last executing test programs: 1m34.665607374s ago: executing program 1 (id=1661): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 1m34.628103697s ago: executing program 1 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1m34.381212319s ago: executing program 1 (id=1664): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1m34.191413782s ago: executing program 1 (id=1666): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m33.398289158s ago: executing program 1 (id=1674): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$eJzs3U2MW0cBAOCxd73JtilxSkKXNLQJhbb8dNPsLuEngqRKhETUVIhLpQgOUZqWiBAkigRUlUhy4karKkic+BGnXqqCkOgFRT1xqUQjVUg9FQ4ciIKIxAECidHuznjtid1n74+fvf4+aTx+b97zzDw/P7/fmQCMrerS68LCTCWEy2+8cuzvD/9tenHM4eYU9aXXyZahWgihEocns897b2I5vnXjxdOd4kqYW3pNw+Gp68157w4hXAh7w5VQD7svX335rbknT1w8fmnf268eurYxtQcAgPHy1SuHFnb95U/377j52gNHwpY0evHN0v55PY7YFvf7j8Qd/7T/Xw3tw5WW0Goqm24yhup0+3QTHaZrzaeWTTfZJf+pLP9al+m2hPfPf6JlXKd6wyhL63E9VKqzbcPV6uzs8jF5WDqun6rMnj977tnnSyoosO7+9WAIYW9LOHqpfXi14Rtxy7Een9UaDm/AZ64x1HqsZ2MIyjqS4cjg8rrZWFZ6nQcUGttL3gABRPn1wjtcyM8srE3z0yZ7y//6E9XO88M6GPT631f+UyXnH+T/64u2OKyfzbo2pXql39G2OJxfR8jvX+r++8uvdLSPza9H1HosZ7frCKNyfaFbOScGXI7V6lb+fL3YrL4Y47QcvpSlt/5+8u90VL5joLN/5+f/BUEY7hDahmtr+axGydsfYHjl98010vXRKL+vL0/fUpC+tSB9uiD9roL0uwvSYZz99ns/CS9VVo7z82P6fs+Hp/Ns98T4A32WJz8f2W/++X2//Vpr/vn9xDDMfn/q6TOfe+bk1eX7/yvN9f92XN/T4UY9/rauxAnS+cL8vHrz3v96ez7VLtPdm5Xnng7TL73f2T5dZefK54SW7cwd5Zhpn297t+n2tE9Xz6abjmFrVt58/+SubL60/5G2q2l5TWb1rWX1mMrKkbYrO2KclwNWI62P3e7/T+vnTKhVnj177szjcTitp3+cqG1ZHH9gwOUG1q7X539mQvvzP9ua42vV1u3C9pXxleXtwuvx89rHzzXzaR8/H4fT/9w3J6aXxs+e/s65Z9a/+jDWnv/hC986de7cme+W/mZ+OoQhKMYq3nx5OIrRz5t02DIs5Vn1m8WKDEExNuGbkjdMwIbb/6PlnYDHzn771HNnnjtzfv7gwfm5uYOfn1/Yv7Rfv791777VhRJKC6ynlT/9sksCAAAAAAAAAAAA9Or7x49dfefNz767/Pz/yvN/6fn/dOdvev7/x9nz//lz8uk5+PQc4I4O6UvTZA2sTmXT1WL4YFbenVk+u7L5PhTjZj9+8fn/lF3ermsqz33Z+FqXwaw5gTvaS5nK2iDJ+wv8aIwvxfhXAUpUme48OsZF7VundT21T9HSLkVD+8CjI31vaW1I7Zik5787tuvU8mXvGEAZWX+DeJyw7DoCnf1jrNr//udKxUsvi9A9TA42v5+N7zrR6LqX3msPNgDro+z+P9N5zxSf/8NXti6GNNn1J9q3l3n7pdCPP7/TPjzs/U9udP55v32Dzr/s+g+6/89m/3c9b/+yHvPqq8v3Pz+/9m5LtmF3r/nn9U/tQO/sL/+bMf9Um0dCb/k3fpnln18Q6tF/s/zv6jH/O+q/Z3X5/y/mnxbbow/1mn91+ZpZtb0c+XnjdP0vP2+c3Mrqn9r2fJ/8v/ZCp/qvsqPG2zF/GGej0s9sv7L9iOZO++r7/40urG//v83CZpu1/D6Mz8QxaUOc7nPI+zvpt/zp/or0P7Ar+/xKwf+b/n9H2xdiXPR7SP3/3r6xfDmvHv/y0/pZj8syDdc6LNvNuq2BUfXeWF3/W4dwcsPz2Fp6HYc+HBmCMjRDY2IV8zX7iSu5/I1GY2NPaBUoNXNKX/5lHyeUnX/Zy79I3v9vvg+f9/+bp+f9/+bpef+/efp0/Ia6pef9/+bLM+//N0+/L/vcvH/gmYL0Dxek7+6c3jxsv79g/j0F6R8pSN/XTD/cNkVKf6Bg/gcL0u9tT9+Spz9UMP/HCtI/XpD+cEH6oy3prX1Ap/RPFMy/2aXnUca1/jDO8ufz/P5hfKTrP91+/zsL0oHR9dPXDhw9+Zuv15ef/59qng9J1/GOxOFaPH76QRzOr3uHluHFtDfj8F+z9GE/3wHjJG8/I/9/f6QgHRhd6T4vv28YQ5WtnUfHuKjdqm77+YyWT8b4UzH+dIwfi/FsjPfH+ECM5wZUPjbG0dd/d+ilysrx/vYsvdf7yfPngdraiQohzPdYnvz8QL/3s+ft+PVrrfmv8nEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSXXhcWZiohXH7jlWNPnzi7f3HM4eYU9aXXyZahWnO+EB6P8USMfxHf3Lrx4unW+HaMK2EuVEKlOT48db2Z090hhAthb7gS6mH35asvvzX35ImLxy/te/vVQ9c2bgkAAADA5vf/AAAA//9LWAnF") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 1m32.535540871s ago: executing program 1 (id=1682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x44, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}}, 0x40000) 1m32.203092836s ago: executing program 32 (id=1682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x44, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}}, 0x40000) 1m26.583082067s ago: executing program 3 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m26.226834418s ago: executing program 3 (id=1735): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1m23.908552168s ago: executing program 3 (id=1746): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xe) 1m23.640846507s ago: executing program 3 (id=1738): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m22.88500108s ago: executing program 3 (id=1742): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x5437, 0x0) read(r0, 0x0, 0x0) 1m21.627294706s ago: executing program 3 (id=1752): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 1m21.249522273s ago: executing program 33 (id=1752): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 3.543477947s ago: executing program 6 (id=2656): syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file2\x00', 0x1808001, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$eJzs3M2LG/UbAPBnst2+//pbxIO3DpTCLjSh2b6gt6otvmBLqXrwpNkkDWmTzLJJ03VB8OBRPPifiIInj/4NHjx7Ew+KN6GSmYl21YIvedm2nw9Mnplvvnnm+YZl4JlZEsBTay39+cckTsWxiFiJiJMRk/0HSUQk00lXivBcRJyOiMpDW1KO/zZwOCKOR8SpSfIiZ1K+9em58ZlLP7z+01ffHDl04rMvv13eqoFlOzu5QJTu94uYdYp4Z7uIjXE3j/2L4zIWb/TvlsdZEe+3t/IM9xvTeY08XugU87Pte8NJvN1rNCex072dj28PihMOx51pnvwDdxo7+XGrvZXH7jDLY2evqGt3r7i27Q1HRZ5Wme/9PH2MRtNYjLd328V6tu/msTkYleNF3qzV3p3EcRmn195m1mvldWz922/54HujO7i3m47bO8NuNkgv1erP1+qXq/WdrNUetS9WG/3W5Yvpeqc3mVYdtRv9K50s6/TatWbW30jXO81mtV5P16+2t7qNQVqv1y7UzlcvbZR759JXbryd9lrp+iS+1B3cG3V7w/R2tpMWn9hIN2sXXthIz9TTN6/fTG/eunbt+s233r36zo0Xr7/2cjnpT2Wl65vnNzer9fPVzfrGU7T+j8qiZ7h++E+SZRcA8Ph5RP8f+n9gns5O+vSyz59t/79zK2L+/X/Msf8vT6f/P2j97wz7/86Jha+/Egdo/TAT/7T//2BOdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsHDfrX7+ar6zVhyfKMf/Vw49Ux4nEVGJiAd/YSUO78u5UuZZfcT81T/U8HUSeYbJOY6U2/GIuFJuv/x/3t8CAAAAPLm++PD0J0W3XrysLbsgFqm4aVM5+d6M8iURsbr2/YyyVSYvz84oWf73fSh2Z5Qtv4F1dEbJiltuh2aV7W9Z2ReOPhSSIlQWWg4AALAQ+zuBxXYhAAAALNLHyy6A5Uhi+ihz+iw4/8/73x8IHtt3BAAAADyGkmUXAAAAAMxd3v/7/T8AAAB4shW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArO/eTq0QMxwH8N/Ne3+P5JxLj3qu4g1MYj+DSpeEAXoKV6/EKXoAzYNx4Aw1jmCkEjKCGDgTz+SRD6TB8aQkL2kIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY0pfUTD+9f/nh1JxV295FRPsHD4euKdMbAAAA4HeWqZl2d8Z9/XE+/zSfep7rVUTUBwbvN3G3kzja5qQD16eb/TZ8jugS1q9xn49HEfEqHz+eDf42AAAAwH9rMZtPIrrBeHczvnSDOKd+0qZ+8qZQXhURafytUFq9zntRKKz7fN/Gu0JpKbbzXAV0U263pdL+Sj8Bt5m1G+0UVV/Ux59frO8AAMAZ5aX4/H3/H0ch3/1sHwAA4Hq8vXQDGMjr4w9XsVnK3C4F3vdFXt572KsBAAAAV6i6dAMAAACAwXXj/2VqPn6NUcH9//r/FBzd/++Xhtj/DwAAAIbT7/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkJapmS5m88mpOav2NGV6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z9XHIBBIAyD23frCPc/bPM3QVZjZsTmCwsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh3fHPJWEdsiVZVe07buNWr6swqcWWVuLNOPHnQ5/4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZX9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPim3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYuf+feMmwwAAv2ffXWkBEQLKEAaQGGCh6bW0dAMGUMTAn4AUpdcSeuVHm4FWFSgLG2TugsqIEBIobJ1ZO7dSl7B1yFAkJLZD9tmJQxPlQlP7aJ5H+u57bfk+v5+vavL68wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLGu1txmr1MjeKk2HfnwfXFrL/7rz5za/XebNayeFhn0v8PR6sbrZnmEgEAAOBwaBW1fVpsr3fW5rM+mcrr/055XFbz33x26z2xQ91f9mXtn7Xffr3/4ubJpkbnyQY9vzTon3g4nfbjm+lke27PI9r5lc/vvaT5B5J8sPLCRie/nq1vb99+r5uHR+rIFgDY1XD3H8bHR936zSIofx/K+l5N6QFwuLUrhXdZ/6dTzeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIeNlXi6jFsRMdveijN3H1xf3Km/tXpvtmxnbtxYrY6ZDdGJiPNLg/6JGucy6a5cvXZxYTDoX94r6Mbex+wveDkiDnTAfQRvF9O/+NEYB0eMN/Lfw+EwjTjwCyV4tCApPuxJyWcU/P7f3z4s//U+pgzfiYhBQ/8hAQDwxOoULavr1ztr89m+1nTE8Ift9f9rlTjGrP/vf3zmTn7wd8m282X1f6++KU68ueVLn89duXrtjaVLCxf6F/qfvnmy91bv1NnTp8/O5fdK5twxAQAA4NF0i1at/5Pph9f/j1XiGLP+/+L73lfVc6Xq/x1tLfo1nQkAAMDh9vwrf/3Z2mF/q9uNLxeWly/3Rq+b2ydHrw2kum9Hilat/9PpprMCAAAA6rCx0tq2/n+uEseY6//P/PjSz9Ux04g4Wqz/H1/8bHCuvulMtIP88vDXu3xPvuk5AgAA0KyjRauu/3fy5/+TzUcekoh4/dVRXPwZwLHq//T9b36qnqv6/P+p+qY4kZKZ0fXI+5mI9kzTGQEAAPAke6poWbH/R2dt/pNfjn3Y9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+CQAA//+K6TmR") bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3.180072716s ago: executing program 2 (id=2660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.945120391s ago: executing program 2 (id=2663): r0 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCSETSF2(r0, 0x40085500, &(0x7f0000000600)={0x130, 0x6, 0x7, 0x4, 0x18, "b65883272c705dcc57c06618386595a5eedb49", 0x6, 0x8}) 2.854392853s ago: executing program 2 (id=2665): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "b188303f"}]}}, 0x0}, 0x0) 2.145131035s ago: executing program 6 (id=2667): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 2.004136688s ago: executing program 4 (id=2669): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f0000000180)) 1.906795789s ago: executing program 6 (id=2671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000008000000040003"], 0x24}}, 0x0) 1.692958228s ago: executing program 6 (id=2672): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) 1.639402008s ago: executing program 6 (id=2674): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x4000000, 0x2}, 0x1c) 1.463799844s ago: executing program 6 (id=2677): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{}, 0x0, 0x0, 0x200000003, 0xf, 0x1}) 1.386793249s ago: executing program 4 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a0001002dbd7000000000000a000000000000000000000006001c004e20000005001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) 1.333192338s ago: executing program 5 (id=2679): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ee, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) 1.194266141s ago: executing program 4 (id=2681): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f00000002c0)='./file2\x00', 0x88) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 853.056345ms ago: executing program 5 (id=2684): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0xfffffffe}}, 0xe8) 828.35821ms ago: executing program 4 (id=2685): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x0) 663.276258ms ago: executing program 2 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250a000000180004801300010062726f6164636173742d6c696ec34b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48004) 648.352395ms ago: executing program 5 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 643.639734ms ago: executing program 0 (id=2688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8000) 545.183995ms ago: executing program 2 (id=2689): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x3, 0x0, &(0x7f00000003c0)) 520.57839ms ago: executing program 5 (id=2690): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000140)) 453.636657ms ago: executing program 0 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x7, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xc, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 356.035109ms ago: executing program 5 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x1e}, {0x6, 0x2}, {0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 353.400088ms ago: executing program 2 (id=2693): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 297.091457ms ago: executing program 0 (id=2694): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.']) 273.144043ms ago: executing program 4 (id=2695): sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="f03c6db3dd957e02923e4ac2b03c511080395b7e36eca1aa99e4f89b12344611113f51aa61ee1aad16e3386b2f57cbb6505824d4a959d80baa1a224190e5ee7c671826affa7a144cf6776a71", 0x4c, 0x810, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(0x0, 0xb, 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 141.688867ms ago: executing program 4 (id=2696): r0 = syz_io_uring_setup(0x88d, &(0x7f0000000380)={0x0, 0xd984, 0x1, 0x3, 0x303}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x400, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 113.913632ms ago: executing program 0 (id=2697): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="03717e20d37c4f7262602f00a70ea8dac5f0b7ff0cb70fce6ed26dc9cefe1946ec56e1d589f09c93fa3c404be2bc154343f2c31163f39b5af0aca78da892eba11d6fd46884e6d87a7915fd222260dd3918de48746b05b3d8b9ccb63a0a391e62cc479c14e8a1feb15fc68e"], 0x6) 65.994393ms ago: executing program 0 (id=2698): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 39.274877ms ago: executing program 5 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x64, r1, 0x201, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x47, 0xe, [@chsw_timing={0x68, 0x4, {0x2, 0x1ff}}, @preq={0x82, 0x3b, {{0x1}, 0x2, 0x0, 0x6, @device_b, 0x10000, @void, 0x5, 0x6, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0xfff}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x8001}]}}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x20040050}, 0x48000) 0s ago: executing program 0 (id=2700): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40186e8d, &(0x7f0000000800)={@desc={0x1, 0x0, @auto="42a6000000006916"}}) kernel console output (not intermixed with test programs): sums [ 206.875643][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.886545][ T8451] BTRFS error (device loop0): open_ctree failed: -22 [ 206.900677][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.907669][ T5695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5695) [ 206.942290][ T1108] smsc95xx v2.0.0 [ 206.946006][ T1108] smsc95xx 3-1:5.11 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 206.974855][ T1108] smsc95xx: probe of 3-1:5.11 failed with error -22 [ 207.042173][ T1108] smsc95xx v2.0.0 [ 207.052696][ T1108] smsc95xx 3-1:5.245 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 207.070819][ T1108] smsc95xx: probe of 3-1:5.245 failed with error -22 [ 207.086914][ T1108] usb 3-1: USB disconnect, device number 15 [ 207.170603][ T154] bond0 (unregistering): Released all slaves [ 207.238433][ T7802] tipc: Node number set to 4278321153 [ 207.262887][ T8347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.310666][ T8347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.390121][ T8462] loop4: detected capacity change from 0 to 1024 [ 207.398842][ T8347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.449328][ T8347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.546717][ T8469] loop2: detected capacity change from 0 to 256 [ 207.629533][ T8469] exfat: Deprecated parameter 'utf8' [ 207.632099][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.638859][ T8469] exfat: Deprecated parameter 'utf8' [ 207.682861][ T8469] exfat: Deprecated parameter 'utf8' [ 207.763780][ T8469] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 207.907319][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.914164][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 207.995239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.013165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.031490][ T7] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.054011][ T7] usb 4-1: config 0 has no interface number 0 [ 208.072512][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.131758][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 208.172074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.194553][ T8482] loop2: detected capacity change from 0 to 512 [ 208.200159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.250590][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.257791][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.266140][ T7] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.287662][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.315513][ T7] usb 4-1: Product: syz [ 208.324968][ T8482] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 208.330210][ T7] usb 4-1: Manufacturer: syz [ 208.348897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.351702][ T7] usb 4-1: SerialNumber: syz [ 208.365282][ T7] usb 4-1: config 0 descriptor?? [ 208.403033][ T7] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.418044][ T8482] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.432221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.481578][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.488724][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.541232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.590813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.634234][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.664639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.688173][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 208.709185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.726467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.808660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.848065][ T8467] loop0: detected capacity change from 0 to 32768 [ 208.855961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.864225][ T8496] loop2: detected capacity change from 0 to 512 [ 208.898070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.909234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.918196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.968883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.992437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.006357][ T8496] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1732: inode #1: comm syz.2.1732: iget: illegal inode # [ 209.047325][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.096987][ T6166] usb 4-1: USB disconnect, device number 18 [ 209.111326][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.144282][ T6166] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.171297][ T8496] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1732: error while reading EA inode 1 err=-117 [ 209.190231][ T8496] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.232325][ T8496] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1732: inode #1: comm syz.2.1732: iget: illegal inode # [ 209.249198][ T6166] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.276036][ T6166] quatech2 4-1:0.51: device disconnected [ 209.282277][ T8496] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1732: error while reading EA inode 1 err=-117 [ 209.357518][ T8496] EXT4-fs (loop2): 1 orphan inode deleted [ 209.373580][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 209.619616][ T8514] rdma_op ffff88801ff481f0 conn xmit_rdma 0000000000000000 [ 209.638455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.669766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.730192][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.802351][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.985666][ T8528] loop3: detected capacity change from 0 to 128 [ 210.002543][ T8530] loop2: detected capacity change from 0 to 8 [ 210.059842][ T8530] unable to read id index table [ 210.103332][ T8528] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 210.183118][ T7] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 210.212688][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.231493][ T8528] overlayfs: upper fs needs to support d_type. [ 210.259105][ T7] usb 5-1: config 0 descriptor?? [ 210.273010][ T8528] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.281473][ T6247] Bluetooth: hci1: command 0x0419 tx timeout [ 210.310606][ T8528] overlayfs: failed to set xattr on upper [ 210.348484][ T8528] overlayfs: ...falling back to index=off,metacopy=off. [ 210.452606][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.475258][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.519754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.559035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.568468][ T4186] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 210.591598][ T7] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 210.598588][ T4186] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 210.600084][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 210.618068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.642225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.679930][ T8347] device veth0_vlan entered promiscuous mode [ 210.720084][ T8347] device veth1_vlan entered promiscuous mode [ 210.732866][ T8544] loop0: detected capacity change from 0 to 256 [ 210.801427][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 210.810455][ T8544] exfat: Deprecated parameter 'utf8' [ 210.840436][ T7] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 210.845127][ T8544] exfat: Deprecated parameter 'utf8' [ 210.863851][ T8544] exfat: Deprecated parameter 'utf8' [ 210.881388][ T7] [drm] Initialized udl on minor 2 [ 210.909122][ T8544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 210.957327][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 210.995924][ T7] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.041811][ T7] usb 5-1: USB disconnect, device number 14 [ 211.088532][ T7802] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 211.117297][ T7802] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 211.137428][ T7802] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.173888][ T8530] loop2: detected capacity change from 0 to 32768 [ 211.252556][ T8530] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 211.269205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.293892][ T8530] BTRFS info (device loop2): setting nodatasum [ 211.300579][ T8530] BTRFS info (device loop2): force zlib compression, level 3 [ 211.342951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.371434][ T8530] BTRFS info (device loop2): ignoring bad roots [ 211.377792][ T8530] BTRFS info (device loop2): unrecognized rescue option 'ignoremetacsums' [ 211.422602][ T8347] device veth0_macvtap entered promiscuous mode [ 211.492067][ T8530] BTRFS error (device loop2): unrecognized rescue value ignoremetacsums [ 211.510438][ T8530] BTRFS error (device loop2): open_ctree failed: -22 [ 211.521703][ T8347] device veth1_macvtap entered promiscuous mode [ 211.540941][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.611345][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.681286][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.716763][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.744405][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.786490][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.818930][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.854430][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.899668][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.960166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.983539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.021879][ T8570] loop4: detected capacity change from 0 to 256 [ 212.033934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.059928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.088956][ T8561] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1747'. [ 212.135411][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.178599][ T8570] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 212.181456][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.281720][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.335430][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.388374][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.436830][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.471245][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.511218][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.542728][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.566855][ T8577] loop2: detected capacity change from 0 to 4096 [ 212.573561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.591620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.667679][ T8347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.697083][ T8347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.717001][ T8347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.731709][ T8347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.890696][ T8577] ntfs: volume version 3.1. [ 213.088917][ T8421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.119692][ T8421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.182811][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.256352][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.272859][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.344711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.575442][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 213.696907][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.793227][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.850640][ T8581] device bridge_slave_0 entered promiscuous mode [ 213.907371][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.963999][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.978190][ T8581] device bridge_slave_1 entered promiscuous mode [ 213.987267][ T8619] loop2: detected capacity change from 0 to 2048 [ 214.002713][ T8610] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1765'. [ 214.106236][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.114210][ T8619] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 214.230380][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.253855][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.306700][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.373331][ T8643] loop4: detected capacity change from 0 to 64 [ 214.486388][ T8581] team0: Port device team_slave_0 added [ 214.532826][ T8581] team0: Port device team_slave_1 added [ 214.578044][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.619144][ T8649] netlink: 'syz.2.1778': attribute type 8 has an invalid length. [ 214.729137][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.765445][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.773946][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.802875][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.834938][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.850571][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.861374][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 214.883211][ T6247] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.899451][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.040769][ T8581] device hsr_slave_0 entered promiscuous mode [ 215.067234][ T8665] loop4: detected capacity change from 0 to 256 [ 215.080453][ T8581] device hsr_slave_1 entered promiscuous mode [ 215.095302][ T8581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.107181][ T8581] Cannot create hsr debugfs directory [ 215.161985][ T6247] usb 6-1: Using ep0 maxpacket: 32 [ 215.301604][ T6247] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 215.319446][ T6247] usb 6-1: config 0 has no interface number 0 [ 215.391824][ T154] tipc: Disabling bearer [ 215.400443][ T8672] loop4: detected capacity change from 0 to 2048 [ 215.425062][ T154] tipc: Left network mode [ 215.465786][ T8676] hugetlbfs: Bad value for 'size' [ 215.502088][ T6247] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 215.502125][ T6247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.502147][ T6247] usb 6-1: Product: syz [ 215.502163][ T6247] usb 6-1: Manufacturer: syz [ 215.502180][ T6247] usb 6-1: SerialNumber: syz [ 215.505270][ T6247] usb 6-1: config 0 descriptor?? [ 215.506019][ T8672] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485 [ 215.509030][ T8672] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 215.510587][ T8672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.543735][ T6247] dw2102: su3000_identify_state [ 215.543753][ T6247] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 215.543779][ T6247] dw2102: su3000_power_ctrl: 1, initialized 0 [ 215.543800][ T6247] dvb-usb: bulk message failed: -22 (2/0) [ 215.545729][ T6247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.562465][ T6247] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 215.562540][ T6247] usb 6-1: media controller created [ 215.562569][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562617][ T6247] dw2102: i2c transfer failed. [ 215.562662][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562678][ T6247] dw2102: i2c transfer failed. [ 215.562695][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562710][ T6247] dw2102: i2c transfer failed. [ 215.562727][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562743][ T6247] dw2102: i2c transfer failed. [ 215.562759][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562775][ T6247] dw2102: i2c transfer failed. [ 215.562792][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 215.562806][ T6247] dw2102: i2c transfer failed. [ 215.562818][ T6247] dvb-usb: MAC address: 02:02:02:02:02:02 [ 215.624222][ T6247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.627028][ T8683] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 215.627181][ T8683] CIFS: Unable to determine destination address [ 215.727882][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 215.727908][ T6247] dw2102: command 0x0e transfer failed. [ 215.727920][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 215.727935][ T6247] dw2102: command 0x0e transfer failed. [ 215.907197][ T8581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.915570][ T8581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.942600][ T8581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.989481][ T8581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.041407][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 216.041429][ T6247] dw2102: command 0x0e transfer failed. [ 216.041440][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 216.041455][ T6247] dw2102: command 0x0e transfer failed. [ 216.041464][ T6247] dvb-usb: bulk message failed: -22 (1/0) [ 216.041479][ T6247] dw2102: command 0x51 transfer failed. [ 216.041673][ T8652] dvb-usb: bulk message failed: -22 (4/0) [ 216.041716][ T8652] dw2102: i2c transfer failed. [ 216.041746][ T8652] dw2102: i2c rd: len=8192 is too big! [ 216.041746][ T8652] [ 216.179800][ T6247] DVB: Unable to find symbol ds3000_attach() [ 216.179819][ T6247] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 216.270237][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.314047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.314642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.351287][ T6247] rc_core: IR keymap rc-su3000 not found [ 216.351306][ T6247] Registered IR keymap rc-empty [ 216.351937][ T6247] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 216.353033][ T6247] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16 [ 216.355243][ T6247] dvb-usb: schedule remote query interval to 150 msecs. [ 216.355265][ T6247] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.355280][ T6247] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 216.356910][ T6247] usb 6-1: USB disconnect, device number 2 [ 216.358314][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.383115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.383765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.384618][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.384701][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.386019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.392905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.393494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.393869][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.393911][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.407557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.496570][ T6247] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 216.541608][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.542589][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.544098][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.544862][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.560461][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.561521][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.612395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.612986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.634066][ T8581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.634832][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.650690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.651929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.904061][ T154] device hsr_slave_0 left promiscuous mode [ 216.904653][ T154] device hsr_slave_1 left promiscuous mode [ 216.905199][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.905252][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.905834][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.905860][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.923949][ T8714] loop5: detected capacity change from 0 to 16 [ 216.942199][ T154] device bridge_slave_1 left promiscuous mode [ 216.945271][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.948313][ T8714] erofs: (device loop5): mounted with root inode @ nid 36. [ 216.956283][ T154] device bridge_slave_0 left promiscuous mode [ 216.956428][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.964831][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 216.964845][ T26] audit: type=1800 audit(1772062637.423:117): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1796" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 216.964918][ T6164] Bluetooth: hci0: command 0x041b tx timeout [ 217.051845][ T154] device veth1_macvtap left promiscuous mode [ 217.051975][ T154] device veth0_macvtap left promiscuous mode [ 217.052095][ T154] device veth1_vlan left promiscuous mode [ 217.052210][ T154] device veth0_vlan left promiscuous mode [ 217.228179][ T8700] loop0: detected capacity change from 0 to 32768 [ 217.368427][ T8695] loop4: detected capacity change from 0 to 40427 [ 217.445720][ T8700] XFS (loop0): Mounting V5 Filesystem [ 217.655264][ T8695] F2FS-fs (loop4): invalid crc value [ 217.953173][ T8700] XFS (loop0): Ending clean mount [ 218.079740][ T26] audit: type=1800 audit(1772062638.533:118): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1794" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 218.107420][ T8695] F2FS-fs (loop4): Found nat_bits in checkpoint [ 218.193869][ T4185] XFS (loop0): Unmounting Filesystem [ 218.381826][ T8695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.627885][ T4197] attempt to access beyond end of device [ 218.627885][ T4197] loop4: rw=2049, want=45104, limit=40427 [ 218.798491][ T8739] loop2: detected capacity change from 0 to 32768 [ 218.884105][ T8739] JFS: block map error in dbBackSplit [ 218.889590][ T8739] ERROR: (device loop2): dbDiscardAG: -EIO [ 218.889590][ T8739] [ 218.913233][ T154] team0 (unregistering): Port device team_slave_1 removed [ 218.931600][ T8739] ERROR: (device loop2): remounting filesystem as read-only [ 218.939269][ T8739] attempt to access beyond end of device [ 218.939269][ T8739] loop2: rw=2051, want=2637824, limit=32768 [ 218.991456][ T8739] JFS: sb_issue_discard(ffff888068c1e000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 219.001624][ T7800] Bluetooth: hci0: command 0x040f tx timeout [ 219.030994][ T154] team0 (unregistering): Port device team_slave_0 removed [ 219.059977][ T8739] blkno = 50400, nblocks = 400 [ 219.090976][ T8739] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 219.090976][ T8739] [ 219.110175][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.169497][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.266126][ T8762] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1816'. [ 219.404230][ T26] audit: type=1326 audit(1772062639.863:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.0.1818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f2b607629 code=0x0 [ 219.486250][ T154] bond0 (unregistering): Released all slaves [ 219.711338][ T6251] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.775053][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.824240][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.857111][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.992950][ T6251] usb 6-1: Using ep0 maxpacket: 8 [ 220.075850][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 220.189586][ T8793] loop4: detected capacity change from 0 to 1024 [ 220.341545][ T6251] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 220.378821][ T6251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 220.443083][ T6251] usb 6-1: Product: syz [ 220.447311][ T6251] usb 6-1: Manufacturer: syz [ 220.503886][ T6251] usb 6-1: SerialNumber: syz [ 220.523451][ T8811] loop0: detected capacity change from 0 to 16 [ 220.552338][ T6251] usb 6-1: config 0 descriptor?? [ 220.593909][ T8811] erofs: (device loop0): mounted with root inode @ nid 36. [ 220.608840][ T6251] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 220.647380][ T8808] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 220.672844][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.698234][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.781153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.801362][ T6251] gspca_sn9c2028: read1 error -71 [ 220.806889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.821559][ T6251] gspca_sn9c2028: read1 error -71 [ 220.846650][ T8581] device veth0_vlan entered promiscuous mode [ 220.860818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.861696][ T6251] gspca_sn9c2028: read1 error -71 [ 220.904022][ T6251] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 220.921020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.967228][ T6251] usb 6-1: USB disconnect, device number 3 [ 220.985121][ T8581] device veth1_vlan entered promiscuous mode [ 221.082221][ T6164] Bluetooth: hci0: command 0x0419 tx timeout [ 221.110069][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.129220][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.182828][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.221708][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.254671][ T8581] device veth0_macvtap entered promiscuous mode [ 221.295188][ T8581] device veth1_macvtap entered promiscuous mode [ 221.392770][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.450885][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.511936][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.555271][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.596529][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.656278][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.695514][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.736398][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.784372][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.825457][ T8842] tipc: Started in network mode [ 221.830407][ T8842] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 221.841748][ T8842] tipc: Enabled bearer , priority 4 [ 221.848324][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.864363][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.915384][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.957265][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.992597][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'. [ 222.005466][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.036823][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.071612][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.083056][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 222.132548][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.204000][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.235148][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.275294][ T8874] loop5: detected capacity change from 0 to 2048 [ 222.280781][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.324559][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.369771][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.393226][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.409758][ T8887] netlink: zone id is out of range [ 222.428177][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.441023][ T8887] netlink: zone id is out of range [ 222.489599][ T8880] device ipvlan2 entered promiscuous mode [ 222.502556][ T8887] netlink: zone id is out of range [ 222.507727][ T8887] netlink: zone id is out of range [ 222.552126][ T8889] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1858'. [ 222.558776][ T8581] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.587758][ T8887] netlink: zone id is out of range [ 222.598915][ T8581] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.609008][ T8887] netlink: zone id is out of range [ 222.614175][ T8889] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 222.629092][ T8581] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.667962][ T8581] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.679395][ T8887] netlink: zone id is out of range [ 222.779111][ T8887] netlink: zone id is out of range [ 222.870574][ T8887] netlink: zone id is out of range [ 222.961528][ T7802] tipc: Node number set to 8432298 [ 222.996563][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.038524][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.079110][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.088050][ T6164] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 223.096737][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.149231][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.169229][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.377198][ T8913] loop0: detected capacity change from 0 to 512 [ 223.407387][ T8913] EXT4-fs (loop0): Ignoring removed nobh option [ 223.472272][ T8913] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz.0.1869: lblock 0 mapped to illegal pblock 3 (length 1) [ 223.487608][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.517457][ T6164] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 223.520025][ T8913] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1869: error -117 reading directory block [ 223.539370][ T8913] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 223.547663][ T8913] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,grpquota,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 223.599775][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.642053][ T6260] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.663572][ T6164] usb 3-1: config 0 descriptor?? [ 223.931764][ T6260] usb 6-1: Using ep0 maxpacket: 8 [ 224.054553][ T6260] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.091823][ T6260] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 224.141226][ T6260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.157952][ T6164] logitech 0003:046D:C20A.0016: hidraw0: USB HID v0.02 Device [HID 046d:c20a] on usb-dummy_hcd.2-1/input0 [ 224.186933][ T6260] usb 6-1: config 0 descriptor?? [ 224.225134][ T6164] logitech 0003:046D:C20A.0016: no inputs found [ 224.313768][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 224.371665][ T6164] usb 3-1: USB disconnect, device number 16 [ 224.490945][ T8953] fido_id[8953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 224.661701][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 224.697304][ T6260] wacom 0003:056A:032C.0017: ignoring exceeding usage max [ 224.734391][ T6260] wacom 0003:056A:032C.0017: unknown main item tag 0x0 [ 224.763856][ T8967] loop4: detected capacity change from 0 to 128 [ 224.790858][ T6260] wacom 0003:056A:032C.0017: hidraw0: USB HID v5.59 Device [HID 056a:032c] on usb-dummy_hcd.5-1/input0 [ 224.943246][ T8937] loop6: detected capacity change from 0 to 32768 [ 224.992781][ T6260] usb 6-1: USB disconnect, device number 4 [ 225.025873][ T8967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.101398][ T8967] ext4 filesystem being mounted at /435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.467612][ T8982] fido_id[8982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 225.497115][ T8992] loop0: detected capacity change from 0 to 64 [ 225.833456][ T9015] loop0: detected capacity change from 0 to 64 [ 225.901585][ T9016] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 226.015633][ T9019] loop5: detected capacity change from 0 to 1024 [ 226.250020][ T9029] loop4: detected capacity change from 0 to 1764 [ 226.291294][ T6166] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 226.651676][ T6166] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.832309][ T6166] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 226.851311][ T6166] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 226.901396][ T6166] usb 3-1: Product: syz [ 226.905676][ T6166] usb 3-1: Manufacturer: syz [ 226.910306][ T6166] usb 3-1: SerialNumber: syz [ 226.929019][ T9057] loop0: detected capacity change from 0 to 4096 [ 226.948862][ T6166] usb 3-1: config 0 descriptor?? [ 226.992833][ T6166] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 227.023150][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 227.041380][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 227.050041][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 227.067455][ T9073] hugetlbfs: Bad value ':' for mount option 'size' [ 227.067455][ T9073] [ 227.120565][ T6166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 227.148920][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 227.165739][ T6166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 227.175190][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 227.232466][ T6166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 227.273668][ T6166] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 227.313473][ T6166] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 227.334039][ T6166] usb 3-1: USB disconnect, device number 17 [ 227.352705][ T6166] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 227.422034][ T6166] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 227.465139][ T6166] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 227.526493][ T6166] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 227.568701][ T6166] keyspan 3-1:0.0: device disconnected [ 227.576197][ T9080] loop5: detected capacity change from 0 to 4096 [ 227.707622][ T9080] ntfs: volume version 3.1. [ 227.945032][ T9057] overlayfs: upper fs does not support tmpfile. [ 228.015736][ T9057] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.156831][ T9103] IPVS: Error connecting to the multicast addr [ 228.373110][ T9112] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 228.426884][ T9112] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 228.462028][ T9112] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.755931][ T9125] loop6: detected capacity change from 0 to 512 [ 228.838123][ T9129] loop4: detected capacity change from 0 to 256 [ 228.848713][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 228.989417][ T9125] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.071256][ T9125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 229.135751][ T9125] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 229.195507][ T9129] FAT-fs (loop4): IO charset cpush not found [ 229.227915][ T9125] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.1944: Invalid block bitmap block 0 in block_group 0 [ 229.261583][ T9125] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 229.303218][ T9147] loop2: detected capacity change from 0 to 64 [ 229.341157][ T9125] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.1944: attempt to clear invalid blocks 983261 len 1 [ 229.391022][ T9125] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.1944: Invalid inode table block 0 in block_group 0 [ 229.436069][ T9125] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 229.461769][ T9129] smb3: Unexpected value for 'acl' [ 229.519018][ T9125] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 229.537629][ T9148] loop0: detected capacity change from 0 to 8192 [ 229.582044][ T9125] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.1944: Invalid inode table block 0 in block_group 0 [ 229.624751][ T9125] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 229.671480][ T9148] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 229.689535][ T9148] REISERFS (device loop0): using ordered data mode [ 229.701458][ T9148] reiserfs: using flush barriers [ 229.718054][ T9125] EXT4-fs error (device loop6): ext4_truncate:4279: inode #11: comm syz.6.1944: mark_inode_dirty error [ 229.790929][ T9148] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.867697][ T9125] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 229.911692][ T9148] REISERFS (device loop0): checking transaction log (loop0) [ 229.930903][ T9148] REISERFS (device loop0): Using r5 hash to sort names [ 229.960783][ T9148] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 230.013048][ T9125] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.1944: Invalid inode table block 0 in block_group 0 [ 230.037040][ T9148] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 230.064544][ T9125] EXT4-fs (loop6): 1 truncate cleaned up [ 230.070345][ T9125] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 230.147520][ T9148] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 230.209985][ T9148] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 230.293547][ T9182] SQUASHFS error: Failed to read block 0x6fc: -5 [ 230.293568][ T9182] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 230.471377][ T6166] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 230.831471][ T6166] usb 6-1: config 0 has an invalid interface number: 142 but max is 0 [ 230.841813][ T6166] usb 6-1: config 0 has no interface number 0 [ 230.847963][ T6166] usb 6-1: config 0 interface 142 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.906896][ T9208] set_capacity_and_notify: 1 callbacks suppressed [ 230.906914][ T9208] loop0: detected capacity change from 0 to 2048 [ 230.920415][ T6166] usb 6-1: config 0 interface 142 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.936469][ T6166] usb 6-1: config 0 interface 142 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.949957][ T6166] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 230.974242][ T6166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.993732][ T6166] usb 6-1: config 0 descriptor?? [ 230.998866][ T6248] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.016589][ T9210] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 231.039368][ T9208] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.117839][ T9208] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.271362][ T6248] usb 5-1: Using ep0 maxpacket: 32 [ 231.282906][ T9223] loop2: detected capacity change from 0 to 64 [ 231.421717][ T6248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.452697][ T6248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.492083][ T6248] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 231.496570][ T6166] hid-udraw 0003:20D6:CB17.0018: item fetching failed at offset 5/7 [ 231.516414][ T6166] hid-udraw 0003:20D6:CB17.0018: parse failed [ 231.541665][ T6166] hid-udraw: probe of 0003:20D6:CB17.0018 failed with error -22 [ 231.551845][ T6248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.606035][ T6248] usb 5-1: config 0 descriptor?? [ 231.687456][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 231.725083][ T6164] usb 6-1: USB disconnect, device number 5 [ 231.751461][ T6247] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 231.764478][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'. [ 231.796055][ T9237] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 231.851501][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'. [ 231.869818][ T9242] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.924740][ T9242] net_ratelimit: 21 callbacks suppressed [ 231.924763][ T9242] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 232.021580][ T6247] usb 7-1: Using ep0 maxpacket: 32 [ 232.085236][ T9251] loop2: detected capacity change from 0 to 1024 [ 232.126205][ T6248] hid_mf 0003:0079:1801.0019: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.4-1/input0 [ 232.156704][ T6248] hid_mf 0003:0079:1801.0019: Invalid report, this should never happen! [ 232.181568][ T6247] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 232.201824][ T6248] hid_mf 0003:0079:1801.0019: Force feedback init failed. [ 232.210077][ T6247] usb 7-1: config 0 has no interface number 0 [ 232.266726][ T9253] loop0: detected capacity change from 0 to 4096 [ 232.329767][ T1439] hfsplus: b-tree write err: -5, ino 4 [ 232.360828][ T6248] usb 5-1: USB disconnect, device number 15 [ 232.421668][ T6247] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 232.430786][ T6247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.486483][ T9256] fido_id[9256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.500393][ T6247] usb 7-1: Product: syz [ 232.509431][ T6247] usb 7-1: Manufacturer: syz [ 232.515874][ T6247] usb 7-1: SerialNumber: syz [ 232.567260][ T6247] usb 7-1: config 0 descriptor?? [ 232.594846][ T9265] loop5: detected capacity change from 0 to 65 [ 232.623572][ T6247] dw2102: su3000_identify_state [ 232.629753][ T6247] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 232.645661][ T6247] dw2102: su3000_power_ctrl: 1, initialized 0 [ 232.661227][ T6247] dvb-usb: bulk message failed: -22 (2/0) [ 232.684140][ T6247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.713405][ T9265] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 232.715411][ T6247] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 232.775470][ T6247] usb 7-1: media controller created [ 232.781879][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 232.787662][ T6247] dw2102: i2c transfer failed. [ 232.823632][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 232.831490][ T6248] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 232.846438][ T6247] dw2102: i2c transfer failed. [ 232.858514][ T9225] dvb-usb: bulk message failed: -22 (4/0) [ 232.866446][ T9225] dw2102: i2c transfer failed. [ 232.896854][ T9225] dw2102: i2c rd: len=8192 is too big! [ 232.896854][ T9225] [ 232.915104][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 232.920907][ T6247] dw2102: i2c transfer failed. [ 232.950353][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 232.962148][ T6247] dw2102: i2c transfer failed. [ 232.967000][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 232.983070][ T9279] loop4: detected capacity change from 0 to 64 [ 232.991821][ T6247] dw2102: i2c transfer failed. [ 233.001474][ T6247] dvb-usb: bulk message failed: -22 (6/0) [ 233.011526][ T6247] dw2102: i2c transfer failed. [ 233.016352][ T6247] dvb-usb: MAC address: 02:02:02:02:02:02 [ 233.090991][ T6247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.162336][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 233.168145][ T6247] dw2102: command 0x0e transfer failed. [ 233.209648][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 233.231964][ T6248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.257332][ T6247] dw2102: command 0x0e transfer failed. [ 233.273487][ T6248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.297165][ T9288] loop4: detected capacity change from 0 to 512 [ 233.311305][ T6248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.328350][ T6248] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 233.350801][ T6248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.387057][ T6248] usb 3-1: config 0 descriptor?? [ 233.412463][ T9288] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 233.435678][ T9288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 233.456409][ T9288] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.525481][ T9288] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 233.601397][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 233.607284][ T6247] dw2102: command 0x0e transfer failed. [ 233.624345][ T9288] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2923: inode #16: comm syz.4.1994: corrupted xattr block 31 [ 233.651399][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 233.657283][ T6247] dw2102: command 0x0e transfer failed. [ 233.674394][ T9288] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 233.682730][ T6247] dvb-usb: bulk message failed: -22 (1/0) [ 233.689383][ T6247] dw2102: command 0x51 transfer failed. [ 233.721594][ T9288] EXT4-fs (loop4): 1 orphan inode deleted [ 233.735330][ T9288] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.810501][ T6247] DVB: Unable to find symbol ds3000_attach() [ 233.816803][ T6247] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 233.873106][ T9288] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 233.925103][ T6248] smartjoyplus 0003:6666:8802.001A: hidraw0: USB HID v4.00 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0 [ 233.937429][ T9288] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 233.942582][ T6164] kernel write not supported for file /input/event0 (pid: 6164 comm: kworker/0:14) [ 233.970590][ T6248] smartjoyplus 0003:6666:8802.001A: no output reports found [ 234.000814][ T9288] EXT4-fs (loop4): can't change dax mount option while remounting [ 234.081336][ T6247] rc_core: IR keymap rc-su3000 not found [ 234.090557][ T6247] Registered IR keymap rc-empty [ 234.108494][ T6247] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 234.157570][ T6247] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input20 [ 234.220678][ T6248] usb 3-1: USB disconnect, device number 18 [ 234.231520][ T6247] dvb-usb: schedule remote query interval to 150 msecs. [ 234.260161][ T6247] dw2102: su3000_power_ctrl: 0, initialized 1 [ 234.291832][ T6247] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 234.367162][ T6247] usb 7-1: USB disconnect, device number 2 [ 234.467741][ T6247] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 234.501913][ T9333] loop5: detected capacity change from 0 to 128 [ 234.559590][ T9333] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 234.610577][ T9333] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.661020][ T9333] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:510: comm syz.5.2007: Block bitmap for bg 0 marked uninitialized [ 234.899900][ T9349] loop5: detected capacity change from 0 to 1024 [ 234.901827][ T6247] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 235.128572][ T155] hfsplus: b-tree write err: -5, ino 4 [ 235.220568][ T9363] loop4: detected capacity change from 0 to 256 [ 235.247402][ T9363] exfat: Deprecated parameter 'namecase' [ 235.313252][ T9363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 235.331603][ T6247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 235.359558][ T6247] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 235.410332][ T6247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.465250][ T6247] usb 7-1: config 0 descriptor?? [ 235.494458][ T9301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 235.675605][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 235.782349][ T9390] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2026'. [ 235.982303][ T9394] set_capacity_and_notify: 1 callbacks suppressed [ 235.982321][ T9394] loop2: detected capacity change from 0 to 16 [ 236.073492][ T6247] cm6533_jd 0003:0D8C:0022.001B: item fetching failed at offset 4/5 [ 236.092298][ T6247] cm6533_jd 0003:0D8C:0022.001B: parse failed [ 236.098480][ T6247] cm6533_jd: probe of 0003:0D8C:0022.001B failed with error -22 [ 236.187204][ T9394] erofs: (device loop2): mounted with root inode @ nid 36. [ 236.328928][ T9401] loop4: detected capacity change from 0 to 4096 [ 236.354388][ T6164] usb 7-1: USB disconnect, device number 3 [ 236.419815][ T9401] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 236.492699][ T9375] loop5: detected capacity change from 0 to 40427 [ 236.561500][ T9375] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 236.576877][ T9375] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 236.601323][ T9375] F2FS-fs (loop5): invalid crc value [ 236.635504][ T9375] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 236.953155][ T9375] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 236.960256][ T9375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 237.128316][ T9431] loop2: detected capacity change from 0 to 2048 [ 237.228907][ T9431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.484247][ T9444] loop6: detected capacity change from 0 to 4096 [ 237.584157][ T9454] loop2: detected capacity change from 0 to 8 [ 237.640868][ T9444] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 237.666178][ T9454] SQUASHFS error: Failed to read block 0x6fc: -5 [ 237.697250][ T9454] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 238.392468][ T6166] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.548201][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2059'. [ 238.575729][ T9485] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2059'. [ 238.606600][ T9485] netlink: 'syz.4.2059': attribute type 5 has an invalid length. [ 238.654417][ T9485] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2059'. [ 238.941454][ T6166] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 238.962616][ T9505] loop2: detected capacity change from 0 to 1024 [ 238.969356][ T6166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.987807][ T6166] usb 6-1: Product: syz [ 238.992503][ T6166] usb 6-1: Manufacturer: syz [ 238.997157][ T6166] usb 6-1: SerialNumber: syz [ 239.085975][ T9505] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.694613][ T8581] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 239.721549][ T6166] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 239.736791][ T6166] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 239.756947][ T6166] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 239.775973][ T6166] lan78xx: probe of 6-1:1.0 failed with error -71 [ 239.817579][ T6166] usb 6-1: USB disconnect, device number 6 [ 239.864945][ T9527] loop4: detected capacity change from 0 to 4096 [ 239.943159][ T9535] loop0: detected capacity change from 0 to 8 [ 240.022119][ T9527] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 240.041039][ T9537] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.084698][ T9527] NILFS (loop4): mounting fs with errors [ 240.112635][ T9539] loop6: detected capacity change from 0 to 1024 [ 240.148126][ T9535] fuse: Unexpected value for 'default_permissions' [ 240.316729][ T8421] hfsplus: b-tree write err: -5, ino 4 [ 241.346063][ T9598] set_capacity_and_notify: 1 callbacks suppressed [ 241.346081][ T9598] loop0: detected capacity change from 0 to 64 [ 241.373992][ T9596] loop4: detected capacity change from 0 to 4096 [ 241.425029][ T9596] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 241.454172][ T9596] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 241.497636][ T9596] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 241.530291][ T9562] loop6: detected capacity change from 0 to 32768 [ 241.546671][ T9596] ntfs: volume version 3.1. [ 241.685984][ T9562] XFS (loop6): Mounting V5 Filesystem [ 241.851983][ T9562] XFS (loop6): Ending clean mount [ 241.859887][ T4197] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 242.132982][ T8581] XFS (loop6): Unmounting Filesystem [ 242.220895][ T9592] loop5: detected capacity change from 0 to 32768 [ 242.236007][ T9623] comedi: No check for data length of config insn id 1003 is implemented [ 242.272423][ T9623] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 242.299335][ T9623] comedi: Assuming n=15 is correct [ 242.475742][ T9630] loop4: detected capacity change from 0 to 512 [ 242.560773][ T9630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.604651][ T9630] EXT4-fs (loop4): 1 truncate cleaned up [ 242.610351][ T9630] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.737067][ T9609] loop0: detected capacity change from 0 to 32768 [ 242.834957][ T9609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2106 (9609) [ 242.877791][ T9646] loop5: detected capacity change from 0 to 256 [ 242.967611][ T9609] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 242.982630][ T9646] exfat: Deprecated parameter 'namecase' [ 242.988940][ T9609] BTRFS info (device loop0): force clearing of disk cache [ 242.996668][ T9646] exfat: Deprecated parameter 'utf8' [ 243.048784][ T9646] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 243.052733][ T9609] BTRFS info (device loop0): force zlib compression, level 3 [ 243.122670][ T9609] BTRFS info (device loop0): enabling auto defrag [ 243.169837][ T9609] BTRFS info (device loop0): metadata ratio 257 [ 243.238669][ T9609] BTRFS info (device loop0): enabling disk space caching [ 243.288287][ T9651] loop4: detected capacity change from 0 to 4096 [ 243.298586][ T9609] BTRFS info (device loop0): disk space caching is enabled [ 243.341347][ T9609] BTRFS info (device loop0): has skinny extents [ 243.440530][ T9654] loop2: detected capacity change from 0 to 4096 [ 243.473370][ T9651] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 243.575382][ T9654] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 243.858190][ T9609] BTRFS info (device loop0): enabling ssd optimizations [ 243.892298][ T9609] BTRFS info (device loop0): clearing free space tree [ 243.899259][ T9609] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.954918][ T9609] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.690159][ T9729] loop6: detected capacity change from 0 to 4096 [ 244.857052][ T9736] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.868868][ T9729] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 244.879825][ T9729] NILFS (loop6): mounting fs with errors [ 245.081525][ T7801] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.259133][ T9747] EXT4-fs (loop0): Ignoring removed orlov option [ 245.351493][ T7801] usb 3-1: Using ep0 maxpacket: 8 [ 245.393394][ T9747] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 245.511513][ T7801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.534844][ T7801] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 245.575353][ T7801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.607893][ T7801] usb 3-1: config 0 descriptor?? [ 245.866072][ T9735] XFS (loop5): Mounting V5 Filesystem [ 245.957950][ T9781] EXT4-fs (loop0): Test dummy encryption mode enabled [ 246.071451][ T9781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.097677][ T9781] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2155: bad orphan inode 131083 [ 246.118969][ T9781] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 246.135300][ T9735] XFS (loop5): Ending clean mount [ 246.143308][ T9735] XFS (loop5): Quotacheck needed: Please wait. [ 246.157077][ T7801] wacom 0003:056A:032C.001C: ignoring exceeding usage max [ 246.183962][ T7801] wacom 0003:056A:032C.001C: unknown main item tag 0x0 [ 246.206138][ T7801] wacom 0003:056A:032C.001C: hidraw0: USB HID v5.59 Device [HID 056a:032c] on usb-dummy_hcd.2-1/input0 [ 246.359521][ T9779] set_capacity_and_notify: 4 callbacks suppressed [ 246.359537][ T9779] loop6: detected capacity change from 0 to 32768 [ 246.384792][ T9735] XFS (loop5): Quotacheck: Done. [ 246.504334][ T7801] usb 3-1: USB disconnect, device number 19 [ 246.586700][ T8347] XFS (loop5): Unmounting Filesystem [ 246.597368][ T9764] loop4: detected capacity change from 0 to 40427 [ 246.679605][ T9764] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 246.727340][ T9764] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 246.800178][ T9764] F2FS-fs (loop4): invalid crc value [ 246.860376][ T9764] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.205748][ T9764] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 247.220232][ T9764] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.486339][ T9825] loop0: detected capacity change from 0 to 2048 [ 247.554254][ T9822] loop2: detected capacity change from 0 to 4096 [ 247.588868][ T9830] netlink: 'syz.6.2172': attribute type 2 has an invalid length. [ 247.599411][ T9830] netlink: 'syz.6.2172': attribute type 2 has an invalid length. [ 247.617455][ T9832] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 247.628144][ T9822] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 247.661253][ T9832] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 247.688285][ T9825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.778620][ T9825] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 247.848233][ T9825] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 248.053344][ T9845] loop6: detected capacity change from 0 to 64 [ 248.394383][ T9854] loop2: detected capacity change from 0 to 256 [ 248.758807][ T9869] loop2: detected capacity change from 0 to 256 [ 248.937888][ T9876] loop6: detected capacity change from 0 to 512 [ 248.953226][ T9840] loop5: detected capacity change from 0 to 32768 [ 249.090598][ T9876] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2186: bg 0: block 16: invalid block bitmap [ 249.207268][ T9876] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 249.269151][ T9876] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2186: attempt to clear invalid blocks 1669132790 len 1 [ 249.332515][ T9876] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2186: invalid indirect mapped block 4294967295 (level 1) [ 249.372223][ T9876] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2186: invalid indirect mapped block 4294967295 (level 2) [ 249.468312][ T9876] EXT4-fs (loop6): 1 truncate cleaned up [ 249.479561][ T9876] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,noquota,,errors=continue. Quota mode: none. [ 249.917396][ T9871] loop4: detected capacity change from 0 to 40427 [ 250.028512][ T9871] F2FS-fs (loop4): build fault injection attr: rate: 7, type: 0x1ffff [ 250.047325][ T9871] F2FS-fs (loop4): inline encryption not supported [ 250.081455][ T9871] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2ac [ 250.148670][ T9871] F2FS-fs (loop4): invalid crc value [ 250.188757][ T9871] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 250.222595][ T9871] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.378917][ T9871] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 250.497969][ T9871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.606818][ T9871] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 250.730379][ T9902] XFS (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 250.751943][ T9902] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 250.759774][ T9902] XFS (loop5): DAX and reflink cannot be used together! [ 251.185898][ T9948] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.275505][ T9957] tipc: Enabled bearer , priority 10 [ 251.569539][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2207'. [ 251.824800][ T9980] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2212'. [ 252.115635][ T9997] set_capacity_and_notify: 3 callbacks suppressed [ 252.115653][ T9997] loop2: detected capacity change from 0 to 1024 [ 252.246016][ T9997] hfsplus: bad catalog entry type [ 252.357680][ T1439] hfsplus: b-tree write err: -5, ino 4 [ 252.494350][T10017] loop0: detected capacity change from 0 to 16 [ 252.590594][T10017] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.665601][T10015] loop5: detected capacity change from 0 to 4096 [ 252.725037][T10024] loop4: detected capacity change from 0 to 512 [ 252.752218][T10015] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 252.844242][T10024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.944255][T10015] ntfs3: loop5: ino=5, "/" directory corrupted [ 253.095036][ T9982] loop6: detected capacity change from 0 to 32768 [ 253.112527][ T8347] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 253.112560][ T8347] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 253.113819][ T8347] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 253.150350][ T9982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2214 (9982) [ 253.230761][ T9982] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 253.230827][ T9982] BTRFS info (device loop6): setting nodatacow, compression disabled [ 253.230880][ T9982] BTRFS info (device loop6): force clearing of disk cache [ 253.230900][ T9982] BTRFS info (device loop6): enabling ssd optimizations [ 253.230915][ T9982] BTRFS info (device loop6): using spread ssd allocation scheme [ 253.230934][ T9982] BTRFS info (device loop6): turning off barriers [ 253.230976][ T9982] BTRFS info (device loop6): disabling free space tree [ 253.231002][ T9982] BTRFS info (device loop6): not using ssd optimizations [ 253.231017][ T9982] BTRFS info (device loop6): not using spread ssd allocation scheme [ 253.231034][ T9982] BTRFS info (device loop6): has skinny extents [ 253.538550][T10045] loop5: detected capacity change from 0 to 4096 [ 253.577869][T10045] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 253.664987][ T9982] BTRFS info (device loop6): clearing free space tree [ 253.691375][ T9982] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 253.751326][ T9982] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 254.352377][T10096] loop2: detected capacity change from 0 to 1024 [ 254.516890][T10098] loop0: detected capacity change from 0 to 32768 [ 254.626603][T10098] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 254.635353][T10098] gfs2: fsid=syz:syz: unknown hostdata (\) [ 255.158727][ T154] hfsplus: b-tree write err: -5, ino 4 [ 255.159022][T10131] loop6: detected capacity change from 0 to 764 [ 255.338592][T10131] Symlink component flag not implemented [ 255.347711][T10131] Symlink component flag not implemented [ 255.643572][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650084][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.677127][ T6247] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 255.981275][ T6247] usb 3-1: Using ep0 maxpacket: 32 [ 256.111472][ T6247] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 256.131339][ T6247] usb 3-1: config 0 has no interface number 0 [ 256.221518][ T6247] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice= 0.ce [ 256.251241][ T6247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.301225][ T6247] usb 3-1: SerialNumber: syz [ 256.322208][ T6247] usb 3-1: config 0 descriptor?? [ 256.382307][ T6247] smsc95xx v2.0.0 [ 256.427877][T10195] loop4: detected capacity change from 0 to 1024 [ 256.527994][T10195] hfsplus: bad catalog entry type [ 256.585140][T10198] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.597248][T10192] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 256.665142][ T144] hfsplus: b-tree write err: -5, ino 4 [ 256.676749][T10192] NILFS (loop5): mounting fs with errors [ 256.704980][T10192] NILFS (loop5): error -2 reading inode: ino=29034 [ 256.756792][T10169] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2276 (10169) [ 256.781777][T10202] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.839214][T10169] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 256.897777][T10169] BTRFS info (device loop6): enabling auto defrag [ 256.915260][T10169] BTRFS info (device loop6): use no compression [ 256.941442][T10169] BTRFS info (device loop6): force clearing of disk cache [ 256.968408][T10169] BTRFS info (device loop6): max_inline at 4096 [ 256.998473][T10209] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 257.021350][T10169] BTRFS info (device loop6): disabling free space tree [ 257.028324][T10169] BTRFS info (device loop6): has skinny extents [ 257.061499][ T6247] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 257.082395][ T6247] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 257.151540][ T6247] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 257.201357][ T6247] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 257.259033][ T6247] usb 3-1: USB disconnect, device number 20 [ 257.358174][T10212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.379784][T10212] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.397582][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.608643][T10248] program syz.5.2294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.758582][T10169] BTRFS info (device loop6): enabling ssd optimizations [ 257.776402][T10256] fuse: Bad value for 'fd' [ 257.788980][T10169] BTRFS info (device loop6): clearing free space tree [ 257.816313][T10260] ptrace attach of ""[10261] was attempted by "./syz-executor exec"[10260] [ 257.846497][T10169] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.859823][T10257] set_capacity_and_notify: 5 callbacks suppressed [ 257.859840][T10257] loop4: detected capacity change from 0 to 512 [ 257.911227][T10169] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 257.979154][T10257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 258.082640][T10257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 258.089161][T10257] EXT4-fs error (device loop4): __ext4_iget:4912: inode #11: block 8: comm syz.4.2293: invalid block [ 258.228250][T10257] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2293: couldn't read orphan inode 11 (err -117) [ 258.255673][T10257] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.364963][T10257] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 259.104173][T10296] loop5: detected capacity change from 0 to 128 [ 259.213872][T10296] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 259.246802][T10296] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.832247][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2314'. [ 259.870236][T10315] loop0: detected capacity change from 0 to 8192 [ 259.887001][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2314'. [ 259.947243][T10315] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 259.948929][T10290] loop2: detected capacity change from 0 to 32768 [ 260.028342][T10315] REISERFS (device loop0): using ordered data mode [ 260.032889][T10283] loop4: detected capacity change from 0 to 40427 [ 260.071345][T10283] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 260.114197][T10315] reiserfs: using flush barriers [ 260.131880][T10283] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 260.173407][T10315] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.222164][T10283] F2FS-fs (loop4): invalid crc value [ 260.241827][T10315] REISERFS (device loop0): checking transaction log (loop0) [ 260.250697][T10315] REISERFS (device loop0): Using r5 hash to sort names [ 260.260159][T10325] loop5: detected capacity change from 0 to 4096 [ 260.282335][T10325] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 260.286083][T10315] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 260.338127][T10283] F2FS-fs (loop4): Found nat_bits in checkpoint [ 260.350919][T10325] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 260.393577][T10290] XFS (loop2): Mounting V5 Filesystem [ 260.455976][T10325] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 260.551701][T10325] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 260.552288][ T26] audit: type=1800 audit(1772062681.013:120): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2313" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 260.702889][T10325] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 260.724943][T10325] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 260.751538][T10325] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 260.786330][T10283] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 260.813262][T10325] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 260.837795][T10283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 260.884709][T10325] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 260.952532][T10290] XFS (loop2): Ending clean mount [ 260.999779][T10325] ntfs: volume version 3.1. [ 261.081577][T10290] XFS (loop2): Quotacheck needed: Please wait. [ 261.217551][T10356] loop0: detected capacity change from 0 to 4096 [ 261.375637][T10369] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.428715][T10290] XFS (loop2): Quotacheck: Done. [ 261.543918][T10374] device bridge0 entered promiscuous mode [ 261.804686][T10384] loop6: detected capacity change from 0 to 256 [ 261.874044][ T4188] XFS (loop2): Unmounting Filesystem [ 262.411525][T10390] loop5: detected capacity change from 0 to 65536 [ 262.486984][T10399] loop4: detected capacity change from 0 to 1024 [ 262.658558][T10399] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 262.701594][ T6160] XFS (loop5): Metadata CRC error detected at xfs_sb_read_verify+0x3a7/0x490, xfs_sb block 0x0 [ 262.713802][ T6160] XFS (loop5): Unmount and run xfs_repair [ 262.719580][ T6160] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 262.727382][ T6160] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 80 00 XFSB............ [ 262.736354][ T6160] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 262.744547][T10399] EXT4-fs (loop4): orphan cleanup on readonly fs [ 262.746246][ T6160] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 262.760805][ T6160] 00000030: 00 00 00 00 00 00 40 08 00 00 00 00 00 00 00 20 ......@........ [ 262.769795][ T6160] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 262.779347][ T6160] 00000050: 00 00 00 04 00 00 40 00 00 00 00 02 00 00 00 00 ......@......... [ 262.788337][ T6160] 00000060: 00 00 04 98 b4 b5 02 00 02 00 00 02 00 00 00 00 ................ [ 262.797517][ T6160] 00000070: 00 00 00 00 00 00 00 00 0a 09 09 01 0e 00 00 14 ................ [ 262.806560][T10390] XFS (loop5): SB validate failed with error -74. [ 262.934313][T10399] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.2334: Invalid inode table block 0 in block_group 0 [ 262.962302][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 262.977631][T10399] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 263.046814][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.061748][T10399] EXT4-fs error (device loop4): ext4_quota_write:6646: inode #3: comm syz.4.2334: mark_inode_dirty error [ 263.076224][T10411] loop6: detected capacity change from 0 to 4096 [ 263.136175][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.153993][T10399] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.2334: Failed to acquire dquot type 0 [ 263.199364][T10411] ntfs: volume version 3.1. [ 263.224948][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.256756][T10399] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.2334: Invalid inode table block 0 in block_group 0 [ 263.388543][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.426214][T10399] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 263.459939][T10419] device geneve2 entered promiscuous mode [ 263.526926][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.551341][T10399] EXT4-fs error (device loop4): ext4_ext_truncate:4456: inode #15: comm syz.4.2334: mark_inode_dirty error [ 263.598578][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.659226][T10399] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.2334: Invalid inode table block 0 in block_group 0 [ 263.768674][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.808154][T10399] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 263.858870][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.872872][T10399] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 263.892787][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.939041][T10399] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.2334: Invalid inode table block 0 in block_group 0 [ 263.971930][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 263.978517][T10399] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 264.060601][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 264.101248][T10399] EXT4-fs error (device loop4): ext4_truncate:4279: inode #15: comm syz.4.2334: mark_inode_dirty error [ 264.142298][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 264.163372][T10399] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 264.188075][T10399] EXT4-fs (loop4): Remounting filesystem read-only [ 264.211741][T10399] EXT4-fs (loop4): 1 truncate cleaned up [ 264.219048][T10399] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 264.360266][T10440] loop2: detected capacity change from 0 to 1024 [ 264.495317][T10444] loop5: detected capacity change from 0 to 164 [ 264.555053][T10446] binder: 10445:10446 ioctl 541b 0 returned -22 [ 264.567155][T10426] loop6: detected capacity change from 0 to 32768 [ 264.664220][T10444] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 264.727162][T10426] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 264.727162][T10426] [ 264.794279][T10451] loop4: detected capacity change from 0 to 1024 [ 264.984488][T10451] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.2351: lblock 2 mapped to illegal pblock 2 (length 1) [ 265.095380][T10451] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.2351: lblock 0 mapped to illegal pblock 48 (length 1) [ 265.152826][T10451] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.2351: Failed to acquire dquot type 0 [ 265.177141][T10451] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 265.278686][T10451] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.2351: mark_inode_dirty error [ 265.309556][T10471] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2359'. [ 265.349762][T10451] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 265.403266][T10451] EXT4-fs (loop4): 1 orphan inode deleted [ 265.441549][T10451] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 265.475011][ T4245] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.510404][ T4245] __quota_error: 17 callbacks suppressed [ 265.510420][ T4245] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 265.551256][ T4245] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 265.704478][ T6251] kernel write not supported for file /input/mouse0 (pid: 6251 comm: kworker/1:11) [ 265.788488][ T4249] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.826930][ T4249] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 265.888930][ T4249] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 265.939077][T10493] loop5: detected capacity change from 0 to 2048 [ 265.947968][ T4197] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 266.017482][ T4197] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 266.049899][ T4197] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 266.100011][T10498] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.104037][T10493] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 266.146785][T10493] Remounting filesystem read-only [ 266.270923][T10493] NILFS (loop5): mounting fs with errors [ 266.329872][T10493] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 266.376144][T10493] Remounting filesystem read-only [ 266.408816][T10493] NILFS (loop5): error -5 reading inode: ino=15 [ 266.426573][ T4189] Bluetooth: hci0: link tx timeout [ 266.432474][ T4189] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.770924][T10516] loop5: detected capacity change from 0 to 4096 [ 266.837314][T10483] loop2: detected capacity change from 0 to 32768 [ 266.854058][T10520] tipc: Bearer : already 2 bearers with priority 10 [ 266.857009][T10516] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 266.911552][T10520] tipc: Bearer : trying with adjusted priority [ 266.925259][T10516] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 266.948929][T10520] tipc: Enabled bearer , priority 9 [ 266.993035][T10483] XFS (loop2): Mounting V5 Filesystem [ 267.059952][T10516] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 267.091368][T10516] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 267.163761][T10516] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 267.177527][T10483] XFS (loop2): Ending clean mount [ 267.203436][T10516] ntfs: volume version 3.1. [ 267.345526][ T4188] XFS (loop2): Unmounting Filesystem [ 267.542235][T10534] loop0: detected capacity change from 0 to 2048 [ 267.640158][T10534] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.748110][T10512] loop6: detected capacity change from 0 to 32768 [ 267.750210][T10540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.788653][ T9087] udevd[9087]: incorrect nilfs2 checksum on /dev/loop0 [ 268.044936][T10512] XFS (loop6): Mounting V5 Filesystem [ 268.150292][T10557] loop4: detected capacity change from 0 to 64 [ 268.287636][T10512] XFS (loop6): Ending clean mount [ 268.336027][T10512] XFS (loop6): Quotacheck needed: Please wait. [ 268.480931][T10512] XFS (loop6): Quotacheck: Done. [ 268.526932][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 268.552149][ T26] audit: type=1800 audit(1772062689.013:122): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2378" name="file2" dev="loop6" ino=9287 res=0 errno=0 [ 268.620700][ T8581] XFS (loop6): Unmounting Filesystem [ 268.706707][T10573] loop4: detected capacity change from 0 to 2048 [ 268.775224][T10573] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 268.858793][ T4309] udevd[4309]: incorrect nilfs2 checksum on /dev/loop4 [ 268.905152][T10582] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.056777][T10579] loop5: detected capacity change from 0 to 4096 [ 269.108325][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 269.320011][ T8347] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 269.352380][ T8347] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 269.485039][T10595] loop6: detected capacity change from 0 to 512 [ 269.527333][T10595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 269.644345][T10595] EXT4-fs (loop6): 1 truncate cleaned up [ 269.650224][T10595] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 269.750300][T10595] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 269.989383][T10586] loop4: detected capacity change from 0 to 32768 [ 270.101343][T10594] loop2: detected capacity change from 0 to 40427 [ 270.116993][T10586] JBD2: Ignoring recovery information on journal [ 270.137966][T10594] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 270.154005][T10594] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 270.170602][T10594] F2FS-fs (loop2): invalid crc value [ 270.202557][T10594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.325590][T10594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 270.340209][T10586] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 270.509949][ T4188] attempt to access beyond end of device [ 270.509949][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 270.529102][T10617] loop6: detected capacity change from 0 to 512 [ 270.604025][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 270.667753][T10617] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.751387][T10617] EXT4-fs (loop6): 1 truncate cleaned up [ 270.817866][T10617] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 271.221501][T10628] loop0: detected capacity change from 0 to 1024 [ 271.408925][T10638] hfsplus: request for non-existent node 262144 in B*Tree [ 271.420626][T10639] loop2: detected capacity change from 0 to 64 [ 271.461334][T10638] hfsplus: request for non-existent node 262144 in B*Tree [ 271.525494][T10621] loop4: detected capacity change from 0 to 32768 [ 271.850514][T10649] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 271.850514][T10649] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 271.850514][T10649] [ 271.944635][T10649] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable,nouser_xattr,nobarrier,,errors=continue. Quota mode: writeback. [ 272.001657][T10649] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.179754][T10662] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 272.221411][T10662] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 272.248783][T10662] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 272.336820][T10662] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 272.441578][T10662] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 272.523433][T10662] ntfs: volume version 3.1. [ 272.533712][T10662] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 272.610292][T10662] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 272.625724][T10674] tipc: Started in network mode [ 272.656901][T10674] tipc: Node identity @, cluster identity 4711 [ 272.714744][T10662] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 272.744826][T10662] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 272.841620][T10662] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 273.557203][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 273.584919][T10675] set_capacity_and_notify: 3 callbacks suppressed [ 273.584937][T10675] loop2: detected capacity change from 0 to 32768 [ 273.680435][T10708] loop4: detected capacity change from 0 to 256 [ 273.705271][T10675] JBD2: Ignoring recovery information on journal [ 273.787714][T10687] loop5: detected capacity change from 0 to 40427 [ 273.862900][T10687] F2FS-fs (loop5): invalid crc value [ 273.882778][T10708] FAT-fs (loop4): Directory bread(block 64) failed [ 273.893804][T10687] F2FS-fs (loop5): Found nat_bits in checkpoint [ 273.921524][T10708] FAT-fs (loop4): Directory bread(block 65) failed [ 273.928232][T10708] FAT-fs (loop4): Directory bread(block 66) failed [ 273.960167][T10675] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 274.031304][T10708] FAT-fs (loop4): Directory bread(block 67) failed [ 274.038399][T10708] FAT-fs (loop4): Directory bread(block 68) failed [ 274.075985][T10687] F2FS-fs (loop5): Start checkpoint disabled! [ 274.086498][T10708] FAT-fs (loop4): Directory bread(block 69) failed [ 274.101104][T10708] FAT-fs (loop4): Directory bread(block 70) failed [ 274.111802][T10708] FAT-fs (loop4): Directory bread(block 71) failed [ 274.139013][T10687] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 274.142419][T10708] FAT-fs (loop4): Directory bread(block 72) failed [ 274.200158][T10708] FAT-fs (loop4): Directory bread(block 73) failed [ 274.229033][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 274.443967][T10723] loop2: detected capacity change from 0 to 2048 [ 274.485376][ T154] attempt to access beyond end of device [ 274.485376][ T154] loop5: rw=2049, want=45104, limit=40427 [ 274.529555][T10723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.738771][T10730] tipc: Started in network mode [ 274.754381][T10730] tipc: Node identity ac141424, cluster identity 4711 [ 274.823869][T10730] tipc: New replicast peer: 10.1.1.2 [ 274.837374][T10730] tipc: Enabled bearer , priority 10 [ 275.282314][T10748] loop6: detected capacity change from 0 to 64 [ 275.370245][T10737] loop2: detected capacity change from 0 to 32768 [ 275.532050][ T1108] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 275.775010][T10757] loop4: detected capacity change from 0 to 256 [ 275.811469][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 275.821722][T10757] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 275.868223][T10750] loop6: detected capacity change from 0 to 32768 [ 275.937144][T10750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2477 (10750) [ 275.949930][ T1108] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.951941][ T6160] tipc: Node number set to 2886997028 [ 275.973787][ T1108] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.998090][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.005710][ T1108] usb 6-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 276.030278][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.087595][ T1108] usb 6-1: config 0 descriptor?? [ 276.094277][T10750] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 276.144641][T10750] BTRFS info (device loop6): setting nodatacow, compression disabled [ 276.201536][T10750] BTRFS info (device loop6): force clearing of disk cache [ 276.208821][T10750] BTRFS info (device loop6): enabling ssd optimizations [ 276.272074][T10750] BTRFS info (device loop6): using spread ssd allocation scheme [ 276.279786][T10750] BTRFS info (device loop6): turning off barriers [ 276.311654][T10750] BTRFS info (device loop6): disabling free space tree [ 276.318598][T10750] BTRFS info (device loop6): not using ssd optimizations [ 276.351841][T10750] BTRFS info (device loop6): not using spread ssd allocation scheme [ 276.392488][T10750] BTRFS info (device loop6): has skinny extents [ 276.598950][T10750] BTRFS info (device loop6): clearing free space tree [ 276.612751][ T1108] wacom 0003:056A:010D.001D: hidraw0: USB HID v0.00 Device [HID 056a:010d] on usb-dummy_hcd.5-1/input0 [ 276.613401][T10795] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 276.640718][T10750] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.675361][T10750] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.683009][T10795] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 276.693053][T10795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 276.702255][T10795] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 276.709516][T10795] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 276.716710][T10795] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 276.723857][T10795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 276.730495][T10795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 276.737500][T10795] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 276.744388][T10795] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 276.751062][T10795] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 276.831458][T10795] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 276.847360][ T6160] usb 6-1: USB disconnect, device number 7 [ 277.038424][T10800] fido_id[10800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 277.146595][T10811] loop0: detected capacity change from 0 to 128 [ 277.498970][T10817] ptrace attach of "./syz-executor exec"[8347] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[10817] [ 277.617522][T10821] loop2: detected capacity change from 0 to 128 [ 277.864885][T10833] tipc: Started in network mode [ 277.890017][T10833] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 277.907722][T10833] tipc: Enabling of bearer rejected, failed to enable media [ 277.963114][T10830] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 278.087213][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.169147][T10830] exFAT-fs (loop6): Filesystem has been set read-only [ 278.250445][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 0, err : -5) [ 278.310627][T10830] exFAT-fs (loop6): Filesystem has been set read-only [ 278.417203][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.470042][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 0, err : -5) [ 278.524013][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.587402][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 1, err : -5) [ 278.630212][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.699561][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 2, err : -5) [ 278.737099][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.785708][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 3, err : -5) [ 278.811315][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.827678][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 4, err : -5) [ 278.858882][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.879120][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 5, err : -5) [ 278.915336][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.931240][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 6, err : -5) [ 278.961355][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 278.974879][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 7, err : -5) [ 278.996471][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.010605][T10830] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f59a860 iblock : 0, err : -5) [ 279.048704][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.065825][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.079442][T10849] set_capacity_and_notify: 1 callbacks suppressed [ 279.079458][T10849] loop4: detected capacity change from 0 to 32768 [ 279.093145][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.099278][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.106026][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.119194][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.126587][T10830] exFAT-fs (loop6): error, broken FAT chain. [ 279.141270][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 279.141287][ T26] audit: type=1800 audit(1772062699.593:124): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2502" name="file0" dev="loop6" ino=1048717 res=0 errno=0 [ 279.179833][T10876] loop0: detected capacity change from 0 to 4096 [ 280.278924][T10912] loop6: detected capacity change from 0 to 2048 [ 280.313144][T10910] loop5: detected capacity change from 0 to 4096 [ 280.329586][T10911] loop0: detected capacity change from 0 to 8192 [ 280.337553][T10890] loop2: detected capacity change from 0 to 32768 [ 280.382601][T10912] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.406838][T10911] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.465300][T10913] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.517563][T10914] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.726383][T10919] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2545'. [ 280.767172][T10919] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 280.769423][T10916] loop4: detected capacity change from 0 to 2048 [ 280.831632][T10921] loop6: detected capacity change from 0 to 256 [ 280.895418][T10910] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 280.929976][T10921] exfat: Deprecated parameter 'namecase' [ 280.969130][T10924] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.060092][T10921] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 281.123864][T10926] loop2: detected capacity change from 0 to 512 [ 281.323165][T10926] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 281.382606][T10926] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.524624][T10946] loop5: detected capacity change from 0 to 256 [ 281.592138][T10946] exfat: Deprecated parameter 'utf8' [ 281.597869][T10946] exfat: Deprecated parameter 'utf8' [ 281.645922][T10946] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb14608cb, utbl_chksum : 0xe619d30d) [ 282.016937][T10950] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 282.107737][T10950] REISERFS (device loop6): using ordered data mode [ 282.117793][T10950] reiserfs: using flush barriers [ 282.139351][T10950] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.191856][T10950] REISERFS (device loop6): checking transaction log (loop6) [ 282.230011][T10950] REISERFS (device loop6): Using r5 hash to sort names [ 282.248049][T10950] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 282.368912][T10980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.406962][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 282.463405][T10983] device gretap0 entered promiscuous mode [ 282.488883][T10970] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 282.505797][T10970] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 282.530808][T10970] Remounting filesystem read-only [ 282.536699][T10970] NILFS (loop2): error -5 truncating bmap (ino=12) [ 282.727233][T10990] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 282.781640][T10990] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.802238][ T4188] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 282.813791][T10995] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 282.867562][T10995] ntfs: volume version 3.1. [ 282.890379][T10995] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ROOT attribute is corrupt. [ 282.902805][T10995] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 282.943263][T10990] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted [ 283.096791][ T4197] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 283.525141][ T6160] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 283.621558][T11020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.739805][T10998] XFS (loop6): Mounting V5 Filesystem [ 283.771304][ T6160] usb 5-1: Using ep0 maxpacket: 32 [ 283.798548][T10998] XFS (loop6): Ending clean mount [ 283.895372][ T6160] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.907816][ T6160] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.925359][ T6160] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.937644][ T6160] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 283.955669][T11034] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.958381][ T6160] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.012257][T11034] ntfs: volume version 3.1. [ 284.016998][ T6160] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 284.028333][ T6160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.069365][ T6160] usb 5-1: config 0 descriptor?? [ 284.097183][ T8581] XFS (loop6): Unmounting Filesystem [ 284.525437][T11045] program syz.5.2597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.577811][ T6160] hid-thrustmaster 0003:044F:B65D.001E: unbalanced collection at end of report description [ 284.620655][ T6160] hid-thrustmaster 0003:044F:B65D.001E: parse failed with error -22 [ 284.637839][ T6160] hid-thrustmaster: probe of 0003:044F:B65D.001E failed with error -22 [ 284.750843][T11048] set_capacity_and_notify: 6 callbacks suppressed [ 284.750860][T11048] loop5: detected capacity change from 0 to 2048 [ 284.803258][T11050] loop0: detected capacity change from 0 to 1024 [ 284.812822][ T6250] usb 5-1: USB disconnect, device number 16 [ 284.878337][T11048] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 284.897216][T11038] loop2: detected capacity change from 0 to 40427 [ 284.904876][T11048] System zones: 0-4 [ 284.910060][T11048] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,debug,journal_dev=0x0000000000000001,init_itable,,errors=continue. Quota mode: none. [ 284.927677][T11048] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.955237][T11048] fs-verity: sha256 using implementation "sha256-avx2" [ 284.968405][T11048] fs-verity (loop5, inode 18): fs-verity keyring is empty, rejecting signed file! [ 285.059750][T11038] F2FS-fs (loop2): invalid crc value [ 285.070265][T11050] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,min_batch_time=0x0000000000000007,max_batch_time=0x0000000000040fff,,errors=continue. Quota mode: none. [ 285.146299][T11050] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.2600: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 285.148756][T11038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 285.219231][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 285.380004][T11038] F2FS-fs (loop2): Start checkpoint disabled! [ 285.485690][T11038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 285.713138][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2609'. [ 285.725188][T11038] attempt to access beyond end of device [ 285.725188][T11038] loop2: rw=2049, want=45104, limit=40427 [ 285.788040][T11074] loop4: detected capacity change from 0 to 4096 [ 285.884185][T11082] loop5: detected capacity change from 0 to 164 [ 285.922812][T11074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.104048][ T9] attempt to access beyond end of device [ 286.104048][ T9] loop2: rw=2049, want=40976, limit=40427 [ 286.185938][T11074] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.2608: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 286.221449][ T7798] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 286.327317][T11074] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.2608: directory missing '..' [ 286.501322][ T7798] usb 7-1: Using ep0 maxpacket: 32 [ 286.560931][T11090] sp0: Synchronizing with TNC [ 286.580700][T11079] loop0: detected capacity change from 0 to 40427 [ 286.621550][ T7798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.648451][T11079] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 286.661508][T11079] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 286.729793][T11079] F2FS-fs (loop0): invalid crc value [ 286.773822][ T7798] usb 7-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice=f8.0f [ 286.797078][T11079] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.813836][ T7798] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 286.844309][ T7798] usb 7-1: Product: syz [ 286.871294][ T7798] usb 7-1: SerialNumber: syz [ 286.883971][ T7798] usb 7-1: config 0 descriptor?? [ 287.023370][T11079] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 287.048235][T11079] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 287.159836][ T7798] usb 7-1: USB disconnect, device number 4 [ 287.166077][T11088] loop5: detected capacity change from 0 to 32768 [ 287.237712][T11079] attempt to access beyond end of device [ 287.237712][T11079] loop0: rw=2051, want=45064, limit=40427 [ 287.260426][T11079] attempt to access beyond end of device [ 287.260426][T11079] loop0: rw=2051, want=65536, limit=40427 [ 287.294272][T11105] loop4: detected capacity change from 0 to 8192 [ 287.325111][T11079] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 287.325162][T11079] F2FS-fs (loop0): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 287.337612][ T4189] Bluetooth: hci0: link tx timeout [ 287.352081][ T4189] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.361402][T11088] XFS (loop5): Mounting V5 Filesystem [ 287.381906][ T4189] Bluetooth: hci0: link tx timeout [ 287.387192][ T4189] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.403778][ T4189] Bluetooth: hci0: link tx timeout [ 287.409054][ T4189] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.417399][ T4189] Bluetooth: hci0: link tx timeout [ 287.422622][ T4189] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.444038][T11105] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 287.504786][T11105] REISERFS (device loop4): using ordered data mode [ 287.514331][T11105] reiserfs: using flush barriers [ 287.529658][T11105] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 287.546839][T11105] REISERFS (device loop4): checking transaction log (loop4) [ 287.565341][T11105] REISERFS (device loop4): Using r5 hash to sort names [ 287.576761][T11088] XFS (loop5): Ending clean mount [ 287.638073][T11105] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 287.732244][ T26] audit: type=1800 audit(1772062708.193:125): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2621" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 287.771426][ T8347] XFS (loop5): Unmounting Filesystem [ 288.061467][ T4234] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 288.071541][ T7798] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 288.351676][ T7798] usb 7-1: Using ep0 maxpacket: 32 [ 288.471594][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.482750][ T7798] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.482781][ T7798] usb 7-1: config 0 has no interface number 0 [ 288.509099][ T4234] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 288.522411][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.558716][ T4234] usb 3-1: config 0 descriptor?? [ 288.636798][T11148] loop0: detected capacity change from 0 to 64 [ 288.642382][ T7798] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.671344][ T7798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.697022][ T7798] usb 7-1: Product: syz [ 288.706924][ T7798] usb 7-1: Manufacturer: syz [ 288.721594][ T7798] usb 7-1: SerialNumber: syz [ 288.741948][ T7798] usb 7-1: config 0 descriptor?? [ 288.792836][ T7798] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 288.949285][T11144] loop5: detected capacity change from 0 to 32768 [ 289.033138][ T7798] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.053476][ T4234] lenovo 0003:17EF:60A3.001F: ignoring exceeding usage max [ 289.068607][ T7798] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 289.086624][ T4234] lenovo 0003:17EF:60A3.001F: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 289.289087][ T4234] usb 3-1: USB disconnect, device number 21 [ 289.489160][ T7798] usb 7-1: USB disconnect, device number 5 [ 289.495155][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 289.514626][ T7798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 289.530630][ T7798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 289.546844][ T7798] quatech2 7-1:0.51: device disconnected [ 289.800145][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2650'. [ 290.057612][T11183] loop5: detected capacity change from 0 to 1024 [ 290.207333][T11190] loop2: detected capacity change from 0 to 1024 [ 290.232845][ T9] hfsplus: b-tree write err: -5, ino 4 [ 290.407412][ T154] hfsplus: b-tree write err: -5, ino 4 [ 290.799024][T11204] loop5: detected capacity change from 0 to 2048 [ 290.814622][T11191] loop4: detected capacity change from 0 to 32768 [ 290.899004][T11191] (syz.4.2658,11191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.922309][T11187] loop6: detected capacity change from 0 to 40427 [ 290.950423][T11191] (syz.4.2658,11191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.960091][T11204] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 290.986297][T11187] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 291.002143][T11204] EXT4-fs error (device loop5): ext4_ext_precache:626: inode #2: comm syz.5.2664: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 291.011572][T11187] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 291.045641][T11204] EXT4-fs (loop5): Remounting filesystem read-only [ 291.052625][ T4234] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 291.098076][T11187] F2FS-fs (loop6): invalid crc value [ 291.113418][T11187] F2FS-fs (loop6): Found nat_bits in checkpoint [ 291.129980][T11191] JBD2: Ignoring recovery information on journal [ 291.194533][T11187] F2FS-fs (loop6): recover fsync data on readonly fs [ 291.202416][T11187] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 291.209678][T11187] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 291.301928][T11187] F2FS-fs (loop6): Corrupted max_depth of 3: 255 [ 291.319111][T11191] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 291.328357][T11187] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 291.343315][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 291.492409][ T4234] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.510667][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.533036][ T4234] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 291.554233][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.590413][ T4234] usb 3-1: config 0 descriptor?? [ 291.606060][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 291.706673][T11219] loop5: detected capacity change from 0 to 2048 [ 291.787797][T11222] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.834840][T11219] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 291.848795][T11219] Remounting filesystem read-only [ 292.008837][T11226] loop5: detected capacity change from 0 to 1024 [ 292.114198][ T4234] hid-generic 0003:07C0:1125.0020: hidraw0: USB HID v0.02 Device [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 292.353785][ T4234] usb 3-1: USB disconnect, device number 22 [ 292.369561][T11241] loop5: detected capacity change from 0 to 16 [ 292.438427][T11241] erofs: (device loop5): mounted with root inode @ nid 36. [ 292.453711][T11245] loop4: detected capacity change from 0 to 128 [ 292.516909][T11241] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 292.552398][T11245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.592040][T11241] erofs: (device loop5): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 292.611808][T11241] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 292.624024][T11245] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.662897][T11241] erofs: (device loop5): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 292.932882][T11254] loop4: detected capacity change from 0 to 256 [ 293.147489][T11236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2677 (11236) [ 293.279595][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2692'. [ 293.301409][T11236] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 293.310109][T11236] BTRFS info (device loop6): using free space tree [ 293.344541][T11236] BTRFS info (device loop6): has skinny extents [ 293.356006][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 293.367526][T11269] netlink: 'syz.5.2692': attribute type 12 has an invalid length. [ 293.399505][T11272] program syz.0.2694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.459965][T11270] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 293.517081][T11270] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.603601][T11236] BTRFS info (device loop6): enabling ssd optimizations [ 293.704016][T11305] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.722812][T11270] [ 293.725213][T11270] ====================================================== [ 293.732256][T11270] WARNING: possible circular locking dependency detected [ 293.739322][T11270] syzkaller #0 Not tainted [ 293.743774][T11270] ------------------------------------------------------ [ 293.750811][T11270] syz.2.2693/11270 is trying to acquire lock: [ 293.756908][T11270] ffff8880632a27a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 293.765834][T11270] [ 293.765834][T11270] but task is already holding lock: [ 293.773225][T11270] ffff88806323b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 293.782769][T11270] [ 293.782769][T11270] which lock already depends on the new lock. [ 293.782769][T11270] [ 293.793202][T11270] [ 293.793202][T11270] the existing dependency chain (in reverse order) is: [ 293.802246][T11270] [ 293.802246][T11270] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 293.810119][T11270] down_write+0x38/0x60 [ 293.814850][T11270] ext4_map_blocks+0x8bf/0x1b30 [ 293.820262][T11270] ext4_getblk+0x176/0x670 [ 293.825239][T11270] ext4_bread+0x26/0x180 [ 293.830048][T11270] ext4_quota_write+0x236/0x580 [ 293.835492][T11270] do_insert_tree+0x115c/0x1970 [ 293.840903][T11270] do_insert_tree+0x5b1/0x1970 [ 293.846229][T11270] do_insert_tree+0x5b1/0x1970 [ 293.851557][T11270] do_insert_tree+0x5b1/0x1970 [ 293.856892][T11270] qtree_write_dquot+0x361/0x4b0 [ 293.862508][T11270] v2_write_dquot+0x108/0x190 [ 293.867792][T11270] dquot_acquire+0x2d5/0x520 [ 293.872944][T11270] ext4_acquire_dquot+0x2d9/0x4a0 [ 293.878530][T11270] dqget+0x778/0xeb0 [ 293.882994][T11270] __dquot_initialize+0x3c3/0xcd0 [ 293.888588][T11270] ext4_process_orphan+0x54/0x300 [ 293.894178][T11270] ext4_orphan_cleanup+0xad2/0x1320 [ 293.899936][T11270] ext4_fill_super+0x8e25/0x95a0 [ 293.905461][T11270] mount_bdev+0x287/0x3c0 [ 293.910352][T11270] legacy_get_tree+0xe6/0x180 [ 293.915600][T11270] vfs_get_tree+0x88/0x270 [ 293.920589][T11270] do_new_mount+0x24a/0xa40 [ 293.925653][T11270] __se_sys_mount+0x2e3/0x3d0 [ 293.930898][T11270] do_syscall_64+0x4c/0xa0 [ 293.935877][T11270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.942335][T11270] [ 293.942335][T11270] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 293.950470][T11270] down_read+0x44/0x2e0 [ 293.955202][T11270] v2_read_dquot+0x4a/0x110 [ 293.960268][T11270] dquot_acquire+0x152/0x520 [ 293.965422][T11270] ext4_acquire_dquot+0x2d9/0x4a0 [ 293.971013][T11270] dqget+0x778/0xeb0 [ 293.975521][T11270] dquot_set_dqblk+0x27/0xf90 [ 293.980766][T11270] quota_setquota+0x4d6/0x590 [ 293.985998][T11270] __se_sys_quotactl+0x28b/0x6f0 [ 293.991503][T11270] do_syscall_64+0x4c/0xa0 [ 293.996491][T11270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.003089][T11270] [ 294.003089][T11270] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 294.010785][T11270] __lock_acquire+0x2c42/0x7d10 [ 294.016197][T11270] lock_acquire+0x19e/0x400 [ 294.021264][T11270] __mutex_lock_common+0x1e3/0x2400 [ 294.027025][T11270] mutex_lock_nested+0x17/0x20 [ 294.032354][T11270] dquot_commit+0x5a/0x410 [ 294.037329][T11270] ext4_write_dquot+0x1f0/0x360 [ 294.042749][T11270] mark_all_dquot_dirty+0x1e3/0x400 [ 294.048617][T11270] __dquot_alloc_space+0x5d0/0xe20 [ 294.054295][T11270] ext4_mb_new_blocks+0xf81/0x4980 [ 294.059967][T11270] ext4_ext_map_blocks+0x191c/0x6580 [ 294.065813][T11270] ext4_map_blocks+0x98e/0x1b30 [ 294.071224][T11270] ext4_getblk+0x176/0x670 [ 294.076204][T11270] ext4_bread+0x26/0x180 [ 294.081047][T11270] ext4_append+0x2be/0x560 [ 294.086018][T11270] ext4_init_new_dir+0x2a2/0x940 [ 294.091508][T11270] ext4_mkdir+0x4fb/0xce0 [ 294.096401][T11270] vfs_mkdir+0x387/0x570 [ 294.101198][T11270] do_mkdirat+0x1df/0x5b0 [ 294.106084][T11270] __x64_sys_mkdir+0x6a/0x80 [ 294.111231][T11270] do_syscall_64+0x4c/0xa0 [ 294.116199][T11270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.122650][T11270] [ 294.122650][T11270] other info that might help us debug this: [ 294.122650][T11270] [ 294.133031][T11270] Chain exists of: [ 294.133031][T11270] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 294.133031][T11270] [ 294.146724][T11270] Possible unsafe locking scenario: [ 294.146724][T11270] [ 294.154204][T11270] CPU0 CPU1 [ 294.159593][T11270] ---- ---- [ 294.165003][T11270] lock(&ei->i_data_sem/2); [ 294.169639][T11270] lock(&s->s_dquot.dqio_sem); [ 294.177050][T11270] lock(&ei->i_data_sem/2); [ 294.184200][T11270] lock(&dquot->dq_lock); [ 294.188654][T11270] [ 294.188654][T11270] *** DEADLOCK *** [ 294.188654][T11270] [ 294.196822][T11270] 4 locks held by syz.2.2693/11270: [ 294.202046][T11270] #0: ffff88807bb02460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 294.211248][T11270] #1: ffff88806323c9b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 294.221941][T11270] #2: ffff88806323b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 294.231918][T11270] #3: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 294.241024][T11270] [ 294.241024][T11270] stack backtrace: [ 294.246954][T11270] CPU: 0 PID: 11270 Comm: syz.2.2693 Not tainted syzkaller #0 [ 294.254444][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.264557][T11270] Call Trace: [ 294.267867][T11270] [ 294.270829][T11270] dump_stack_lvl+0x188/0x250 [ 294.275555][T11270] ? load_image+0x400/0x400 [ 294.280103][T11270] ? show_regs_print_info+0x20/0x20 [ 294.285366][T11270] ? print_circular_bug+0x12b/0x1a0 [ 294.290616][T11270] check_noncircular+0x296/0x330 [ 294.295602][T11270] ? add_chain_block+0x940/0x940 [ 294.300586][T11270] ? lockdep_lock+0xf1/0x1f0 [ 294.305256][T11270] ? mark_lock+0x94/0x320 [ 294.309626][T11270] __lock_acquire+0x2c42/0x7d10 [ 294.314567][T11270] ? add_chain_block+0x940/0x940 [ 294.319547][T11270] ? lockdep_lock+0xf1/0x1f0 [ 294.324180][T11270] ? verify_lock_unused+0x140/0x140 [ 294.329431][T11270] ? lockdep_unlock+0x143/0x2e0 [ 294.334338][ T4266] udevd[4266]: incorrect nilfs2 checksum on /dev/loop0 [ 294.334332][T11270] ? lockdep_lock+0x1f0/0x1f0 [ 294.345920][T11270] ? __lock_acquire+0x28ac/0x7d10 [ 294.350997][T11270] lock_acquire+0x19e/0x400 [ 294.355546][T11270] ? dquot_commit+0x5a/0x410 [ 294.360187][T11270] ? __might_sleep+0xf0/0xf0 [ 294.364816][T11270] ? read_lock_is_recursive+0x10/0x10 [ 294.370238][T11270] ? dquot_commit+0x5a/0x410 [ 294.374877][T11270] __mutex_lock_common+0x1e3/0x2400 [ 294.380116][T11270] ? dquot_commit+0x5a/0x410 [ 294.384761][T11270] ? __might_sleep+0xf0/0xf0 [ 294.389395][T11270] ? mutex_lock_io_nested+0x60/0x60 [ 294.394645][T11270] mutex_lock_nested+0x17/0x20 [ 294.399572][T11270] dquot_commit+0x5a/0x410 [ 294.404034][T11270] ? __ext4_journal_start_sb+0x1bd/0x360 [ 294.409715][T11270] ext4_write_dquot+0x1f0/0x360 [ 294.414623][T11270] mark_all_dquot_dirty+0x1e3/0x400 [ 294.419862][T11270] __dquot_alloc_space+0x5d0/0xe20 [ 294.425027][T11270] ext4_mb_new_blocks+0xf81/0x4980 [ 294.430198][T11270] ? memset+0x1e/0x40 [ 294.433056][ T9087] udevd[9087]: incorrect nilfs2 checksum on /dev/loop0 [ 294.434224][T11270] ? ext4_mb_pa_callback+0xd0/0xd0 [ 294.446229][T11270] ? ext4_ext_check_overlap+0x15f/0x560 [ 294.451822][T11270] ? ext4_inode_to_goal_block+0x2be/0x450 [ 294.457582][T11270] ext4_ext_map_blocks+0x191c/0x6580 [ 294.462919][T11270] ? kasan_quarantine_put+0xd4/0x220 [ 294.468258][T11270] ? ext4_ext_release+0x10/0x10 [ 294.473156][T11270] ? rwsem_write_trylock+0x135/0x1c0 [ 294.478483][T11270] ? ext4_es_lookup_extent+0x60a/0xa00 [ 294.484001][T11270] ext4_map_blocks+0x98e/0x1b30 [ 294.488898][T11270] ? ext4_map_blocks+0x56a/0x1b30 [ 294.493966][T11270] ? ext4_issue_zeroout+0x250/0x250 [ 294.499214][T11270] ext4_getblk+0x176/0x670 [ 294.503686][T11270] ? ext4_get_block_unwritten+0x30/0x30 [ 294.509271][T11270] ? __brelse+0x55/0x90 [ 294.513502][T11270] ext4_bread+0x26/0x180 [ 294.517792][T11270] ext4_append+0x2be/0x560 [ 294.522249][T11270] ? ext4_init_new_dir+0x940/0x940 [ 294.527407][T11270] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 294.533182][T11270] ext4_init_new_dir+0x2a2/0x940 [ 294.538167][T11270] ext4_mkdir+0x4fb/0xce0 [ 294.542538][T11270] ? ext4_symlink+0xca0/0xca0 [ 294.545935][ T9087] udevd[9087]: incorrect nilfs2 checksum on /dev/loop0 [ 294.547250][T11270] ? inode_permission+0xef/0x480 [ 294.559075][T11270] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 294.564137][T11270] ? security_inode_mkdir+0xb3/0x100 [ 294.569465][T11270] vfs_mkdir+0x387/0x570 [ 294.573761][T11270] do_mkdirat+0x1df/0x5b0 [ 294.578135][T11270] ? vfs_mkdir+0x570/0x570 [ 294.582596][T11270] ? getname_flags+0x1fe/0x500 [ 294.587420][T11270] __x64_sys_mkdir+0x6a/0x80 [ 294.592221][T11270] do_syscall_64+0x4c/0xa0 [ 294.596842][T11270] ? clear_bhb_loop+0x30/0x80 [ 294.601550][T11270] ? clear_bhb_loop+0x30/0x80 [ 294.606259][T11270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.612202][T11270] RIP: 0033:0x7fca3b5d2629 [ 294.616768][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.636407][T11270] RSP: 002b:00007fca3982c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 294.644880][T11270] RAX: ffffffffffffffda RBX: 00007fca3b84bfa0 RCX: 00007fca3b5d2629 [ 294.652887][T11270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 294.661040][T11270] RBP: 00007fca3b668b39 R08: 0000000000000000 R09: 0000000000000000 [ 294.669063][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.677070][T11270] R13: 00007fca3b84c038 R14: 00007fca3b84bfa0 R15: 00007ffeaa800a58 [ 294.685096][T11270] [ 294.706573][T11309] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds