1):ocfs2_mknod:502 ERROR: status = -5 [ 131.851154][ T6833] (syz.2.715,6833,1):ocfs2_create:676 ERROR: status = -5 [ 131.879030][ T6848] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 131.912529][ T4455] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input5 [ 131.942734][ T6848] UDF-fs: Scanning with blocksize 512 failed [ 132.014705][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.043789][ T4180] ocfs2: Unmounting device (7,2) on (node local) [ 132.049502][ T4455] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 132.279073][ T6869] ALSA: mixer_oss: invalid OSS volume 'Q' [ 132.320646][ T4455] usb 6-1: USB disconnect, device number 4 [ 132.815391][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821709][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930665][ T6900] loop5: detected capacity change from 0 to 1024 [ 132.998000][ T6900] EXT4-fs (loop5): Ignoring removed bh option [ 133.057524][ T6865] loop6: detected capacity change from 0 to 32768 [ 133.057797][ T6900] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,data_err=abort,noload,dioread_lock,jqfmt=vfsv0,max_dir_size_kb=0x00000000004007b3,noload,i_version,noinit_itable,user_xattr,bh,mb_optimize_scan=0x0000000000000001,noload,,errors=continue. Quota mode: none. [ 133.099492][ T6905] loop3: detected capacity change from 0 to 2048 [ 133.171691][ T6900] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 133.188922][ T6917] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.209221][ T6900] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 133.649931][ T6930] loop5: detected capacity change from 0 to 2048 [ 133.673319][ T6937] loop0: detected capacity change from 0 to 8 [ 133.678110][ T6938] loop2: detected capacity change from 0 to 64 [ 133.764871][ T6930] loop5: p4 < > [ 133.771995][ T6938] hfs: unable to locate alternate MDB [ 133.802690][ T6938] hfs: continuing without an alternate MDB [ 133.907267][ T6942] loop3: detected capacity change from 0 to 2048 [ 133.927037][ T3545] loop5: p4 < > [ 133.963905][ T6949] tipc: Started in network mode [ 133.981883][ T6949] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 134.009573][ T6949] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 134.011667][ T6942] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.108360][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 134.321275][ T6964] loop5: detected capacity change from 0 to 2048 [ 134.348018][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 134.396685][ T6971] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.504658][ T6975] loop3: detected capacity change from 0 to 2048 [ 134.576987][ T6975] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 134.603408][ T5100] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.671630][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,auto_da_alloc,,errors=continue. Quota mode: none. [ 134.840360][ T26] audit: type=1800 audit(1741744210.569:14): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.758" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 134.874710][ T6975] EXT4-fs error (device loop3): ext4_map_blocks:738: inode #13: block 1: comm syz.3.758: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.907148][ T6968] loop2: detected capacity change from 0 to 32768 [ 134.944089][ T6988] EXT4-fs error (device loop3): ext4_ext_remove_space:2927: inode #13: comm syz.3.758: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.990508][ T6968] XFS: ikeep mount option is deprecated. [ 135.032896][ T5100] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.050353][ T5100] usb 1-1: config 0 has no interface number 0 [ 135.067310][ T5100] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.079322][ T6994] loop5: detected capacity change from 0 to 64 [ 135.086157][ T5100] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.096526][ T5100] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 135.106448][ T5100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.118473][ T5100] usb 1-1: config 0 descriptor?? [ 135.163583][ T6968] XFS (loop2): Mounting V5 Filesystem [ 135.293027][ T4356] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.322102][ T6968] XFS (loop2): Ending clean mount [ 135.357173][ T6968] XFS (loop2): Quotacheck needed: Please wait. [ 135.405248][ T7008] loop5: detected capacity change from 0 to 1024 [ 135.472886][ T6968] XFS (loop2): Quotacheck: Done. [ 135.506168][ T7014] loop3: detected capacity change from 0 to 4096 [ 135.572645][ T4356] usb 7-1: Using ep0 maxpacket: 16 [ 135.587003][ T7014] NILFS (loop3): invalid segment: Checksum error in segment payload [ 135.599178][ T4180] XFS (loop2): Unmounting Filesystem [ 135.601583][ T7014] NILFS (loop3): trying rollback from an earlier position [ 135.626170][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.647923][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.667875][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.683816][ T7014] NILFS (loop3): recovery complete [ 135.712660][ T7017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.733088][ T4356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.746345][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.768421][ T4356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.778864][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.791305][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.802002][ T4356] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 135.813969][ T26] audit: type=1800 audit(1741744211.539:15): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.771" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 135.854475][ T5100] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 135.872796][ T4356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.887231][ T4356] usb 7-1: config 0 descriptor?? [ 135.920843][ T5100] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 135.940381][ T5100] hid_prodikeys: hid-prodikeys: failed to find output report [ 135.940381][ T5100] [ 136.030044][ T5100] usb 1-1: USB disconnect, device number 4 [ 136.374530][ T4356] nzxt-kraken2 0003:1E71:170E.0006: unbalanced collection at end of report description [ 136.427143][ T4356] nzxt-kraken2 0003:1E71:170E.0006: hid parse failed with -22 [ 136.429683][ T7016] loop5: detected capacity change from 0 to 32768 [ 136.446747][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 136.463683][ T4356] nzxt-kraken2: probe of 0003:1E71:170E.0006 failed with error -22 [ 136.506932][ T7016] XFS: ikeep mount option is deprecated. [ 136.598299][ T7040] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 136.612312][ T4356] usb 7-1: USB disconnect, device number 3 [ 136.618988][ T7016] XFS (loop5): Mounting V5 Filesystem [ 136.761192][ T7016] XFS (loop5): Ending clean mount [ 136.792006][ T7016] XFS (loop5): Quotacheck needed: Please wait. [ 136.799885][ T7060] program syz.3.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.924308][ T7016] XFS (loop5): Quotacheck: Done. [ 137.065378][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 137.112906][ T4535] XFS (loop5): Unmounting Filesystem [ 137.711177][ T7086] loop3: detected capacity change from 0 to 8192 [ 137.985185][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.143624][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 138.247976][ T7110] loop3: detected capacity change from 0 to 4096 [ 138.343292][ T7110] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.350117][ T7110] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 138.452305][ T7110] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 138.500147][ T7125] loop2: detected capacity change from 0 to 512 [ 138.658691][ T7119] loop6: detected capacity change from 0 to 8192 [ 138.744744][ T7110] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 138.771323][ T7125] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 138.862928][ T7119] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 138.882373][ T7125] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.903458][ T7138] loop5: detected capacity change from 0 to 128 [ 138.941555][ T7119] REISERFS (device loop6): using ordered data mode [ 138.967000][ T7119] reiserfs: using flush barriers [ 138.973479][ T7125] Quota error (device loop2): find_block_dqentry: Quota for id 62708 referenced but not present [ 139.008447][ T7119] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.046294][ T7125] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 62708 [ 139.067551][ T7138] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 139.093125][ T7119] REISERFS (device loop6): checking transaction log (loop6) [ 139.120812][ T7119] REISERFS (device loop6): Using r5 hash to sort names [ 139.123212][ T7125] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.817: Failed to acquire dquot type 0 [ 139.155562][ T7119] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 139.161789][ T7138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.460164][ T7144] tap0: tun_chr_ioctl cmd 2147767519 [ 139.556832][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.825'. [ 139.842770][ T4450] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.860414][ T7163] device hsr0 entered promiscuous mode [ 139.928774][ T7169] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 139.953851][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 140.059748][ T7175] loop5: detected capacity change from 0 to 512 [ 140.103977][ T4450] usb 7-1: Using ep0 maxpacket: 32 [ 140.126632][ T7182] netlink: 'syz.3.841': attribute type 25 has an invalid length. [ 140.139994][ T7182] netlink: 184 bytes leftover after parsing attributes in process `syz.3.841'. [ 140.214713][ T7178] loop0: detected capacity change from 0 to 8192 [ 140.218961][ T7175] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 140.238845][ T4450] usb 7-1: config 0 interface 0 has no altsetting 0 [ 140.249713][ T4450] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 140.279551][ T4450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.299839][ T7175] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 140.328857][ T7178] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.363791][ T7194] loop3: detected capacity change from 0 to 1024 [ 140.379331][ T7193] loop2: detected capacity change from 0 to 164 [ 140.381855][ T7175] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.837: Corrupt directory, running e2fsck is recommended [ 140.388146][ T4450] usb 7-1: config 0 descriptor?? [ 140.400787][ T7175] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 140.431760][ T7175] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.837: corrupted in-inode xattr [ 140.450448][ T7175] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.837: couldn't read orphan inode 15 (err -117) [ 140.475105][ T7175] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 140.602379][ T7193] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.666279][ T4233] hfsplus: b-tree write err: -5, ino 4 [ 140.819114][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 140.905923][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.924531][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.935976][ T7206] loop3: detected capacity change from 0 to 2048 [ 140.943248][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.967196][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.976390][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.984927][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 140.993657][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: unknown main item tag 0x0 [ 141.005130][ T4450] aquacomputer-d5next 0003:0C70:F00E.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.6-1/input0 [ 141.066622][ T7206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.117418][ T4450] usb 7-1: USB disconnect, device number 4 [ 141.157280][ T26] audit: type=1800 audit(1741744216.889:16): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.849" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 141.375525][ T7219] sctp: [Deprecated]: syz.5.857 (pid 7219) Use of int in max_burst socket option. [ 141.375525][ T7219] Use struct sctp_assoc_value instead [ 141.477318][ T7208] loop2: detected capacity change from 0 to 32768 [ 141.543380][ T7208] XFS: ikeep mount option is deprecated. [ 141.633949][ T7229] loop5: detected capacity change from 0 to 256 [ 141.760830][ T7234] input: syz0 as /devices/virtual/input/input6 [ 141.789867][ T7208] XFS (loop2): Mounting V5 Filesystem [ 141.867190][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 141.891618][ T7208] XFS (loop2): Ending clean mount [ 141.901489][ T7229] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.927579][ T7208] XFS (loop2): Quotacheck needed: Please wait. [ 141.938692][ T7229] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 142.054061][ T7229] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 142.106724][ T7208] XFS (loop2): Quotacheck: Done. [ 142.211646][ T7229] exFAT-fs (loop5): hint_cluster is invalid (17) [ 142.369009][ T4180] XFS (loop2): Unmounting Filesystem [ 142.378256][ T7264] loop6: detected capacity change from 0 to 128 [ 142.495648][ T5100] kernel write not supported for file /snd/seq (pid: 5100 comm: kworker/0:18) [ 142.530911][ T26] audit: type=1800 audit(1741744218.259:17): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.873" name="file0" dev="loop6" ino=1048618 res=0 errno=0 [ 142.639958][ T7264] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 142.671150][ T7264] FAT-fs (loop6): Filesystem has been set read-only [ 142.715163][ T7276] loop5: detected capacity change from 0 to 1024 [ 142.724731][ T7264] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 142.767673][ T7264] FAT-fs (loop6): error, clusters badly computed (4 != 2) [ 142.914088][ T7283] binder: 7282:7283 ioctl c0306201 0 returned -14 [ 143.161386][ T7292] loop2: detected capacity change from 0 to 1024 [ 143.268804][ T7296] netlink: 88 bytes leftover after parsing attributes in process `syz.6.888'. [ 143.348260][ T154] hfsplus: b-tree write err: -5, ino 4 [ 143.513149][ T7281] loop3: detected capacity change from 0 to 32768 [ 143.565943][ T7300] loop6: detected capacity change from 0 to 8192 [ 143.652628][ T7300] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 143.681122][ T7300] REISERFS (device loop6): using ordered data mode [ 143.719221][ T7300] reiserfs: using flush barriers [ 143.725031][ T7281] XFS (loop3): Mounting V5 Filesystem [ 143.752775][ T7300] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.834583][ T7281] XFS (loop3): Ending clean mount [ 143.863688][ T7300] REISERFS (device loop6): checking transaction log (loop6) [ 143.887785][ T7315] loop2: detected capacity change from 0 to 32768 [ 143.959389][ T4166] XFS (loop3): Unmounting Filesystem [ 143.973299][ T5100] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 144.001582][ T7315] XFS (loop2): Mounting V5 Filesystem [ 144.175061][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.902'. [ 144.212852][ T7300] REISERFS (device loop6): Using tea hash to sort names [ 144.243778][ T7300] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 144.278191][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.285647][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.403001][ T7315] XFS (loop2): Ending clean mount [ 144.420757][ T7315] XFS (loop2): Quotacheck needed: Please wait. [ 144.427558][ T5100] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 144.442695][ T5100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.475953][ T5100] usb 6-1: config 0 descriptor?? [ 144.509275][ T26] audit: type=1326 audit(1741744220.239:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa985e44169 code=0x0 [ 144.612440][ T7315] XFS (loop2): Quotacheck: Done. [ 144.777977][ T7355] loop3: detected capacity change from 0 to 512 [ 144.795483][ T4180] XFS (loop2): Unmounting Filesystem [ 144.952219][ T7355] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.990342][ T7355] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.072893][ T5100] [drm:udl_init] *ERROR* Selecting channel failed [ 145.168932][ T5100] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 145.200251][ T5100] [drm] Initialized udl on minor 2 [ 145.252661][ T5100] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.269784][ T5100] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 145.306663][ T5100] usb 6-1: USB disconnect, device number 5 [ 145.491018][ T7386] loop6: detected capacity change from 0 to 1024 [ 145.695336][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 145.858692][ T7399] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 145.917656][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.5.928'. [ 145.953476][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.928'. [ 146.051158][ T7405] sch_fq: defrate 2048 ignored. [ 146.300999][ T7389] loop3: detected capacity change from 0 to 40427 [ 146.400881][ T7389] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 146.461640][ T7389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.475665][ T7422] loop0: detected capacity change from 0 to 256 [ 146.494674][ T7389] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.555506][ T7389] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.569351][ T7389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.610783][ T26] audit: type=1800 audit(1741744222.339:19): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.915" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 146.666447][ T26] audit: type=1800 audit(1741744222.399:20): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.915" name="cgroup" dev="loop3" ino=14 res=0 errno=0 [ 146.720146][ T4166] attempt to access beyond end of device [ 146.720146][ T4166] loop3: rw=2049, want=45112, limit=40427 [ 146.782626][ T4356] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 146.927697][ T7418] loop6: detected capacity change from 0 to 32768 [ 146.978256][ T7420] loop2: detected capacity change from 0 to 32768 [ 147.005827][ T7418] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.935 (7418) [ 147.032685][ T4356] usb 6-1: Using ep0 maxpacket: 8 [ 147.049133][ T7418] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 147.063323][ T7420] XFS: ikeep mount option is deprecated. [ 147.078613][ T7418] BTRFS info (device loop6): enabling ssd optimizations [ 147.087047][ T7434] loop0: detected capacity change from 0 to 256 [ 147.094811][ T7418] BTRFS info (device loop6): turning off barriers [ 147.101568][ T7418] BTRFS info (device loop6): use no compression [ 147.114185][ T7418] BTRFS info (device loop6): using free space tree [ 147.120906][ T7418] BTRFS info (device loop6): has skinny extents [ 147.149261][ T7434] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 147.176026][ T4356] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.205525][ T7420] XFS (loop2): Mounting V5 Filesystem [ 147.262787][ T4356] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 147.270500][ T4356] usb 6-1: can't read configurations, error -71 [ 147.357358][ T7420] XFS (loop2): Ending clean mount [ 147.378238][ T7420] XFS (loop2): Quotacheck needed: Please wait. [ 147.489651][ T7464] loop0: detected capacity change from 0 to 512 [ 147.549511][ T7420] XFS (loop2): Quotacheck: Done. [ 147.607335][ T7420] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 147.638949][ T7464] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 147.648217][ T7420] XFS (loop2): Unmount and run xfs_repair [ 147.659848][ T7464] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.664196][ T7471] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.947'. [ 147.712016][ T7420] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 147.726218][ T7420] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 147.745204][ T7420] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.797609][ T7420] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.800665][ T7477] lo speed is unknown, defaulting to 1000 [ 147.857952][ T7479] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.944: invalid size [ 147.898710][ T7420] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 147.909476][ T7483] loop3: detected capacity change from 0 to 128 [ 147.963143][ T7483] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.016781][ T7483] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.044157][ T7420] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 148.159223][ T7420] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 148.190060][ T7420] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 148.204599][ T7420] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 148.242743][ T7420] XFS (loop2): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x9f7/0x1370 [ 148.312690][ T7420] CPU: 1 PID: 7420 Comm: syz.2.936 Not tainted 5.15.178-syzkaller #0 [ 148.320799][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.330890][ T7420] Call Trace: [ 148.334191][ T7420] <TASK> [ 148.337137][ T7420] dump_stack_lvl+0x1e3/0x2d0 [ 148.341837][ T7420] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 148.347487][ T7420] ? xfs_init_new_inode+0x1e8/0x1100 [ 148.352799][ T7420] ? rwsem_write_trylock+0x166/0x210 [ 148.358114][ T7420] ? xfs_error_report+0x8e/0xd0 [ 148.362986][ T7420] ? xfs_create+0x9f7/0x1370 [ 148.367593][ T7420] ? xfs_create+0x9f7/0x1370 [ 148.370645][ T7488] �: renamed from pim6reg1 [ 148.372208][ T7420] xfs_trans_cancel+0x1c9/0x410 [ 148.372237][ T7420] ? xfs_create+0x9f7/0x1370 [ 148.386055][ T7420] xfs_create+0x9f7/0x1370 [ 148.390513][ T7420] ? xfs_inode_inherit_flags2+0x340/0x340 [ 148.396259][ T7420] ? __lock_acquire+0x1ff0/0x1ff0 [ 148.401320][ T7420] ? posix_acl_create+0x155/0x420 [ 148.406466][ T7420] xfs_generic_create+0x426/0xd00 [ 148.411521][ T7420] ? xfs_vn_tmpfile+0x40/0x40 [ 148.416303][ T7420] ? xfs_vn_lookup+0x1cb/0x290 [ 148.421088][ T7420] ? generic_permission+0x21c/0x4f0 [ 148.426315][ T7420] ? inode_permission+0xf7/0x450 [ 148.431266][ T7420] ? bpf_lsm_inode_create+0x5/0x10 [ 148.436394][ T7420] ? security_inode_create+0xb4/0x100 [ 148.441783][ T7420] ? xfs_vn_ci_lookup+0x430/0x430 [ 148.446829][ T7420] path_openat+0x130a/0x2f20 [ 148.451480][ T7420] ? do_filp_open+0x460/0x460 [ 148.456196][ T7420] do_filp_open+0x21c/0x460 [ 148.460758][ T7420] ? vfs_tmpfile+0x2e0/0x2e0 [ 148.465389][ T7420] ? _raw_spin_unlock+0x24/0x40 [ 148.470263][ T7420] ? alloc_fd+0x598/0x630 [ 148.474660][ T7420] do_sys_openat2+0x13b/0x4f0 [ 148.479366][ T7420] ? do_sys_open+0x220/0x220 [ 148.483988][ T7420] __x64_sys_openat+0x243/0x290 [ 148.488860][ T7420] ? __ia32_sys_open+0x270/0x270 [ 148.493827][ T7420] ? syscall_enter_from_user_mode+0x2e/0x240 [ 148.499827][ T7420] ? lockdep_hardirqs_on+0x94/0x130 [ 148.505082][ T7420] ? syscall_enter_from_user_mode+0x2e/0x240 [ 148.511095][ T7420] do_syscall_64+0x3b/0xb0 [ 148.515544][ T7420] ? clear_bhb_loop+0x15/0x70 [ 148.520236][ T7420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.526154][ T7420] RIP: 0033:0x7f4955c8c169 [ 148.530643][ T7420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.550446][ T7420] RSP: 002b:00007f4953af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.558881][ T7420] RAX: ffffffffffffffda RBX: 00007f4955ea4fa0 RCX: 00007f4955c8c169 [ 148.567016][ T7420] RDX: 000000000000275a RSI: 0000400000000040 RDI: ffffffffffffff9c [ 148.575045][ T7420] RBP: 00007f4955d0d2a0 R08: 0000000000000000 R09: 0000000000000000 [ 148.584349][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.592604][ T7420] R13: 0000000000000000 R14: 00007f4955ea4fa0 R15: 00007ffdebcadd68 [ 148.600613][ T7420] </TASK> [ 148.612964][ T530] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.618389][ T7491] netlink: 'syz.6.946': attribute type 3 has an invalid length. [ 148.640349][ T7420] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 148.643754][ T7491] netlink: 'syz.6.946': attribute type 3 has an invalid length. [ 148.658440][ T7420] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 148.764224][ T4180] XFS (loop2): Unmounting Filesystem [ 148.951575][ T7500] loop0: detected capacity change from 0 to 4096 [ 149.014447][ T7500] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 149.537918][ T7503] loop6: detected capacity change from 0 to 32768 [ 149.646738][ T7533] loop5: detected capacity change from 0 to 16 [ 149.687121][ T7503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.957 (7503) [ 149.740640][ T7533] erofs: (device loop5): mounted with root inode @ nid 36. [ 149.775264][ T7503] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 149.803624][ T7503] BTRFS info (device loop6): enabling auto defrag [ 149.804673][ T26] audit: type=1800 audit(1741744225.539:21): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.969" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 149.810095][ T7503] BTRFS info (device loop6): trying to use backup root at mount time [ 149.943072][ T7503] BTRFS info (device loop6): force clearing of disk cache [ 149.950773][ T7503] BTRFS info (device loop6): setting nodatacow, compression disabled [ 149.973725][ T7548] hsr0: VLAN not yet supported [ 149.977432][ T7550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.012647][ T7503] BTRFS info (device loop6): turning on sync discard [ 150.019370][ T7503] BTRFS info (device loop6): using free space tree [ 150.042690][ T7503] BTRFS info (device loop6): has skinny extents [ 150.060620][ T7554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.979'. [ 150.343860][ T7580] loop3: detected capacity change from 0 to 64 [ 150.421054][ T7580] hfs: unable to locate alternate MDB [ 150.431608][ T7503] BTRFS info (device loop6): clearing free space tree [ 150.439154][ T7580] hfs: continuing without an alternate MDB [ 150.440771][ T7503] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.458954][ T7503] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.479757][ T7503] BTRFS info (device loop6): creating free space tree [ 150.488531][ T7503] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.498926][ T7503] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.500221][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 150.703705][ T7595] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 150.828539][ T7552] loop5: detected capacity change from 0 to 32768 [ 151.215958][ T7601] loop0: detected capacity change from 0 to 4096 [ 151.395910][ T7552] XFS (loop5): Mounting V5 Filesystem [ 151.753119][ T7552] XFS (loop5): Ending clean mount [ 151.760270][ T7552] XFS (loop5): Quotacheck needed: Please wait. [ 151.995675][ T7552] XFS (loop5): Quotacheck: Done. [ 152.163190][ T4535] XFS (loop5): Unmounting Filesystem [ 152.186408][ T7605] loop3: detected capacity change from 0 to 32768 [ 152.221094][ T7605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.994 (7605) [ 152.314580][ T7605] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 152.347480][ T7605] BTRFS info (device loop3): enabling auto defrag [ 152.383835][ T7605] BTRFS info (device loop3): use no compression [ 152.401890][ T7605] BTRFS info (device loop3): force clearing of disk cache [ 152.449282][ T7605] BTRFS info (device loop3): max_inline at 4096 [ 152.465931][ T7605] BTRFS info (device loop3): disabling free space tree [ 152.488360][ T7605] BTRFS info (device loop3): has skinny extents [ 152.810686][ T7605] BTRFS info (device loop3): enabling ssd optimizations [ 152.825063][ T7626] loop6: detected capacity change from 0 to 32768 [ 152.830386][ T7605] BTRFS info (device loop3): clearing free space tree [ 152.847986][ T7605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.859059][ T7605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.883668][ T7626] XFS: ikeep mount option is deprecated. [ 152.919658][ T7626] XFS: noikeep mount option is deprecated. [ 153.004052][ T7626] XFS (loop6): Mounting V5 Filesystem [ 153.663059][ T7626] XFS (loop6): Ending clean mount [ 153.678076][ T7626] XFS (loop6): Quotacheck needed: Please wait. [ 153.678659][ T7665] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 153.701272][ T7662] �: renamed from pim6reg1 [ 153.813004][ T7626] XFS (loop6): Quotacheck: Done. [ 153.922706][ T4355] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.941991][ T7672] vxcan1: tx address claim with dlc 5 [ 153.962224][ T5873] XFS (loop6): Unmounting Filesystem [ 154.182833][ T4217] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.216488][ T4355] usb 6-1: Using ep0 maxpacket: 16 [ 154.332212][ T7668] loop2: detected capacity change from 0 to 40427 [ 154.362904][ T4355] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.399312][ T7668] F2FS-fs (loop2): invalid crc value [ 154.414895][ T4355] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8994, setting to 1024 [ 154.437766][ T7668] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.451773][ T4355] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 154.492711][ T4355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.515742][ T7668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.517751][ T4355] usb 6-1: config 0 descriptor?? [ 154.553207][ T4217] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.574445][ T4217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.595554][ T4355] usb 6-1: Found UVC 0.00 device <unnamed> (10c4:ea90) [ 154.596229][ T4217] usb 1-1: config 0 descriptor?? [ 154.602450][ T4355] usb 6-1: No valid video chain found. [ 154.690329][ T4217] cp210x 1-1:0.0: cp210x converter detected [ 154.771156][ T4233] attempt to access beyond end of device [ 154.771156][ T4233] loop2: rw=2049, want=40976, limit=40427 [ 154.819390][ T7699] loop6: detected capacity change from 0 to 164 [ 154.860903][ T4447] usb 6-1: USB disconnect, device number 8 [ 155.122730][ T4217] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 155.183013][ T4217] usb 1-1: cp210x converter now attached to ttyUSB0 [ 155.427290][ T6165] usb 1-1: USB disconnect, device number 5 [ 155.440446][ T6165] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.489884][ T6165] cp210x 1-1:0.0: device disconnected [ 155.641783][ T7739] serio: Serial port ptm0 [ 155.802035][ T7749] sctp: [Deprecated]: syz.5.1030 (pid 7749) Use of int in max_burst socket option deprecated. [ 155.802035][ T7749] Use struct sctp_assoc_value instead [ 155.822881][ T7751] loop2: detected capacity change from 0 to 16 [ 155.921050][ T7751] erofs: (device loop2): mounted with root inode @ nid 36. [ 155.953263][ T26] audit: type=1800 audit(1741744231.689:22): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1032" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 155.991649][ T7753] loop6: detected capacity change from 0 to 4096 [ 156.135847][ T7766] ALSA: mixer_oss: invalid OSS volume 'DIG�TAL1' [ 156.178933][ T7766] ALSA: mixer_oss: invalid index 40000 [ 156.438587][ T7780] loop5: detected capacity change from 0 to 1024 [ 156.493966][ T7784] loop6: detected capacity change from 0 to 16 [ 156.551157][ T7784] erofs: (device loop6): mounted with root inode @ nid 36. [ 156.586012][ T26] audit: type=1800 audit(1741744232.319:23): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1048" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 156.681821][ T7780] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 156.924194][ T7774] loop3: detected capacity change from 0 to 32768 [ 157.001919][ T7793] loop6: detected capacity change from 0 to 4096 [ 157.097731][ T7774] JBD2: Ignoring recovery information on journal [ 157.235543][ T7774] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.277041][ T7799] netlink: 'syz.5.1054': attribute type 14 has an invalid length. [ 157.348750][ T7799] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1054'. [ 157.440498][ T7788] loop2: detected capacity change from 0 to 32768 [ 157.460715][ T4166] ocfs2: Unmounting device (7,3) on (node local) [ 157.558012][ T7788] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1050 (7788) [ 157.652443][ T7788] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 157.671853][ T7788] BTRFS info (device loop2): enabling ssd optimizations [ 157.688282][ T7788] BTRFS info (device loop2): turning off barriers [ 157.702668][ T7788] BTRFS info (device loop2): use no compression [ 157.718375][ T7788] BTRFS info (device loop2): using free space tree [ 157.738727][ T7788] BTRFS info (device loop2): has skinny extents [ 157.833361][ T7768] loop0: detected capacity change from 0 to 65536 [ 158.076059][ T7768] XFS (loop0): Mounting V5 Filesystem [ 158.157548][ T7768] XFS (loop0): Ending clean mount [ 158.183051][ T7768] XFS (loop0): Quotacheck needed: Please wait. [ 158.250903][ T7805] loop5: detected capacity change from 0 to 32768 [ 158.363367][ T7768] XFS (loop0): Quotacheck: Done. [ 158.594291][ T7805] XFS (loop5): Mounting V5 Filesystem [ 158.603713][ T7852] loop6: detected capacity change from 0 to 8 [ 158.693266][ T7852] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 158.891466][ T7805] XFS (loop5): Ending clean mount [ 158.900864][ T4168] XFS (loop0): Unmounting Filesystem [ 159.100306][ T4535] XFS (loop5): Unmounting Filesystem [ 159.216838][ T4157] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.290673][ T7862] loop3: detected capacity change from 0 to 32768 [ 159.394701][ T7876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.533593][ T7862] XFS (loop3): Mounting V5 Filesystem [ 159.642996][ T4157] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 159.671494][ T4157] usb 3-1: config 0 has no interface number 0 [ 159.682497][ T4157] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.704189][ T7862] XFS (loop3): Ending clean mount [ 159.719624][ T7862] XFS (loop3): Quotacheck needed: Please wait. [ 159.762612][ T4157] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.801577][ T4157] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 159.806338][ T7862] XFS (loop3): Quotacheck: Done. [ 159.842298][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.885064][ T4157] usb 3-1: config 0 descriptor?? [ 160.076055][ T7904] loop5: detected capacity change from 0 to 512 [ 160.085289][ T4166] XFS (loop3): Unmounting Filesystem [ 160.193200][ T7909] netlink: 'syz.0.1086': attribute type 2 has an invalid length. [ 160.203668][ T7904] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1081: bad orphan inode 13 [ 160.228988][ T7904] ext4_test_bit(bit=12, block=4) = 1 [ 160.237073][ T7904] is_bad_inode(inode)=0 [ 160.276842][ T7904] NEXT_ORPHAN(inode)=0 [ 160.280942][ T7904] max_ino=32 [ 160.337130][ T7904] i_nlink=1 [ 160.340343][ T7904] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.403162][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.422820][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.430960][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.454963][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.474332][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.482905][ T7904] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1081: Unrecognised inode hash code 20 [ 160.491864][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.511583][ T4157] logitech-djreceiver 0003:046D:C71B.0008: unknown main item tag 0x0 [ 160.521128][ T7904] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1081: Corrupt directory, running e2fsck is recommended [ 160.527660][ T4157] logitech-djreceiver 0003:046D:C71B.0008: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 160.546328][ T7904] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 13: comm syz.5.1081: path /188/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 160.562913][ T7919] loop6: detected capacity change from 0 to 4096 [ 160.575465][ T7904] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1081: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 160.633231][ T4444] usb 3-1: USB disconnect, device number 5 [ 160.698578][ T7924] syz.0.1092 sent an empty control message without MSG_MORE. [ 160.893473][ T5873] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 160.902275][ T5873] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 161.061384][ T7937] loop6: detected capacity change from 0 to 256 [ 161.096704][ T7940] loop5: detected capacity change from 0 to 256 [ 161.129293][ T7940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 161.148577][ T7940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 161.185965][ T26] audit: type=1800 audit(1741744236.919:24): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1095" name="file1" dev="loop6" ino=1048622 res=0 errno=0 [ 161.230546][ T7940] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 161.245597][ T7940] UDF-fs: Scanning with blocksize 512 failed [ 161.255029][ T7940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 161.274517][ T7940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.275785][ T2411] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.363083][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 161.406434][ T7950] loop2: detected capacity change from 0 to 2048 [ 161.417962][ T7948] device bond0 entered promiscuous mode [ 161.439203][ T7948] device bond_slave_0 entered promiscuous mode [ 161.446078][ T7948] device bond_slave_1 entered promiscuous mode [ 161.454614][ T7948] device bond0 left promiscuous mode [ 161.459946][ T7948] device bond_slave_0 left promiscuous mode [ 161.467023][ T7948] device bond_slave_1 left promiscuous mode [ 161.537365][ T7955] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.572957][ T2411] usb 1-1: Using ep0 maxpacket: 8 [ 161.597158][ T7950] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 161.640045][ T7950] Remounting filesystem read-only [ 161.700393][ T2411] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.713854][ T2411] usb 1-1: no configurations [ 161.718490][ T2411] usb 1-1: can't read configurations, error -22 [ 161.871412][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 161.912501][ T7965] serio: Serial port ptm0 [ 162.062757][ T4356] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.148131][ T7976] sctp: [Deprecated]: syz.5.1115 (pid 7976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.148131][ T7976] Use struct sctp_sack_info instead [ 162.185263][ T4157] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 162.327311][ T4356] usb 3-1: Using ep0 maxpacket: 8 [ 162.368811][ T7984] loop5: detected capacity change from 0 to 256 [ 162.471770][ T7982] loop3: detected capacity change from 0 to 32768 [ 162.479506][ T4356] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.488794][ T4157] usb 7-1: Using ep0 maxpacket: 16 [ 162.513281][ T4356] usb 3-1: config 179 has no interface number 0 [ 162.515835][ T7984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 162.525273][ T4356] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.572865][ T4356] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.592760][ T7982] (syz.3.1118,7982,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 162.602430][ T7982] (syz.3.1118,7982,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 162.639939][ T4157] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 162.667754][ T4157] usb 7-1: config 0 has no interface number 0 [ 162.685184][ T7980] loop0: detected capacity change from 0 to 32768 [ 162.686410][ T4356] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.749887][ T4356] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 162.773188][ T4356] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.819294][ T7980] JBD2: Ignoring recovery information on journal [ 162.822820][ T4356] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.840511][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.863141][ T7959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.909394][ T7988] loop3: detected capacity change from 0 to 4096 [ 162.932923][ T4157] usb 7-1: New USB device found, idVendor=040a, idProduct=0300, bcdDevice=f2.ee [ 162.948883][ T7988] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 162.966833][ T4157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.978333][ T4157] usb 7-1: Product: syz [ 162.989095][ T4157] usb 7-1: Manufacturer: syz [ 162.997705][ T4157] usb 7-1: SerialNumber: syz [ 163.008456][ T7980] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 163.017224][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1123'. [ 163.031579][ T4157] usb 7-1: config 0 descriptor?? [ 163.057992][ T7988] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 163.089825][ T7994] device vlan2 entered promiscuous mode [ 163.104799][ T4157] gspca_main: spca500-2.14.0 probing 040a:0300 [ 163.283461][ T4157] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 163.302249][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 163.416209][ T8002] loop5: detected capacity change from 0 to 512 [ 163.456393][ T4357] usb 7-1: USB disconnect, device number 5 [ 163.474474][ T4157] usb 3-1: USB disconnect, device number 6 [ 163.483289][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.491628][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.507041][ T8002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.517040][ T4157] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 163.601381][ T8002] EXT4-fs (loop5): 1 truncate cleaned up [ 163.610433][ T8002] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.744746][ T8004] loop3: detected capacity change from 0 to 4096 [ 163.748879][ T8004] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 163.757029][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 163.757057][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1129'. [ 163.811099][ T8004] ntfs: volume version 3.1. [ 163.989244][ T8016] loop5: detected capacity change from 0 to 1024 [ 164.052837][ T8020] loop2: detected capacity change from 0 to 1024 [ 164.129506][ T8024] loop3: detected capacity change from 0 to 256 [ 164.151703][ T8020] EXT4-fs (loop2): Ignoring removed orlov option [ 164.165523][ T8020] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 164.244218][ T8024] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 164.262922][ T8029] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 164.271794][ T8020] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 164.452097][ T8020] EXT4-fs (loop2): Ignoring removed bh option [ 164.491965][ T8020] EXT4-fs (loop2): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 164.551417][ T8042] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.561237][ T8042] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.570035][ T8042] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.578784][ T8042] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.062707][ T4444] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 165.089071][ T8073] loop2: detected capacity change from 0 to 128 [ 165.132695][ T4157] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.207590][ T8073] FAT-fs (loop2): Unrecognized mount option "defcontext=system_u" or missing value [ 165.402715][ T4157] usb 1-1: Using ep0 maxpacket: 16 [ 165.422870][ T4444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.454218][ T4444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.482692][ T4444] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 165.519384][ T4444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.533171][ T4157] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 165.556900][ T4157] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 165.565719][ T4444] usb 6-1: config 0 descriptor?? [ 165.587521][ T2411] kernel write not supported for file /sg0 (pid: 2411 comm: kworker/1:3) [ 165.594796][ T4157] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 165.697841][ T4157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.730571][ T4157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.739566][ T8093] loop2: detected capacity change from 0 to 512 [ 165.742920][ T4157] usb 1-1: SerialNumber: syz [ 165.760892][ T8093] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.773107][ T8062] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 165.815734][ T8093] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1168: iget: bad extended attribute block 19 [ 165.837133][ T8093] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1168: couldn't read orphan inode 15 (err -117) [ 165.856310][ T8093] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.878737][ T8097] loop6: detected capacity change from 0 to 164 [ 165.922884][ T2411] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.038462][ T4157] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 166.060611][ T4157] usb 1-1: USB disconnect, device number 8 [ 166.065413][ T4444] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 166.101551][ T4444] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 166.121135][ T4444] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 166.137148][ T4444] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 166.146681][ T4444] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 166.162772][ T2411] usb 4-1: Using ep0 maxpacket: 16 [ 166.188123][ T4444] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 166.282923][ T2411] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.310284][ T2411] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.317953][ T2411] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 166.327698][ T2411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.354368][ T8111] netlink: 'syz.6.1176': attribute type 29 has an invalid length. [ 166.359970][ T2411] usb 4-1: config 0 descriptor?? [ 166.367780][ T8111] netlink: 'syz.6.1176': attribute type 29 has an invalid length. [ 166.505879][ T8109] loop2: detected capacity change from 0 to 32768 [ 166.522734][ T4444] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 32: -71 [ 166.532373][ T4444] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense firmware info: -71 [ 166.543690][ T4444] playstation 0003:054C:0DF2.0009: Failed to get firmware info from DualSense [ 166.554834][ T4444] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 166.590315][ T4444] playstation: probe of 0003:054C:0DF2.0009 failed with error -71 [ 166.611610][ T4444] usb 6-1: USB disconnect, device number 9 [ 166.854518][ T2411] cherry 0003:046A:0023.000A: unexpected long global item [ 166.862424][ T2411] cherry: probe of 0003:046A:0023.000A failed with error -22 [ 166.960318][ T8133] loop0: detected capacity change from 0 to 1024 [ 167.068979][ T8133] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.086391][ T2411] usb 4-1: USB disconnect, device number 4 [ 167.274294][ T8143] loop5: detected capacity change from 0 to 4096 [ 167.322227][ T8143] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 167.393001][ T8143] ntfs3: loop5: Failed to load $Extend. [ 167.471914][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1192'. [ 167.495042][ T8149] nbd: socks must be embedded in a SOCK_ITEM attr [ 167.866468][ T8172] input: syz0 as /devices/virtual/input/input9 [ 167.970097][ T8176] loop6: detected capacity change from 0 to 1024 [ 168.056193][ T8176] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 168.777744][ T4157] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 168.785693][ T4157] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 168.798005][ T8212] loop6: detected capacity change from 0 to 2048 [ 168.837537][ T4157] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 168.868003][ T8212] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.906958][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.969018][ T8212] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.024975][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.082706][ T8212] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.112676][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.122762][ T8212] EXT4-fs (loop6): This should not happen!! Data will be lost [ 169.122762][ T8212] [ 169.134739][ T8212] EXT4-fs (loop6): Total free blocks count 0 [ 169.140846][ T8212] EXT4-fs (loop6): Free/Dirty block details [ 169.147495][ T8212] EXT4-fs (loop6): free_blocks=2415919104 [ 169.155267][ T8212] EXT4-fs (loop6): dirty_blocks=32 [ 169.160640][ T8212] EXT4-fs (loop6): Block reservation details [ 169.167249][ T8212] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 169.173621][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.199655][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.215083][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.232209][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.246923][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.262242][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.279728][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.296431][ T154] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 169.344009][ T154] EXT4-fs (loop6): This should not happen!! Data will be lost [ 169.344009][ T154] [ 169.428447][ T8206] loop2: detected capacity change from 0 to 32768 [ 169.622274][ T8232] loop5: detected capacity change from 0 to 32768 [ 169.672428][ T8206] XFS (loop2): Mounting V5 Filesystem [ 169.726215][ T8206] XFS (loop2): Ending clean mount [ 169.774422][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'. [ 169.788512][ T4180] XFS (loop2): Unmounting Filesystem [ 169.921319][ T8232] [ 169.921319][ T8232] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.921319][ T8232] [ 169.986335][ T4535] [ 169.986335][ T4535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 169.986335][ T4535] [ 170.027449][ T4535] [ 170.027449][ T4535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.027449][ T4535] [ 170.235912][ T8271] loop3: detected capacity change from 0 to 1024 [ 170.366584][ T8271] EXT4-fs (loop3): Ignoring removed nobh option [ 170.375130][ T8278] loop0: detected capacity change from 0 to 64 [ 170.388309][ T8271] EXT4-fs (loop3): Ignoring removed bh option [ 170.412050][ T8271] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.434857][ T8282] xt_hashlimit: max too large, truncated to 1048576 [ 170.515265][ T8271] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,minixdf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 170.765579][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1253'. [ 170.870123][ T8302] loop2: detected capacity change from 0 to 4096 [ 170.968080][ T8302] NILFS (loop2): invalid segment: Checksum error in segment payload [ 170.982066][ T8313] loop5: detected capacity change from 0 to 1024 [ 171.012099][ T8302] NILFS (loop2): trying rollback from an earlier position [ 171.065311][ T8315] input: syz0 as /devices/virtual/input/input10 [ 171.095955][ T8302] NILFS (loop2): recovery complete [ 171.174920][ T8318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.554274][ T8329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.585724][ T8337] input: syz0 as /devices/virtual/input/input11 [ 171.628731][ T8329] bond0: (slave bond2): Enslaving as an active interface with an up link [ 171.777627][ T8352] loop2: detected capacity change from 0 to 736 [ 172.359975][ T8394] netlink: 'syz.2.1279': attribute type 3 has an invalid length. [ 172.943143][ T8374] loop5: detected capacity change from 0 to 32768 [ 173.124540][ T8418] device vlan2 entered promiscuous mode [ 173.304938][ T8422] loop2: detected capacity change from 0 to 1024 [ 173.362167][ T8397] loop0: detected capacity change from 0 to 32768 [ 173.586785][ T8441] loop6: detected capacity change from 0 to 64 [ 173.651617][ T8444] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 173.700551][ T8447] loop3: detected capacity change from 0 to 64 [ 173.732999][ T26] audit: type=1800 audit(1741744249.459:25): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1302" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 173.791754][ T8449] mmap: syz.2.1306 (8449) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 173.999389][ T8451] loop6: detected capacity change from 0 to 16 [ 174.070179][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 174.104993][ T8451] erofs: (device loop6): mounted with root inode @ nid 36. [ 279.132505][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 279.139587][ C0] rcu: 1-...!: (1 ticks this GP) idle=ee9/1/0x4000000000000000 softirq=21562/21562 fqs=3 [ 279.151583][ C0] (detected by 0, t=10502 jiffies, g=26769, q=173) [ 279.158186][ C0] Sending NMI from CPU 0 to CPUs 1: [ 279.163404][ C1] NMI backtrace for cpu 1 [ 279.163422][ C1] CPU: 1 PID: 3545 Comm: udevd Not tainted 5.15.178-syzkaller #0 [ 279.163437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.163453][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 279.163489][ C1] Code: 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 18 04 8a 0c 48 89 de 5b e9 47 11 49 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d 24 ea 81 7e 65 8b 15 25 ea 81 7e 81 e2 00 01 ff 00 74 [ 279.163504][ C1] RSP: 0018:ffffc90000dd0d58 EFLAGS: 00000097 [ 279.163517][ C1] RAX: ffffffff816f8907 RBX: 0000000000000001 RCX: ffff88807d169dc0 [ 279.163527][ C1] RDX: ffff88807d169dc0 RSI: 0000000000000001 RDI: 0000000000000007 [ 279.163536][ C1] RBP: ffffc90000dd0ea8 R08: ffffffff816f88f9 R09: ffffed10171e5441 [ 279.163546][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b8f2a200 [ 279.163556][ C1] R13: ffffffff888c9740 R14: ffff888147952b40 R15: dffffc0000000000 [ 279.163566][ C1] FS: 00007f7629df5c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 279.163579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.163590][ C1] CR2: 000000110c2def5a CR3: 000000002b1ac000 CR4: 00000000003506e0 [ 279.163602][ C1] Call Trace: [ 279.163608][ C1] <NMI> [ 279.163615][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 279.163637][ C1] ? read_lock_is_recursive+0x10/0x10 [ 279.163652][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 279.163667][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 279.163689][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 279.163703][ C1] ? nmi_handle+0xf7/0x370 [ 279.163718][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 279.163732][ C1] ? default_do_nmi+0x62/0x150 [ 279.163748][ C1] ? exc_nmi+0xa8/0x100 [ 279.163761][ C1] ? end_repeat_nmi+0x16/0x31 [ 279.163775][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 279.163791][ C1] ? __hrtimer_run_queues+0x4a9/0xcf0 [ 279.163805][ C1] ? __hrtimer_run_queues+0x4b7/0xcf0 [ 279.163820][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 279.163835][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 279.163850][ C1] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 279.163865][ C1] </NMI> [ 279.163869][ C1] <IRQ> [ 279.163872][ C1] __hrtimer_run_queues+0x4b7/0xcf0 [ 279.163894][ C1] ? hrtimer_interrupt+0x980/0x980 [ 279.163907][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 279.163925][ C1] hrtimer_interrupt+0x392/0x980 [ 279.163949][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 279.163967][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 279.163983][ C1] </IRQ> [ 279.163987][ C1] <TASK> [ 279.163992][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 279.164006][ C1] RIP: 0010:rcu_lock_acquire+0x0/0x30 [ 279.164022][ C1] Code: 5d c3 e8 23 b1 ed f8 eb ea 89 e9 80 e1 07 fe c1 38 c1 0f 8c 1c f9 ff ff 48 89 ef e8 4a 99 37 f9 e9 0f f9 ff ff 0f 1f 44 00 00 <e8> fb b0 ed f8 e8 f6 b0 ed f8 48 c7 c7 e0 fc b1 8c 31 f6 31 d2 b9 [ 279.164033][ C1] RSP: 0018:ffffc90002ecf7d0 EFLAGS: 00000283 [ 279.164045][ C1] RAX: 0000000000000001 RBX: ffffffff96e512c0 RCX: ffff88807d169dc0 [ 279.164054][ C1] RDX: 0000000000000000 RSI: 000000000000000f RDI: ffffffff96e512c0 [ 279.164063][ C1] RBP: ffff8881407198d8 R08: ffffffff88925676 R09: ffffed100c2ee91c [ 279.164073][ C1] R10: 0000000000000004 R11: dffffc0000000001 R12: ffff88802a96f000 [ 279.164083][ C1] R13: dffffc0000000000 R14: 00000000c40f1656 R15: ffffffff96e512c0 [ 279.164097][ C1] ? netlink_unicast+0xb6/0x980 [ 279.164114][ C1] netlink_lookup+0x2d/0x1d0 [ 279.164130][ C1] netlink_unicast+0x1a1/0x980 [ 279.164148][ C1] ? netlink_detachskb+0x90/0x90 [ 279.164161][ C1] ? __virt_addr_valid+0x3bb/0x460 [ 279.164175][ C1] ? 0xffffffff81000000 [ 279.164185][ C1] ? __check_object_size+0x300/0x410 [ 279.164201][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 279.164216][ C1] netlink_sendmsg+0xa30/0xd60 [ 279.164236][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 279.164252][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 279.164268][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 279.164281][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 279.164296][ C1] ? netlink_getsockopt+0x5b0/0x5b0 [ 279.164312][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 279.164327][ C1] ? iovec_from_user+0x300/0x390 [ 279.164345][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 279.164366][ C1] ___sys_sendmsg+0x252/0x2e0 [ 279.164380][ C1] ? ___sys_recvmsg+0x210/0x690 [ 279.164395][ C1] ? __sys_sendmsg+0x260/0x260 [ 279.164410][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 279.164436][ C1] ? read_lock_is_recursive+0x10/0x10 [ 279.164450][ C1] ? __context_tracking_exit+0x4c/0x80 [ 279.164466][ C1] ? __fdget+0x158/0x220 [ 279.164481][ C1] __se_sys_sendmsg+0x19a/0x260 [ 279.164497][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 279.164515][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 279.164530][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 279.164545][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 279.164560][ C1] do_syscall_64+0x3b/0xb0 [ 279.164573][ C1] ? clear_bhb_loop+0x15/0x70 [ 279.164586][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.164602][ C1] RIP: 0033:0x7f7629f2ea4b [ 279.164632][ C1] Code: ff 89 ef 48 89 04 24 e8 22 56 f9 ff 48 8b 04 24 48 83 c4 20 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 ae c3 0c 00 f7 d8 64 89 02 48 83 [ 279.164644][ C1] RSP: 002b:00007ffd0f155228 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.164658][ C1] RAX: ffffffffffffffda RBX: 000056415f8c79e0 RCX: 00007f7629f2ea4b [ 279.164668][ C1] RDX: 0000000000000000 RSI: 00007ffd0f155238 RDI: 0000000000000004 [ 279.164677][ C1] RBP: 000056415f8d1900 R08: 0000000000000001 R09: 0000000000000000 [ 279.164685][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 279.164694][ C1] R13: 00000000000000b4 R14: 0000000000000000 R15: 0000000000000000 [ 279.164710][ C1] </TASK> [ 279.165388][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g26769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 279.738052][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 279.748014][ C0] rcu: RCU grace-period kthread stack dump: [ 279.753906][ C0] task:rcu_preempt state:R running task stack:26816 pid: 15 ppid: 2 flags:0x00004000 [ 279.764692][ C0] Call Trace: [ 279.768010][ C0] <TASK> [ 279.770948][ C0] __schedule+0x12c4/0x45b0 [ 279.775459][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 279.781360][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 279.787261][ C0] ? __mod_timer+0xa8e/0xeb0 [ 279.791852][ C0] ? release_firmware_map_entry+0x190/0x190 [ 279.797737][ C0] ? mod_timer_pending+0x20/0x20 [ 279.802680][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 279.808066][ C0] schedule+0x11b/0x1f0 [ 279.812229][ C0] schedule_timeout+0x1b9/0x300 [ 279.817081][ C0] ? console_conditional_schedule+0x40/0x40 [ 279.822971][ C0] ? update_process_times+0x200/0x200 [ 279.828343][ C0] ? prepare_to_swait_event+0x321/0x340 [ 279.833884][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 279.838742][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 279.844897][ C0] ? rcu_gp_init+0x1140/0x1140 [ 279.849658][ C0] ? finish_swait+0xc5/0x1d0 [ 279.854243][ C0] rcu_gp_kthread+0xa4/0x360 [ 279.858826][ C0] ? _raw_spin_unlock+0x40/0x40 [ 279.863676][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 279.868776][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 279.874666][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 279.879688][ C0] kthread+0x3f6/0x4f0 [ 279.883746][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 279.888851][ C0] ? kthread_blkcg+0xd0/0xd0 [ 279.893432][ C0] ret_from_fork+0x1f/0x30 [ 279.897858][ C0] </TASK> [ 279.900877][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 279.907188][ C0] NMI backtrace for cpu 0 [ 279.911498][ C0] CPU: 0 PID: 8461 Comm: syz.2.1311 Not tainted 5.15.178-syzkaller #0 [ 279.919637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.929680][ C0] Call Trace: [ 279.932949][ C0] <IRQ> [ 279.935784][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 279.940463][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 279.946088][ C0] ? panic+0x860/0x860 [ 279.950160][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 279.955088][ C0] ? __wake_up_klogd+0xd5/0x100 [ 279.959936][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 279.966080][ C0] ? _printk+0xd1/0x120 [ 279.970227][ C0] ? cpu_online+0x1f/0x40 [ 279.974551][ C0] ? panic+0x860/0x860 [ 279.978613][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 279.984670][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 279.990645][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 279.996800][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 280.002269][ C0] ? print_cpu_stall+0x600/0x600 [ 280.007199][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 280.012217][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 280.017410][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 280.022603][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 280.027447][ C0] ? hrtimer_run_queues+0x163/0x450 [ 280.032637][ C0] ? account_process_tick+0x232/0x3a0 [ 280.038006][ C0] update_process_times+0x196/0x200 [ 280.043198][ C0] tick_sched_timer+0x386/0x550 [ 280.048043][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 280.053584][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 280.058788][ C0] ? hrtimer_interrupt+0x980/0x980 [ 280.063891][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 280.069955][ C0] hrtimer_interrupt+0x392/0x980 [ 280.074904][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 280.080883][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 280.086507][ C0] </IRQ> [ 280.089430][ C0] <TASK> [ 280.092350][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.098319][ C0] RIP: 0010:smp_call_function_many_cond+0xaa1/0xd90 [ 280.104898][ C0] Code: 44 89 fe 83 e6 01 31 ff e8 3c d6 0b 00 41 83 e7 01 75 07 e8 d1 d2 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 ac d2 0b 00 eb db 44 [ 280.124497][ C0] RSP: 0018:ffffc900035bf220 EFLAGS: 00000246 [ 280.130556][ C0] RAX: 0000000000000000 RBX: 1ffff110171e80b1 RCX: 0000000000080000 [ 280.138515][ C0] RDX: ffffc900061b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 280.146475][ C0] RBP: ffffc900035bf360 R08: ffffffff8174b2b4 R09: fffffbfff2131822 [ 280.154437][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 280.162396][ C0] R13: ffff8880b8f40588 R14: ffff8880b8e3b380 R15: 0000000000000001 [ 280.170364][ C0] ? smp_call_function_many_cond+0xa84/0xd90 [ 280.177303][ C0] ? flush_tlb_all+0x20/0x20 [ 280.181891][ C0] ? smp_call_function_many+0x30/0x30 [ 280.187253][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 280.192275][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 280.197464][ C0] ? flush_tlb_all+0x20/0x20 [ 280.202046][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 280.207151][ C0] __purge_vmap_area_lazy+0x294/0x1740 [ 280.212600][ C0] ? cpumask_next+0xc3/0xf0 [ 280.217093][ C0] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 280.223410][ C0] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 280.229734][ C0] ? _vm_unmap_aliases+0x441/0x4e0 [ 280.234845][ C0] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 280.241173][ C0] _vm_unmap_aliases+0x453/0x4e0 [ 280.246111][ C0] change_page_attr_set_clr+0x308/0x1050 [ 280.251744][ C0] ? __set_memory_prot+0x100/0x100 [ 280.256861][ C0] ? find_vm_area+0xf9/0x130 [ 280.261444][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 280.266456][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 280.271478][ C0] set_memory_ro+0xa1/0xe0 [ 280.275889][ C0] ? set_memory_nx+0x130/0x130 [ 280.280645][ C0] ? _raw_spin_unlock+0x24/0x40 [ 280.285490][ C0] bpf_int_jit_compile+0xbf36/0xc6c0 [ 280.290807][ C0] ? emit_bpf_dispatcher+0xd90/0xd90 [ 280.296110][ C0] ? ktime_get_with_offset+0x101/0x320 [ 280.301561][ C0] ? seqcount_lockdep_reader_access+0x153/0x220 [ 280.307791][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 280.312996][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 280.318281][ C0] bpf_prog_select_runtime+0x701/0x9f0 [ 280.323736][ C0] ? memset+0x1f/0x40 [ 280.327710][ C0] ? bpf_obj_name_cpy+0x186/0x1d0 [ 280.332732][ C0] bpf_prog_load+0x131c/0x1b60 [ 280.337499][ C0] ? map_freeze+0x360/0x360 [ 280.341991][ C0] ? __might_fault+0xb8/0x110 [ 280.346677][ C0] ? __might_fault+0xb4/0x110 [ 280.351346][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 280.355664][ C0] ? security_bpf+0x7d/0xa0 [ 280.360158][ C0] __sys_bpf+0x343/0x670 [ 280.364395][ C0] ? bpf_link_show_fdinfo+0x300/0x300 [ 280.369778][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 280.375755][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 280.380950][ C0] __x64_sys_bpf+0x78/0x90 [ 280.385359][ C0] do_syscall_64+0x3b/0xb0 [ 280.389765][ C0] ? clear_bhb_loop+0x15/0x70 [ 280.394436][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.400321][ C0] RIP: 0033:0x7f4955c8c169 [ 280.404731][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.424332][ C0] RSP: 002b:00007f4953af5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.432742][ C0] RAX: ffffffffffffffda RBX: 00007f4955ea4fa0 RCX: 00007f4955c8c169 [ 280.440703][ C0] RDX: 0000000000000080 RSI: 0000400000000180 RDI: 0000000000000005 [ 280.448666][ C0] RBP: 00007f4955d0d2a0 R08: 0000000000000000 R09: 0000000000000000 [ 280.456626][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.464584][ C0] R13: 0000000000000001 R14: 00007f4955ea4fa0 R15: 00007ffdebcadd68 [ 280.472561][ C0] </TASK>