last executing test programs: 2.146240501s ago: executing program 4 (id=5203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.756642687s ago: executing program 4 (id=5209): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0x80405600, &(0x7f0000000980)) 1.666601785s ago: executing program 0 (id=5210): r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0) 1.60982548s ago: executing program 2 (id=5211): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x105, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x33565348}}) 1.577934653s ago: executing program 1 (id=5212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) 1.547078516s ago: executing program 3 (id=5213): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, 0x0, 0x0) 1.486856052s ago: executing program 4 (id=5214): r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x0, 0x80000, 0x25, @ipv4={'\x00', '\xff\xff', @local}, @mcast2={0xff, 0x5}}}) 1.368815843s ago: executing program 2 (id=5215): syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@index_off}]}) 1.368624323s ago: executing program 0 (id=5216): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x0, "20133a9ae721985e9cab307d68bbc6be9fdd7f017c9850fe90a1aae1c285440a"}) 1.196510249s ago: executing program 3 (id=5217): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) io_uring_enter(r0, 0x71df, 0xe0a0, 0x8, 0x0, 0x0) 1.157288922s ago: executing program 1 (id=5218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.145690794s ago: executing program 4 (id=5219): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x37000000, @private2}}}, 0x88) 1.110817487s ago: executing program 0 (id=5220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000300)={0x10}, 0x10}, {&(0x7f0000000500)={0x14, 0x2f, 0x42d, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x3}, 0x0) 1.042178573s ago: executing program 2 (id=5221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000000020104000000000000000002000000240002801400018008000100e000000108000200ac1414000c00028005000100000000002c0003801400018008000100e000000108000200ac1414bb0c00028005000100000000000500034000000000040001"], 0x68}}, 0x0) 938.262022ms ago: executing program 1 (id=5222): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) 879.102428ms ago: executing program 3 (id=5223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000108500000017000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 826.420723ms ago: executing program 4 (id=5224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macvlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x1}}) 782.310937ms ago: executing program 2 (id=5225): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x80) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)='a', 0x1}], 0x1, 0x0) 727.824802ms ago: executing program 0 (id=5226): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x40008c5, 0x0, 0x0) 677.753067ms ago: executing program 3 (id=5227): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 677.441157ms ago: executing program 4 (id=5228): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000100)={0x1, 0x5}) 618.597752ms ago: executing program 1 (id=5229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x9000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) 458.701427ms ago: executing program 2 (id=5230): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7f2, 0x2, 0x3f8, 0x108, 0x0, 0x210, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x102}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90c69545eb1c87000000000000000000000000000000e900"}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x448) 427.36674ms ago: executing program 0 (id=5231): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) 287.318183ms ago: executing program 3 (id=5232): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) 156.282845ms ago: executing program 1 (id=5233): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1a, 0x2, 0x2, "0000000040030000000001000000000000809c00", 0x384c4150}) 156.063825ms ago: executing program 2 (id=5234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c"], 0x38}}], 0x2, 0x0) 19.792688ms ago: executing program 0 (id=5235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) 19.513458ms ago: executing program 3 (id=5236): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x1) 0s ago: executing program 1 (id=5237): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 041][T12828] BTRFS info (device loop3): doing ref verification [ 332.967989][T12828] BTRFS info (device loop3): turning off barriers [ 333.004985][T12828] BTRFS info (device loop3): enabling ssd optimizations [ 333.011979][T12828] BTRFS info (device loop3): using spread ssd allocation scheme [ 333.057705][T12828] BTRFS info (device loop3): not using ssd optimizations [ 333.065593][T12828] BTRFS info (device loop3): not using spread ssd allocation scheme [ 333.087471][T12543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.095796][T12828] BTRFS info (device loop3): using free space tree [ 333.135671][T12838] Remounting filesystem read-only [ 333.141540][T12838] NILFS (loop4): error -5 truncating bmap (ino=16) [ 333.264845][ T3639] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 333.271853][ T3639] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 333.289753][ T3639] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.294366][ T4726] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 333.320947][ T3639] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.336718][ T3639] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.356247][ T3639] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 333.399574][ T3639] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 333.415958][ T3639] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 333.423315][ T3639] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 333.454051][ T3639] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 333.461400][ T3639] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 333.662461][ T4726] usb 3-1: Using ep0 maxpacket: 8 [ 333.667996][T12828] BTRFS info (device loop3): rebuilding free space tree [ 333.851656][ T4726] usb 3-1: config 0 has an invalid interface number: 4 but max is 2 [ 333.872973][ T4726] usb 3-1: config 0 has an invalid interface number: 4 but max is 2 [ 333.912503][ T4726] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 333.927143][ T4726] usb 3-1: config 0 has no interface number 1 [ 333.933279][ T4726] usb 3-1: config 0 interface 4 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.977771][ T4726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 333.997442][ T4726] usb 3-1: config 0 interface 4 has no altsetting 1 [ 334.184667][ T3642] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 334.191986][T12869] loop4: detected capacity change from 0 to 2048 [ 334.224002][ T4726] usb 3-1: New USB device found, idVendor=12d1, idProduct=58e0, bcdDevice=45.5e [ 334.233080][ T4726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.253864][ T4726] usb 3-1: Product: syz [ 334.258340][ T4726] usb 3-1: Manufacturer: syz [ 334.272426][ T4726] usb 3-1: SerialNumber: syz [ 334.279277][ T4726] usb 3-1: config 0 descriptor?? [ 334.515503][T12870] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.631047][ T155] usb 3-1: USB disconnect, device number 17 [ 334.971796][T12872] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 335.629952][T12886] netlink: 'syz.4.3969': attribute type 2 has an invalid length. [ 336.462347][T12902] loop3: detected capacity change from 0 to 4096 [ 336.790665][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3985'. [ 336.895297][ C0] net_ratelimit: 11312 callbacks suppressed [ 336.895318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 336.912110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.913658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 336.925473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.937401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.949424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.962006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 336.973182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.985222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 336.997284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.604637][T12937] netlink: 'syz.2.3995': attribute type 13 has an invalid length. [ 337.612528][T12937] netlink: 'syz.2.3995': attribute type 12 has an invalid length. [ 337.923355][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3998'. [ 338.564149][T12949] netlink: 'syz.2.4001': attribute type 30 has an invalid length. [ 338.653674][T12931] loop4: detected capacity change from 0 to 40427 [ 338.827360][T12931] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 338.839884][T12931] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 339.018889][T12931] F2FS-fs (loop4): invalid crc_offset: 5705724 [ 339.085221][T12543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.092381][T12939] loop0: detected capacity change from 0 to 32768 [ 339.142608][T12931] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.145454][T12939] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 339.319904][T12931] F2FS-fs (loop4): recover fsync data on readonly fs [ 339.370330][T12931] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 339.379357][T12931] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 340.219052][ T4452] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 340.323446][T12975] loop0: detected capacity change from 0 to 4096 [ 340.394427][T12975] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 340.695201][T12984] loop4: detected capacity change from 0 to 64 [ 341.072481][T12990] loop2: detected capacity change from 0 to 512 [ 341.277815][T12990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 341.289164][T12990] ext4 filesystem being mounted at /871/file0 supports timestamps until 2038 (0x7fffffff) [ 341.410467][ T3651] EXT4-fs (loop2): unmounting filesystem. [ 341.727502][T12975] ntfs3: loop0: failed to convert "c46c" to cp869 [ 341.730378][T12997] loop3: detected capacity change from 0 to 512 [ 341.904547][ C0] net_ratelimit: 11186 callbacks suppressed [ 341.904566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 341.905749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.910816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 341.922775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.934744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.947309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.963704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 341.971232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.983145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 341.995257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.279894][T12543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.300451][T12543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.342080][T12543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.362258][T12543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.567621][T12997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.579812][T12997] ext4 filesystem being mounted at /816/file0 supports timestamps until 2038 (0x7fffffff) [ 342.693132][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.725959][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.791701][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.820703][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 342.848846][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.900294][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.911899][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.948406][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.955578][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.056682][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.116128][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.151600][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.187145][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.194331][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.317484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.353751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.444708][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.483388][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.514969][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.565094][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.629205][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.677565][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.709859][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.734852][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.776789][T12543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.809219][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.879307][T13039] libceph: resolve '0' (ret=-3): failed [ 343.949084][T13041] netlink: 'syz.0.4042': attribute type 7 has an invalid length. [ 344.001432][T13041] netlink: 'syz.0.4042': attribute type 8 has an invalid length. [ 344.714449][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.721992][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.777879][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.905909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.928156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.012871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.064867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.114598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.184882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.228351][T12543] device veth0_vlan entered promiscuous mode [ 345.275496][T12543] device veth1_vlan entered promiscuous mode [ 345.368728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.385278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.455106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.495683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.538121][T12543] device veth0_macvtap entered promiscuous mode [ 345.580030][T12543] device veth1_macvtap entered promiscuous mode [ 345.656396][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.683226][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.732173][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.784469][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.904002][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.013990][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.023881][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.090738][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.144006][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.193994][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.240993][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.269215][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4064'. [ 346.312267][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.351171][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.374899][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.417528][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.459728][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.496666][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.523999][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.559120][T13117] loop3: detected capacity change from 0 to 256 [ 346.573995][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.644175][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.723679][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.786116][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.800728][T13120] loop0: detected capacity change from 0 to 2048 [ 346.818107][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.860107][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.915471][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.922517][ C1] net_ratelimit: 7842 callbacks suppressed [ 346.922534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.935324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 346.943657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.955572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 346.967598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.979664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.991672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.004384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 347.015583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.027553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 347.091539][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.108554][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.124053][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.159715][T12543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.195076][T12543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.198729][T13130] loop4: detected capacity change from 0 to 128 [ 347.203907][T12543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.236139][T13132] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4081'. [ 347.254090][T12543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.401392][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.412153][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.456173][T13134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4082'. [ 347.465907][T13117] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.491468][T13130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 347.512917][T13130] System zones: 1-3, 19-19, 35-36 [ 347.528708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.546469][ T5313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.595801][T13120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.634914][T13130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.638717][ T5313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.714162][T13130] ext4 filesystem being mounted at /778/mnt supports timestamps until 2038 (0x7fffffff) [ 347.739512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.873599][T13130] EXT4-fs warning (device loop4): ext4_group_extend:1870: can't shrink FS - resize aborted [ 347.902366][T13140] loop3: detected capacity change from 0 to 256 [ 348.167676][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 348.897010][T13158] loop2: detected capacity change from 0 to 4096 [ 349.064472][T13164] loop0: detected capacity change from 0 to 4096 [ 349.185019][T13158] ntfs: (device loop2): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 349.207533][T13158] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 349.263287][T13158] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 349.286938][T13158] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 349.454149][T13158] ntfs: volume version 3.1. [ 349.683931][T13158] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 349.712842][T13140] FAT-fs (loop3): Directory bread(block 64) failed [ 349.745712][T13140] FAT-fs (loop3): Directory bread(block 65) failed [ 349.778975][T13140] FAT-fs (loop3): Directory bread(block 66) failed [ 349.813385][T13140] FAT-fs (loop3): Directory bread(block 67) failed [ 349.872860][T13140] FAT-fs (loop3): Directory bread(block 68) failed [ 349.923463][T13140] FAT-fs (loop3): Directory bread(block 69) failed [ 349.972017][T13140] FAT-fs (loop3): Directory bread(block 70) failed [ 350.006486][T13140] FAT-fs (loop3): Directory bread(block 71) failed [ 350.044385][T13140] FAT-fs (loop3): Directory bread(block 72) failed [ 350.109029][T13140] FAT-fs (loop3): Directory bread(block 73) failed [ 350.219138][T13185] netlink: 'syz.2.4105': attribute type 21 has an invalid length. [ 350.304670][T13164] ntfs: volume version 3.1. [ 350.414116][ T27] audit: type=1800 audit(1728360287.180:117): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4084" name="file1" dev="loop3" ino=1048659 res=0 errno=0 [ 350.672761][T13164] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 350.744379][T13193] IPv6: sit1: Disabled Multicast RS [ 350.801819][T13164] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 350.887845][T13164] ntfs: (device loop0): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 350.939128][T13164] ntfs: (device loop0): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 351.391220][T13214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4118'. [ 351.532380][T13219] netlink: 'syz.4.4122': attribute type 8 has an invalid length. [ 351.924762][ C1] net_ratelimit: 9973 callbacks suppressed [ 351.924781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.942922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.955269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.958339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 351.967520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.979624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 351.991517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.003435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.015458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.028160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 352.108801][T13235] loop2: detected capacity change from 0 to 256 [ 352.115885][T13235] exfat: Deprecated parameter 'utf8' [ 352.123167][T13235] exfat: Deprecated parameter 'namecase' [ 352.662250][ T3797] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 352.674718][T13249] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 352.682480][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'. [ 352.707109][T13249] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 353.083847][T13235] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 353.334162][ T3797] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 353.343251][ T3797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.387047][ T3797] usb 5-1: config 0 descriptor?? [ 353.451641][ T3797] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 353.477007][T13225] loop3: detected capacity change from 0 to 40427 [ 353.496748][T13259] loop0: detected capacity change from 0 to 1024 [ 353.629275][T13225] F2FS-fs (loop3): invalid crc value [ 353.872879][T13225] F2FS-fs (loop3): Found nat_bits in checkpoint [ 353.913461][ T3797] gspca_cpia1: usb_control_msg 03, error -71 [ 353.963821][ T3797] gspca_cpia1: usb_control_msg 01, error -71 [ 353.970444][ T3797] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 354.042120][ T3797] usb 5-1: USB disconnect, device number 21 [ 354.328875][T13225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 355.227667][T13287] loop0: detected capacity change from 0 to 1024 [ 355.462269][T13287] hfsplus: Filesystem is marked locked, mounting read-only. [ 355.659573][T13287] hfsplus: filesystem is marked locked, leaving read-only. [ 356.211400][T13311] loop0: detected capacity change from 0 to 256 [ 356.246046][ T153] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 356.962811][ C1] net_ratelimit: 9687 callbacks suppressed [ 356.962838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.970272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.981203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.993738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 357.005023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.017057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 357.029238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.041227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.053208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.065839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.138367][T13333] loop2: detected capacity change from 0 to 128 [ 357.172384][T13333] hpfs: bad mount options. [ 357.355579][T13338] netlink: 'syz.1.4179': attribute type 11 has an invalid length. [ 357.544475][ T153] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 357.553612][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.587118][ T153] usb 5-1: Product: syz [ 357.591360][ T153] usb 5-1: Manufacturer: syz [ 357.614577][ T153] usb 5-1: SerialNumber: syz [ 357.640499][ T153] usb 5-1: config 0 descriptor?? [ 358.009416][ T153] mos7840 5-1:0.0: required endpoints missing [ 358.219212][T13311] FAT-fs (loop0): Directory bread(block 64) failed [ 358.227893][T13311] FAT-fs (loop0): Directory bread(block 65) failed [ 358.234719][T13311] FAT-fs (loop0): Directory bread(block 66) failed [ 358.242799][ T4740] usb 5-1: USB disconnect, device number 22 [ 358.263232][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4188'. [ 358.277297][T13311] FAT-fs (loop0): Directory bread(block 67) failed [ 358.343791][T13311] FAT-fs (loop0): Directory bread(block 68) failed [ 358.371863][T13311] FAT-fs (loop0): Directory bread(block 69) failed [ 358.404576][T13311] FAT-fs (loop0): Directory bread(block 70) failed [ 358.411159][T13311] FAT-fs (loop0): Directory bread(block 71) failed [ 358.469905][T13311] FAT-fs (loop0): Directory bread(block 72) failed [ 358.492713][T13311] FAT-fs (loop0): Directory bread(block 73) failed [ 359.154762][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4196'. [ 359.650022][T13391] cgroup: Name too long [ 359.813739][T13398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.517213][T13416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.525403][T13416] IPv6: NLM_F_CREATE should be set when creating new route [ 360.584788][T13412] loop3: detected capacity change from 0 to 4096 [ 360.635380][T13412] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 360.771620][T13421] xt_recent: Unsupported userspace flags (00000064) [ 360.973570][T13428] netlink: 'syz.4.4222': attribute type 1 has an invalid length. [ 361.652858][T13446] netlink: 'syz.0.4231': attribute type 21 has an invalid length. [ 361.676992][T13446] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4231'. [ 361.964012][ C1] net_ratelimit: 9931 callbacks suppressed [ 361.964031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.965408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.970356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.983060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 362.018497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 362.028730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.030857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.042951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.055593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.066730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.312036][T13412] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 362.362515][T13412] ntfs3: loop3: mft corrupted [ 362.367351][T13412] ntfs3: loop3: Failed to load $Extend. [ 363.464189][T13485] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4249'. [ 363.688816][T13454] loop0: detected capacity change from 0 to 32768 [ 363.784038][T13454] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 363.873453][T13492] loop2: detected capacity change from 0 to 512 [ 363.996377][T13492] EXT4-fs: inline encryption not supported [ 364.019008][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4256'. [ 364.032824][T13492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.269464][T13507] loop3: detected capacity change from 0 to 512 [ 364.447521][T13492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 364.474077][T13492] ext4 filesystem being mounted at /924/bus supports timestamps until 2038 (0x7fffffff) [ 364.574551][T13507] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.583637][T13507] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 364.699616][T13507] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 364.852590][T13507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 364.871298][T13507] System zones: 0-2, 18-18, 34-34 [ 364.944205][T13507] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 365.055507][ T3651] EXT4-fs (loop2): unmounting filesystem. [ 365.080535][T13507] EXT4-fs (loop3): 1 truncate cleaned up [ 365.086610][T13507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 365.163909][T13507] EXT4-fs error (device loop3): ext4_generic_delete_entry:2727: inode #12: block 13: comm syz.3.4260: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 365.292233][ T4451] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 365.359824][T13507] EXT4-fs error (device loop3) in ext4_delete_entry:2798: Corrupt filesystem [ 365.697908][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 366.187564][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 366.187581][ T27] audit: type=1400 audit(1728360302.980:118): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=13557 comm="syz.3.4284" [ 366.196346][T13561] loop4: detected capacity change from 0 to 65 [ 366.317250][T13562] loop0: detected capacity change from 0 to 2048 [ 366.530295][T13561] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 366.573632][T13572] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4291'. [ 366.764941][T13562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.974054][ C1] net_ratelimit: 8935 callbacks suppressed [ 366.974073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.977639][T13582] Mount JFS Failure: -22 [ 366.980274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.998240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 367.008870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.020857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 367.032991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.044808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.056975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.069520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.080976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.111763][T13582] jfs_mount failed w/return code = -22 [ 367.339874][T13587] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (33026) [ 367.389304][T13587] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 367.437316][T13590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4298'. [ 367.635962][T13598] loop2: detected capacity change from 0 to 64 [ 368.188623][T13611] sctp: [Deprecated]: syz.2.4320 (pid 13611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.188623][T13611] Use struct sctp_sack_info instead [ 368.363086][T13617] netlink: 'syz.1.4312': attribute type 21 has an invalid length. [ 368.474223][T13617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4312'. [ 368.699109][ T155] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 368.836165][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4318'. [ 369.115096][ T155] usb 4-1: Using ep0 maxpacket: 8 [ 369.155641][T13641] netlink: 'syz.1.4324': attribute type 10 has an invalid length. [ 369.211035][T13641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4324'. [ 369.251281][T13641] batman_adv: batadv0: Adding interface: virt_wifi0 [ 369.274845][T13641] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.348567][ T155] usb 4-1: config 0 has an invalid interface number: 4 but max is 2 [ 369.393998][ T155] usb 4-1: config 0 has an invalid interface number: 4 but max is 2 [ 369.406415][T13641] batman_adv: batadv0: Interface activated: virt_wifi0 [ 369.441438][T13649] loop2: detected capacity change from 0 to 65 [ 369.441721][ T155] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 369.449383][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4325'. [ 369.514057][ T155] usb 4-1: config 0 has no interface number 1 [ 369.529014][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4325'. [ 369.530436][ T155] usb 4-1: config 0 interface 4 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.552018][T13643] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4325'. [ 369.559088][T13649] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 369.624047][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 369.658961][ T155] usb 4-1: config 0 interface 4 has no altsetting 1 [ 369.919292][ T155] usb 4-1: New USB device found, idVendor=12d1, idProduct=58e0, bcdDevice=45.5e [ 369.928886][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.948741][ T155] usb 4-1: Product: syz [ 369.952959][ T155] usb 4-1: Manufacturer: syz [ 369.979781][ T155] usb 4-1: SerialNumber: syz [ 370.064948][ T155] usb 4-1: config 0 descriptor?? [ 370.450211][ T5975] usb 4-1: USB disconnect, device number 21 [ 370.970402][T13675] netlink: 'syz.2.4340': attribute type 10 has an invalid length. [ 371.007742][T13675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4340'. [ 371.099060][T13675] batman_adv: batadv0: Adding interface: virt_wifi0 [ 371.186551][T13675] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.322073][T13656] loop0: detected capacity change from 0 to 32768 [ 371.377895][T13675] batman_adv: batadv0: Interface activated: virt_wifi0 [ 371.416581][T13679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4341'. [ 371.442745][T13679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4341'. [ 371.488306][T13679] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4341'. [ 371.674142][T13683] netlink: 'syz.4.4344': attribute type 11 has an invalid length. [ 371.729198][T13688] loop3: detected capacity change from 0 to 512 [ 371.774769][T13688] EXT4-fs: inline encryption not supported [ 371.872093][T13688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 371.991447][ C1] net_ratelimit: 9109 callbacks suppressed [ 371.991465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.992906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 371.997697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.009483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.021604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.034259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.045291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.057371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.069278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.082584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 372.151739][T13695] loop4: detected capacity change from 0 to 4096 [ 372.286332][T13695] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 372.365899][T13656] read_mapping_page failed! [ 372.433827][T13688] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 372.459166][T13688] ext4 filesystem being mounted at /866/bus supports timestamps until 2038 (0x7fffffff) [ 372.544802][T13656] ea_get: invalid extended attribute [ 372.554695][T13656] ffff8880534743f0: 04 00 00 00 .... [ 372.840959][T13710] netlink: 'syz.2.4356': attribute type 7 has an invalid length. [ 372.859990][T13710] netlink: 'syz.2.4356': attribute type 8 has an invalid length. [ 373.005071][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 373.796660][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 374.484058][T13695] ntfs3: loop4: failed to convert "c46c" to cp869 [ 375.353858][T13780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.441504][T13780] FAT-fs (loop0): unable to read boot sector [ 375.658489][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'. [ 375.701452][T13796] loop0: detected capacity change from 0 to 64 [ 375.930591][T13794] loop4: detected capacity change from 0 to 4096 [ 375.967954][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 375.976961][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4399'. [ 376.083811][T13794] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 376.832010][T13825] loop3: detected capacity change from 0 to 64 [ 376.994227][ C1] net_ratelimit: 7846 callbacks suppressed [ 376.994246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.012497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.024916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.026956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.037246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.049912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.061233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.073102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.085119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.098436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 377.664949][T13834] loop0: detected capacity change from 0 to 64 [ 377.688488][T13836] loop3: detected capacity change from 0 to 64 [ 377.895354][T13814] loop2: detected capacity change from 0 to 32768 [ 378.018359][T13814] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.054057][T13814] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 378.055149][T13794] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 378.062809][T13814] BTRFS info (device loop2): using free space tree [ 378.150499][T13794] ntfs3: loop4: mft corrupted [ 378.164108][T13794] ntfs3: loop4: Failed to load $Extend. [ 378.440836][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.449291][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.649834][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 378.772565][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 379.079233][T13865] loop0: detected capacity change from 0 to 4096 [ 379.189995][T13814] BTRFS info (device loop2): enabling ssd optimizations [ 379.432067][ T3651] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 379.483876][T13865] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 379.508695][T13865] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 379.527432][T13865] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 379.553347][T13881] loop4: detected capacity change from 0 to 2048 [ 379.616582][T13865] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 379.801477][T13888] netlink: 'syz.3.4435': attribute type 21 has an invalid length. [ 379.847821][T13865] ntfs: volume version 3.1. [ 379.884653][T13890] netlink: 'syz.1.4436': attribute type 8 has an invalid length. [ 380.047980][T13881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 380.078123][T13881] EXT4-fs (loop4): unmounting filesystem. [ 380.433043][T13865] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 380.505675][T13905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4441'. [ 380.537320][T13905] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4441'. [ 380.829555][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 380.856534][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 380.865605][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'. [ 381.012632][T13919] loop3: detected capacity change from 0 to 512 [ 381.042641][T13916] loop2: detected capacity change from 0 to 2048 [ 381.377996][T13919] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.4447: casefold flag without casefold feature [ 381.415319][T13919] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4447: couldn't read orphan inode 15 (err -117) [ 381.441170][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4451'. [ 381.520914][T13919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 381.576982][T13933] loop0: detected capacity change from 0 to 2048 [ 381.604345][T13916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.634715][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 381.720526][T13935] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 381.827673][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4454'. [ 381.884132][T13935] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 381.921893][T13933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 381.954804][T13933] EXT4-fs (loop0): unmounting filesystem. [ 382.012182][ C0] net_ratelimit: 9462 callbacks suppressed [ 382.012201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.024637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.031358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.042339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.054336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.066083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.079811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 382.090195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.102259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 382.114222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.246541][T13947] netlink: 'syz.1.4470': attribute type 30 has an invalid length. [ 382.597096][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 382.647144][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4461'. [ 383.022634][T13960] loop3: detected capacity change from 0 to 2048 [ 383.124705][T13960] EXT4-fs: Ignoring removed orlov option [ 383.548242][T13946] loop4: detected capacity change from 0 to 32768 [ 383.663140][T13950] loop2: detected capacity change from 0 to 32768 [ 383.671539][T13960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.829786][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 383.840552][T13946] XFS (loop4): Mounting V5 Filesystem [ 384.287937][T13950] read_mapping_page failed! [ 384.358412][T13950] ea_get: invalid extended attribute [ 384.367220][T13950] ffff88823bcfe330: 04 00 00 00 .... [ 384.522180][T13985] loop3: detected capacity change from 0 to 2048 [ 384.778974][T13985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.805091][T13985] EXT4-fs (loop3): unmounting filesystem. [ 385.035638][T13966] loop0: detected capacity change from 0 to 32768 [ 385.165363][T13966] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 385.220957][T13966] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 385.578744][T13966] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 385.716193][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 385.987243][T13966] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 386.416409][T13992] loop3: detected capacity change from 0 to 32768 [ 387.023525][ C0] net_ratelimit: 8250 callbacks suppressed [ 387.023545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.024320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.029872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.041645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.055070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 387.065669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.077562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 387.089541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.101359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.113562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.308533][T14018] loop0: detected capacity change from 0 to 4096 [ 387.413985][T14018] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 387.893912][T14010] loop2: detected capacity change from 0 to 32768 [ 388.284134][T14022] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.530452][T14024] loop3: detected capacity change from 0 to 64 [ 388.574796][T14018] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 388.635626][T14018] ntfs3: loop0: mft corrupted [ 388.647581][T14018] ntfs3: loop0: Failed to load $Extend. [ 388.970319][T13946] XFS (loop4): Ending clean mount [ 389.429080][ T3639] XFS (loop4): Unmounting Filesystem [ 390.144205][T14045] loop0: detected capacity change from 0 to 512 [ 390.304781][T14045] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.4504: casefold flag without casefold feature [ 390.394947][T14045] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.4504: couldn't read orphan inode 15 (err -117) [ 390.454398][T14045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 390.561754][T14028] loop3: detected capacity change from 0 to 32768 [ 390.634838][ T3650] EXT4-fs (loop0): unmounting filesystem. [ 390.661595][T14028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4496 (14028) [ 390.772948][T14028] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.788462][T14028] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 390.818440][T14028] BTRFS info (device loop3): using free space tree [ 391.066591][T14062] loop2: detected capacity change from 0 to 64 [ 391.584045][T14028] BTRFS info (device loop3): enabling ssd optimizations [ 391.863193][ T3642] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.024095][ C1] net_ratelimit: 10350 callbacks suppressed [ 392.024113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.042401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.043233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.054905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.066885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.084150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.092116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 392.102842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.114687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 392.126677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.190803][T14083] loop2: detected capacity change from 0 to 1024 [ 392.331535][T14049] loop0: detected capacity change from 0 to 32768 [ 392.410908][T14083] hfsplus: Filesystem is marked locked, mounting read-only. [ 392.506767][T14083] hfsplus: filesystem is marked locked, leaving read-only. [ 394.638106][T14129] loop4: detected capacity change from 0 to 512 [ 394.693535][T14129] EXT4-fs (loop4): Test dummy encryption mode enabled [ 394.906710][T14129] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.4500: inline data xattr refers to an external xattr inode [ 394.955734][T14129] EXT4-fs (loop4): Remounting filesystem read-only [ 394.962342][T14129] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4500: couldn't read orphan inode 12 (err -117) [ 395.036227][T14129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.427558][T14129] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 395.604688][T14119] loop3: detected capacity change from 0 to 32768 [ 395.646030][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 396.626786][T14178] netlink: 'syz.4.4554': attribute type 21 has an invalid length. [ 396.694051][T14178] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4554'. [ 397.033994][ C0] net_ratelimit: 8379 callbacks suppressed [ 397.034014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.051423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.053536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 397.064199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.076069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 397.088031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.099883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.111889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.135975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.148257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.277587][T14187] loop4: detected capacity change from 0 to 512 [ 397.432570][T14166] loop0: detected capacity change from 0 to 32768 [ 397.736118][T14187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 397.905922][T14187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 398.084210][T14187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4560: bg 0: block 248: padding at end of block bitmap is not set [ 398.110653][T14176] loop2: detected capacity change from 0 to 32768 [ 398.166816][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4578'. [ 398.203826][T14176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4556 (14176) [ 398.217916][T14187] Quota error (device loop4): write_blk: dquota write failed [ 398.245215][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4567'. [ 398.262490][T14187] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 398.287062][T14187] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.4560: Failed to acquire dquot type 1 [ 398.323398][T14176] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.344299][T14176] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 398.420621][T14176] BTRFS info (device loop2): using free space tree [ 398.452577][T14187] EXT4-fs (loop4): 1 truncate cleaned up [ 398.495188][T14187] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.585888][T14187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.644018][T14187] EXT4-fs error (device loop4): __ext4_remount:6448: comm syz.4.4560: Abort forced by user [ 398.743240][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 398.982692][T14231] loop3: detected capacity change from 0 to 1024 [ 399.164041][T14176] BTRFS info (device loop2): enabling ssd optimizations [ 399.443878][ T3651] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.541852][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4581'. [ 399.770758][T14252] loop0: detected capacity change from 0 to 512 [ 400.238577][T14252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 400.252082][T14252] ext4 filesystem being mounted at /904/file0 supports timestamps until 2038 (0x7fffffff) [ 400.433294][ T3650] EXT4-fs (loop0): unmounting filesystem. [ 400.708299][T14277] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4594'. [ 400.748533][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 400.951526][T14281] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4596'. [ 401.061632][T14285] loop2: detected capacity change from 0 to 1024 [ 401.602817][T14295] loop3: detected capacity change from 0 to 256 [ 402.044035][ C0] net_ratelimit: 8568 callbacks suppressed [ 402.044055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.044218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.074276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.084192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 402.086561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.098547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 402.122460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.135500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.147833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.161746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 402.184855][T14273] loop4: detected capacity change from 0 to 40427 [ 402.506105][T14309] loop2: detected capacity change from 0 to 4096 [ 402.568073][T14309] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 402.679688][T14273] F2FS-fs (loop4): Found nat_bits in checkpoint [ 402.924666][T14273] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 402.942390][T14273] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 403.246419][T14295] FAT-fs (loop3): Directory bread(block 64) failed [ 403.253021][T14295] FAT-fs (loop3): Directory bread(block 65) failed [ 403.280167][T14295] FAT-fs (loop3): Directory bread(block 66) failed [ 403.308822][T14295] FAT-fs (loop3): Directory bread(block 67) failed [ 403.324873][T14295] FAT-fs (loop3): Directory bread(block 68) failed [ 403.331441][T14295] FAT-fs (loop3): Directory bread(block 69) failed [ 403.341396][T14295] FAT-fs (loop3): Directory bread(block 70) failed [ 403.388909][T14295] FAT-fs (loop3): Directory bread(block 71) failed [ 403.416372][T14295] FAT-fs (loop3): Directory bread(block 72) failed [ 403.425158][T14295] FAT-fs (loop3): Directory bread(block 73) failed [ 403.540280][T14309] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 403.561586][T14309] ntfs3: loop2: mft corrupted [ 403.567648][T14309] ntfs3: loop2: Failed to load $Extend. [ 404.673263][ T4734] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 405.167606][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4629'. [ 405.209416][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4629'. [ 405.217429][T14352] loop2: detected capacity change from 0 to 4096 [ 405.295187][ T4734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.323978][ T4734] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 405.343512][T14352] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 405.374014][ T4734] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 405.403889][ T4734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.414066][ T4734] usb 4-1: config 0 descriptor?? [ 405.529058][T14340] loop0: detected capacity change from 0 to 32768 [ 405.591392][T14340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4621 (14340) [ 405.721489][T14340] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.748117][T14340] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 405.830653][T14340] BTRFS info (device loop0): using free space tree [ 405.982766][ T4734] Bluetooth: Can't get state to change to load configuration err [ 406.053968][ T4734] Bluetooth: Loading sysconfig file failed [ 406.064339][ T4734] ath3k: probe of 4-1:0.0 failed with error -16 [ 406.195473][ T4734] usb 4-1: USB disconnect, device number 22 [ 406.337890][T14340] BTRFS info (device loop0): enabling ssd optimizations [ 406.664632][ T3650] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 407.034038][T14352] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 407.055233][ C0] net_ratelimit: 10411 callbacks suppressed [ 407.055252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 407.073567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 407.085897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.098795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.104392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.111173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.123085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.136383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 407.146922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.158966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 407.188089][T14352] ntfs3: loop2: mft corrupted [ 407.202818][T14352] ntfs3: loop2: Failed to load $Extend. [ 407.932996][T14429] loop3: detected capacity change from 0 to 512 [ 408.241003][T14438] delete_channel: no stack [ 408.337298][T14429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 408.375667][T14429] ext4 filesystem being mounted at /931/file0 supports timestamps until 2038 (0x7fffffff) [ 408.497917][T14429] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 408.584879][T14429] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 408.622482][T14429] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.4648: Failed to acquire dquot type 0 [ 408.983515][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4659'. [ 409.050014][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 409.988013][T14492] netlink: 'syz.0.4672': attribute type 8 has an invalid length. [ 410.087537][T14492] netlink: 'syz.0.4672': attribute type 4 has an invalid length. [ 410.144249][T14492] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.4672'. [ 410.410809][T14496] 9pnet: Could not find request transport: 0x0000000000000003 [ 410.704102][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.744003][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.795673][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.864007][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.914019][T14516] AppArmor: change_hat: Invalid input '0' [ 410.951428][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.025130][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.079334][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.158048][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.168866][T14471] loop4: detected capacity change from 0 to 32768 [ 411.230500][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.247797][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.487225][T14527] netlink: 'syz.0.4683': attribute type 3 has an invalid length. [ 411.618172][T14471] ERROR: (device loop4): diNewExt: no free extents [ 411.618172][T14471] [ 411.676389][T14471] ERROR: (device loop4): remounting filesystem as read-only [ 411.683760][T14471] ialloc: diAlloc returned -5! [ 411.867522][T14540] netlink: 'syz.1.4687': attribute type 8 has an invalid length. [ 411.925620][T14540] netlink: 'syz.1.4687': attribute type 4 has an invalid length. [ 411.991718][T14540] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.4687'. [ 412.074582][ C0] net_ratelimit: 7466 callbacks suppressed [ 412.074600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 412.092977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 412.094775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.105246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.117265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.129924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.141141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.153062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.164957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.178188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 412.654708][ T5976] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 412.733099][ T4733] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 413.140291][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4693'. [ 413.293509][T14543] loop0: detected capacity change from 0 to 32768 [ 413.310248][ T4733] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 413.350975][ T4733] usb 2-1: config 0 has no interface number 0 [ 413.367956][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.372127][ T4733] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 413.384079][T14543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4690 (14543) [ 413.416546][ T5976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 413.447012][ T5976] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 413.484700][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.510639][ T5976] usb 3-1: config 0 descriptor?? [ 413.562476][T14543] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.582935][T14543] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 413.625652][T14543] BTRFS info (device loop0): using free space tree [ 413.679816][ T4733] usb 2-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 413.695827][ T4733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.703862][ T4733] usb 2-1: Product: syz [ 413.735232][ T4733] usb 2-1: Manufacturer: syz [ 413.773271][ T4733] usb 2-1: SerialNumber: syz [ 413.782798][ T4733] usb 2-1: config 0 descriptor?? [ 414.046471][ T5976] Bluetooth: Can't get state to change to load configuration err [ 414.072237][ T5976] Bluetooth: Loading sysconfig file failed [ 414.082223][ T5976] ath3k: probe of 3-1:0.0 failed with error -16 [ 414.092359][ T4733] kaweth 2-1:0.82: Firmware present in device. [ 414.171200][ T5976] usb 3-1: USB disconnect, device number 18 [ 414.228759][T14543] BTRFS info (device loop0): enabling ssd optimizations [ 414.323315][ T4733] kaweth 2-1:0.82: Error reading configuration (-71), no net device created [ 414.334134][ T4733] kaweth: probe of 2-1:0.82 failed with error -5 [ 414.433724][ T4733] usb 2-1: USB disconnect, device number 17 [ 414.640173][T14594] ipt_CLUSTERIP: Please specify destination IP [ 414.866053][ T3650] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 415.174099][T14603] netlink: 'syz.2.4705': attribute type 3 has an invalid length. [ 416.223802][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4718'. [ 416.762799][T14647] netlink: 'syz.2.4724': attribute type 3 has an invalid length. [ 416.901771][ T52] block nbd4: Attempted send on invalid socket [ 416.908048][ T52] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.927489][ T52] block nbd4: Attempted send on invalid socket [ 416.933723][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.943243][ T52] block nbd4: Attempted send on invalid socket [ 416.949487][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.960438][ T120] block nbd4: Attempted send on invalid socket [ 416.966662][ T120] I/O error, dev nbd4, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.976611][ T120] block nbd4: Attempted send on invalid socket [ 416.982812][ T120] I/O error, dev nbd4, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.993020][ T120] block nbd4: Attempted send on invalid socket [ 416.999246][ T120] I/O error, dev nbd4, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.084898][ C0] net_ratelimit: 9877 callbacks suppressed [ 417.084918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 417.103265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 417.115602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.128654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.141031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.154850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 417.164964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.167263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 417.179205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.191060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.389478][T14664] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 417.402664][T14664] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 417.611545][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.641984][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.704006][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.784688][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.813999][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.855162][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.886569][T14634] loop0: detected capacity change from 0 to 32768 [ 417.910879][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.943450][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.953416][T14671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.985525][T14671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.031818][T14676] loop2: detected capacity change from 0 to 4096 [ 418.100024][T14676] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 418.594959][T14634] ERROR: (device loop0): diNewExt: no free extents [ 418.594959][T14634] [ 418.664054][T14634] ialloc: diAlloc returned -5! [ 418.822446][T14695] loop3: detected capacity change from 0 to 2048 [ 419.105543][T14705] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.146690][T14676] ntfs3: loop2: failed to convert "c46c" to cp874 [ 420.857184][T14749] loop3: detected capacity change from 0 to 64 [ 421.064740][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4763'. [ 421.997584][T14730] loop4: detected capacity change from 0 to 32768 [ 422.098414][ C0] net_ratelimit: 8360 callbacks suppressed [ 422.098432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 422.115576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.116663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 422.128599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.140580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.152513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.165287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.176626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.188645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.200727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.773635][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4784'. [ 422.914327][T14798] device bridge1 entered promiscuous mode [ 422.914893][T14730] ERROR: (device loop4): diNewExt: no free extents [ 422.914893][T14730] [ 422.944329][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 423.002070][T14730] ialloc: diAlloc returned -5! [ 423.253754][T14802] device bond1 entered promiscuous mode [ 423.265194][T14802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.276046][T14822] device gretap0 entered promiscuous mode [ 424.409777][T14822] netlink: 'syz.1.4796': attribute type 2 has an invalid length. [ 424.487121][T14822] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4796'. [ 424.506483][T14790] loop0: detected capacity change from 0 to 32768 [ 424.514264][T14825] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4797'. [ 424.674037][T14790] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 424.682249][T14790] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 425.103876][T14790] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 425.259629][ T4736] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 425.266622][ T4736] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 425.559757][ T4736] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 293ms [ 425.572288][T14858] overlayfs: missing 'lowerdir' [ 425.577353][ T4736] gfs2: fsid=syz:syz.0: jid=0: Done [ 425.597737][T14790] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 425.649627][T14859] loop2: detected capacity change from 0 to 2048 [ 426.072726][T14859] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 426.283998][T14859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.376143][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4823'. [ 426.423998][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4823'. [ 426.462069][T14877] netlink: 'syz.3.4823': attribute type 6 has an invalid length. [ 426.859161][T14893] loop0: detected capacity change from 0 to 1024 [ 427.104212][ C0] net_ratelimit: 8817 callbacks suppressed [ 427.104233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 427.122569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 427.134905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.147873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.160247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.170498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.184869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.197240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.205625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 427.209530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.809878][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4843'. [ 427.888808][ T27] audit: type=1326 audit(1728360364.680:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a20b7dff9 code=0x7ffc0000 [ 428.009441][ T27] audit: type=1326 audit(1728360364.680:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a20b7dff9 code=0x7ffc0000 [ 428.181517][ T27] audit: type=1326 audit(1728360364.710:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f8a20b7dff9 code=0x7ffc0000 [ 428.323987][ T27] audit: type=1326 audit(1728360364.710:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a20b7dff9 code=0x7ffc0000 [ 428.464687][ T27] audit: type=1326 audit(1728360364.710:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.3.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a20b7dff9 code=0x7ffc0000 [ 428.486442][T14930] loop4: detected capacity change from 0 to 8192 [ 428.634184][T14930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 428.668419][T14930] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 428.701431][ T27] audit: type=1326 audit(1728360365.490:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.1.4856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 428.755763][T14930] REISERFS (device loop4): using ordered data mode [ 428.762323][T14930] reiserfs: using flush barriers [ 428.823984][ T27] audit: type=1326 audit(1728360365.490:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.1.4856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 428.860768][T14930] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.938535][T14930] REISERFS (device loop4): checking transaction log (loop4) [ 428.960193][ T27] audit: type=1326 audit(1728360365.560:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.1.4856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 429.092166][ T27] audit: type=1326 audit(1728360365.560:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.1.4856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 429.213088][ T27] audit: type=1326 audit(1728360365.560:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.1.4856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 429.532373][T14930] REISERFS (device loop4): Using tea hash to sort names [ 429.556089][T14930] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 429.822798][T14925] loop2: detected capacity change from 0 to 32768 [ 429.894964][T14925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4844 (14925) [ 429.993231][T14925] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 429.993999][ T5975] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 430.022954][T14925] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 430.075025][T14925] BTRFS info (device loop2): metadata ratio 4 [ 430.081195][T14925] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 430.133969][T14925] BTRFS info (device loop2): force lzo compression, level 0 [ 430.141667][T14925] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 430.223805][T14925] BTRFS info (device loop2): trying to use backup root at mount time [ 430.251785][T14925] BTRFS info (device loop2): doing ref verification [ 430.289535][T14925] BTRFS info (device loop2): disabling tree log [ 430.323818][T14925] BTRFS info (device loop2): using free space tree [ 430.588134][T14988] loop0: detected capacity change from 0 to 256 [ 430.649524][T14991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.791683][ T46] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 430.930295][ T5975] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 430.939433][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.947817][T14925] BTRFS warning (device loop2): couldn't read tree root [ 430.972110][ T5975] usb 4-1: Product: syz [ 430.976571][ T5975] usb 4-1: Manufacturer: syz [ 430.981203][ T5975] usb 4-1: SerialNumber: syz [ 430.996870][T14925] BTRFS warning (device loop2): try to load backup roots slot 1 [ 431.061505][ T5975] usb 4-1: config 0 descriptor?? [ 431.083180][T15003] loop0: detected capacity change from 0 to 16 [ 431.099551][ T102] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 431.124346][T14925] BTRFS warning (device loop2): couldn't read tree root [ 431.131505][T14925] BTRFS warning (device loop2): try to load backup roots slot 2 [ 431.142087][T15001] loop4: detected capacity change from 0 to 1024 [ 431.201424][T15003] erofs: (device loop0): mounted with root inode @ nid 36. [ 431.231036][T14925] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 431.241396][T15003] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 431.278669][T14925] BTRFS warning (device loop2): couldn't read tree root [ 431.301070][T15003] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 431.318075][T15003] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 431.331378][T14925] BTRFS warning (device loop2): try to load backup roots slot 3 [ 431.445092][ T5975] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 431.745846][T14925] BTRFS error (device loop2): open_ctree failed [ 431.864542][T15013] fuse: Bad value for 'fd' [ 431.946387][T15017] loop4: detected capacity change from 0 to 128 [ 432.113973][ C0] net_ratelimit: 8946 callbacks suppressed [ 432.113993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.129555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.139810][ T153] usb 4-1: USB disconnect, device number 23 [ 432.144520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.151457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 432.162298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.174263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 432.186174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.198090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.210115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.222606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.538885][T15029] netlink: 'syz.1.4888': attribute type 21 has an invalid length. [ 432.644059][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4889'. [ 433.043448][T15041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4894'. [ 433.077045][T15041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4894'. [ 434.251369][T15038] loop3: detected capacity change from 0 to 32768 [ 434.285845][T15072] netlink: 'syz.4.4910': attribute type 6 has an invalid length. [ 434.336988][T15038] XFS: ikeep mount option is deprecated. [ 434.684469][T15038] XFS (loop3): Mounting V5 Filesystem [ 435.578951][T12148] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 435.998397][T12148] usb 5-1: Using ep0 maxpacket: 8 [ 436.315057][ T3630] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 436.434485][T15095] loop0: detected capacity change from 0 to 32768 [ 436.510529][T12148] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 436.510660][T15095] XFS: attr2 mount option is deprecated. [ 436.524651][T12148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.524681][T12148] usb 5-1: Product: syz [ 436.524699][T12148] usb 5-1: Manufacturer: syz [ 436.524717][T12148] usb 5-1: SerialNumber: syz [ 436.544324][T12148] usb 5-1: config 0 descriptor?? [ 436.624952][T15095] XFS: noikeep mount option is deprecated. [ 436.627102][T12148] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 436.643217][T12148] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 436.685301][ T4736] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 436.820645][T15095] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 436.854945][T12148] radio-raremono 5-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 436.895954][ T3630] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 436.924181][ T3630] usb 3-1: config 0 has no interface number 0 [ 436.950820][ T3630] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.044276][T15095] XFS (loop0): Quotacheck needed: Please wait. [ 437.069633][T12148] radio-raremono 5-1:0.0: raremono_cmd_main failed (-71) [ 437.077983][T12148] radio-raremono 5-1:0.0: V4L2 device registered as radio32 [ 437.125298][ C1] net_ratelimit: 11215 callbacks suppressed [ 437.125314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.127592][T12148] usb 5-1: USB disconnect, device number 23 [ 437.131559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.143355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 437.149522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.161382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 437.173260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.185262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.197366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.209998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.221201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.280458][T12148] radio-raremono 5-1:0.0: Thanko's Raremono disconnected [ 437.416876][ T3630] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 437.428167][ T3630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.449494][ T3630] usb 3-1: Product: syz [ 437.453705][ T3630] usb 3-1: Manufacturer: syz [ 437.467924][ T3630] usb 3-1: SerialNumber: syz [ 437.473494][ T4737] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 437.525065][ T3630] usb 3-1: config 0 descriptor?? [ 437.534337][ T4737] XFS (loop0): Unmount and run xfs_repair [ 437.540115][ T4737] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 437.584070][ T4736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 437.594827][ T4737] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 437.609434][ T4737] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 437.632520][ T3630] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 437.653544][ T4736] usb 2-1: not running at top speed; connect to a high speed hub [ 437.661625][ T4737] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 437.683525][ T4737] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 437.742772][ T4737] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 437.773954][ T4737] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 437.815267][ T4736] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 437.843959][ T4736] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 437.862917][ T4737] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 437.890600][ T4736] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.899868][ T4737] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 437.909156][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 437.928403][ T5313] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 437.983997][ T27] audit: type=1326 audit(1728360374.770:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.4.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988157dff9 code=0x7ffc0000 [ 438.049134][ T27] audit: type=1326 audit(1728360374.770:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.4.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f988157dff9 code=0x7ffc0000 [ 438.124260][ T5313] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 438.189428][ T27] audit: type=1326 audit(1728360374.800:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.4.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988157dff9 code=0x7ffc0000 [ 438.211775][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.229265][ T5313] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 438.237722][ T4736] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.248180][T15095] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 438.256826][ T155] usb 3-1: USB disconnect, device number 19 [ 438.264602][ T27] audit: type=1326 audit(1728360374.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.4.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988157dff9 code=0x7ffc0000 [ 438.284344][ T4736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.306473][ T155] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 438.323815][ T4736] usb 2-1: Product: syz [ 438.355305][ T4736] usb 2-1: Manufacturer: syz [ 438.359954][ T4736] usb 2-1: SerialNumber: syz [ 438.375463][ T3650] XFS (loop0): Unmounting Filesystem [ 438.797599][ T27] audit: type=1326 audit(1728360375.590:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.2.4930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52eeb7dff9 code=0x7ffc0000 [ 438.852873][ T27] audit: type=1326 audit(1728360375.590:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.2.4930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f52eeb7dff9 code=0x7ffc0000 [ 438.943577][ T27] audit: type=1326 audit(1728360375.590:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.2.4930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52eeb7dff9 code=0x7ffc0000 [ 439.008144][ T4736] usb 2-1: 0:2 : does not exist [ 439.027680][ T153] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 439.035780][ T27] audit: type=1326 audit(1728360375.590:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.2.4930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52eeb7dff9 code=0x7ffc0000 [ 439.125139][T15038] XFS (loop3): Ending clean mount [ 439.134270][ T4736] usb 2-1: USB disconnect, device number 18 [ 439.359509][T15038] XFS (loop3): Quotacheck needed: Please wait. [ 439.404123][T15137] loop2: detected capacity change from 0 to 16 [ 439.456023][T15137] erofs: (device loop2): mounted with root inode @ nid 36. [ 439.540495][T15137] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 439.560229][ T153] usb 5-1: Using ep0 maxpacket: 32 [ 439.591000][T15137] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 439.624128][T15137] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 439.686129][T15038] XFS (loop3): Quotacheck: Done. [ 439.791393][ T153] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 439.799871][ T153] usb 5-1: config 0 has no interface number 1 [ 439.824254][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.845776][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.852104][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.917619][ T3642] XFS (loop3): Unmounting Filesystem [ 440.216587][ T153] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 440.246044][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.284029][ T153] usb 5-1: Product: syz [ 440.288242][ T153] usb 5-1: Manufacturer: syz [ 440.292868][ T153] usb 5-1: SerialNumber: syz [ 440.334063][ T153] usb 5-1: config 0 descriptor?? [ 440.645712][ T153] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 440.653766][ T153] snd-usb-6fire: probe of 5-1:0.111 failed with error -71 [ 440.714304][ T153] usb 5-1: USB disconnect, device number 24 [ 441.375734][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4951'. [ 441.444000][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4951'. [ 441.907901][ T3654] Bluetooth: hci5: command 0x0406 tx timeout [ 442.134046][ C1] net_ratelimit: 11059 callbacks suppressed [ 442.134065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.134185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.140301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.152288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.164258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.177480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 442.188065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.200102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 442.212134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.223962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.300511][T15195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4962'. [ 442.915485][ T3717] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 443.073343][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'. [ 443.402491][ T3717] usb 3-1: Using ep0 maxpacket: 16 [ 443.634338][ T3717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.655254][ T3717] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 443.714836][T15223] loop4: detected capacity change from 0 to 2048 [ 443.744103][ T3717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 443.813966][ T3717] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 444.004162][ T3717] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.013265][ T3717] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.047007][ T3717] usb 3-1: Manufacturer: syz [ 444.054428][ T3717] usb 3-1: config 0 descriptor?? [ 444.091901][T15223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.198702][T15236] capability: warning: `syz.1.4982' uses 32-bit capabilities (legacy support in use) [ 444.418940][ T3717] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 444.497322][ T3717] usb 3-1: USB disconnect, device number 20 [ 445.025834][T15255] loop0: detected capacity change from 0 to 256 [ 445.234685][T15259] device gretap0 entered promiscuous mode [ 445.449859][T15259] netlink: 'syz.2.4993': attribute type 2 has an invalid length. [ 445.495231][T15259] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4993'. [ 446.924585][T15255] FAT-fs (loop0): Directory bread(block 64) failed [ 446.931186][T15255] FAT-fs (loop0): Directory bread(block 65) failed [ 446.959571][T15255] FAT-fs (loop0): Directory bread(block 66) failed [ 447.004036][T15255] FAT-fs (loop0): Directory bread(block 67) failed [ 447.034094][T15255] FAT-fs (loop0): Directory bread(block 68) failed [ 447.050934][T15255] FAT-fs (loop0): Directory bread(block 69) failed [ 447.078705][T15255] FAT-fs (loop0): Directory bread(block 70) failed [ 447.143972][T15255] FAT-fs (loop0): Directory bread(block 71) failed [ 447.146673][ C1] net_ratelimit: 9670 callbacks suppressed [ 447.146691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.151903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.156621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.169320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.180563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.192463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.204340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.217501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 447.228269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.240073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 447.292422][T15255] FAT-fs (loop0): Directory bread(block 72) failed [ 447.323488][T15255] FAT-fs (loop0): Directory bread(block 73) failed [ 447.743556][T15283] loop2: detected capacity change from 0 to 32768 [ 447.794011][T15283] XFS: attr2 mount option is deprecated. [ 447.829334][T15283] XFS: noikeep mount option is deprecated. [ 448.085204][T15283] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 448.437173][T15283] XFS (loop2): Quotacheck needed: Please wait. [ 448.568947][T15329] loop0: detected capacity change from 0 to 2048 [ 448.615136][ T4736] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 448.673991][ T4736] XFS (loop2): Unmount and run xfs_repair [ 448.690221][ T4736] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 448.719357][ T4736] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 448.763820][ T4736] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 448.782461][T15329] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 448.813989][ T4736] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 448.822970][ T4736] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 448.887006][ T4736] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 448.905635][T15329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.913954][ T4736] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 448.947775][ T4736] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 449.002738][ T4736] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 449.030549][T15305] loop4: detected capacity change from 0 to 32768 [ 449.039975][ T3701] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 449.074357][T15305] XFS: ikeep mount option is deprecated. [ 449.146881][ T3701] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 449.164390][ T3701] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 449.202809][T15283] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 449.286075][T15305] XFS (loop4): Mounting V5 Filesystem [ 449.298184][ T3651] XFS (loop2): Unmounting Filesystem [ 449.784346][T15349] netlink: 'syz.1.5031': attribute type 10 has an invalid length. [ 449.793608][T15349] bond0: (slave bond_slave_0): Releasing backup interface [ 452.154846][ C1] net_ratelimit: 10300 callbacks suppressed [ 452.154865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.173356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.175845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 452.185679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.197586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 452.209533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.221522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.234213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.246775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.258032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.787772][T15424] netlink: 'syz.1.5067': attribute type 2 has an invalid length. [ 452.827966][T15424] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5067'. [ 452.841357][T15426] tmpfs: Bad value for 'mpol' [ 452.883230][T15428] loop0: detected capacity change from 0 to 512 [ 453.554280][T15428] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.5070: corrupted inode contents [ 453.678925][T15428] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #16: comm syz.0.5070: mark_inode_dirty error [ 453.742141][T15428] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.5070: corrupted inode contents [ 453.837645][T15428] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.5070: mark_inode_dirty error [ 453.843979][ T3717] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 453.934706][T15428] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.5070: corrupted inode contents [ 454.085013][T15428] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 454.187546][T15428] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.5070: corrupted inode contents [ 454.266667][ T3717] usb 4-1: Using ep0 maxpacket: 32 [ 454.320396][T15428] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.5070: mark_inode_dirty error [ 454.423860][T15428] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 454.487633][ T3717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.514751][T15428] EXT4-fs (loop0): 1 truncate cleaned up [ 454.520487][T15428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 454.539860][T15305] XFS (loop4): Ending clean mount [ 454.564878][ T102] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 454.574057][T15428] ext4 filesystem being mounted at /1008/file1 supports timestamps until 2038 (0x7fffffff) [ 454.584014][ T102] EXT4-fs error (device loop0): ext4_release_dquot:6823: comm kworker/u4:4: Failed to release dquot type 1 [ 454.733320][T15305] XFS (loop4): Quotacheck needed: Please wait. [ 454.842529][ T3717] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 454.852610][ T3650] EXT4-fs (loop0): unmounting filesystem. [ 454.864895][ T3717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.873033][ T3717] usb 4-1: Product: syz [ 454.891483][ T3717] usb 4-1: Manufacturer: syz [ 454.896252][ T3717] usb 4-1: SerialNumber: syz [ 454.945945][ T3717] usb 4-1: config 0 descriptor?? [ 455.034176][ T3717] cdc_ether 4-1:0.0: skipping garbage [ 455.039640][ T3717] usb 4-1: bad CDC descriptors [ 455.045697][ T3717] usb 4-1: unsupported MDLM descriptors [ 455.177998][T15305] XFS (loop4): Quotacheck: Done. [ 455.241100][T12148] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 455.308461][ T6939] usb 4-1: USB disconnect, device number 24 [ 455.362131][ T3639] XFS (loop4): Unmounting Filesystem [ 455.582164][T12148] usb 2-1: Using ep0 maxpacket: 32 [ 455.799137][T12148] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 456.095712][T15488] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 456.181783][T12148] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 456.197339][T12148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.235490][T12148] usb 2-1: Product: syz [ 456.239749][T12148] usb 2-1: Manufacturer: syz [ 456.273277][T12148] usb 2-1: SerialNumber: syz [ 456.286040][T12148] usb 2-1: config 0 descriptor?? [ 456.323673][T15464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 456.405979][T12148] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 456.594131][ T3701] usb 2-1: Failed to submit usb control message: -71 [ 456.601572][ T3701] usb 2-1: unable to send the bmi data to the device: -71 [ 456.636157][T12148] usb 2-1: USB disconnect, device number 19 [ 456.653947][ T3701] usb 2-1: unable to get target info from device [ 456.660337][ T3701] usb 2-1: could not get target info (-71) [ 456.699978][ T3701] usb 2-1: could not probe fw (-71) [ 457.019876][T15511] adf_ctl_ioctl: 15 callbacks suppressed [ 457.019892][T15511] QAT: Invalid ioctl 21531 [ 457.164219][ C0] net_ratelimit: 10543 callbacks suppressed [ 457.164250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 457.182585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 457.190067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.194892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.206887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.219591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.230689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.242829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.254603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.268249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 457.337673][T15513] loop0: detected capacity change from 0 to 1024 [ 458.563820][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5128'. [ 458.597448][T15553] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 459.090365][T15569] xt_TCPMSS: Only works on TCP SYN packets [ 459.179179][T15573] loop2: detected capacity change from 0 to 256 [ 459.576975][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5144'. [ 459.649608][T15587] program syz.1.5145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.201782][T15573] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 460.228066][T15573] FAT-fs (loop2): Filesystem has been set read-only [ 460.374837][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5154'. [ 460.893754][T15621] loop3: detected capacity change from 0 to 2048 [ 461.046114][T15621] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 461.197359][T15621] syz.3.5160: attempt to access beyond end of device [ 461.197359][T15621] loop3: rw=0, sector=1125899906842706, nr_sectors = 2 limit=2048 [ 461.237393][T15621] NILFS (loop3): I/O error reading meta-data file (ino=5, block-offset=0) [ 461.294120][T15621] NILFS (loop3): error -5 while loading super root [ 461.383983][T12148] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 461.384030][ T4451] udevd[4451]: incorrect nilfs2 checksum on /dev/loop3 [ 461.537797][T15621] loop3: detected capacity change from 0 to 2048 [ 461.708167][T15642] loop4: detected capacity change from 0 to 256 [ 461.816867][T15621] NILFS (loop3): corrupt root inode [ 461.822810][T12148] usb 1-1: Using ep0 maxpacket: 16 [ 462.174288][ C1] net_ratelimit: 9003 callbacks suppressed [ 462.174307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.177893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 462.180441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.192496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:11:ef:4e:21:c9, vlan:0) [ 462.204489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.216306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.228535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.241155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.252411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.264289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.527550][T15642] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 462.542031][T15642] FAT-fs (loop4): Filesystem has been set read-only [ 462.711619][ T3717] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 462.732186][T12148] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 462.741448][T12148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.751572][T12148] usb 1-1: Product: syz [ 462.759174][T12148] usb 1-1: Manufacturer: syz [ 462.793868][T12148] usb 1-1: SerialNumber: syz [ 462.800989][T12148] usb 1-1: config 0 descriptor?? [ 462.910481][T12148] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 463.144674][T12148] pwc: Warning: more than 1 configuration available. [ 463.190774][T12148] pwc: Failed to set LED on/off time (-71) [ 463.231816][ T27] audit: type=1326 audit(1728360400.020:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 463.267912][T12148] pwc: send_video_command error -71 [ 463.273155][T12148] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 463.280909][T12148] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 463.335914][T12148] usb 1-1: USB disconnect, device number 23 [ 463.353971][ T27] audit: type=1326 audit(1728360400.020:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 463.400710][ T3717] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 463.409167][ T3717] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 463.427990][ T3717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.444020][ T27] audit: type=1326 audit(1728360400.050:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 463.444063][ T27] audit: type=1326 audit(1728360400.050:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 463.444100][ T27] audit: type=1326 audit(1728360400.050:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.1.5185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636e57dff9 code=0x7ffc0000 [ 463.649006][ T6939] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 463.656796][ T3717] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.676296][ T3717] usb 3-1: config 0 has no interface number 0 [ 463.682420][ T3717] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 463.776213][ T3717] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.841217][ T3717] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.856970][ T3717] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 463.876003][ T3717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.918474][ T3717] usb 3-1: config 0 descriptor?? [ 463.979810][ T3717] gspca_main: spca561-2.14.0 probing abcd:cdee [ 464.269314][ T6939] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 464.286151][ T6939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.308510][ T3717] spca561: probe of 3-1:0.156 failed with error -22 [ 464.330740][ T3717] usb 3-1: MIDIStreaming interface descriptor not found [ 464.337904][ T6939] usb 5-1: config 0 has no interface number 0 [ 464.354241][ T6939] usb 5-1: config 0 interface 175 has no altsetting 0 [ 464.378537][ T6939] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 464.423950][ T6939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.478209][ T6939] usb 5-1: config 0 descriptor?? [ 464.498838][ T3717] usb 3-1: USB disconnect, device number 21 [ 464.535276][ T6939] option 5-1:0.175: GSM modem (1-port) converter detected [ 464.844022][ T6939] usb 5-1: USB disconnect, device number 25 [ 464.851271][ T6939] option 5-1:0.175: device disconnected [ 465.621574][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5204'. [ 466.319683][T15736] overlayfs: conflicting options: nfs_export=on,index=off [ 466.646645][T15746] netlink: 'syz.2.5221': attribute type 3 has an invalid length. [ 467.183943][ C1] net_ratelimit: 10061 callbacks suppressed [ 467.183962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.184005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.190121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.203011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.214129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.226098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.238002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.274031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.286332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.295219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:e7:fe:6f:53:cd, vlan:0) [ 467.613121][ T28] INFO: task syz.1.3703:12241 blocked for more than 143 seconds. [ 467.630980][ T28] Not tainted 6.1.112-syzkaller #0 [ 467.663946][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 467.730786][ T28] task:syz.1.3703 state:D stack:24552 pid:12241 ppid:3640 flags:0x00004004 [ 467.790220][ T28] Call Trace: [ 467.808994][ T28] [ 467.811981][ T28] __schedule+0x143f/0x4570 [ 467.931022][ T28] ? xlog_grant_head_wait+0x1ee/0xa00 [ 467.983945][ T28] ? release_firmware_map_entry+0x186/0x186 [ 467.989913][ T28] ? xlog_space_left+0xa9/0x2b0 [ 468.021588][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 468.053947][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 468.059886][ T28] schedule+0xbf/0x180 [ 468.106241][ T28] xlog_grant_head_wait+0x3b6/0xa00 [ 468.111522][ T28] xlog_grant_head_check+0x295/0x480 [ 468.143462][ T28] ? xlog_grant_push_ail+0xd0/0xd0 [ 468.165065][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 468.170942][ T28] xfs_log_reserve+0x3e1/0xc30 [ 468.213961][ T28] ? xlog_grant_head_check+0x480/0x480 [ 468.219522][ T28] ? xfs_mod_freecounter+0x1e2/0x490 [ 468.226197][ T28] xfs_trans_reserve+0x239/0x6a0 [ 468.231192][ T28] xfs_trans_alloc+0x41b/0x870 [ 468.263797][ T28] xfs_trans_alloc_inode+0x129/0x450 [ 468.269537][ T28] ? xfs_trans_dup+0x6a0/0x6a0 [ 468.303949][ T28] ? xfs_da_hashname+0x23f/0x370 [ 468.308941][ T28] ? xfs_attr_leaf_newentsize+0xd5/0x1d0 [ 468.334053][ T28] xfs_attr_set+0xa4e/0x1660 [ 468.338815][ T28] ? xfs_attr_leaf_shrink+0x410/0x410 [ 468.373248][ T28] ? lockdep_unlock+0x165/0x300 [ 468.383952][ T28] xfs_xattr_set+0x227/0x3a0 [ 468.388602][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 468.393407][ T28] ? evm_protect_xattr+0x366/0xb10 [ 468.442045][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 468.451589][ T28] __vfs_setxattr+0x3e7/0x420 [ 468.466680][ T28] __vfs_setxattr_noperm+0x12a/0x5e0 [ 468.472031][ T28] vfs_setxattr+0x21d/0x420 [ 468.486969][ T28] ? xattr_permission+0x4f0/0x4f0 [ 468.492043][ T28] ? _copy_from_user+0xa1/0x170 [ 468.508300][ T28] ? copy_user_enhanced_fast_string+0xa/0x40 [ 468.514615][ T28] ? _copy_from_user+0x109/0x170 [ 468.519610][ T28] setxattr+0x250/0x2b0 [ 468.534462][ T28] ? path_setxattr+0x2a0/0x2a0 [ 468.539315][ T28] ? __mnt_want_write+0x222/0x2a0 [ 468.555414][ T28] path_setxattr+0x1bc/0x2a0 [ 468.560062][ T28] ? simple_xattr_list_add+0xf0/0xf0 [ 468.585992][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 468.592045][ T28] __x64_sys_setxattr+0xb7/0xd0 [ 468.607368][ T28] do_syscall_64+0x3b/0xb0 [ 468.611831][ T28] ? clear_bhb_loop+0x45/0xa0 [ 468.627234][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.633200][ T28] RIP: 0033:0x7f260837dff9 [ 468.647918][ T28] RSP: 002b:00007f26090f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 468.666444][ T28] RAX: ffffffffffffffda RBX: 00007f2608535f80 RCX: 00007f260837dff9 [ 468.685588][ T28] RDX: 0000000020000880 RSI: 0000000020000240 RDI: 0000000020000300 [ 468.693602][ T28] RBP: 00007f26083f0296 R08: 0000000000000000 R09: 0000000000000000 [ 468.711871][ T28] R10: 000000000000ff27 R11: 0000000000000246 R12: 0000000000000000 [ 468.730795][ T28] R13: 0000000000000000 R14: 00007f2608535f80 R15: 00007fff0e7bec98 [ 468.758377][ T28] [ 468.761536][ T28] [ 468.761536][ T28] Showing all locks held in the system: [ 468.770745][ T28] 1 lock held by rcu_tasks_kthre/12: [ 468.786240][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 468.807084][ T28] 1 lock held by rcu_tasks_trace/13: [ 468.812421][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 468.858671][ T28] 3 locks held by ksoftirqd/1/21: [ 468.863750][ T28] 1 lock held by khungtaskd/28: [ 468.880002][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 468.909939][ T28] 2 locks held by getty/3393: [ 468.914955][ T28] #0: ffff88814b80a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 468.935087][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 468.956227][ T28] 2 locks held by kworker/1:3/3630: [ 468.973936][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.003934][ T28] #1: ffffc90003a6fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.039118][ T28] 1 lock held by syz-executor/3642: [ 469.054398][ T28] #0: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 469.081348][ T28] 2 locks held by syz-executor/3650: [ 469.103934][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 469.113164][ T28] #1: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 469.165599][ T28] 2 locks held by kworker/1:14/4736: [ 469.170947][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.200052][ T28] #1: ffffc900033ffd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.226327][ T28] 2 locks held by kworker/1:15/4737: [ 469.231649][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.251985][ T28] #1: ffffc9000340fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.286692][ T28] 2 locks held by kworker/0:16/6939: [ 469.292014][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.332195][ T28] #1: ffffc900038bfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 469.344875][ T28] 3 locks held by syz.1.3703/12241: [ 469.350106][ T28] #0: ffff88805596a460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 469.370208][ T28] #1: ffff888072f331b8 (&inode->i_sb->s_type->i_mutex_dir_key#2){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 469.401691][ T28] #2: ffff88805596a650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 469.483965][ T28] [ 469.486433][ T28] ============================================= [ 469.486433][ T28] [ 469.544696][ T28] NMI backtrace for cpu 0 [ 469.549166][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 469.557105][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.567176][ T28] Call Trace: [ 469.570462][ T28] [ 469.573398][ T28] dump_stack_lvl+0x1e3/0x2cb [ 469.578095][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 469.583569][ T28] ? panic+0x764/0x764 [ 469.587644][ T28] ? vprintk_emit+0x622/0x740 [ 469.592336][ T28] ? printk_sprint+0x490/0x490 [ 469.597112][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 469.602250][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 469.607196][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 469.613361][ T28] ? _printk+0xd1/0x111 [ 469.617526][ T28] ? panic+0x764/0x764 [ 469.621600][ T28] ? __wake_up_klogd+0xcc/0x100 [ 469.626481][ T28] ? panic+0x764/0x764 [ 469.630556][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 469.636634][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 469.642716][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 469.648732][ T28] watchdog+0xf88/0xfd0 [ 469.652902][ T28] ? watchdog+0x1f8/0xfd0 [ 469.657248][ T28] kthread+0x28d/0x320 [ 469.661337][ T28] ? hungtask_pm_notify+0x50/0x50 [ 469.666372][ T28] ? kthread_blkcg+0xd0/0xd0 [ 469.670964][ T28] ret_from_fork+0x1f/0x30 [ 469.675399][ T28] [ 469.678478][ T28] Sending NMI from CPU 0 to CPUs 1: [ 469.683702][ C1] NMI backtrace for cpu 1 [ 469.683713][ C1] CPU: 1 PID: 3701 Comm: kworker/u4:5 Not tainted 6.1.112-syzkaller #0 [ 469.683730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.683747][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 469.683780][ C1] RIP: 0010:__lock_acquire+0xf7f/0x1f80 [ 469.683808][ C1] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 d2 1d 91 be 08 00 00 00 e8 c9 99 77 00 48 0f a3 1d d1 38 b3 0f <0f> 83 bb 01 00 00 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 51 bb 90 48 [ 469.683823][ C1] RSP: 0018:ffffc9000479f820 EFLAGS: 00000057 [ 469.683837][ C1] RAX: 0000000000000001 RBX: 00000000000006c2 RCX: ffffffff816a9947 [ 469.683849][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911dd2f8 [ 469.683860][ C1] RBP: d41faf28f408d32d R08: dffffc0000000000 R09: fffffbfff223ba60 [ 469.683874][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027b30ad8 [ 469.683886][ C1] R13: ffff888027b30000 R14: 0000000000000000 R15: 1ffff11004f6616f [ 469.683903][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 469.683919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.683931][ C1] CR2: 00007f98783f6000 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 469.683947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.683957][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.683967][ C1] Call Trace: [ 469.683972][ C1] [ 469.683978][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 469.683996][ C1] ? read_lock_is_recursive+0x10/0x10 [ 469.684028][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 469.684054][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 469.684080][ C1] ? nmi_handle+0x12e/0x440 [ 469.684106][ C1] ? nmi_handle+0x25/0x440 [ 469.684131][ C1] ? __lock_acquire+0xf7f/0x1f80 [ 469.684170][ C1] ? default_do_nmi+0x62/0x150 [ 469.684189][ C1] ? exc_nmi+0xa8/0x100 [ 469.684206][ C1] ? end_repeat_nmi+0x16/0x31 [ 469.684234][ C1] ? __lock_acquire+0xf77/0x1f80 [ 469.684259][ C1] ? __lock_acquire+0xf7f/0x1f80 [ 469.684283][ C1] ? __lock_acquire+0xf7f/0x1f80 [ 469.684309][ C1] ? __lock_acquire+0xf7f/0x1f80 [ 469.684333][ C1] [ 469.684338][ C1] [ 469.684350][ C1] lock_acquire+0x1f8/0x5a0 [ 469.684374][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 469.684404][ C1] ? read_lock_is_recursive+0x10/0x10 [ 469.684429][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 469.684462][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 469.684485][ C1] ? batadv_primary_if_get_selected+0x3f0/0x510 [ 469.684520][ C1] batadv_iv_ogm_schedule+0x43b/0x1090 [ 469.684546][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 469.684575][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 469.684605][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 469.684634][ C1] ? batadv_send_skb_packet+0x417/0x660 [ 469.684655][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 469.684690][ C1] ? process_one_work+0x7a9/0x11d0 [ 469.684709][ C1] process_one_work+0x8a9/0x11d0 [ 469.684736][ C1] ? worker_detach_from_pool+0x260/0x260 [ 469.684758][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 469.684779][ C1] ? kthread_data+0x4e/0xc0 [ 469.684805][ C1] ? wq_worker_running+0x97/0x190 [ 469.684822][ C1] worker_thread+0xa47/0x1200 [ 469.684846][ C1] ? _raw_spin_unlock+0x40/0x40 [ 469.684872][ C1] kthread+0x28d/0x320 [ 469.684886][ C1] ? worker_clr_flags+0x190/0x190 [ 469.684905][ C1] ? kthread_blkcg+0xd0/0xd0 [ 469.684920][ C1] ret_from_fork+0x1f/0x30 [ 469.684949][ C1] [ 470.350446][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 470.357349][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 470.365268][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 470.375434][ T28] Call Trace: [ 470.378732][ T28] [ 470.381684][ T28] dump_stack_lvl+0x1e3/0x2cb [ 470.386407][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 470.391902][ T28] ? panic+0x764/0x764 [ 470.396003][ T28] ? llist_add_batch+0x160/0x1d0 [ 470.400980][ T28] ? vscnprintf+0x59/0x80 [ 470.405342][ T28] panic+0x318/0x764 [ 470.409278][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 470.415464][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 470.420876][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 470.427144][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 470.433333][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 470.439520][ T28] watchdog+0xfc7/0xfd0 [ 470.443718][ T28] ? watchdog+0x1f8/0xfd0 [ 470.448085][ T28] kthread+0x28d/0x320 [ 470.452183][ T28] ? hungtask_pm_notify+0x50/0x50 [ 470.457237][ T28] ? kthread_blkcg+0xd0/0xd0 [ 470.461850][ T28] ret_from_fork+0x1f/0x30 [ 470.466323][ T28] [ 470.469664][ T28] Kernel Offset: disabled [ 470.474039][ T28] Rebooting in 86400 seconds..