last executing test programs: 2m57.439680129s ago: executing program 3 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2m57.264248232s ago: executing program 3 (id=2751): r0 = fsopen(&(0x7f0000000540)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='.\x00', &(0x7f00000005c0)='/dev/snapshot\x00', 0x0) readv(r0, &(0x7f0000003340)=[{&(0x7f0000002e80)=""/242, 0xf2}], 0x1) 2m57.130957882s ago: executing program 3 (id=2752): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r0, &(0x7f0000000100)={0x78}, 0xfeb1) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 2m56.954519094s ago: executing program 3 (id=2754): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 2m56.051409587s ago: executing program 3 (id=2764): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x8, 0xe, 0x6, 0x2, 0x1, 0x1, 0x1, 0x6, 0x10000105, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 2m55.220557366s ago: executing program 3 (id=2771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000002780)) 2m54.566984937s ago: executing program 32 (id=2771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, &(0x7f0000002780)) 2m42.025261153s ago: executing program 1 (id=2860): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000a00)="c021", 0x2) 2m41.030812356s ago: executing program 1 (id=2863): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) rename(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 2m40.451668983s ago: executing program 1 (id=2866): r0 = fanotify_init(0x200, 0x0) r1 = dup(r0) fanotify_mark(r0, 0x401, 0x1018, r1, 0x0) 2m40.092645348s ago: executing program 1 (id=2869): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 2m39.482006504s ago: executing program 1 (id=2872): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000480)={@private=0xa010100, @local}, 0x8) 2m38.9164875s ago: executing program 1 (id=2874): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2m38.265268335s ago: executing program 33 (id=2874): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2m10.34493165s ago: executing program 6 (id=3046): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52c", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001140)={r0, r1, r0}, &(0x7f0000001340)=""/181, 0xb5, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}}) 2m10.20537647s ago: executing program 6 (id=3049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m9.991271915s ago: executing program 6 (id=3052): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c"], 0x92fc}}, 0x0) 2m9.781087715s ago: executing program 6 (id=3054): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m9.160385972s ago: executing program 6 (id=3061): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x3, &(0x7f0000000080)={0x0, "4a070000825e000000a0563670af790000000000000a00"}}) 2m8.348453861s ago: executing program 6 (id=3070): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2m7.761995524s ago: executing program 34 (id=3070): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1m1.12059622s ago: executing program 5 (id=3540): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x80, 0x0}, 0x4000080) 1m0.924417275s ago: executing program 5 (id=3542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) 1m0.611888985s ago: executing program 5 (id=3544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x500, 0x0) 1m0.076448044s ago: executing program 5 (id=3551): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x6b]}}]}) 59.672278303s ago: executing program 5 (id=3554): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000}) 59.162196823s ago: executing program 5 (id=3559): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) 58.48735186s ago: executing program 35 (id=3559): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) 10.436396494s ago: executing program 2 (id=3945): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x200009) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) 10.276140596s ago: executing program 2 (id=3947): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 10.072490107s ago: executing program 2 (id=3948): ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xa4081, 0x0) 8.428275977s ago: executing program 2 (id=3959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0) 8.326972418s ago: executing program 2 (id=3961): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@checkpoint_diasble}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@noinline_dentry}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '&\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {}, {@discard_unit_segment}, {@test_dummy_encryption_v1}, {@lfs_mode}, {@noinline_xattr}, {@four_active_logs}, {@compress_cache}]}, 0xfd, 0x5529, &(0x7f0000000600)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWVYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeR7L9BAkZDixKT5/aTzc/fe6+ee14oiPXeWAzixlrJff67ExTgbEfMRcSGi2K+UW+FWCi9ExKWImHtsq5Tjfw6cjohzEXFxkjzlrJSnPr8yvnzjp7d++ea7M6fOf/H197NbNTBrL0ZEfyPtb/dTzDspPizHG+NuEfvXx2VMJ3qL6Xw/T+Pb7bUiw3Zjb16jiNc6aX6+sTWcxPVeozmJne56Mb4xSBccjjt7eYo3PGxsFset9loRu8O8iJ3ddN2d3fS/bXc4SnlaZb6PivQxGu3FNN7eaaf1bDwqYnMwKsdT3rzV3pnEcRnLy0Uz77WKOtYO8EH/z73dHWztZOP25rCbD7IbtfpLtfrNan0zb7VH7evVRr9183q23OlNplVH7Ub/VifPO712rZn3V7LlTrNZrdez5dvttW5jkNXrtWu1q9UbK+Xelez1e+9lvVa2PImvdgdbo25vmK3nm1l6x0q2Wrv28kp2uZ69c/d+dv/BnTt377/7we33771y983Xykn/KCtbXr26ulqtX62u1ldO0Po/KYue4vrhQCqzLgDg+NH/A7NwkP6//6g8fmL/v/kg4vD7/9D/T8Wx6n9Pev9/COuHA9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlGsbOUjs+X48+UQ8+Vx5WImIuI359gPk7vyzlf5ln4l/kLf6vh20oUGSbXOFNu5yLiVrn99uxhfwoAAADw9Prq40ufpW49vSzNuiCOUrppM3fhwynlW4yIhaUfp5RtbvLy/JSSFX/fp2JnStmKG1iLU0qWbrmdmla2/2R+X1h8LFRSmDvScgAAgCOxvxM42i4EAACAo/TprAtgNiqx9yhz71lw8c37vx4Int13BAAAABxDlVkXAAAAABy6ov/3+38AAADwdEu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BJyzDGigDRBATlQQxqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X0kBcQR0QxACiQEWer2Wlm6IARQx8CcgRem1BK78aDPQqkJkYUOZuyAYEUICha3/Q+dW6lK2DjcUCTEess++c9sILlFjH8nnIz2/ry3H7/t8UpSvn3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBq9O4uTbNOZxHFx7PaD6+tZf+eRPnNz++5K1rI4qjPp/4eXqztRt7lEAAAAODqSsr4PIdxLd1azPu7k9X9anpPV/D88O4nLev7Rur/sy9o/a7//dv/F6UCdyTjZRS9sDAcnH0+ldXCzXGzP/ecZrfzO589ekvwDiT/YemGU5vcz+u7WrffaeXisjmwBgP04UfZFUP49lPX9JhMD4MhoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0VZ4uoyjEMJKaxZn7jy4vr5bf3P77krZzt64sR2+mV0zu0QaQriwMRycrHU2i+3K1Wufrg2Hg8tPIFgqrjnnT70SQniCo+8peKdM9aM5Tg6hgQz3E/x9wEO0mp7g/oK4+LAXJZ/GgyTMcXJDv5AAADi00qJldf29dGc1OxYthzD+8eH6//VKHOas/+9/fPZ2daxq/d+vbYaLr7d56YvelavX3ty4tHZxcHHw2Vun+m/3T587c+ZcL39W0vPEBAAAgD0bj8fj6U67aNX6P15+fP3/eCUOc9b/X37f/7o6cKL+39Vs0a/pTAAAAI6251/9689ol+NRux2+WtvcvNyfbKf7pybbBlLds2NFq9b/yXLTWQEAAAB1GG1FD63/n6/EYc71/2d+eumX6jWTEMJSsf5/Yv3z4fn6prPQ6viX46bnCAAAQLOWilZd/0/z9//j6SsPcQjhjdcmcfE1gP9a/6dF/Z+8/+3P1bGq7/+frm+KCynuTu5H3ndDaHWbzggAAIDD7KmiZcX+H+nO6ie/Hv+w7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9EwAA//8qZjvb") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) 6.655845435s ago: executing program 2 (id=3966): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 2.425545594s ago: executing program 4 (id=4013): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, 0x0, 0x0) 2.194418586s ago: executing program 4 (id=4017): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 2.003197641s ago: executing program 8 (id=4019): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r0, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 1.985795211s ago: executing program 4 (id=4020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x203, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 1.776226012s ago: executing program 8 (id=4022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200400000000000000bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.691653266s ago: executing program 4 (id=4023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x1c, r1, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 1.570187619s ago: executing program 8 (id=4025): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 1.468409275s ago: executing program 7 (id=4026): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.468197068s ago: executing program 4 (id=4027): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 1.340420431s ago: executing program 0 (id=4028): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x6}, 0x40002102) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 1.312844951s ago: executing program 7 (id=4029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x20000000) 1.21057255s ago: executing program 4 (id=4030): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.094220618s ago: executing program 7 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.038785238s ago: executing program 0 (id=4032): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}, 0x5}], 0x1, 0x0, 0x0) 765.114032ms ago: executing program 0 (id=4033): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x9e, @loopback, 0xff}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x4000) 763.507458ms ago: executing program 8 (id=4034): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x4109}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 738.871272ms ago: executing program 7 (id=4035): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 591.310412ms ago: executing program 0 (id=4036): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) 476.780988ms ago: executing program 7 (id=4037): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 445.05533ms ago: executing program 8 (id=4038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) 374.333669ms ago: executing program 0 (id=4039): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000002c0)={0x130, 0x0, r1, {0x4000000000007, 0x4, 0x0, '\x00', {0x8, 0x200, 0x4, 0x412, 0xffffffffffffffff, 0xee00, 0xa000, '\x00', 0x3, 0x8000, 0xb, 0x8000000000000001, {0x2000000000000, 0x2000dc3b}, {0x3d82, 0x5}, {0x40000000c, 0x1007}, {0x8000000000000001, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 124.23836ms ago: executing program 8 (id=4040): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 366.815µs ago: executing program 7 (id=4041): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 0s ago: executing program 0 (id=4042): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x7, 0x4d34a271, 0x2, 0x2, 0xcc7, 0x10043, 0x201, 0x84, 0x1000000, 0x4, 0x4b, 0x1, 0xfffffffd, 0xa, 0x10000105, 0x3, 0x1a458, 0x2, 0x3fff7fff, 0x85, 0x8, 0x8, 0x20001e58, 0x8001, 0xe69, 0x3c, 0x1, 0x4006, 0xfffffffc, 0xfffffff8]}) kernel console output (not intermixed with test programs): x8f/0x2b0 [ 361.420062][T13300] do_new_mount+0x302/0xa10 [ 361.420086][T13300] ? apparmor_capable+0x137/0x1b0 [ 361.420115][T13300] ? __pfx_do_new_mount+0x10/0x10 [ 361.420150][T13300] ? ns_capable+0x8a/0xf0 [ 361.420184][T13300] ? kmem_cache_free+0x19a/0x690 [ 361.420224][T13300] __se_sys_mount+0x313/0x410 [ 361.420258][T13300] ? __pfx___se_sys_mount+0x10/0x10 [ 361.420290][T13300] ? do_syscall_64+0xbe/0xfa0 [ 361.420306][T13300] ? __x64_sys_mount+0x20/0xc0 [ 361.420335][T13300] do_syscall_64+0xfa/0xfa0 [ 361.420351][T13300] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.420379][T13300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.420397][T13300] ? clear_bhb_loop+0x60/0xb0 [ 361.420422][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.420441][T13300] RIP: 0033:0x7f35e2d9038a [ 361.420461][T13300] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.420478][T13300] RSP: 002b:00007f35e3ce7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.420501][T13300] RAX: ffffffffffffffda RBX: 00007f35e3ce7ef0 RCX: 00007f35e2d9038a [ 361.420515][T13300] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 00007f35e3ce7eb0 [ 361.420529][T13300] RBP: 0000200000000100 R08: 00007f35e3ce7ef0 R09: 0000000000004004 [ 361.420541][T13300] R10: 0000000000004004 R11: 0000000000000246 R12: 0000200000000040 [ 361.420554][T13300] R13: 00007f35e3ce7eb0 R14: 000000000001260a R15: 0000200000000600 [ 361.420591][T13300] [ 361.420646][T13300] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 361.894564][ T5864] Bluetooth: hci1: command tx timeout [ 362.430263][T13314] loop2: detected capacity change from 0 to 4096 [ 362.889764][T13311] loop4: detected capacity change from 0 to 32768 [ 362.986740][T13311] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 363.124807][T13311] XFS (loop4): Ending clean mount [ 363.377777][ T5869] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 363.981384][T13336] loop4: detected capacity change from 0 to 1024 [ 364.052171][T13336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 364.094675][T13336] ext4 filesystem being mounted at /614/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.188959][T13332] loop2: detected capacity change from 0 to 32768 [ 364.242900][ T13] team0 (unregistering): Port device team_slave_1 removed [ 364.255851][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.301073][T13332] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.472421][T13332] XFS (loop2): Ending clean mount [ 364.503833][ T13] team0 (unregistering): Port device team_slave_0 removed [ 364.616174][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 365.708601][T13361] loop2: detected capacity change from 0 to 32768 [ 365.826515][T13361] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 365.953916][T13361] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 366.026820][T13361] XFS (loop2): Starting recovery (logdev: internal) [ 366.066530][T13361] XFS (loop2): Ending recovery (logdev: internal) [ 366.086292][T13361] XFS (loop2): Quotacheck needed: Please wait. [ 366.141661][T13361] XFS (loop2): Quotacheck: Done. [ 366.291878][T13178] team0: Port device team_slave_0 added [ 366.322794][T13178] team0: Port device team_slave_1 added [ 366.338892][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.600566][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 366.771977][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.804135][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.871111][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.997423][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.024225][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.094090][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.736150][T13178] hsr_slave_0: entered promiscuous mode [ 367.773053][T13178] hsr_slave_1: entered promiscuous mode [ 368.309566][T13394] loop4: detected capacity change from 0 to 32768 [ 368.381453][T13394] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.540431][T13394] XFS (loop4): Ending clean mount [ 368.678805][T13403] loop2: detected capacity change from 0 to 32768 [ 368.736253][ T5869] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.825806][T13403] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 368.920101][T13403] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 369.260748][T13178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.344397][ T5858] ocfs2: Unmounting device (7,2) on (node local) [ 369.398601][T13178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.479764][T13178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.543513][T13178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.821186][T13443] loop2: detected capacity change from 0 to 1024 [ 369.911167][T13443] hfsplus: bad catalog entry type [ 370.037033][ T13] hfsplus: b-tree write err: -5, ino 4 [ 370.133680][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.259076][T13178] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.346846][T13422] loop5: detected capacity change from 0 to 32768 [ 370.380958][T13422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3133 (13422) [ 370.503323][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.510616][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.518376][T13422] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.573708][T13422] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 370.596483][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.603716][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.942710][T13422] BTRFS info (device loop5): rebuilding free space tree [ 371.048749][T13422] BTRFS info (device loop5): enabling ssd optimizations [ 371.104214][T13422] BTRFS info (device loop5): turning on sync discard [ 371.110958][T13422] BTRFS info (device loop5): enabling free space tree [ 371.154793][T13422] BTRFS info (device loop5): force clearing of disk cache [ 371.161989][T13422] BTRFS info (device loop5): enabling auto defrag [ 371.235019][ T5925] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 371.243630][T13453] loop2: detected capacity change from 0 to 32768 [ 371.260373][T13422] BTRFS info (device loop5): max_inline set to 0 [ 371.354282][T13453] JBD2: Ignoring recovery information on journal [ 371.436301][ T5925] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 371.451092][ T5925] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 371.467935][ T5925] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.491266][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.510172][ T5925] usb 5-1: SerialNumber: syz [ 371.512244][ T30] audit: type=1800 audit(1757400712.881:2487): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3133" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 371.527842][T13481] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.571374][T13453] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 371.685286][T13422] BTRFS info (device loop5): balance: start -susage=0..5,vrange=8..134217792,limit=5 [ 371.759827][T13422] BTRFS info (device loop5): balance: ended with status: 0 [ 371.777092][T13178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.849781][ T5858] ocfs2: Unmounting device (7,2) on (node local) [ 372.063036][T12242] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.744130][ T5932] usb 5-1: USB disconnect, device number 20 [ 373.057252][T13524] comedi comedi3: mpc624: I/O port conflict (0x4f27,16) [ 373.185383][T13178] veth0_vlan: entered promiscuous mode [ 373.277722][T13178] veth1_vlan: entered promiscuous mode [ 373.396060][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 373.417704][T13178] veth0_macvtap: entered promiscuous mode [ 373.434187][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 373.472890][T13178] veth1_macvtap: entered promiscuous mode [ 373.568754][T13178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.619042][T13178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.730923][ T143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.758907][ T143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.808512][ T143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.855422][ T143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.127273][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.159349][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.202350][ T5861] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 374.270611][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.324107][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.385087][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 374.400037][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.431634][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.485168][ T5861] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 374.523755][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.567466][ T5861] usb 5-1: config 0 descriptor?? [ 374.712089][T13560] loop5: detected capacity change from 0 to 1024 [ 374.857582][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 374.894195][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.990846][ T5861] usb 5-1: USB disconnect, device number 21 [ 375.058838][ T49] hfsplus: b-tree write err: -5, ino 4 [ 375.216559][T13569] loop5: detected capacity change from 0 to 256 [ 375.230936][T13543] loop2: detected capacity change from 0 to 32768 [ 375.280568][T13543] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.444222][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 375.480584][T13569] FAT-fs (loop5): Directory bread(block 64) failed [ 375.539934][T13569] FAT-fs (loop5): Directory bread(block 65) failed [ 375.584632][T13569] FAT-fs (loop5): Directory bread(block 66) failed [ 375.596295][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 375.608815][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 375.624606][T13569] FAT-fs (loop5): Directory bread(block 67) failed [ 375.641748][T13569] FAT-fs (loop5): Directory bread(block 68) failed [ 375.651773][T13543] XFS (loop2): Ending clean mount [ 375.654551][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 375.682837][T13543] XFS (loop2): Quotacheck needed: Please wait. [ 375.722448][T13569] FAT-fs (loop5): Directory bread(block 69) failed [ 375.724071][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.744385][T13569] FAT-fs (loop5): Directory bread(block 70) failed [ 375.771309][T13569] FAT-fs (loop5): Directory bread(block 71) failed [ 375.797837][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.814529][T13569] FAT-fs (loop5): Directory bread(block 72) failed [ 375.821109][T13569] FAT-fs (loop5): Directory bread(block 73) failed [ 375.844511][T13543] XFS (loop2): Quotacheck: Done. [ 375.852609][ T5861] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 375.862078][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 375.870267][ T5861] usb 5-1: SerialNumber: syz [ 375.897893][ T5861] usb 5-1: config 0 descriptor?? [ 375.922209][ T5861] hso 5-1:0.0: Can't find BULK OUT endpoint [ 376.086016][ T5858] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.212360][T13591] program syz.7.3178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.243678][ T5861] usb 5-1: USB disconnect, device number 22 [ 376.392058][T13596] loop5: detected capacity change from 0 to 16 [ 376.474975][T13596] erofs (device loop5): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 376.501819][ T6009] udevd[6009]: incorrect erofs checksum on /dev/loop5 [ 376.518762][T13596] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 376.580042][T13596] CIFS mount error: No usable UNC path provided in device string! [ 376.580042][T13596] [ 376.657962][T13596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 376.875884][ T5861] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 377.064939][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.113700][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 377.161800][ T5861] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 377.197361][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.230280][T13616] loop2: detected capacity change from 0 to 128 [ 377.296083][T13616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 377.315265][ T5861] usb 1-1: config 0 descriptor?? [ 377.326170][T13599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 377.374624][T13616] hpfs: filesystem error: improperly stopped [ 377.424248][T13616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 377.432047][T13616] hpfs: You really don't want any checks? You are crazy... [ 377.494950][T13616] hpfs: hpfs_map_sector(): read error [ 377.500474][T13616] hpfs: code page support is disabled [ 377.564473][T13616] hpfs: hpfs_map_4sectors(): unaligned read [ 377.570520][T13616] hpfs: hpfs_map_4sectors(): unaligned read [ 377.620981][T13616] hpfs: filesystem error: unable to find root dir [ 377.783930][ T5861] saitek 0003:06A3:0CCD.000C: item fetching failed at offset 0/2 [ 377.837124][ T5861] saitek 0003:06A3:0CCD.000C: parse failed [ 377.843133][ T5861] saitek 0003:06A3:0CCD.000C: probe with driver saitek failed with error -22 [ 377.925549][T13634] netlink: 'syz.5.3190': attribute type 31 has an invalid length. [ 377.963777][ T5949] usb 1-1: USB disconnect, device number 17 [ 378.202149][T13642] loop5: detected capacity change from 0 to 1024 [ 378.438441][ T49] hfsplus: b-tree write err: -5, ino 4 [ 378.441641][T13601] loop7: detected capacity change from 0 to 40427 [ 378.507949][T13601] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 378.557392][T13601] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 378.635343][T13601] F2FS-fs (loop7): invalid crc value [ 378.682630][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.822317][ T30] audit: type=1800 audit(1757400720.221:2488): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3196" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 379.193383][T13601] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 379.251469][T13601] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 379.263240][T13601] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 379.294531][T13669] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 379.436444][T13675] loop5: detected capacity change from 0 to 128 [ 380.074276][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 381.470414][T13701] loop5: detected capacity change from 0 to 40427 [ 381.519225][T13701] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 381.542190][T13701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 381.647464][T13701] F2FS-fs (loop5): invalid crc value [ 381.884123][ T5932] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 381.997583][T13701] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 382.019056][T13701] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 382.034444][T13701] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 382.056353][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 382.077638][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 382.116914][ T5932] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 382.154102][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.233856][T13770] loop4: detected capacity change from 0 to 16 [ 382.240820][ T5932] usb 3-1: config 0 descriptor?? [ 382.271066][T13750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 382.330084][T13770] erofs (device loop4): mounted with root inode @ nid 36. [ 382.662580][ T5949] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 382.722705][ T5932] apple 0003:05AC:0264.000D: unbalanced delimiter at end of report description [ 382.765331][ T5932] apple 0003:05AC:0264.000D: parse failed [ 382.771312][ T5932] apple 0003:05AC:0264.000D: probe with driver apple failed with error -22 [ 382.818085][ T5963] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 382.884944][ T5949] usb 8-1: Using ep0 maxpacket: 16 [ 382.892555][ T5949] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.929891][ T5949] usb 8-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 382.952899][ T5932] usb 3-1: USB disconnect, device number 21 [ 382.954463][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.988017][ T5963] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.029241][ T5963] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.030561][ T5949] usb 8-1: config 0 descriptor?? [ 383.061085][ T5963] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.094665][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.129635][T13780] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 383.151851][ T5963] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.402405][T13793] loop5: detected capacity change from 0 to 2048 [ 383.443801][T13795] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.518576][ T5949] apple 0003:05AC:029F.000E: unknown main item tag 0x0 [ 383.534392][ T5949] apple 0003:05AC:029F.000E: unknown main item tag 0x0 [ 383.544534][ T5949] apple 0003:05AC:029F.000E: unknown main item tag 0x0 [ 383.551458][ T5949] apple 0003:05AC:029F.000E: unknown main item tag 0x0 [ 383.558380][ T5963] usb 1-1: USB disconnect, device number 18 [ 383.571748][ T5949] apple 0003:05AC:029F.000E: unknown main item tag 0x0 [ 383.650887][ T5949] apple 0003:05AC:029F.000E: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.7-1/input0 [ 383.717028][ T5949] usb 8-1: USB disconnect, device number 2 [ 383.988218][T13800] fido_id[13800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 385.067443][T13798] loop2: detected capacity change from 0 to 32768 [ 385.170312][T13830] loop5: detected capacity change from 0 to 1024 [ 385.183504][T13798] add_index: next_index = 0. Resetting! [ 385.207690][T13798] find_entry called with index >= next_index [ 385.224957][T13830] EXT4-fs: Ignoring removed orlov option [ 385.235654][T13798] find_entry called with index >= next_index [ 385.267257][T13830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.276780][T13798] find_entry called with index >= next_index [ 385.282907][T13798] find_entry called with index >= next_index [ 385.358398][T13830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.521628][T12242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.508771][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 386.581583][T13833] loop7: detected capacity change from 0 to 32768 [ 386.630694][T13833] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 386.673170][T13842] loop5: detected capacity change from 0 to 32768 [ 386.752745][T13842] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.790147][T13833] XFS (loop7): Ending clean mount [ 386.805540][T13833] XFS (loop7): Quotacheck needed: Please wait. [ 386.923516][T13884] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.972071][T13833] XFS (loop7): Quotacheck: Done. [ 387.081021][T13842] XFS (loop5): Ending clean mount [ 387.126366][T13842] XFS (loop5): Quotacheck needed: Please wait. [ 387.129604][T13886] loop4: detected capacity change from 0 to 256 [ 387.211094][T13178] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.289206][T13842] XFS (loop5): Quotacheck: Done. [ 387.411815][T13886] FAT-fs (loop4): Directory bread(block 64) failed [ 387.443167][T13886] FAT-fs (loop4): Directory bread(block 65) failed [ 387.489476][T13886] FAT-fs (loop4): Directory bread(block 66) failed [ 387.496995][T13886] FAT-fs (loop4): Directory bread(block 67) failed [ 387.524562][T13886] FAT-fs (loop4): Directory bread(block 68) failed [ 387.531147][T13886] FAT-fs (loop4): Directory bread(block 69) failed [ 387.564302][T13886] FAT-fs (loop4): Directory bread(block 70) failed [ 387.614163][T13886] FAT-fs (loop4): Directory bread(block 71) failed [ 387.620890][T13886] FAT-fs (loop4): Directory bread(block 72) failed [ 387.653006][T13886] FAT-fs (loop4): Directory bread(block 73) failed [ 387.693823][T12242] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.403807][T13902] loop4: detected capacity change from 0 to 256 [ 388.527684][T13902] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 388.572476][T13902] FAT-fs (loop4): Filesystem has been set read-only [ 388.590976][T13906] mkiss: ax0: crc mode is auto. [ 388.744454][T13908] netlink: 'syz.2.3301': attribute type 3 has an invalid length. [ 389.844496][ T5932] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 389.852726][T13911] loop5: detected capacity change from 0 to 32768 [ 389.956173][T13911] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.027005][ T5932] usb 8-1: Using ep0 maxpacket: 16 [ 390.055852][ T5932] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 390.089047][ T5932] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.131447][T13916] loop4: detected capacity change from 0 to 32768 [ 390.144223][ T5932] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.184459][ T5932] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 390.227447][ T5932] usb 8-1: config 7 interface 0 has no altsetting 0 [ 390.258297][T13916] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.272041][T13911] XFS (loop5): Ending clean mount [ 390.298786][ T5932] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 390.344056][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.555357][T12242] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.694214][T13916] XFS (loop4): Ending clean mount [ 390.741987][T13916] XFS (loop4): Quotacheck needed: Please wait. [ 390.900425][T13916] XFS (loop4): Quotacheck: Done. [ 390.932924][ T5932] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.0/0003:0458:5010.000F/input/input18 [ 391.113742][ T5869] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.136562][ T5932] kye 0003:0458:5010.000F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 391.254419][ T5932] usb 8-1: USB disconnect, device number 3 [ 391.397624][T13917] loop2: detected capacity change from 0 to 32768 [ 391.462615][T13966] fido_id[13966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 391.724628][T13917] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 392.287337][T13917] XFS (loop2): Ending clean mount [ 392.372185][T13917] XFS (loop2): Quotacheck needed: Please wait. [ 392.511183][T13917] XFS (loop2): Quotacheck: Done. [ 392.567122][T14008] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.613336][T14002] loop7: detected capacity change from 0 to 4096 [ 392.683509][T14002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.780739][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 392.983543][T14002] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3323: corrupted inode contents [ 393.017649][T14002] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.3323: mark_inode_dirty error [ 393.130637][T14002] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3323: corrupted inode contents [ 393.243136][T14002] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3323: mark_inode_dirty error [ 393.311740][T14002] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3323: corrupted inode contents [ 393.379601][T14002] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #15: comm syz.7.3323: mark_inode_dirty error [ 393.424179][T14002] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3323: corrupted inode contents [ 393.520808][T14002] EXT4-fs error (device loop7): ext4_truncate:4666: inode #15: comm syz.7.3323: mark_inode_dirty error [ 393.624492][T14002] EXT4-fs error (device loop7) in ext4_setattr:6071: Corrupt filesystem [ 393.702074][T14002] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3323: corrupted inode contents [ 393.762934][T14002] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 393.993836][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.658668][T14063] loop7: detected capacity change from 0 to 512 [ 394.761264][T14063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.070133][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.537577][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3354'. [ 395.779910][T14090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 396.009260][T14053] loop4: detected capacity change from 0 to 32768 [ 396.067843][T14053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3343 (14053) [ 396.194598][T14053] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 396.253439][T14053] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 396.475507][T14053] BTRFS info (device loop4): enabling ssd optimizations [ 396.534218][T14053] BTRFS info (device loop4): enabling free space tree [ 396.615130][T14053] BTRFS info (device loop4): device stats zeroed by syz.4.3343 (14053) [ 396.747701][ T5869] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.416290][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3366'. [ 398.056466][T14158] loop5: detected capacity change from 0 to 256 [ 398.621561][T14091] loop2: detected capacity change from 0 to 32768 [ 398.768413][T14091] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 398.786878][T14091] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 398.787430][T14091] XFS (loop2): log mount failed [ 398.814254][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 399.007618][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.046621][T14186] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 399.059479][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.074488][T14186] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 399.083026][ T5918] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 399.107965][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.142826][ T5918] usb 6-1: config 0 descriptor?? [ 400.649869][T14193] loop7: detected capacity change from 0 to 131072 [ 400.659345][T14193] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name [ 400.674845][ T5918] hid-picolcd 0003:04D8:C002.0010: No report with id 0x11 found [ 400.686229][T14193] F2FS-fs (loop7): invalid crc value [ 400.710935][ T5918] usb 6-1: USB disconnect, device number 2 [ 400.799946][T14193] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:1027,ofs:0,cpver:0,blkaddr:4097] [ 400.823385][T14193] F2FS-fs (loop7): Failed to read root inode [ 400.992531][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 401.005656][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 401.070644][T14191] loop4: detected capacity change from 0 to 40427 [ 401.129169][T14191] F2FS-fs (loop4): build fault injection rate: 14 [ 401.159449][T14191] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 401.246471][T14191] F2FS-fs (loop4): invalid crc value [ 401.290808][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 401.358304][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 401.421428][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 401.616803][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 401.629464][T14191] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 401.644270][T14191] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 401.661587][ T5918] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 401.674038][ T5918] usb 3-1: config 0 has no interface number 0 [ 401.683443][T14191] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 401.694162][ T5918] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.733127][ T5918] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 401.769100][T14191] syz.4.3387: attempt to access beyond end of device [ 401.769100][T14191] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 401.786258][ T5918] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 401.810002][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 401.834738][ T5918] usb 3-1: Product: syz [ 401.846918][ T5918] usb 3-1: SerialNumber: syz [ 401.877262][ T5918] usb 3-1: config 0 descriptor?? [ 401.895589][ T5918] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 401.933179][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input19 [ 401.989901][ C1] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 402.000577][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 402.000603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.000614][ C1] Call Trace: [ 402.000622][ C1] [ 402.000631][ C1] dump_stack_lvl+0x189/0x250 [ 402.000661][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.000684][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 402.000709][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 402.000736][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.000774][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 402.000805][ C1] f2fs_write_end_io+0x886/0xb60 [ 402.000850][ C1] blk_update_request+0x57e/0xe60 [ 402.000890][ C1] blk_mq_end_request+0x3e/0x70 [ 402.000912][ C1] blk_done_softirq+0x107/0x160 [ 402.000936][ C1] handle_softirqs+0x286/0x870 [ 402.000964][ C1] ? run_ksoftirqd+0x9b/0x100 [ 402.000988][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.001017][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.001057][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.001080][ C1] run_ksoftirqd+0x9b/0x100 [ 402.001097][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 402.001123][ C1] smpboot_thread_fn+0x53f/0xa60 [ 402.001151][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.001186][ C1] kthread+0x711/0x8a0 [ 402.001211][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.001235][ C1] ? __pfx_kthread+0x10/0x10 [ 402.001256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.001279][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.001303][ C1] ? __pfx_kthread+0x10/0x10 [ 402.001324][ C1] ret_from_fork+0x47c/0x820 [ 402.001353][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.001386][ C1] ? __switch_to_asm+0x39/0x70 [ 402.001407][ C1] ? __switch_to_asm+0x33/0x70 [ 402.001428][ C1] ? __pfx_kthread+0x10/0x10 [ 402.001448][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.001489][ C1] [ 402.001497][ C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 402.192438][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 402.192464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.192474][ C1] Call Trace: [ 402.192483][ C1] [ 402.192492][ C1] dump_stack_lvl+0x189/0x250 [ 402.192525][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.192549][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 402.192575][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 402.192603][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.192641][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 402.192676][ C1] f2fs_write_end_io+0x886/0xb60 [ 402.192721][ C1] blk_update_request+0x57e/0xe60 [ 402.192760][ C1] blk_mq_end_request+0x3e/0x70 [ 402.192782][ C1] blk_done_softirq+0x107/0x160 [ 402.192808][ C1] handle_softirqs+0x286/0x870 [ 402.192839][ C1] ? run_ksoftirqd+0x9b/0x100 [ 402.192865][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.192897][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.192926][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.192951][ C1] run_ksoftirqd+0x9b/0x100 [ 402.192969][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 402.192997][ C1] smpboot_thread_fn+0x53f/0xa60 [ 402.193033][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.193070][ C1] kthread+0x711/0x8a0 [ 402.193095][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.193119][ C1] ? __pfx_kthread+0x10/0x10 [ 402.193143][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.193167][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.193193][ C1] ? __pfx_kthread+0x10/0x10 [ 402.193215][ C1] ret_from_fork+0x47c/0x820 [ 402.193244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.193278][ C1] ? __switch_to_asm+0x39/0x70 [ 402.193301][ C1] ? __switch_to_asm+0x33/0x70 [ 402.193323][ C1] ? __pfx_kthread+0x10/0x10 [ 402.193345][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.193387][ C1] [ 402.193395][ C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 402.385143][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 402.385170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.385181][ C1] Call Trace: [ 402.385190][ C1] [ 402.385198][ C1] dump_stack_lvl+0x189/0x250 [ 402.385228][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.385251][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 402.385278][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 402.385306][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.385344][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 402.385376][ C1] f2fs_write_end_io+0x886/0xb60 [ 402.385421][ C1] blk_update_request+0x57e/0xe60 [ 402.385462][ C1] blk_mq_end_request+0x3e/0x70 [ 402.385486][ C1] blk_done_softirq+0x107/0x160 [ 402.385510][ C1] handle_softirqs+0x286/0x870 [ 402.385541][ C1] ? run_ksoftirqd+0x9b/0x100 [ 402.385567][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.385598][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.385628][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.385651][ C1] run_ksoftirqd+0x9b/0x100 [ 402.385669][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 402.385697][ C1] smpboot_thread_fn+0x53f/0xa60 [ 402.385723][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.385757][ C1] kthread+0x711/0x8a0 [ 402.385780][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.385805][ C1] ? __pfx_kthread+0x10/0x10 [ 402.385829][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.385855][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.385881][ C1] ? __pfx_kthread+0x10/0x10 [ 402.385904][ C1] ret_from_fork+0x47c/0x820 [ 402.385933][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.385967][ C1] ? __switch_to_asm+0x39/0x70 [ 402.385989][ C1] ? __switch_to_asm+0x33/0x70 [ 402.386010][ C1] ? __pfx_kthread+0x10/0x10 [ 402.386040][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.386079][ C1] [ 402.386087][ C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 402.577118][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 402.577142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.577152][ C1] Call Trace: [ 402.577160][ C1] [ 402.577167][ C1] dump_stack_lvl+0x189/0x250 [ 402.577196][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.577214][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 402.577236][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 402.577258][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.577291][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 402.577318][ C1] f2fs_write_end_io+0x886/0xb60 [ 402.577357][ C1] blk_update_request+0x57e/0xe60 [ 402.577392][ C1] blk_mq_end_request+0x3e/0x70 [ 402.577412][ C1] blk_done_softirq+0x107/0x160 [ 402.577433][ C1] handle_softirqs+0x286/0x870 [ 402.577462][ C1] ? run_ksoftirqd+0x9b/0x100 [ 402.577485][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.577515][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.577544][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.577568][ C1] run_ksoftirqd+0x9b/0x100 [ 402.577587][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 402.577612][ C1] smpboot_thread_fn+0x53f/0xa60 [ 402.577640][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.577677][ C1] kthread+0x711/0x8a0 [ 402.577702][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.577729][ C1] ? __pfx_kthread+0x10/0x10 [ 402.577751][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.577776][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.577815][ C1] ? __pfx_kthread+0x10/0x10 [ 402.577837][ C1] ret_from_fork+0x47c/0x820 [ 402.577868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.577902][ C1] ? __switch_to_asm+0x39/0x70 [ 402.577925][ C1] ? __switch_to_asm+0x33/0x70 [ 402.577947][ C1] ? __pfx_kthread+0x10/0x10 [ 402.577969][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.578013][ C1] [ 402.578022][ C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 402.666150][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 402.666175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.666186][ C1] Call Trace: [ 402.666195][ C1] [ 402.666203][ C1] dump_stack_lvl+0x189/0x250 [ 402.666235][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.666258][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 402.666281][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 402.666303][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.666336][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 402.666362][ C1] f2fs_write_end_io+0x886/0xb60 [ 402.666401][ C1] blk_update_request+0x57e/0xe60 [ 402.666435][ C1] blk_mq_end_request+0x3e/0x70 [ 402.666456][ C1] blk_done_softirq+0x107/0x160 [ 402.666478][ C1] handle_softirqs+0x286/0x870 [ 402.666503][ C1] ? run_ksoftirqd+0x9b/0x100 [ 402.666525][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.666551][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.666578][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.666599][ C1] run_ksoftirqd+0x9b/0x100 [ 402.666615][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 402.666639][ C1] smpboot_thread_fn+0x53f/0xa60 [ 402.666663][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 402.666695][ C1] kthread+0x711/0x8a0 [ 402.666717][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.666740][ C1] ? __pfx_kthread+0x10/0x10 [ 402.666759][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.666781][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.666812][ C1] ? __pfx_kthread+0x10/0x10 [ 402.666831][ C1] ret_from_fork+0x47c/0x820 [ 402.666857][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.666886][ C1] ? __switch_to_asm+0x39/0x70 [ 402.666906][ C1] ? __switch_to_asm+0x33/0x70 [ 402.666924][ C1] ? __pfx_kthread+0x10/0x10 [ 402.666944][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.666982][ C1] [ 402.666989][ C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 402.963725][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.973535][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.980788][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.988864][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.996469][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.004433][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.011861][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.019450][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.026910][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.034278][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.050216][ T5932] usb 3-1: USB disconnect, device number 22 [ 403.050382][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 403.079563][ T5869] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint [ 403.153271][ T5932] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 403.418335][T14234] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3401'. [ 403.442959][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3401'. [ 403.823759][T14241] Zero length message leads to an empty skb [ 404.299364][T14258] loop5: detected capacity change from 0 to 1024 [ 404.420496][T14258] hfsplus: bad catalog entry type [ 404.538561][T14267] loop7: detected capacity change from 0 to 1024 [ 404.566944][T14267] EXT4-fs: Ignoring removed orlov option [ 404.567409][ T36] hfsplus: b-tree write err: -5, ino 4 [ 404.625612][T14267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.743303][T14267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.805675][T14279] [U]  [ 405.030817][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.241231][T14291] ipvlan2: entered promiscuous mode [ 405.253743][T14291] ipvlan2: entered allmulticast mode [ 405.269506][T14291] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 406.073310][T14316] loop7: detected capacity change from 0 to 512 [ 406.159449][T14316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.237359][T14316] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.326879][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.558811][T14288] loop2: detected capacity change from 0 to 32768 [ 406.600228][T14304] loop5: detected capacity change from 0 to 32768 [ 406.631110][T14288] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.653039][T14304] JBD2: Ignoring recovery information on journal [ 406.773110][T14304] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 406.885170][T14288] XFS (loop2): Ending clean mount [ 406.986786][T14288] XFS (loop2): Quotacheck needed: Please wait. [ 407.038024][T14304] (syz.5.3433,14304,1):ocfs2_group_extend:314 ERROR: The disk is too old and small. Force to do offline resize. [ 407.173174][T14288] XFS (loop2): Quotacheck: Done. [ 407.208925][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3451'. [ 407.241292][T12242] ocfs2: Unmounting device (7,5) on (node local) [ 407.452001][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 407.844471][ T5925] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 408.035320][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 408.087396][ T5925] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 408.116628][T14374] loop7: detected capacity change from 0 to 2048 [ 408.139198][ T5925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 408.201294][ T5925] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.222575][T14374] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=18576, location=18576 [ 408.271956][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.307295][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.348680][T14374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.354027][ T5925] usb 5-1: Product: syz [ 408.394023][ T5925] usb 5-1: Manufacturer: syz [ 408.398691][ T5925] usb 5-1: SerialNumber: syz [ 408.900162][ T5925] usb 5-1: USB disconnect, device number 23 [ 409.024362][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.808781][T14411] loop4: detected capacity change from 0 to 1024 [ 409.825155][T14411] EXT4-fs: Ignoring removed oldalloc option [ 409.879977][T14384] loop2: detected capacity change from 0 to 32768 [ 409.926172][T14411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.937682][T14386] loop5: detected capacity change from 0 to 32768 [ 409.955157][T14411] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.013144][T14384] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.024639][T14411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 410.044883][T14411] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 410.117335][T14411] EXT4-fs (loop4): This should not happen!! Data will be lost [ 410.117335][T14411] [ 410.201328][T14411] EXT4-fs (loop4): Total free blocks count 0 [ 410.238811][T14411] EXT4-fs (loop4): Free/Dirty block details [ 410.279589][T14411] EXT4-fs (loop4): free_blocks=4293918720 [ 410.318459][T14384] XFS (loop2): Ending clean mount [ 410.336724][T14411] EXT4-fs (loop4): dirty_blocks=64 [ 410.380777][T14384] XFS (loop2): Quotacheck needed: Please wait. [ 410.387555][T14411] EXT4-fs (loop4): Block reservation details [ 410.424747][T14411] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 410.592854][T14384] XFS (loop2): Quotacheck: Done. [ 410.618264][T14386] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 410.618295][T14386] allowing incompatible features above 0.0: (unknown version) [ 410.618307][T14386] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 410.705518][ T1155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28 [ 410.781151][T14386] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 410.832670][T14386] bcachefs (loop5): initializing new filesystem [ 410.891468][T14386] bcachefs (loop5): going read-write [ 410.895810][ T5858] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.986287][T14386] bcachefs (loop5): marking superblocks [ 411.051736][T14386] bcachefs (loop5): initializing freespace [ 411.065667][T14386] bcachefs (loop5): done initializing freespace [ 411.154934][T14386] bcachefs (loop5): reading snapshots table [ 411.162972][T14386] bcachefs (loop5): reading snapshots done [ 411.338150][T14386] bcachefs (loop5): done starting filesystem [ 411.417801][T14409] loop7: detected capacity change from 0 to 32768 [ 411.641167][T14457] loop4: detected capacity change from 0 to 1024 [ 411.657486][T14409] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.782143][T12242] bcachefs (loop5): shutting down [ 411.784494][T14457] hfsplus: bad catalog entry type [ 411.797307][T12242] bcachefs (loop5): going read-only [ 411.802659][T12242] bcachefs (loop5): finished waiting for writes to stop [ 411.838777][T12242] bcachefs (loop5): flushing journal and stopping allocators, journal seq 7 [ 411.887210][ T36] hfsplus: b-tree write err: -5, ino 4 [ 411.932668][T14409] XFS (loop7): Ending clean mount [ 411.963582][T12242] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 411.963619][T14409] XFS (loop7): Quotacheck needed: Please wait. [ 411.994173][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 412.034649][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 412.068899][T12242] bcachefs (loop5): clean shutdown complete, journal seq 11 [ 412.088307][T12242] bcachefs (loop5): marking filesystem clean [ 412.190491][T14409] XFS (loop7): Quotacheck: Done. [ 412.262884][T12242] bcachefs (loop5): shutdown complete [ 412.439361][T13178] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.456517][ T5925] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 412.696311][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 412.712785][ T5925] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.760512][ T5925] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.805054][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 412.811759][ T5925] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 412.836873][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.851728][ T5925] usb 3-1: config 0 descriptor?? [ 413.041519][T14485] loop4: detected capacity change from 0 to 4096 [ 413.069527][T14485] EXT4-fs (loop4): Test dummy encryption mode enabled [ 413.112299][T14485] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 413.184413][T14485] System zones: 0-5 [ 413.226474][T14485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.272498][ T5925] steelseries 0003:1038:1410.0011: unknown main item tag 0x0 [ 413.324358][ T5925] steelseries 0003:1038:1410.0011: unknown main item tag 0x0 [ 413.331835][ T5925] steelseries 0003:1038:1410.0011: unknown main item tag 0x0 [ 413.339346][ T5925] steelseries 0003:1038:1410.0011: unknown main item tag 0x0 [ 413.346842][ T5925] steelseries 0003:1038:1410.0011: unknown main item tag 0x0 [ 413.355147][ T5925] steelseries 0003:1038:1410.0011: missing HID_OUTPUT_REPORT 0 [ 413.472741][ T5918] usb 3-1: USB disconnect, device number 23 [ 413.623172][T14485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.654417][T14485] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 413.773093][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.989505][T14506] comedi comedi3: mpc624: I/O port conflict (0x4f27,16) [ 414.200683][T14511] loop7: detected capacity change from 0 to 64 [ 414.451566][T14513] loop2: detected capacity change from 0 to 512 [ 414.532193][T14513] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3502: iget: bad extended attribute block 1 [ 414.662309][T14507] loop4: detected capacity change from 0 to 32768 [ 414.678642][T14513] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3502: couldn't read orphan inode 15 (err -117) [ 414.703922][T14513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.766792][T14513] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 414.881614][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.121991][T14507] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 415.122022][T14507] allowing incompatible features above 0.0: (unknown version) [ 415.122035][T14507] features: [ 415.220670][T14507] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 415.250360][T14507] bcachefs (loop4): initializing new filesystem [ 415.310688][T14507] bcachefs (loop4): going read-write [ 415.355773][T14507] bcachefs (loop4): marking superblocks [ 415.356667][T14533] netlink: 'syz.7.3515': attribute type 11 has an invalid length. [ 415.440155][T14507] bcachefs (loop4): initializing freespace [ 415.452782][T14507] bcachefs (loop4): done initializing freespace [ 415.465200][T14507] bcachefs (loop4): reading snapshots table [ 415.471197][T14507] bcachefs (loop4): reading snapshots done [ 415.559150][T14507] bcachefs (loop4): done starting filesystem [ 415.911405][T14545] loop7: detected capacity change from 0 to 256 [ 416.096170][ T30] audit: type=1800 audit(1757400757.501:2489): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3497" name="file1" dev="loop4" ino=4098 res=0 errno=0 [ 416.184320][T14551] netlink: 'syz.0.3511': attribute type 46 has an invalid length. [ 416.286101][T14545] FAT-fs (loop7): IO charset cpush not found [ 416.310699][ T5869] bcachefs (loop4): shutting down [ 416.344506][T14545] smb3: Unexpected value for 'acl' [ 416.350887][ T5869] bcachefs (loop4): going read-only [ 416.374477][ T5869] bcachefs (loop4): finished waiting for writes to stop [ 416.404299][T14556] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 416.454597][ T5869] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 416.611050][ T5869] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 416.669548][ T5869] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 416.687135][ T5869] bcachefs (loop4): marking filesystem clean [ 416.728323][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3520'. [ 416.816771][ T5869] bcachefs (loop4): shutdown complete [ 416.944192][ T30] audit: type=1326 audit(1757400758.341:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 416.981772][T14575] tipc: Enabling of bearer rejected, failed to enable media [ 417.016299][ T30] audit: type=1326 audit(1757400758.341:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.065747][ T30] audit: type=1326 audit(1757400758.341:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.136260][ T30] audit: type=1326 audit(1757400758.341:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.163575][ T30] audit: type=1326 audit(1757400758.341:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.187905][ T30] audit: type=1326 audit(1757400758.341:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.211085][ T30] audit: type=1326 audit(1757400758.341:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.237206][ T30] audit: type=1326 audit(1757400758.341:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.261390][ T30] audit: type=1326 audit(1757400758.341:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.5.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff278ebe9 code=0x50000 [ 417.424855][ T24] IPVS: starting estimator thread 0... [ 417.574542][T14588] IPVS: using max 24 ests per chain, 57600 per kthread [ 417.831936][T14593] loop5: detected capacity change from 0 to 512 [ 417.996242][T14593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 418.048518][T14593] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.085074][T14593] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #12: comm syz.5.3532: directory missing '..' [ 418.216342][T12242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 418.715915][T14605] loop7: detected capacity change from 0 to 512 [ 418.732484][T14605] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.797890][T14605] EXT4-fs (loop7): orphan cleanup on readonly fs [ 418.834314][T14605] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 418.861375][T14605] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3538: attempt to clear invalid blocks 2 len 1 [ 419.075353][T14605] EXT4-fs (loop7): Remounting filesystem read-only [ 419.082969][T14605] EXT4-fs (loop7): 1 truncate cleaned up [ 419.142950][T14605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.411192][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.538268][T14623] ptrace attach of "./syz-executor exec"[5870] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 419.549302][T14625] loop2: detected capacity change from 0 to 16 [ 419.651111][ T5918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.724514][T14625] erofs (device loop2): mounted with root inode @ nid 36. [ 419.985136][T14632] loop5: detected capacity change from 0 to 256 [ 421.119627][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.152126][T14633] loop7: detected capacity change from 0 to 32768 [ 421.208748][T14633] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3550 (14633) [ 421.313056][T14633] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 421.369354][T14633] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 421.375405][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.632886][T14633] BTRFS info (device loop7): enabling ssd optimizations [ 421.660647][T14633] BTRFS info (device loop7): enabling free space tree [ 421.704172][T14633] BTRFS info (device loop7): max_inline set to 7 [ 421.762199][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3562'. [ 421.887467][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.009184][T13178] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 422.099582][T14647] loop4: detected capacity change from 0 to 32768 [ 422.135500][T14647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3558 (14647) [ 422.382003][T14647] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.444277][T14647] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 422.810082][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.826365][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.844298][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.861775][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.883097][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.951640][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.973551][T14647] BTRFS info (device loop4): rebuilding free space tree [ 423.119706][T14647] BTRFS info (device loop4): enabling ssd optimizations [ 423.148220][T14647] BTRFS info (device loop4): turning on sync discard [ 423.209086][T14647] BTRFS info (device loop4): enabling free space tree [ 423.255763][T14647] BTRFS info (device loop4): force clearing of disk cache [ 423.262949][T14647] BTRFS info (device loop4): enabling auto defrag [ 423.320232][T14647] BTRFS info (device loop4): max_inline set to 0 [ 423.389195][T14713] loop2: detected capacity change from 0 to 2048 [ 423.499214][T14714] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.536840][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 423.536862][ T30] audit: type=1800 audit(1757400764.931:2564): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3558" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 423.656540][T14647] BTRFS info (device loop4): balance: start -susage=0..5,vrange=8..134217792,limit=5 [ 423.682593][T14647] BTRFS info (device loop4): balance: ended with status: 0 [ 423.789847][T14718] netlink: 'syz.0.3577': attribute type 3 has an invalid length. [ 423.969747][ T5869] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 424.053433][ T143] bridge_slave_1: left allmulticast mode [ 424.078791][T14720] loop2: detected capacity change from 0 to 2048 [ 424.088266][ T143] bridge_slave_1: left promiscuous mode [ 424.124321][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.158625][T14720] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 424.286047][ T143] bridge_slave_0: left allmulticast mode [ 424.322525][ T6253] udevd[6253]: incorrect nilfs2 checksum on /dev/loop2 [ 424.331301][ T143] bridge_slave_0: left promiscuous mode [ 424.355275][T14728] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.376472][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.005137][ T52] Bluetooth: hci2: command tx timeout [ 425.064523][ T5949] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 425.234110][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 425.246721][ T5949] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.275187][ T5949] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.303837][T14727] loop7: detected capacity change from 0 to 32768 [ 425.311769][ T5949] usb 5-1: config 0 interface 0 has no altsetting 0 [ 425.340035][ T5949] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 425.358078][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.392420][ T5949] usb 5-1: config 0 descriptor?? [ 425.460036][T14727] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 425.718855][T13178] ocfs2: Unmounting device (7,7) on (node local) [ 425.828005][ T5949] hid (null): global environment stack underflow [ 425.866078][ T5949] uclogic 0003:28BD:0071.0012: interface is invalid, ignoring [ 426.031221][ T5949] usb 5-1: USB disconnect, device number 24 [ 426.124322][ T5932] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 426.304191][ T5932] usb 8-1: Using ep0 maxpacket: 16 [ 426.318153][ T5932] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 426.336299][ T5932] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 426.362224][ T5932] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.375938][ T5932] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.386907][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.406870][ T5932] usb 8-1: Product: syz [ 426.411200][ T5932] usb 8-1: Manufacturer: syz [ 426.421320][ T5932] usb 8-1: SerialNumber: syz [ 426.757425][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.797821][ T5932] usb 8-1: USB disconnect, device number 4 [ 426.842023][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.874480][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.913644][ T143] bond0 (unregistering): Released all slaves [ 426.994517][ T5861] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 427.091115][ T52] Bluetooth: hci2: command tx timeout [ 427.191488][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 427.199078][ T5861] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 427.215196][ T5861] usb 5-1: config 0 has no interface number 0 [ 427.231753][ T5861] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.247332][T14751] loop2: detected capacity change from 0 to 32768 [ 427.276726][ T5861] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.305021][T14751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3590 (14751) [ 427.321537][ T5861] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 427.350522][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 427.377650][ T5861] usb 5-1: Product: syz [ 427.424769][ T5861] usb 5-1: SerialNumber: syz [ 427.495462][ T5861] usb 5-1: config 0 descriptor?? [ 427.561775][ T5861] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 427.588809][T14751] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 427.622515][ T5861] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input20 [ 427.647182][T14751] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 427.905103][ C0] cm109_urb_ctl_callback: 12 callbacks suppressed [ 427.905131][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.906545][ T5967] usb 5-1: USB disconnect, device number 25 [ 427.911607][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 427.944274][ T5967] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 428.010099][T14751] BTRFS info (device loop2): rebuilding free space tree [ 428.063705][T14751] BTRFS info (device loop2): enabling ssd optimizations [ 428.089863][T14751] BTRFS info (device loop2): turning on sync discard [ 428.119325][T14751] BTRFS info (device loop2): enabling free space tree [ 428.128777][T14751] BTRFS info (device loop2): force clearing of disk cache [ 428.154804][T14751] BTRFS info (device loop2): enabling auto defrag [ 428.161358][T14751] BTRFS info (device loop2): max_inline set to 0 [ 428.380422][ T30] audit: type=1800 audit(1757400769.781:2565): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3590" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 428.521286][T14751] BTRFS info (device loop2): balance: start -susage=0..5,vrange=8..134217792,limit=5 [ 428.631559][T14751] BTRFS info (device loop2): balance: ended with status: 0 [ 428.900651][ T5858] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 429.155909][ T52] Bluetooth: hci2: command tx timeout [ 430.257323][T14696] chnl_net:caif_netlink_parms(): no params data found [ 430.481282][ T143] hsr_slave_0: left promiscuous mode [ 430.506105][ T143] hsr_slave_1: left promiscuous mode [ 430.512503][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.557626][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.567166][T14835] loop2: detected capacity change from 0 to 1024 [ 430.624511][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.655984][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.681943][T14835] hfsplus: bad catalog entry type [ 430.773413][ T143] veth1_macvtap: left promiscuous mode [ 430.779665][ T3531] hfsplus: b-tree write err: -5, ino 4 [ 430.800276][ T143] veth0_macvtap: left promiscuous mode [ 430.824287][ T143] veth1_vlan: left promiscuous mode [ 430.829714][ T143] veth0_vlan: left promiscuous mode [ 431.245037][ T52] Bluetooth: hci2: command tx timeout [ 431.628890][T14833] loop4: detected capacity change from 0 to 32768 [ 431.706643][T14833] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 431.870919][T14833] XFS (loop4): Ending clean mount [ 431.922253][T14833] XFS (loop4): Quotacheck needed: Please wait. [ 432.148138][T14833] XFS (loop4): Quotacheck: Done. [ 432.405752][ T5869] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.104584][ T143] team0 (unregistering): Port device team_slave_1 removed [ 433.185622][ T143] team0 (unregistering): Port device team_slave_0 removed [ 433.510081][T14879] loop7: detected capacity change from 0 to 1024 [ 433.537898][T14879] EXT4-fs: Ignoring removed bh option [ 433.551110][T14879] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 433.591975][T14879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.721241][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.386405][T14888] loop7: detected capacity change from 0 to 32768 [ 434.435170][T14888] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 434.466561][T14875] syz.4.3624: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 434.517310][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.4.3624 Not tainted syzkaller #0 PREEMPT(full) [ 434.517342][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.517354][T14875] Call Trace: [ 434.517363][T14875] [ 434.517372][T14875] dump_stack_lvl+0x189/0x250 [ 434.517408][T14875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.517432][T14875] ? __pfx__printk+0x10/0x10 [ 434.517455][T14875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.517473][T14875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.517492][T14875] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 434.517516][T14875] warn_alloc+0x214/0x310 [ 434.517548][T14875] ? __pfx_warn_alloc+0x10/0x10 [ 434.517584][T14875] ? __get_vm_area_node+0x28f/0x300 [ 434.517610][T14875] ? fq_pie_init+0x435/0x840 [ 434.517640][T14875] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 434.517710][T14875] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 434.517734][T14875] ? fq_pie_init+0x435/0x840 [ 434.517772][T14875] ? rcu_is_watching+0x15/0xb0 [ 434.517799][T14875] ? fq_pie_init+0x435/0x840 [ 434.517822][T14875] __kvmalloc_node_noprof+0x674/0x910 [ 434.517847][T14875] ? fq_pie_init+0x435/0x840 [ 434.517872][T14875] ? tcf_block_get+0x67/0xa0 [ 434.517895][T14875] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 434.517925][T14875] fq_pie_init+0x435/0x840 [ 434.517953][T14875] ? __pfx_fq_pie_init+0x10/0x10 [ 434.517977][T14875] qdisc_create+0x7ac/0xea0 [ 434.518009][T14875] tc_modify_qdisc+0x1538/0x20e0 [ 434.518054][T14875] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 434.518125][T14875] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 434.518149][T14875] rtnetlink_rcv_msg+0x77c/0xb70 [ 434.518183][T14875] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 434.518210][T14875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.518234][T14875] ? ref_tracker_free+0x63a/0x7d0 [ 434.518254][T14875] ? __asan_memcpy+0x40/0x70 [ 434.518273][T14875] ? __pfx_ref_tracker_free+0x10/0x10 [ 434.518288][T14875] ? __skb_clone+0x63/0x7a0 [ 434.518319][T14875] netlink_rcv_skb+0x205/0x470 [ 434.518346][T14875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.518376][T14875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.518417][T14875] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.518453][T14875] netlink_unicast+0x82c/0x9e0 [ 434.518492][T14875] ? __pfx_netlink_unicast+0x10/0x10 [ 434.518523][T14875] ? netlink_sendmsg+0x642/0xb30 [ 434.518539][T14875] ? skb_put+0x11b/0x210 [ 434.518563][T14875] netlink_sendmsg+0x805/0xb30 [ 434.518595][T14875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.518616][T14875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 434.518648][T14875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.518668][T14875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.518704][T14875] __sock_sendmsg+0x21c/0x270 [ 434.518735][T14875] ____sys_sendmsg+0x505/0x830 [ 434.518763][T14875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.518798][T14875] ? import_iovec+0x74/0xa0 [ 434.518828][T14875] ___sys_sendmsg+0x21f/0x2a0 [ 434.518853][T14875] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.518921][T14875] ? __fget_files+0x2a/0x420 [ 434.518944][T14875] ? __fget_files+0x3a0/0x420 [ 434.518982][T14875] __x64_sys_sendmsg+0x19b/0x260 [ 434.519007][T14875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.519052][T14875] ? do_syscall_64+0xbe/0xfa0 [ 434.519076][T14875] do_syscall_64+0xfa/0xfa0 [ 434.519091][T14875] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.519120][T14875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.519140][T14875] ? clear_bhb_loop+0x60/0xb0 [ 434.519165][T14875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.519186][T14875] RIP: 0033:0x7f5ab7b8ebe9 [ 434.519207][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.519223][T14875] RSP: 002b:00007f5ab5df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.519246][T14875] RAX: ffffffffffffffda RBX: 00007f5ab7dc5fa0 RCX: 00007f5ab7b8ebe9 [ 434.519260][T14875] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 434.519274][T14875] RBP: 00007f5ab7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.519285][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.519297][T14875] R13: 00007f5ab7dc6038 R14: 00007f5ab7dc5fa0 R15: 00007ffc22638058 [ 434.519334][T14875] [ 434.521436][T14875] Mem-Info: [ 434.571865][T14888] XFS (loop7): Ending clean mount [ 434.579207][T14875] active_anon:11993 inactive_anon:0 isolated_anon:0 [ 434.579207][T14875] active_file:13583 inactive_file:4062 isolated_file:0 [ 434.579207][T14875] unevictable:768 dirty:397 writeback:0 [ 434.579207][T14875] slab_reclaimable:11655 slab_unreclaimable:100879 [ 434.579207][T14875] mapped:30415 shmem:5674 pagetables:1592 [ 434.579207][T14875] sec_pagetables:0 bounce:0 [ 434.579207][T14875] kernel_misc_reclaimable:0 [ 434.579207][T14875] free:1338857 free_pcp:17909 free_cma:0 [ 434.752766][T14888] XFS (loop7): Quotacheck needed: Please wait. [ 434.769752][T14875] Node 0 active_anon:47772kB inactive_anon:0kB active_file:54332kB inactive_file:16112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121660kB dirty:1584kB writeback:0kB shmem:21160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12784kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.843533][T14888] XFS (loop7): Quotacheck: Done. [ 434.919093][T14875] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.919152][T14875] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.919217][T14875] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 434.919268][T14875] Node 0 DMA32 free:1449444kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47696kB inactive_anon:0kB active_file:54044kB inactive_file:15144kB unevictable:1536kB writepending:1684kB zspages:0kB present:3129332kB managed:2557032kB mlocked:0kB bounce:0kB free_pcp:50744kB local_pcp:31264kB free_cma:0kB [ 434.919332][T14875] lowmem_reserve[]: 0 0 1 1 1 [ 435.163658][T13178] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 435.169266][T14875] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:288kB inactive_file:968kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:4kB free_cma:0kB [ 435.169338][T14875] lowmem_reserve[]: 0 0 0 0 0 [ 435.169387][T14875] Node 1 Normal free:3890608kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:14016kB free_cma:0kB [ 435.247875][T14875] lowmem_reserve[]: 0 0 0 0 0 [ 435.252634][T14875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.266462][T14875] Node 0 DMA32: 42*4kB (UME) 18*8kB (ME) 101*16kB (UE) 310*32kB (UME) 226*64kB (UME) 100*128kB (UM) 63*256kB (UME) 141*512kB (UM) 75*1024kB (UME) 4*2048kB (UM) 302*4096kB (UM) = 1449416kB [ 435.270841][T14903] loop2: detected capacity change from 0 to 4096 [ 435.285929][T14875] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 435.321675][T14875] Node 1 Normal: 206*4kB (UME) 59*8kB (UME) 46*16kB (UME) 180*32kB (UME) 63*64kB (UME) 11*128kB (UME) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3890608kB [ 435.344713][T14875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.354619][T14875] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 435.366249][T14875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.386326][T14875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 435.410186][T14875] 23816 total pagecache pages [ 435.417248][T14875] 0 pages in swap cache [ 435.452472][T14875] Free swap = 124996kB [ 435.493456][T14875] Total swap = 124996kB [ 435.498929][T14903] ntfs3(loop2): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 435.512309][T14875] 2097051 pages RAM [ 435.544278][T14875] 0 pages HighMem/MovableOnly [ 435.569434][T14875] 425831 pages reserved [ 435.573680][T14875] 0 pages cma reserved [ 436.206799][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.218078][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.264237][T14696] bridge_slave_0: entered allmulticast mode [ 436.292907][T14696] bridge_slave_0: entered promiscuous mode [ 436.364176][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.371402][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.454265][T14696] bridge_slave_1: entered allmulticast mode [ 436.462410][T14696] bridge_slave_1: entered promiscuous mode [ 436.561542][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 436.729053][T14937] gfs2: Unexpected value for 'discard' [ 436.867745][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.909548][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.127380][T14952] loop4: detected capacity change from 0 to 16 [ 437.155267][T14952] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 437.186994][ T6009] udevd[6009]: incorrect cramfs checksum on /dev/loop4 [ 437.411524][T14954] loop2: detected capacity change from 0 to 4096 [ 437.442401][T14696] team0: Port device team_slave_0 added [ 437.516654][T14696] team0: Port device team_slave_1 added [ 437.567545][T14954] ntfs3(loop2): ino=21, "bus" fallocate(0x10) is not supported [ 437.880347][ T143] IPVS: stop unused estimator thread 0... [ 437.887702][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.904614][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.928039][T14978] loop2: detected capacity change from 0 to 256 [ 438.034883][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.111568][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.139921][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.144782][T14982] loop7: detected capacity change from 0 to 512 [ 438.179654][T14978] FAT-fs (loop2): Directory bread(block 64) failed [ 438.195280][T14978] FAT-fs (loop2): Directory bread(block 65) failed [ 438.214918][T14978] FAT-fs (loop2): Directory bread(block 66) failed [ 438.221534][T14978] FAT-fs (loop2): Directory bread(block 67) failed [ 438.248545][T14982] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 438.278379][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.304105][T14978] FAT-fs (loop2): Directory bread(block 68) failed [ 438.339399][T14982] EXT4-fs (loop7): 1 truncate cleaned up [ 438.368803][T14978] FAT-fs (loop2): Directory bread(block 69) failed [ 438.408545][T14982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.425529][T14978] FAT-fs (loop2): Directory bread(block 70) failed [ 438.432145][T14978] FAT-fs (loop2): Directory bread(block 71) failed [ 438.442388][T14978] FAT-fs (loop2): Directory bread(block 72) failed [ 438.450636][T14978] FAT-fs (loop2): Directory bread(block 73) failed [ 438.717591][T14696] hsr_slave_0: entered promiscuous mode [ 438.727754][T14696] hsr_slave_1: entered promiscuous mode [ 438.756769][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 438.762557][T14696] Cannot create hsr debugfs directory [ 438.794951][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.299668][T15003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.351179][T15003] team0: Port device bond1 added [ 439.495489][T15015] [U] [ 440.101094][T15033] loop2: detected capacity change from 0 to 2048 [ 440.125927][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.171011][T14696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.223643][T15038] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 440.259066][T14696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.338318][T14696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 440.418209][T14696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 440.779947][T15058] loop4: detected capacity change from 0 to 256 [ 440.820027][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.841746][T15058] exfat: Deprecated parameter 'utf8' [ 440.896038][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.922592][T15058] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 440.962747][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.970008][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.052387][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.059658][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.240297][T15032] loop7: detected capacity change from 0 to 32768 [ 441.241559][T14696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.316124][T15032] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.569105][T15032] XFS (loop7): Ending clean mount [ 441.639913][T15032] XFS (loop7): Quotacheck needed: Please wait. [ 441.685499][T15077] loop2: detected capacity change from 0 to 1024 [ 441.837706][T15032] XFS (loop7): Quotacheck: Done. [ 442.098965][T13178] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.318095][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.593583][T15064] loop4: detected capacity change from 0 to 32768 [ 442.733315][T15064] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 442.805853][T15064] XFS (loop4): Ending clean mount [ 442.837987][T15106] loop2: detected capacity change from 0 to 128 [ 442.882090][T15106] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.947711][T15106] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.218235][ T5869] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.273560][T15122] loop2: detected capacity change from 0 to 512 [ 443.358087][T14696] veth0_vlan: entered promiscuous mode [ 443.367285][T15122] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.427773][T15122] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 443.460184][T14696] veth1_vlan: entered promiscuous mode [ 443.546953][T15122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 443.565687][T14696] veth0_macvtap: entered promiscuous mode [ 443.584265][T14696] veth1_macvtap: entered promiscuous mode [ 443.639520][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.649735][T15122] System zones: 1-12 [ 443.662378][T15122] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3701: corrupted in-inode xattr: e_value size too large [ 443.685704][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.715911][T15122] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3701: couldn't read orphan inode 15 (err -117) [ 443.786937][ T6022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.800200][T15122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.831853][ T6022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.898582][ T6022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.953504][ T6022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.116949][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.164106][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.203815][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.350815][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.369759][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.655520][T15138] loop2: detected capacity change from 0 to 2048 [ 444.795274][T15142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.083505][T15128] loop7: detected capacity change from 0 to 32768 [ 445.148576][T15128] (syz.7.3703,15128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 445.214723][T15128] (syz.7.3703,15128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 445.339812][T15128] JBD2: Ignoring recovery information on journal [ 445.357791][T15134] loop4: detected capacity change from 0 to 32768 [ 445.401474][T15134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3706 (15134) [ 445.473323][T15134] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.489558][T15134] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 445.512572][T15128] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 445.614548][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 445.779777][T15134] BTRFS info (device loop4): setting nodatasum [ 445.810333][T15134] BTRFS info (device loop4): setting nodatacow [ 445.844096][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 445.844552][T15134] BTRFS info (device loop4): enabling free space tree [ 445.869102][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.911562][T15134] BTRFS info (device loop4): enabling auto defrag [ 445.918396][ T5861] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.944075][T15134] BTRFS info (device loop4): max_inline set to 0 [ 445.988167][ T5861] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.015749][ T5861] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.045126][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.081236][ T5861] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 446.083199][ T30] audit: type=1800 audit(1757400787.481:2566): pid=15134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3706" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 446.111101][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.115291][T13178] ocfs2: Unmounting device (7,7) on (node local) [ 446.233231][ T5861] usb 3-1: config 0 descriptor?? [ 446.676107][T15188] loop7: detected capacity change from 0 to 64 [ 446.692608][ T5861] corsair-cpro 0003:1B1C:0C10.0013: unknown main item tag 0x0 [ 446.704669][T15188] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 446.746525][ T5861] corsair-cpro 0003:1B1C:0C10.0013: unknown main item tag 0x0 [ 446.774907][ T5861] corsair-cpro 0003:1B1C:0C10.0013: unknown main item tag 0x0 [ 446.783270][ T5861] corsair-cpro 0003:1B1C:0C10.0013: unknown main item tag 0x0 [ 446.803552][ T5861] corsair-cpro 0003:1B1C:0C10.0013: unknown main item tag 0x0 [ 446.838430][ T5861] corsair-cpro 0003:1B1C:0C10.0013: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 446.913121][ T5869] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.029748][ T5861] corsair-cpro 0003:1B1C:0C10.0013: probe with driver corsair-cpro failed with error -38 [ 447.071392][ T5861] usb 3-1: USB disconnect, device number 24 [ 447.209816][T15193] fido_id[15193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 447.505016][T15199] loop7: detected capacity change from 0 to 4096 [ 447.566684][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3726'. [ 447.659323][T15199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.823284][T15205] loop2: detected capacity change from 0 to 1024 [ 447.905249][T15199] EXT4-fs error (device loop7): ext4_get_first_dir_block:3549: inode #12: block 80: comm syz.7.3725: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 447.982754][T15199] EXT4-fs error (device loop7): ext4_get_first_dir_block:3552: inode #12: comm syz.7.3725: directory missing '..' [ 448.113670][ T73] hfsplus: b-tree write err: -5, ino 4 [ 448.169607][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.474624][T15191] loop8: detected capacity change from 0 to 40427 [ 448.535342][T15191] F2FS-fs (loop8): Image doesn't support compression [ 448.542091][T15191] F2FS-fs (loop8): build fault injection rate: 690 [ 448.602542][T15191] F2FS-fs (loop8): invalid crc value [ 449.012189][T15191] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 449.029851][T15191] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 449.114573][ T5949] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 449.294206][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 449.307462][ T5949] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 449.326345][ T5949] usb 3-1: config 8 has no interface number 0 [ 449.364468][ T5949] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 449.394709][ T52] Bluetooth: hci2: command tx timeout [ 449.404781][ T5949] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 449.427436][ T5949] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 449.495497][ T5949] usb 3-1: config 8 interface 39 has no altsetting 0 [ 449.554728][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 449.563831][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.603732][ T5949] usb 3-1: Product: syz [ 449.613579][ T5949] usb 3-1: Manufacturer: syz [ 449.618969][ T5949] usb 3-1: SerialNumber: syz [ 450.017606][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3755'. [ 450.032037][T15266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3755'. [ 450.075457][ T5949] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 450.103636][ T5949] ipheth 3-1:8.39: probe with driver ipheth failed with error -22 [ 450.285722][ T93] usb 3-1: USB disconnect, device number 25 [ 450.625987][T15288] loop8: detected capacity change from 0 to 1024 [ 450.771238][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3766'. [ 450.824131][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3766'. [ 451.331333][T15309] loop7: detected capacity change from 0 to 4096 [ 451.407346][T15309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.493025][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.438425][T15357] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 453.049404][T15338] loop8: detected capacity change from 0 to 32768 [ 453.099748][T15338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3787 (15338) [ 453.100219][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'. [ 453.212053][T15338] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.281123][T15338] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 453.589120][T15338] BTRFS info (device loop8): enabling ssd optimizations [ 453.634448][T15338] BTRFS info (device loop8): enabling free space tree [ 453.714955][T15415] hugetlbfs: Bad value 'k' for mount option 'size' [ 453.714955][T15415] [ 453.733119][T15338] BTRFS error: failed to open device for path -ڔ,dF}O]2UHB6 ao{!-蹑Q`\_y+/Ŋo1hiN9{WOp䲘{įkɞf6Y' P+SkꒊY %ǺdU!5=춇a)ƸY DtZ%x))Ü+42Q"=HP.۞v7WGjPwJ >p=lh4,wtzumbol66Qa=fZ<ɾ+z`f4ǠWEiAaQ@Uv8ڪ+ő1؀ M(1vAQ^ #FYEfMS>=|uke$ d{EtDw- [ 453.733119][T15338] 'kܪ.gAG u0N7l~B8Ƴ with flags 0x1: -2 [ 454.021650][T15422] loop7: detected capacity change from 0 to 1024 [ 454.076152][T15422] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 454.102532][T14696] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 454.107759][T15422] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 454.198132][T15422] JBD2: no valid journal superblock found [ 454.244537][T15422] EXT4-fs (loop7): Could not load journal inode [ 454.304068][T15430] loop2: detected capacity change from 0 to 512 [ 454.387179][T15430] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 454.506946][T15430] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 454.547399][ T5967] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 454.587433][T15430] EXT4-fs (loop2): 1 truncate cleaned up [ 454.617439][T15430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.736037][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 454.760315][ T5967] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.803275][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.812406][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.844200][ T5967] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 454.882871][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.920075][ T5967] usb 5-1: config 0 descriptor?? [ 455.371517][ T5967] hid-retrode 0003:0403:97C1.0014: unknown main item tag 0x0 [ 455.415063][ T5967] hid-retrode 0003:0403:97C1.0014: unknown main item tag 0x0 [ 455.422557][ T5967] hid-retrode 0003:0403:97C1.0014: unknown main item tag 0x0 [ 455.464564][ T5967] hid-retrode 0003:0403:97C1.0014: unknown main item tag 0x0 [ 455.501337][ T5967] hid-retrode 0003:0403:97C1.0014: unknown main item tag 0x0 [ 455.545366][ T5967] hid-retrode 0003:0403:97C1.0014: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 455.618215][ T5967] usb 5-1: USB disconnect, device number 26 [ 455.846355][T15464] fido_id[15464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 455.933209][T15469] loop8: detected capacity change from 0 to 256 [ 456.124157][T15469] FAT-fs (loop8): Directory bread(block 64) failed [ 456.174533][T15469] FAT-fs (loop8): Directory bread(block 65) failed [ 456.181214][T15469] FAT-fs (loop8): Directory bread(block 66) failed [ 456.244161][T15469] FAT-fs (loop8): Directory bread(block 67) failed [ 456.250863][T15469] FAT-fs (loop8): Directory bread(block 68) failed [ 456.324295][T15469] FAT-fs (loop8): Directory bread(block 69) failed [ 456.330981][T15469] FAT-fs (loop8): Directory bread(block 70) failed [ 456.399541][T15469] FAT-fs (loop8): Directory bread(block 71) failed [ 456.444118][T15469] FAT-fs (loop8): Directory bread(block 72) failed [ 456.484480][T15469] FAT-fs (loop8): Directory bread(block 73) failed [ 456.997895][T15460] loop7: detected capacity change from 0 to 32768 [ 457.073001][T15467] loop2: detected capacity change from 0 to 32768 [ 457.092602][T15460] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 457.189823][T15467] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 457.213755][T15494] random: crng reseeded on system resumption [ 457.252987][T15460] XFS (loop7): Ending clean mount [ 457.339474][T15467] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 457.381260][T15473] loop4: detected capacity change from 0 to 32768 [ 457.388471][T15460] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 457.733611][T13178] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 457.758947][ T5858] ocfs2: Unmounting device (7,2) on (node local) [ 458.081714][T15508] netlink: 336 bytes leftover after parsing attributes in process `syz.2.3833'. [ 458.384038][ T5967] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 458.460437][T15521] loop2: detected capacity change from 0 to 256 [ 458.584907][T15521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.622290][ T5967] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 458.650320][ T5967] usb 8-1: config 0 has no interface number 0 [ 458.682387][ T5967] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.768214][ T5967] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.846874][ T5967] usb 8-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 458.880331][ T5967] usb 8-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 458.934245][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.029852][ T5967] usb 8-1: config 0 descriptor?? [ 459.098713][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3844'. [ 459.508959][ T5967] uclogic 0003:28BD:0934.0015: Interface probing failed: -22 [ 459.537261][ T5967] uclogic 0003:28BD:0934.0015: interface is invalid, ignoring [ 459.666369][T15547] loop4: detected capacity change from 0 to 4096 [ 459.711387][ T5967] usb 8-1: USB disconnect, device number 5 [ 459.816836][T15554] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.902015][T15547] syz.4.3848: attempt to access beyond end of device [ 459.902015][T15547] loop4: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 459.998778][T15547] syz.4.3848: attempt to access beyond end of device [ 459.998778][T15547] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 460.052915][T15557] loop2: detected capacity change from 0 to 256 [ 460.062929][ T30] audit: type=1800 audit(1757400801.461:2567): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3848" name="file1" dev="loop4" ino=16 res=0 errno=0 [ 460.124340][T15557] exfat: Deprecated parameter 'namecase' [ 460.130079][T15557] exfat: Deprecated parameter 'utf8' [ 460.175792][T15527] loop8: detected capacity change from 0 to 32768 [ 460.252475][T15557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 460.349641][T15527] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 460.681052][T15527] XFS (loop8): Ending clean mount [ 460.737554][T15527] XFS (loop8): Quotacheck needed: Please wait. [ 460.882306][T15527] XFS (loop8): Quotacheck: Done. [ 460.956364][T15580] loop2: detected capacity change from 0 to 1024 [ 461.067668][ T30] audit: type=1800 audit(1757400802.471:2568): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3857" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 461.130125][T14696] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 462.042488][T15608] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 462.074661][T15608] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 462.085838][T15608] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 462.101384][T15608] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 462.130299][T15608] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 462.153183][T15608] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 462.179407][T15608] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 462.197323][T15608] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 462.213888][T15608] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 462.232214][T15608] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 462.255350][T15608] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 462.276634][T15608] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 462.306859][T15608] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 462.313685][T15608] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 462.329282][T15608] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 462.339156][T15608] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 462.350208][T15608] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 462.534139][ T5918] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 462.729732][ T5918] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 462.754318][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.792628][T15616] loop7: detected capacity change from 0 to 1024 [ 462.802858][ T5918] usb 3-1: config 0 descriptor?? [ 462.844905][T15616] EXT4-fs: Ignoring removed oldalloc option [ 462.850908][T15616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.864817][T15616] EXT4-fs: Ignoring removed oldalloc option [ 462.870024][T15614] loop4: detected capacity change from 0 to 4096 [ 462.888689][T15602] loop8: detected capacity change from 0 to 40427 [ 462.946776][T15602] F2FS-fs (loop8): Wrong segment_count / block_count (64 > 16384) [ 462.948085][T15616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.954902][T15602] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 463.224215][T15614] ntfs3(loop4): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 463.240199][ T5918] hackrf 3-1:0.0: Board ID: 00 [ 463.253989][ T5918] hackrf 3-1:0.0: Firmware version: [ 463.298652][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.335260][ T5918] hackrf 3-1:0.0: Registered as swradio24 [ 463.339133][T15602] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 463.347410][ T5918] videodev: could not get a free minor [ 463.409587][ T5918] hackrf 3-1:0.0: Failed to register as video device (-23) [ 463.429956][T15602] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 463.454496][T15602] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 463.581774][ T5918] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 463.644548][ T5918] usb 3-1: USB disconnect, device number 26 [ 463.665250][T15633] Bluetooth: MGMT ver 1.23 [ 464.036234][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 464.293374][T15644] loop2: detected capacity change from 0 to 4096 [ 464.347257][T15644] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 464.518369][T15644] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 464.568600][T15644] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 464.645781][T15644] ntfs3(loop2): ino=1b, mi_enum_attr [ 464.873560][T15634] loop7: detected capacity change from 0 to 32768 [ 464.938519][T15660] program syz.8.3881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.985974][T15634] [ 464.985974][T15634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 464.985974][T15634] [ 465.097550][T15634] read_mapping_page failed! [ 465.100695][T15664] loop4: detected capacity change from 0 to 128 [ 465.102128][T15634] ERROR: (device loop7): txCommit: [ 465.102128][T15634] [ 465.173034][T15664] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 465.186695][ T93] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 465.223153][T15664] hpfs: filesystem error: improperly stopped [ 465.231268][T15664] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 465.256387][T15664] hpfs: You really don't want any checks? You are crazy... [ 465.271692][T13178] [ 465.271692][T13178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 465.271692][T13178] [ 465.286330][T13178] [ 465.286330][T13178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 465.286330][T13178] [ 465.294951][T15664] hpfs: hpfs_map_sector(): read error [ 465.311016][T15664] hpfs: code page support is disabled [ 465.345558][T15664] hpfs: hpfs_map_4sectors(): unaligned read [ 465.351647][T15664] hpfs: hpfs_map_4sectors(): unaligned read [ 465.357622][T15668] loop8: detected capacity change from 0 to 8 [ 465.394172][T15664] hpfs: filesystem error: unable to find root dir [ 465.414555][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.452696][ T93] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 465.475646][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.510288][ T93] usb 3-1: config 0 descriptor?? [ 465.739620][T15675] xt_socket: unknown flags 0xd0 [ 465.952534][T15680] comedi comedi3: pcl711: I/O port conflict (0x4f27,16) [ 465.992466][ T93] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 465.993359][T15682] loop4: detected capacity change from 0 to 512 [ 466.022828][ T93] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 466.041104][ T93] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 466.084607][ T93] waterforce 0003:1044:7A4D.0016: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 466.122564][T15682] EXT4-fs (loop4): 1 orphan inode deleted [ 466.168243][T15682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.181859][ T93] waterforce 0003:1044:7A4D.0016: fw version request failed with -38 [ 466.186244][T15682] ext4 filesystem being mounted at /778/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.246857][ T93] usb 3-1: USB disconnect, device number 27 [ 466.283738][T15682] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 466.303728][T15682] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 466.333416][T15693] netlink: 47 bytes leftover after parsing attributes in process `syz.7.3908'. [ 466.443312][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.619538][T15700] loop7: detected capacity change from 0 to 512 [ 466.663418][T15700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 466.741983][T15700] EXT4-fs (loop7): 1 truncate cleaned up [ 466.771912][T15700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.852881][T15705] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3911'. [ 466.900218][ T30] audit: type=1800 audit(1757400808.301:2569): pid=15700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3910" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 467.084573][T13178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.230350][ T5949] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 467.274254][ T5949] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 467.290928][ T5949] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 467.313721][T15718] loop2: detected capacity change from 0 to 256 [ 467.365366][ T5949] hid-generic 0000:0004:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 467.523325][T15718] FAT-fs (loop2): Directory bread(block 64) failed [ 467.543440][T15718] FAT-fs (loop2): Directory bread(block 65) failed [ 467.594781][T15718] FAT-fs (loop2): Directory bread(block 66) failed [ 467.615499][T15718] FAT-fs (loop2): Directory bread(block 67) failed [ 467.622385][T15718] FAT-fs (loop2): Directory bread(block 68) failed [ 467.640957][T15723] fido_id[15723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 467.664242][T15718] FAT-fs (loop2): Directory bread(block 69) failed [ 467.670930][T15718] FAT-fs (loop2): Directory bread(block 70) failed [ 467.719621][T15718] FAT-fs (loop2): Directory bread(block 71) failed [ 467.731439][T15718] FAT-fs (loop2): Directory bread(block 72) failed [ 467.739237][T15718] FAT-fs (loop2): Directory bread(block 73) failed [ 467.851617][T15731] loop8: detected capacity change from 0 to 128 [ 467.911653][T15731] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 467.944104][ T5967] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 468.079006][T15737] loop2: detected capacity change from 0 to 128 [ 468.104382][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 468.150714][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.212488][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.241582][ T5967] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.279109][ T5967] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 468.332870][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 468.344203][ T5967] usb 5-1: Product: syz [ 468.348462][ T5967] usb 5-1: Manufacturer: syz [ 468.370214][ T5967] usb 5-1: SerialNumber: syz [ 468.440371][ T5967] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input21 [ 468.823214][ T5963] usb 5-1: USB disconnect, device number 27 [ 468.956097][ T5963] appletouch 5-1:1.0: input: appletouch disconnected [ 469.183755][T15767] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 469.225139][T15767] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 469.328027][T15769] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 470.069761][T15765] loop8: detected capacity change from 0 to 32768 [ 470.144217][ T5963] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 470.309893][ T5963] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.349244][ T5963] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.374067][ T5963] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.399439][T15774] loop4: detected capacity change from 0 to 32768 [ 470.407109][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.455146][T15781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.467595][ T5963] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.512447][T15774] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 470.737324][T15774] XFS (loop4): Ending clean mount [ 470.807880][ T5963] usb 3-1: USB disconnect, device number 28 [ 471.005987][T15789] loop8: detected capacity change from 0 to 32768 [ 471.010589][ T5869] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.070924][T15803] loop7: detected capacity change from 0 to 1024 [ 471.128743][T15789] JBD2: Ignoring recovery information on journal [ 471.216136][ T6022] hfsplus: b-tree write err: -5, ino 4 [ 471.251712][T15789] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 471.632255][T14696] ocfs2: Unmounting device (7,8) on (node local) [ 472.224441][ T5949] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 472.414037][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 472.421283][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 472.443089][ T5949] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 472.462603][ T5949] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 472.482686][ T5949] usb 5-1: Product: syz [ 472.493983][ T5949] usb 5-1: Manufacturer: syz [ 472.504001][ T5949] usb 5-1: SerialNumber: syz [ 472.591785][T15813] loop2: detected capacity change from 0 to 40427 [ 472.612605][T15813] F2FS-fs (loop2): build fault injection rate: 25 [ 472.630071][T15813] F2FS-fs (loop2): invalid crc value [ 472.647260][T15817] loop8: detected capacity change from 0 to 32768 [ 472.690892][T15817] (syz.8.3960,15817,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 472.742128][T15817] (syz.8.3960,15817,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 472.743739][ T5949] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 472.792905][ T5949] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 472.821759][ T5949] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 472.853473][T15817] JBD2: Ignoring recovery information on journal [ 472.950756][ T5949] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 472.972162][ T5949] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 473.001192][ T5949] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 473.001907][T15813] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 473.014734][ T5949] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 473.033307][T15813] F2FS-fs (loop2): Start checkpoint disabled! [ 473.051717][T15817] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 473.051749][T15813] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 473.075989][ T5949] usb 5-1: USB disconnect, device number 28 [ 473.091278][ T5949] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 473.102095][T15813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 473.122676][ T5949] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 473.135165][ T5949] visor 5-1:1.0: device disconnected [ 473.309216][T14696] ocfs2: Unmounting device (7,8) on (node local) [ 473.593912][ T5949] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 473.767149][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.809613][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.845239][ T5949] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 473.874292][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.891654][ T5949] usb 8-1: config 0 descriptor?? [ 474.117148][T15853] loop8: detected capacity change from 0 to 2048 [ 474.187447][T15859] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.250300][T15853] NILFS (loop8): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 474.299097][T15853] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=13) [ 474.357626][T15853] Remounting filesystem read-only [ 474.381262][T15853] NILFS (loop8): error -5 truncating bmap (ino=13) [ 474.393629][ T5949] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 474.432112][ T5949] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 474.501591][ T5949] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0018/input/input22 [ 474.554186][T15867] netlink: 'syz.0.3981': attribute type 3 has an invalid length. [ 474.590527][ T5949] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 474.656686][T14696] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 474.685658][ T5949] usb 8-1: USB disconnect, device number 6 [ 474.937280][T15868] fido_id[15868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 475.713749][T15890] loop4: detected capacity change from 0 to 1024 [ 475.979496][ T1155] hfsplus: b-tree write err: -5, ino 4 [ 476.250153][T15882] loop8: detected capacity change from 0 to 32768 [ 476.527389][T15905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4000'. [ 477.015521][T15915] loop4: detected capacity change from 0 to 128 [ 477.582508][T15933] syz.4.4013 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 477.697126][T15936] vxfs: WRONG superblock magic 00000000 at 1 [ 477.732067][T15936] vxfs: WRONG superblock magic 00000000 at 8 [ 477.754295][T15936] vxfs: can't find superblock. [ 477.979516][T15944] raw_sendmsg: syz.8.4019 forgot to set AF_INET. Fix it! [ 478.026679][T15946] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 478.035223][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 478.072232][T15946] tipc: Enabled bearer , priority 10 [ 478.316664][T15953] comedi comedi3: rti800: I/O port conflict (0x4f27,16) [ 478.423277][T15956] loop8: detected capacity change from 0 to 256 [ 478.655029][T15956] FAT-fs (loop8): Directory bread(block 64) failed [ 478.661682][T15956] FAT-fs (loop8): Directory bread(block 65) failed [ 478.725231][T15956] FAT-fs (loop8): Directory bread(block 66) failed [ 478.752147][T15956] FAT-fs (loop8): Directory bread(block 67) failed [ 478.805021][T15956] FAT-fs (loop8): Directory bread(block 68) failed [ 478.811622][T15956] FAT-fs (loop8): Directory bread(block 69) failed [ 478.867286][T15956] FAT-fs (loop8): Directory bread(block 70) failed [ 478.873878][T15956] FAT-fs (loop8): Directory bread(block 71) failed [ 478.897331][T15956] FAT-fs (loop8): Directory bread(block 72) failed [ 478.918043][T15956] FAT-fs (loop8): Directory bread(block 73) failed [ 479.544661][T15981] loop7: detected capacity change from 0 to 512 [ 479.552037][T15981] EXT4-fs: Ignoring removed i_version option [ 479.602516][T15981] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 479.652940][T15981] EXT4-fs (loop7): 1 truncate cleaned up [ 479.660867][T15981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.672283][T15986] CUSE: unknown device info "" [ 479.713081][T15986] CUSE: zero length info key specified [ 479.850889][T15967] loop4: detected capacity change from 0 to 32768 [ 479.887581][T13178] EXT4-fs warning (device loop7): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting [ 479.938383][T13178] ------------[ cut here ]------------ [ 479.945328][T13178] WARNING: fs/ext4/xattr.c:1470 at ext4_xattr_inode_lookup_create+0xa85/0x1c20, CPU#0: syz-executor/13178 [ 479.958420][T13178] Modules linked in: [ 479.962857][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 479.972489][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.973392][T15989] loop8: detected capacity change from 0 to 1024 [ 479.982620][T13178] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 479.982761][T13178] Code: 8b 74 24 10 e9 d4 03 00 00 e8 37 b3 39 ff 48 89 df 48 c7 c6 8e 27 b8 8d ba bd 05 00 00 48 c7 c1 c0 dd bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 479.982780][T13178] RSP: 0018:ffffc90003ccf3e0 EFLAGS: 00010246 [ 479.982804][T13178] RAX: fe180551dee6dc00 RBX: ffff888029c7a000 RCX: fe180551dee6dc00 [ 479.982822][T13178] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 479.982836][T13178] RBP: ffffc90003ccf570 R08: ffffc90003ccefc7 R09: 1ffff92000799df8 [ 479.982852][T13178] R10: dffffc0000000000 R11: fffff52000799df9 R12: 1ffff92000799e90 [ 480.027725][T15991] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 480.030295][T13178] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88806ec40c50 [ 480.072127][T13178] FS: 000055558a10d500(0000) GS:ffff8881259f1000(0000) knlGS:0000000000000000 [ 480.081812][T13178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.089052][T13178] CR2: 0000200000f5f030 CR3: 0000000063fa2000 CR4: 00000000003526f0 [ 480.097443][T13178] Call Trace: [ 480.100757][T13178] [ 480.103730][T13178] ? __pfx___might_resched+0x10/0x10 [ 480.109213][T13178] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 480.115917][T13178] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 480.121341][T13178] ext4_xattr_block_set+0x223/0x2ac0 [ 480.125648][T15989] EXT4-fs: Ignoring removed orlov option [ 480.126722][T13178] ? __pfx___might_resched+0x10/0x10 [ 480.137675][T13178] ? fs_reclaim_acquire+0x7d/0x100 [ 480.142845][T13178] ? fs_reclaim_acquire+0x7d/0x100 [ 480.149411][T13178] ? __pfx_check_xattrs+0x10/0x10 [ 480.155626][T13178] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 480.160236][T15989] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 480.161406][T13178] ? ext4_xattr_block_find+0x2d4/0x350 [ 480.176734][T13178] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 480.182713][T13178] __ext4_expand_extra_isize+0x30d/0x400 [ 480.188485][T13178] __ext4_mark_inode_dirty+0x46c/0x700 [ 480.194196][T13178] ext4_dirty_inode+0xd0/0x110 [ 480.198999][T13178] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 480.204480][T13178] __mark_inode_dirty+0x2e9/0xe10 [ 480.209541][T13178] iput+0x1ee/0x9d0 [ 480.213395][T13178] __dentry_kill+0x209/0x660 [ 480.218077][T13178] ? shrink_kill+0x8d/0x2c0 [ 480.222609][T13178] shrink_kill+0xa9/0x2c0 [ 480.227041][T13178] shrink_dentry_list+0x2e0/0x5e0 [ 480.232116][T13178] shrink_dcache_parent+0xa1/0x2c0 [ 480.237340][T13178] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 480.243090][T13178] ? call_rcu+0x6ff/0x9c0 [ 480.249064][T13178] do_one_tree+0x23/0xe0 [ 480.253347][T13178] shrink_dcache_for_umount+0xa0/0x170 [ 480.259998][T13178] generic_shutdown_super+0x67/0x2c0 [ 480.265384][T13178] kill_block_super+0x44/0x90 [ 480.270093][T13178] ext4_kill_sb+0x68/0xb0 [ 480.274544][T13178] deactivate_locked_super+0xbc/0x130 [ 480.279951][T13178] cleanup_mnt+0x425/0x4c0 [ 480.284515][T13178] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.289894][T13178] task_work_run+0x1d4/0x260 [ 480.294634][T13178] ? __pfx_task_work_run+0x10/0x10 [ 480.299782][T13178] ? __x64_sys_umount+0x122/0x160 [ 480.304925][T13178] ? exit_to_user_mode_loop+0x40/0x130 [ 480.310424][T13178] exit_to_user_mode_loop+0xec/0x130 [ 480.315881][T13178] do_syscall_64+0x2bd/0xfa0 [ 480.320495][T13178] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.325798][T13178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.331896][T13178] ? clear_bhb_loop+0x60/0xb0 [ 480.336649][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.342576][T13178] RIP: 0033:0x7f16c638ff17 [ 480.347177][T13178] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 480.368291][T13178] RSP: 002b:00007ffd573b9468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 480.377941][T13178] RAX: 0000000000000000 RBX: 00007f16c6411c05 RCX: 00007f16c638ff17 [ 480.386022][T13178] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd573b9520 [ 480.394063][T13178] RBP: 00007ffd573b9520 R08: 0000000000000000 R09: 0000000000000000 [ 480.402071][T13178] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd573ba5b0 [ 480.410145][T13178] R13: 00007f16c6411c05 R14: 000000000007521a R15: 00007ffd573ba5f0 [ 480.418536][T13178] [ 480.421594][T13178] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 480.428902][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 480.438473][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.448556][T13178] Call Trace: [ 480.451865][T13178] [ 480.454819][T13178] dump_stack_lvl+0x99/0x250 [ 480.459453][T13178] ? __asan_memcpy+0x40/0x70 [ 480.464075][T13178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.469301][T13178] ? __pfx__printk+0x10/0x10 [ 480.473940][T13178] vpanic+0x237/0x6d0 [ 480.477955][T13178] ? __pfx_vpanic+0x10/0x10 [ 480.482481][T13178] ? is_bpf_text_address+0x292/0x2b0 [ 480.487890][T13178] ? is_bpf_text_address+0x26/0x2b0 [ 480.493136][T13178] panic+0xb9/0xc0 [ 480.496894][T13178] ? __pfx_panic+0x10/0x10 [ 480.501368][T13178] __warn+0x334/0x4c0 [ 480.505467][T13178] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 480.511835][T13178] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 480.518290][T13178] report_bug+0x2be/0x4f0 [ 480.522655][T13178] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 480.529031][T13178] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 480.535404][T13178] ? ext4_xattr_inode_lookup_create+0xa87/0x1c20 [ 480.541774][T13178] handle_bug+0x84/0x160 [ 480.546051][T13178] exc_invalid_op+0x1a/0x50 [ 480.550583][T13178] asm_exc_invalid_op+0x1a/0x20 [ 480.555446][T13178] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 480.562397][T13178] Code: 8b 74 24 10 e9 d4 03 00 00 e8 37 b3 39 ff 48 89 df 48 c7 c6 8e 27 b8 8d ba bd 05 00 00 48 c7 c1 c0 dd bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 480.582019][T13178] RSP: 0018:ffffc90003ccf3e0 EFLAGS: 00010246 [ 480.588099][T13178] RAX: fe180551dee6dc00 RBX: ffff888029c7a000 RCX: fe180551dee6dc00 [ 480.596251][T13178] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 480.604233][T13178] RBP: ffffc90003ccf570 R08: ffffc90003ccefc7 R09: 1ffff92000799df8 [ 480.612208][T13178] R10: dffffc0000000000 R11: fffff52000799df9 R12: 1ffff92000799e90 [ 480.620186][T13178] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88806ec40c50 [ 480.628207][T13178] ? __pfx___might_resched+0x10/0x10 [ 480.633528][T13178] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 480.640583][T13178] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 480.645972][T13178] ext4_xattr_block_set+0x223/0x2ac0 [ 480.651267][T13178] ? __pfx___might_resched+0x10/0x10 [ 480.656568][T13178] ? fs_reclaim_acquire+0x7d/0x100 [ 480.661740][T13178] ? fs_reclaim_acquire+0x7d/0x100 [ 480.666887][T13178] ? __pfx_check_xattrs+0x10/0x10 [ 480.672021][T13178] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 480.677762][T13178] ? ext4_xattr_block_find+0x2d4/0x350 [ 480.683242][T13178] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 480.689184][T13178] __ext4_expand_extra_isize+0x30d/0x400 [ 480.694837][T13178] __ext4_mark_inode_dirty+0x46c/0x700 [ 480.700338][T13178] ext4_dirty_inode+0xd0/0x110 [ 480.705115][T13178] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 480.710505][T13178] __mark_inode_dirty+0x2e9/0xe10 [ 480.715536][T13178] iput+0x1ee/0x9d0 [ 480.719360][T13178] __dentry_kill+0x209/0x660 [ 480.723962][T13178] ? shrink_kill+0x8d/0x2c0 [ 480.728482][T13178] shrink_kill+0xa9/0x2c0 [ 480.732815][T13178] shrink_dentry_list+0x2e0/0x5e0 [ 480.737850][T13178] shrink_dcache_parent+0xa1/0x2c0 [ 480.742972][T13178] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 480.748697][T13178] ? call_rcu+0x6ff/0x9c0 [ 480.753035][T13178] do_one_tree+0x23/0xe0 [ 480.757286][T13178] shrink_dcache_for_umount+0xa0/0x170 [ 480.762746][T13178] generic_shutdown_super+0x67/0x2c0 [ 480.768042][T13178] kill_block_super+0x44/0x90 [ 480.772727][T13178] ext4_kill_sb+0x68/0xb0 [ 480.777068][T13178] deactivate_locked_super+0xbc/0x130 [ 480.782444][T13178] cleanup_mnt+0x425/0x4c0 [ 480.786858][T13178] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.792068][T13178] task_work_run+0x1d4/0x260 [ 480.796670][T13178] ? __pfx_task_work_run+0x10/0x10 [ 480.801787][T13178] ? __x64_sys_umount+0x122/0x160 [ 480.806840][T13178] ? exit_to_user_mode_loop+0x40/0x130 [ 480.812392][T13178] exit_to_user_mode_loop+0xec/0x130 [ 480.817683][T13178] do_syscall_64+0x2bd/0xfa0 [ 480.822277][T13178] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.827480][T13178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.833556][T13178] ? clear_bhb_loop+0x60/0xb0 [ 480.838240][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.844135][T13178] RIP: 0033:0x7f16c638ff17 [ 480.848561][T13178] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 480.868201][T13178] RSP: 002b:00007ffd573b9468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 480.876713][T13178] RAX: 0000000000000000 RBX: 00007f16c6411c05 RCX: 00007f16c638ff17 [ 480.884685][T13178] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd573b9520 [ 480.893349][T13178] RBP: 00007ffd573b9520 R08: 0000000000000000 R09: 0000000000000000 [ 480.901332][T13178] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd573ba5b0 [ 480.909306][T13178] R13: 00007f16c6411c05 R14: 000000000007521a R15: 00007ffd573ba5f0 [ 480.917337][T13178] [ 480.920633][T13178] Kernel Offset: disabled [ 480.924952][T13178] Rebooting in 86400 seconds..