last executing test programs: 1m43.724395947s ago: executing program 0 (id=56): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1m43.570392046s ago: executing program 0 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m43.420353903s ago: executing program 0 (id=59): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m43.256378782s ago: executing program 0 (id=61): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1m42.764833297s ago: executing program 0 (id=63): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0x28b, &(0x7f0000000600)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200) 1m40.443646979s ago: executing program 0 (id=77): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20007fa2"], 0x48) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 1m40.22613061s ago: executing program 32 (id=77): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20007fa2"], 0x48) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 1m26.141473626s ago: executing program 2 (id=226): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 1m25.721011438s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x7, 0x8, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.50702325s ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040041}, 0x40c0) 1m25.425089124s ago: executing program 2 (id=234): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m24.643940355s ago: executing program 2 (id=242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000000240)={0x2c, r1, 0xa5c59466aaff822d, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008805}, 0x64040) 1m24.000045998s ago: executing program 2 (id=247): unshare(0x22060600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) fcntl$setsig(r0, 0x404, 0x21) 1m23.734449362s ago: executing program 33 (id=247): unshare(0x22060600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) fcntl$setsig(r0, 0x404, 0x21) 47.366167194s ago: executing program 4 (id=612): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x8c8}) 47.199650963s ago: executing program 4 (id=616): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) 47.003079693s ago: executing program 4 (id=619): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 46.819884332s ago: executing program 4 (id=621): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$eJzs3E1v3MYZAOChJUVbBTUKBI0dx0AYJwf3YGV3VcsQ0oO3FCUx2V0uSCqQT4VRy6lQKS3iFmh886Vt0PbYc5FTgZ567J/KX6gK7oesL2ur+EMx8DyAzVny5cw7XGoGIjQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECIktVmsxWFbtbf3IqfLVkt8t4Zxyf1/efI5oi5EMLsQbshRPW/0GiEq6NdV996Gvvj+r8b4cro05XQCCH8txEev/n2jz5+a/ZSfeJcFIUzEnolHn31+Nf3d3e3v7zoRF6A/ej856yn/azMs15nPY2zMo9XlpebH22slfFa1k3Le2WV9uKkSDtVXsQ3k7shhJWlOF28l2/211c73TS+mfwkbq2s3LnVbjaX408WB2mnKPP+R58slslG1u1m/fVhTH34Vvu9cKe+ET/NqrhKO704frizu700Lck6qHV8569OCWpPq6ndbLdbrXa7tXx75fadZrMxvlsPdsw2jwnHT5kd3bSTn4NzXm9eT2+Exl8Ovu7JGPfGixvF4bvZT6KLTgEAAAB4yaLhM/Zo+HT+6rC0lnXT5pGYfY8IAAAA4LU2/NX+yvgBQAhXQ3Ty938AAADg9fbno2vswtE1diGKQjmYjyZLVQZbH0Z7nbrU2ZsZ7Zo5XmO1di26PK5kuFmeHX9K0uvRO6OgdybR3443D6flERXFXPTk+RIIfw3XRjHXHoy2DyZHRq0srGXddDHJux+3Qqdz+VKVblW//2LnDyEUxf7M1/3e5Sg83NndXvzlb3YfDHN5UtfyZG/8FxIn/lDiaC7z4VAuvztY9zju8d2jPZ4bPoipe/11v7cwarc56M4e9P/S8Oz9E1/pGf3/Y3h3FPPuwmi7cLT/jbrN1uIpvT+cRWuw9eH8uLFxz+fOl8X1Ucz1mx/Umw9ujo/MHcqiPS2L9uHrP7oW4dKLyOLwtVg6I4v9sLO7vfScWQBclIfHZ6HRvBuezv8n5t3x8BYfr+qMUW7K7F5P4VNn9/kzW/n3Qj2ivz+Kef/a7NO5+NiI3pw2rzT/z3k9hNP7+q9w4x9/D2Ez3JgEP2uOrdv925FZNdr7pj7hmxPtTlaal912VH+Ymd/7bXj70VePb+3s3f98+/PtL9rtpeXmT5vN2+0wN+zGeGPuAeAUafFttFD9KSqKbPCL1spKq1NtpHGRJ5/GRba6nsZZv0qLZKPTX0/jQZFXeZJ368Jn2WpaxuXmYJAXVbyWF/EgL7Ot4Ztf4vGrX8q01+lXWVIOummnTOMk71edpIpXszKJB5s/72blRloMTy4HaZKtZUmnyvJ+XOabRZIuxnGZpocCs9W0X2VrWV3s/zMUWa9T3Is/y7ubvTReTcukyAZVPqpw0lbWX8uL3rDaxYu+2ADwPfEojN9gd/Aqu3MXQmNKzGntnnhGCgC8Msdn6fmLTggAAAAAAAAAAAAAADjh8HK9n40X5T33isAzC41wUAjhZTRx983TDr33krpznsLkdT73d3dDCLMvta2Zp209Rz31d3SRV+x7U2jUhUvhotOYO7R09rvUU9+Bzzj0g3G1218++mEd86pHIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY7n8BAAD//yDUhEw=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 46.29388704s ago: executing program 4 (id=627): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x200045, &(0x7f0000000040)={[{}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x0, 0x759, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x3f, 0x0, 0x0, 0x0, 0x0}) 45.637663994s ago: executing program 4 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)={0x34, r1, 0x609, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) 45.34941459s ago: executing program 34 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)={0x34, r1, 0x609, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) 18.995939597s ago: executing program 1 (id=922): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="961335493e171b87c5049661bc7a9dea85b0b96318f3a46c58525ebc3d0eb9ce96ac44b1d9a749f3ab7e759eff20dc0185dafc139ec785c31ae931023ad12b85c435475f8f764c4ee1329bd7bb7bb9e041f690b5cc745f75f91812f706841d08affa58f76342d7042588429261122e77ffb7828fa3d7ff668389ecdf6b9325ad15bc18a8f91df650262caa1ba865c2c41df8ea0ebfa761195cac8427b2bb312c0fa051cda8c0dd0328b36624744332fe1c7211f5565e2068fd28b30a36962cb2dec9ae6c9bed13a01ed3d029661f9550fabf581952c0b5c28f26c0fa94ac0bb7eed7642f405fec5d3af90ef722514ce5c6b7c71813fd", @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES64], 0xfe, 0x14f, &(0x7f0000000ac0)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) 18.376826289s ago: executing program 1 (id=932): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/175, 0xffffffffffffffff, 0x0, 0x3, 0x2}}, 0x48) 18.16402057s ago: executing program 1 (id=936): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$FUSE(r0, &(0x7f000001fa80)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000021dc0)={0x2020}, 0x2020) 17.939123503s ago: executing program 1 (id=938): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$eJzs3VFsG3cZAPDvLnGbthnJgIcxiTGxoXZAnWahW8TDAAnB0yRgiCekEhIniurEVeJsjVWxTLwigRCCSbzAEy9IvPCGhPbCO0KaNN4RIBAaLTyAtO3Qnc9t49ppKmwfpL+fdLn739n+vs9J/v6ffb4L4KH1ZERciIipiHgmIubK9Wk5xUF3ym936+aN1XxKIsteejuJpFzXe6zT5fxcebeZiPjKFyO+mdwbd3e/c3Wl2WzslO2F9lbyTpZ1Lm5urWw0NhrbS0uLzy0/v3x5+dJI6pyPiBc+/+cffvdnX3jh15985Q9X/nrhW3la/86yV6OvjlHqll4rnoue6YjYGUewikwXFXZdrjgXAACOlo/33x8RHy3G/3MxVYzmAAAAgJMk+8xsvJNEZAAAAMCJlUbEbCRpvTzed7Y8YvVcRHwwzqbN1m77E+utve21fFvEfNTS9c1m41LMFMcOzEctyduL5TG2vfazfe2liHg0In4wd6Zo11dbzbWq3/wAAACAh8S5vv3/f86lab1ebjyoODkAAABgdOarTgAAAAAYO/v/AAAAcPLNZwOu0HWvdPyZAAAAAGPwpRdfzKesd/3rtZf39662Xr641ti9Wt/aW62vtnau1TdarY3inH1b93u8Zqt17VOxvXd9od3YbS/s7neubLX2tttXNg9dAhsAAACYoEc/8sbvk4g4+PSZYsqdKrfVIrKpu288XUWGwLg80DE9fxpfHsDk3f36fqbCPIDJGzikd6AvPBRqVScAVO5+XwAaevDOb0efCwAAMB7nPzT88/+31ytNDRiz8q3+5FgnAAFOlKmqEwAq0/38772sq+psgEmqHTUCsFMAJ146ms//7/PtoESHAgAAFZstpiStl/sBs5Gm9XrEI8VlAWvJ+mazcSki3hcRb83VTuftxeKeidE8AAAAAAAAAAAAAAAAAAAAAAAAABxTliWRAQAAACdaRPqX3pW5zs89Pdv//sCp5F9zxTwiXvnxSz+6vtJu7yzm6/9+e3379XL9s1W8gwEAAAD06+2n9/bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCUbt28sXory7Ls5o3VScb92+ciYr6MX07dLdMxU8xnohYRZ/+RxPRd90siYmoE8Q9ei4jHBsVP8rRivsziUPxTEWlEnBlV/HjA+NGNf24E8eFh9kbe/3x20P9fGk8W88H/f9Pl9N8a3v+lt/u/qSH93yPDHrR2uPn4m79YGBr/tYjHpwf3P734Sf54A+I/dcwav/HVTmfYtuynEecH9X/J4VgL7a1rC7v7nYubWysbjY3G9tLS4nPLzy9fXr60sL7ZbJQ/B8b4/od/9d6d1rv31H/2iP63qH/I8//0Met/983rNz/QXez7zUQtfpJlF54a/Pt/LJ99/N74vde+j5WvA3k7fw7T1782MP4TP//dE8mQ3PL614bUP9NX/+m++i8cs/5nvvztPx7zpgDABOzud66uNJuNnf+7hbSsYCwhYr76Av+nF9JxPfMPspBEEvnCW4c2rRSJTUVnpvwLmXhiSTfoq2X8lWaM9m/1N+VofpxVTLgfAgAAxu/OoD9vfe+Xd7YM+8QAAAAAAAAAAAAAAAAAAAAAGLX7ngZs2KY0Iu6s+fp3jjgbWX/Mg2pKBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40n8CAAD//9g7zl8=") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 16.470345129s ago: executing program 1 (id=949): openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f00000000c0)=[{0xb, 0x28, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) 15.231986354s ago: executing program 1 (id=962): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 14.902847331s ago: executing program 35 (id=962): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2.811433514s ago: executing program 5 (id=1083): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001400)=[{0x0, 0xfffffe45}, {&(0x7f0000000180)=""/202, 0xca}], 0x2, 0x7fff, 0x5) 2.636990792s ago: executing program 5 (id=1087): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000200)) 2.423852034s ago: executing program 5 (id=1092): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdc, &(0x7f0000000000), &(0x7f0000000240)=0x4) 2.334898108s ago: executing program 5 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.174060497s ago: executing program 7 (id=1097): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000021c0)={0x71, 0x0}) 2.10549702s ago: executing program 3 (id=1099): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001400)=[{0x0, 0xfffffe45}, {&(0x7f0000000180)=""/202, 0xca}], 0x2, 0x7fff, 0x5) 2.10473888s ago: executing program 5 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.014970344s ago: executing program 5 (id=1101): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040e704300000000000000109022400010000000009041600010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0x8, "72d3"}, @global=@item_012={0x2, 0x1, 0x4, "d056"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) 2.005449065s ago: executing program 7 (id=1102): syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x7fff, 0x3d, 0x400, 0x5, 0x19c00b0}) 1.932452549s ago: executing program 3 (id=1104): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) open(&(0x7f0000000140)='./file0\x00', 0xa063, 0x84) 1.826617555s ago: executing program 7 (id=1105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r0}, 0xc) 1.755018899s ago: executing program 7 (id=1108): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r1}) 1.625014685s ago: executing program 8 (id=1111): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {@creator={'creator', 0x3d, "062d407f"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}]}, 0x5, 0x357, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1.613395486s ago: executing program 7 (id=1112): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000380)={[{@grpquota}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}]}, 0x29, 0x6239, &(0x7f0000004180)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxITib7PolfqF1MeG14a0EQqEv2K53bRb8htcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEVUBBaRKtIJsNec8z7Mzs7Mzu/Z6feacz0eKf96ZM3POnDkzu991vnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHXn62c/3ciyrPlf/sfmLHtB8+8bJzbnl73mRm8hAAAAcK1+lf/53C3pgkMruFHLMv/88u9+bWFhYSF73/Cfj35+YSFdMZFloxuyLL8uuvKj9zdalwkez8YbQy1fD/VZ/XCf60f6XD/a5/qxPtdv6HP9eJ/rl+yAJTYWv4/J72x7/tfNxS7Nbs1G8+u2d7nV440NQ0Pxdzm5Rn6bhdHj2Vx2MpvNptuWL5Zt5Mt/487mut6SxXUNtaxra/MI+dljx+I2NMI+3t62rsX7jH7yumzi5z977Njfnn/29m6z725ou79iO+/Z1tzOT4ZLim1tZBvSPonbOdSynVu7PCfDbdvZyG/X/Hvndj63wu0cXtzMddX5nI9nQ/nfv5fvp5HWX+ul/bQ1XPaLu7Isu7S42Z3LLFlXNpRtartkaPH5GS+OyOZ9NA+lF2cjqzpO71zBcdqcM9vbj9PO10R8/u8MtxtZZhtan6affGKs5Xn/5cLVHKdR81Ev91rpPAbX+rVSlmMwHhffyx/0E12Pwe3h8T929/LHYNdjp8sxmB53yzG4rd8xODQ2nG9zehIa+W0Wj8GdbcsP52tq5POZu3sfg1PnT52dmv/Yx++bO3X0xOyJ2dO7d+6c3r137/79+6eOz52cnS7+vMq9XX6bsqH0GtgW9l18DbyqY9nWQ3XhS2NL3n+v9nU43uN1uLlj2bV+HY50PrjG+rwglx7TxWvjPc2dPn55KFvmNZY/Pzuu/XWYHnfL63Ck5XXY9XtKl9fhyApeh81lzu5Y2c8sIy3/dduG5b8XXNsxuLnlGOz8eaTzGFzrn0fKcgyOh+PiBzuW/16wNWzvE5Or/XlkeMkxmB5ueO9pXpJ+3h/fn49ux+UdzStuGssuzM+eu//Ro+fPn9uZhbEuXtJyrHQer5taHlO25HgdWvXxemju5U/c0eXyzWFfjd/X/GN82eequcye+3s/V/l3t+77s+3SXVkYa2y992e37+bN/TmWZV/49ice/uZjX3j9svuzmTc/OXXtP4unXNry/ju6zPtvzP3PF+tLd/X48OhI8fodTntntO39uP2pGsnfuxr5up+bWtn78Wj4b73fj2/t8X68pWPZtX4/Hu18cPH9uNHvtx3XpvP5HA/Hycnp3u/HzWW27FrtMTnS8/34rjAbYf+/OiSFlItajp3ljtu0rpGR0fC4RuIa2o/T3W3Lj4Zs1lzXU7vCD4VpK1d2nN5zV7H8cMvtovU6Tic6ll3r4zT97mu547TR77dvV6fz+RwPx8Wtu3sfp81lnt5z7e+dG+NfW947x/odg6PDY81tHk0HYf5+ny1sjMfg/dmx7Ex2MpvJrx3Lj6dGvq7JB1b2XjkW/lvv98otPY7BezqWXetjMH0fW+7Ya4wsffBroPP5HA/HxZMP9D4Gm8u8Yd/a/ux6T7gkLdPys2vn79eW+53XHR276XodKyNhO7+9r/fvZpvLnNy/2pzZez/dGy65qct+6nz9LveamsnWZz9tCdv57P7l91Nze5rLfP7ACo+nQ1mWXfzIg/nve8O/r1y88P2vtf27S7d/07n4kQd/+sLj/7Sa7Qdg8D1fjE3F97qWf5layb//AwAAAAMh5v6hMBP5HwAAACoj5v74f4Un8j8AAABURsz9I2EmVcj/f9x/kS1veHbu+YtZauYvBPH6tBseKpaLHdfp8PXEwqLm5Q9+Zfa///HiyjZvKMuyXz70R12X3/JQ3K7CRNjOK29sv3yJr923onUfeeRiWm9rf/2L4f7j41npYdCtgjudZdk3bvlsvp6J91/O59MPHcnnw5eeeLy5zHMHiq/j7Z95SbH8X4Xy76HjR9tu/0zYDz8Oc/qt3fdHvN1XL7966773Lq4v3q6x7eb8YT/5geJ+4+fkfO7xYvm4n5fb/m9+5qmvNpd/9JXdt//iUPftfyrc71fC/J+XFcu3PgfNr+PtPhW2P64v3u7+L3+r6/Zf+XSx/Nk3FcsdCTOu/57w9fY3PTvXur8ebRxte1zZm4vl4vqnv/+n+fXx/uL9d27/+OHLbfuj8/h4+t+K+5nqWD5eHtcT/UPH+pv303p8xvU/9SdH2vZzv/VfefiZlzXvt3P993Ysd/YjO/L1L95f+yc2/fWnPtt1fXF7Dv392bbHc+hd4XUc1v/kB8LxGK7/3yvF/XV+usKRd7W//8Tlv7j5Ytvjid7y82L9V157Ip8bxjduuukFL7z50iua+y7LvrehuL9+6z/xN2fatv9LtxX7I14fO/qd619OXP+5j06ePjN/YW4m7dXHbsk/O+dtxfbE7b0lvLd2fn34zPkPzp6bmJ6YzrKJ6n6E3lX7cpg/Lcal3ksvLHkH3fFIeD7v+MtvbLr7Xz8TL//39xSXX35r8X3rVWG5z4XLN4fnb3XrX+rJO2/LX9+Np8MWLiz9vOBrsXX7f+1f0YLh8Xf+XBCP97Mv/WC+H5rX5d834uv6Grf/hzPF/Xw97NeF8MnM225bXF/r8vGzES6/u3i9X/P+C29z8Xn9u/B8v/3Hxf3H7YqP94fh55hvbWl/v4vHx9cvDnXef/4pHpfC+0l2qbg+LhX39+Xnbuu6efFzSLJLt+df/1m6n9tX9TCXM/+x+amTc6cvPDp1fnb+/NT8xz5++NSZC6fPH84/y/Pwh/rdfvH9aVP+/jQzu3dPlr9bnSnGdXajt//sI8dm9k3fPTN7/OiF4+cfOTt77sSx+fljszPzdx89fnz2o/1uPzdzcOeuA7v37Zo8MTdzcP+BA7sPTM6dPtPcjGKj+tg7/eHJ0+cO5zeZP7jnwM4HHtgzPXnqzMzswX3T05MX+t0+/9402bz1H06emz159PzcqdnJ+bmPzx7ceWDv3l19Pw3w1Nnj8xNT5y6cnrowP3tuqngsE+fzi5vf+/rdnmqa/4/i59lOjeKD+LJ33rs3fT5r01c+sexdFYt0fIDos+GzaL7zorP7V/J1zP2jYSZVyP8AAABALub+sTAT+R8AAAAqI+b+DWEm8j8AAABURsz942Gm/yWgJvm/cv3/LRf7rD82S/T/M/3/RP+/Zv3/d5et/1+8X+j/r41r7d/r/wf6//r/+v/6//r/rIGy9f9j7t+YZf79HwAAACoq5v5NYSbyPwAAAFRGzP03hZnI/wAAAFAZMfe/IMykJvm/fv3/gvP/6/+37i/9f/3/buvX/x9M+v+96f/3of8/ldWr/3+p5c9B7P9vbP1C/58yKlv/P+b+F4aZ1CT/AwAAQB3E3H9zmIn8DwAAAJURc/8tYSbyPwAAAFRGzP2bw0xqkv/1/6+p/586V/r/7duv/99O/z8cD/r/+v/rQP+/N/3/PvT/nf9/sPr/bfT/KaOy9f9j7n9RmElN8j8AAADUQcz9Lw4zkf8BAACgfEau7mYx978kzGRJ/r/KFQAAAAA3XMz9t2YdRfCa/Pu//r/z/+v/6//r/3df/8r7/8OZ/n956P/3pv/fh/6//r/+v/4/a6ps/f8892fj2UvDTGqS/wEAAKAOYu6/LcxE/gcAAIDKiLn//4WZyP8AAABQGTH3bwkzqUn+1/+vTP//F61Pnf6//n+v9ev/O/9/len/96b/34f+v/6//r/+P2uqbP3/mPtvDzOpSf4HAACAOoi5/44wE/kfAAAAKiPm/v8fZiL/AwAAQGXE3L81zKQm+V//v+T9/9gcdf5//X/9/1L2/8f1/0tH/783/f8+9P/1//X/9f9ZU2Xr/8fc/7Iwk5rkfwAAAKiDmPtfHmYi/wMAAEBlxNz/ijAT+R8AAAAqI+b+iTCTmuT/1fT/G5f0/5dznc//P7aC8/+30f/X/++1fv1/5/+vMv3/3vT/+9D/1//X/9f/Z02Vrf8fc/+dYSY1yf8AAABQBzH3bwszkf8BAACgMmLuvyvMRP4HAACAyoi5f3uYSU3yv/P/D0T/P9P/1//X/9f/1/9fGf3/3vT/+9D/1//X/9f/Z02Vrf8fc/8rw0xqkv8BAACgDmLuvzvMRP4HAACAyoi5/1VhJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6/93X7/+/2DS/+9N/78P/X/9f/1//X/WVNn6/zH3vzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP33hpnI/wAAAFAZMfdPhpnUJP/r/+v/6//r/+v/d1+//v9g0v/vTf+/D/1//X/9f/1/1lTZ+v8x998XZlKT/A8AAAB1EHP//WEm8j8AAABURsz9U2Em8j8AAABURsz902EmNcn/+v/6//r/+v+r6v+/YvF+9f8L+v/lov/fm/5/H/r/+v83vP8/qv9PpZSt/x9z/84wk5rkfwAAAKiDmPt3hZnI/wAAAFAZMffvDjOR/wEAAKAyYu7fE2ZSk/w/AP3/WO3W/9f/1/8vQ/+/hf5/Qf+/XPT/e1v7/n98iPr/+v/6/87/r//PUmXr/8fc/0CYSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf4fgP5/zvn/+/b/x1rXrf+v/99r/fr/+v9Vpv/fm/P/96H/r/8/wP3/5rGl/0/ZlK3/H3P/gTCTmuR/AAAAqIOY+18TZiL/AwAAQGXE3P9rYSbyPwAAAFRGzP2/HmZSk/yv/1+Z/n8b/X/9/17rH7T+/5j+v/7/Kuj/96b/34f+v/7/APf/nf+fMipb/z/m/oNhJjXJ/wAAAFAHMff/RpiJ/A8AAACVEXP/a8NM5H8AAACojJj7D4WZ1CT/6/+vU/8/Xqj/r/+v/+/8//r/15X+f2/6/33o/+v/6//r/7Omytb/j7n/dWEmNcn/AAAAUAcx9z8YZiL/AwAAQGXE3P/6MBP5HwAAACoj5v43hJnUJP/r/zv//43v/4+2bbv+/+Lt9P8L+v/6/6uh/9+b/n8f+v/6//r/+v+sqbL1/2Puf2OYSU3yPwAAANRBzP1vCjOR/wEAAKAyYu5/c5iJ/A8AAACVEXP/W8JMapL/9f/1/298/7/7+f+bx5r+v/5/pv+v/79K+v+96f/3of+v/6//r//Pmipb/z/m/t8MM6lJ/gcAAIA6iLn/oTAT+R8AAAAqI+b+t4aZyP8AAABQGTH3vy3MpCb5X/9f/7+s/X/n/9f/j/T/9f9XQ/+/twHr///q5nC5/n9B/7/c27/a/v9Ix9fXpf//o+X6/wsbOm+v/8/1ULb+f8z9bw8zqUn+BwAAgDqIuf8dYSbyPwAAAFRGzP3vDDOR/wEAAKAyYu7/rTCTmuR//f/mdiy2l/X/9f/zC/T/9f/1/weW/n9vA9b/d/7/Dvr/5d5+5//X/2epsvX/Y+5/V5hJTfI/AAAA1EHM/Q+Hmcj/AAAAUBkx9787zET+BwAAgMqIuf89YSY1yf/6/87/r/+v/6//3339+v+DSf+/N/3/PvT/9f/L1v//T/1/BlvZ+v8x9z8SZlKT/A8AAAB1EHP/e8NM5H8AAACojJj7fzvMRP4HAACAyoi5/31hJjXJ//r/g9L/n9D/X2X/fyxcpv+v/6//Xy/6/73p//eh/6//X7b+v/P/M+DK1v+Puf/9YSYrz//jK14SAAAAuCFi7v+dMJOa/Ps/AAAA1EHM/b8bZiL/AwAAQGXE3P97YSY1yf/6/4PS/3f+/8z5//X/Ox6P/r/+fzfr1/+P7zz6//r/+v+R/r/+v/4/ncrW/4+5//fDTGqS/wEAAKAOYu7/QJiJ/A8AAAADodv/k90p5v7DYSbyPwAAAFRGzP1Hwkxqkv/1//X/9f9L2v//i23/8oPvvuPITv1//X/9/1VZ1/P/N1/8zv+v/6//n+j/6//r/9OpbP3/mPuPhpksBr+3OcE/AAAADLaY+/8gzKQm//4PAAAAdRBz/7EwE/kfAAAAKiPm/pkwk5rkf/1//X/9/5L2/wf4/P9xfwxS/39ywwD1/+Obrv5/V+va/3/vYk9c/3+1/f+xrpd29v8b+v9t9P9Xvf3fybJM/1//nxuobP3/mPtnw0xqkv8BAACgDkLuHzpezMUr5H8AAACojJj7T4SZyP8AAABQGTH3fzDMpCb5X/9f/1//X//f+f+7r7+0/X/n/+9J/7+38vT/u3P+f/3/Qd5+/X/9f5YqW/8/5v65MJOa5H8AAACog5j7PxRmIv8DAABAZcTc/+EwE/kfAAAAKiPm/pNhJjXJ//r/+v/6//r/+v/d16//P5j0/3vT/+9D/1//X/9f/581Vbb+f8z9p8JMapL/gf9j7z6aLK3LPo6fnqcpZh42z+5ZuNAql74EFrLWF+CCDQutslyAijnNYI6Yc8AsBgygiAlzAhOKWVTMCQNm1BqLmeu6psPd9+lwus99/v/PZ+E1NNOcMzoF/qbnyw0AAPQgd/+lcYv9DwAAAM3I3X9Z3GL/AwAAQDNy9z80bulk/+v/9f/N9v/31f/v9Pr6f/1/y/T/4/T/c+j/9f/6f/0/CzW1/j93/8Pilk72PwAAAPQgd//D4xb7HwAAAJqRu//yuMX+BwAAgGbk7n9E3NLJ/t/S/6/N+uz/M+PV/7fU/3v+/46vr//X/7fsaPv/K+7+O5/+X/+v/w/6f/2//p+tptb/5+5/ZNzSyf4HAACAHuTuf1TcYv8DAABAM3L3Pzpusf8BAACgGbn7HxO3dLL/Pf/f8//1//p//f/w6+v/V5Pn/4/rqf+//NYLLr3z+nvcsJfX1//r//X/+n8Wa2r9f+7+x8Ytnex/AAAA6EHu/sfFLfY/AAAANCN3/+PjFvsfAAAAVtCJwY/m7n9C3NLJ/tf/6//1/9H/H9f/6//1/y3Q/4/rqf/fz+vr//X/+n/9P4s1tf4/d/8T45ZO9j8AAAD0IHf/k+IW+x8AAACma+g3Yo/I3X8ybrH/AQAAYCXsJkPP3X8qbulk/+v/D7///4/+fzX6f8//1//r/5ug/x+n/59D/6//1//r/1moqfX/ufuviFs62f8AAADQg9z9T45b7H8AAABoRu7+p8Qt9j8AAAA0I3f/U+OWTva//t/z//X/+v8F9v9nvqn/H6b/Pxr6/3H6/zn0/wft58/T/+v/9f9stMf+/66Rv20vpP/P3f+0uKWT/Q8AAAA9yN3/9LjF/gcAAIBm5O5/Rtxi/wMAAEAzcvc/M27pZP/r//X/+v+j7/9nW77/yvb/23/qnaH/H6b/Pxr6/3GT6f/X1gc/rP9f+f7f8//1//p/Npna8/9z9z8rbulk/wMAAEAPcvc/O24Z2f97/sV8AAAAYKly9z8nbvH1fwAAAFh5WZ3l7n9u3NLJ/tf/6//1/57/v8Dn/5/RQ/9/w4b3p/+fFv3/uMn0/zvQ/+v/V/n96//1/2w3tf4/d//z4pZO9j8AAAD0IHf/lXGL/Q8AAADNyN3//LjF/gcAAIBm5O5/QdzSyf4f7v/P/Xn9/+7o/ze/f/3/8M+PRfX/+VfU/4/2/xd5/n+fdurvL9nl5+v/g/5f/6//1/9v7v9PzPt8/T9Dptb/5+5/YdzSyf4HAACAHuTuf1HcYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/Pf9f/6//X73+3/P/z1rm8/9nR97/r+v/d6nL5//f+45d//X1/3Po//X/+v/x5/+P/FsA9P8MmVr/n7v/pXFLJ/sfAAAAepC7/2Vxi/0PAAAAq2Hj7x3Y+htKQ+7+l8ct9j8AAAA0I3f/K+KWdvb/6LM69f/6f/2//l//P/z60+r/Pf9/t1rr/+c+cHuzm+d9B/3/HPr/w+jn1xvr/6/a6fOn0P+fPOz+f4T+nyGb+v8bz318Wf1/7v5Xxi3t7H8AAADoXu7+V8Ut9j8AAAA0I3f/q+MW+x8AAACakbv/NXFLJ/v/0Pv/kXBR/6//1//r//X/+v9Fa63/33O/Pof+fw79v+f/e/6//p+F2tT/b7Cs/j93/2vjlk72PwAAAPQgd//r4hb7HwAAAJqRu/+quMX+BwAAgGbk7n993NLJ/vf8f/2//n+p/f+xmf5f/6//X6gD9ffH9P9F/6//1//r//X/LMDU+v/c/W+IWzrZ/wAAANCD3P1vjFvsfwAAAGhG7v43xS32PwAAADQjd/+b45ZO9r/+/3D7//z4Dv3//279fP1/d/2/5//r//X/C9bt8//Xhv5JtN0O/f/NDz51/80f0f/r//X/+n/9P7v0fyN/bhL9/+lz/+8yd/9b4pZO9j8AAAD0IHf/W+MW+x8AAACakbv/bXGL/Q8AAADNyN1/ddyyx/0/1jxMmf7f8//1//p//f/w6+v/V1O3/f8uef7/HPp//b/+X//PQk2i/9/wx7n73x63+Po/AAAANCN3/zviFvsfAAAAmpG7/51xi/0PAAAAzcjd/664pZP9r//X/+v/9f/6/+HX1/+vJv3/OP3/HKvU/199gP5/ffjDy+7nD2rZ71//r/9nu6n1/7n7r4lbOtn/AAAA0IPc/e+OW+x/AAAAaEbu/vfELfY/AAAANCN3/3vjlk72v/5f/6//1//r/4dfX/+/mvT/4/T/s9ns2pE3MNT/nz5/mv2/5/9P7v3r//X/bDe1/j93//vilk72PwAAAPQgd/+1cYv9DwAAAM3I3X9d3GL/AwAAQDNy978/bulk/+v/9f/6/732/3f/j6P/n+n/9f8Tpf8fp/+fY5We/6//39f7P36I71//r/9nu6n1/7n7PxC3dLL/AQAAoAe5+6+PW+x/AAAAaEbu/g/GLfY/AAAANCN3/w1xSyf7X/+v/9f/e/6//n/49fX/q+nw+v+Z/l//r/+fYxX6/8N8//p//T/bTa3/z93/obilk/0PAAAAPcjd/+G4xf4HAACAZuTu/0jcYv8DAABAM3L3fzRu6WT/6//1//p//b/+f/j19f+ryfP/x+n/59D/6//1//p/Fmq4/z+5tP4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/N/f/s5n+X/+v/z/rCPr/4zP9/8Lp/8fp/+fQ/7fZ/x+bNdT/n9jx8/X/TNHUnv+fu/+TcUsn+x8AAAB6kLv/U3GL/Q8AAADNyN3/6bjF/gcAAIBm5O7/TNzSyf7X/+v/Pf9f/6//H359z/9fTfr/cfr/OfT/bfb/nv+v/2dpptb/5+7/bNzSyf4HAACAHuTu/1zcYv8DAABAM3L3fz5usf8BAACgGbn7vxC3dLL/9f/6f/2//l//P/z6+v/VpP8fp/+fQ/+v/9f/6/9ZqKn1/7n7vxi3dLL/AQAAoAe5+2+KW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0txSyf7X/+v/9f/r2b/f1z/r//X/w+aSv9/4YX3u0X/r//X/+v/9f/6/95Nrf/P3f/luKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP9v7//Pm50tVM8a6v+jUdP/b6D/3/z+9f/DPz8G+/98857/r//X/y/EVPp/z//f3/vX/+v/V/n976n/v9f2z9f/06Kp9f+5+2+JWzrZ/wAAANCD3P1fj1vsfwAAAGhG7v5vxC32PwAAADQjd/+tcUsn+9/z//X/E+v/T3bX/+/z+f8z/b/+X/8/SP8/Tv8/h/5f/+/5/5c98H/0/yzO1Pr/3P3fjFs62f8AAADQg9z934pb7H8AAABoRu7+b8ct9j8AAAA0I3f/d+KWTva//l//P7H+v7/n/+v/9f/6/4XS/4/T/5etP7Sz+un/jw99cNn9/EEt+/030/97/j8LNLX+P3f/d+OWTvY/AAAA9CB3//fiFvsfAAAAmpG7//txi/0PAAAAzcjd/4O4pZP9r//X/7ff/1+i/9/y+vp//X/L9P/5T/Rh+v85+un/By27n1/196//1/+z3dT6/9z9t8Utnex/AAAA6EHu/h/GLfY/AAAANCN3/4/iFvsfAAAAmpG7/8dxSyf7X//fV/+/Nuux//f8f/2//r8n+v9x+v859P/6f/2//p+Fmlr/n7v/9rX1Lvc/AAAArKoH3Ocht+32+95+5j+Pz34St1w0O73LL2MDAAAAE3f37l9bn81+euaPfP0fAAAAWpS7/2dxSyf7X//fV//f5/P/9f/6f/1/T/T/4/T/c+j/9f/6f/0/CzW1/j93/8/jlg3Db33PP0oAAABgSnL3/yJu6eTr/wAAANCD3P2/jFu27X//OkAAAABYVbn7fxW3dPL1f/3/xPv/2SH1//H99P9n6f/1/0Ovr/9fTfr/cQfs/0+v6f/1/yP0//p//T9bTa3/z93/67ilk/0PAAAAjdr0Kwq5+38Tt9j/AAAA0Izc/b+NW+x/AAAAaEbu/t/FLZ3sf/3/kff/maof4vP/T9S3PP+/8/7/yuODr6//1/+3TP8/zvP/59D/t9L/n6//1/8zDVPr/3P33xG3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xJ//v6/+fxfP/9f/99H/7/D67fT//3/BqZsuftB11+j/Oeco+//8uaD/1//r/8+aUP/v+f/6fyZi8f3/+qYP7rX/z93/p7ilk/0PAAAAPcjdf2fcYv8DAABAM3L3/zlusf8BAACgGbn7/xK3dLL/9f879P/Z3+/uh6L/3/L+99P/53/XS+j/T+27/z8xm82W0v9nU9x7/+/5//r/7Tz/f5z+fw79v/5f/6//Z6EW3/9v/uBe+//c/X+NWzrZ/wAAANCD3P1/i1ty/6/t+ZfuAQAAgInJ3f/3uMXX/wEAAKAZufv/Ebd0sv/1/57/P5X+P3n+/7nPa+v5/xdXnNpn/3/P+pb+/3Dp/8fp/+fQ/+v/9f/6fxZqav1/7v5/xi2d7H8AAADoQe7+u+IW+x8AAACakbv/X3GL/Q8AAADNyN3/77ilk/2v/2+1/88iXv+v/59K/+/5/57/fzT0/+P0/3O02P8f2/0Pf9n9/EEt+/3r//X/bDe1/j93/38DAAD//2TvY9A=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.34640924s ago: executing program 8 (id=1114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1200) 1.171615439s ago: executing program 6 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r1, 0x331, 0x70bd25}, 0x14}}, 0x0) 1.071827724s ago: executing program 8 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x124, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x124}}, 0x0) 1.011472027s ago: executing program 6 (id=1118): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 986.508679ms ago: executing program 3 (id=1119): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x40d}) close(r0) 943.92171ms ago: executing program 8 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd28, 0x40000, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008004) 834.151376ms ago: executing program 6 (id=1121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) 754.666601ms ago: executing program 3 (id=1122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 743.642632ms ago: executing program 8 (id=1123): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000200)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) 652.629826ms ago: executing program 6 (id=1124): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8040) 584.05807ms ago: executing program 3 (id=1125): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 495.032964ms ago: executing program 6 (id=1126): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000000100)={[{@uid={'uid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x1}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 431.852127ms ago: executing program 3 (id=1127): r0 = memfd_create(&(0x7f0000000880)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\xb2\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1eie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xf7\xff\xff\xff7R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\xa6\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{U]c\x97t\xb3\x81\xc5v\x12\x84~\xabA\x18\x17Ivle\xf9D\xf9q\f\x8a\xcf\xb8\x85\xf48\xe4\xf9\x84T\x0f\x02U\xfe\x9eF\x92\apP\xb6>,\x11ID\x93\xfc4\x00ppv\xe2\xac\x91U\xee\xc6c\xd4\x96\x97', 0x5) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 365.261631ms ago: executing program 8 (id=1128): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001280)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {}, {@utf8}, {@rodir}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlateno}]}, 0x29, 0x33d, &(0x7f00000015c0)="$eJzs3T9onGUYAPDn+l1yaaAmg1B0Ot0EKU3EQaeEUqGYQSuH/xaDTf2TOws5PIhDLlkUR8VF0Mmtg46dxUHEzcHVClIVF7sVWvzk7vvy3Xe5O5uKl6r9/Ybw8Hzvc+/7fnnJfQnJk1dWYvPCTFy8fv1azM1VorpyZiVuVGIxjkUSmd0AAP5PbqRp/J5mbj/6w/nInwpmp780AGBK+u//r50YJGp3czUAwFE45Pf/z4zNXprasgCAKRp5/3946PKBH/NXi98JAAD+u5578aWnV9ciztfrcxGt9zqNTiOeHFxfvRhvRDM24nQsxK2I7EEhe1rofXzq3NrZ0/Wenxej0avoNCJa3U4je1JYTfr1tViKhVjM69OiPunVL/Xr6xGx2+3PH61KpzET8/n8P8zHRizHQtw/Uh9xbu3scj1/gUZrv74bsRdz+5vorf9ULMR3r8al2WZciF7tYP07S/X6mXRtqL5zudYfBwAAAAAAAAAAAAAAAAAAAAAA03CqXlgs+t+krW7n3fMHBywO9cfp9/pJk7w/0F7WHyit7XfneT852B9ouD9Pp1GNY3d57wAAAAAAAAAAAAAAAAAAAPBv0d6ejfVmc2Orvf3OZjnoljJvffP5V8fj4Jg3k0EmqtnLDY3Jc1GqSqIoT4vyNBkakwdJxGDw5SvFistjasUuRsp7QW3kUiVf03qzeeKhnz4ZV/VHkYmI3QmvnAeVfP7SpdZ9WeovqiYHy7cZczVN00nlOx+PVkUlojryifsngq+vvf7AY+2Tj/czX+ZNHx55dOH5qx999uvmejPyW9Nszm61b6V/e66kdH4q+X2ujDkJ44O9QWZvq729nnz/2wsPfvDt/phqdhKS8ecnLWfenjzXFwczs1nQW+Zhdjoz5vCPD16+WZzeO7+ZJz9dWb+y8+Mvh60qfZHQqAMAAAAAAAAAAAAAAAAAAI5E6W/F78ATz05vRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9Ab//78U7I1kDhPc7MbopdrGVnvi5MePdKsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzD/gwAAP//msh3yQ==") r0 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 321.956833ms ago: executing program 6 (id=1129): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 0s ago: executing program 7 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001000d00080006"], 0x30}}, 0x40) kernel console output (not intermixed with test programs): media [ 108.031465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.056526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.109892][ T5351] netlink: 'syz.3.350': attribute type 30 has an invalid length. [ 108.187742][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.244835][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.306565][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.340192][ T5359] loop1: detected capacity change from 0 to 2048 [ 108.372927][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.400413][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.433201][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.457802][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.485372][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.521566][ T4979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.578494][ T4473] ocfs2: Unmounting device (7,5) on (node local) [ 108.593561][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.618660][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.638741][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 108.676046][ T5359] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.719159][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.734502][ T5373] loop3: detected capacity change from 0 to 512 [ 108.761258][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.772754][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.783703][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.796071][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.812788][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.823388][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.837377][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.857421][ T4979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.877163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.896241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.928901][ T5373] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.359: ea_inode file size=4 entry size=6 [ 108.958402][ T5373] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.359: corrupted inode contents [ 108.976689][ T4979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.986044][ T4979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.995940][ T4979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.005041][ T4979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.073361][ T5373] EXT4-fs (loop3): Remounting filesystem read-only [ 109.147672][ T5373] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.359: mark_inode_dirty error [ 109.213831][ T5373] EXT4-fs (loop3): Remounting filesystem read-only [ 109.229026][ T5373] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.359: corrupted inode contents [ 109.320207][ T5373] EXT4-fs (loop3): Remounting filesystem read-only [ 109.335938][ T5373] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2952: inode #15: comm syz.3.359: mark_inode_dirty error [ 109.405863][ T5373] EXT4-fs (loop3): Remounting filesystem read-only [ 109.412719][ T5373] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2955: inode #15: comm syz.3.359: mark inode dirty (error -117) [ 109.485076][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.485913][ T5373] EXT4-fs (loop3): Remounting filesystem read-only [ 109.529900][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.577247][ T5373] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 109.605189][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.633462][ T429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.642128][ T5373] EXT4-fs (loop3): 1 orphan inode deleted [ 109.655390][ T429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.663093][ T5373] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x00000000000000ff,init_itable=0x0000000000008d55,nouid32,resgid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,nojournal_checksum,sb=0x0000000000000006,. Quota mode: none. [ 109.698213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.784466][ T5395] loop1: detected capacity change from 0 to 8192 [ 109.890025][ T5395] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 109.944072][ T5395] REISERFS (device loop1): using ordered data mode [ 109.952720][ T5395] reiserfs: using flush barriers [ 109.959462][ T5395] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.995755][ T5395] REISERFS (device loop1): checking transaction log (loop1) [ 110.035140][ T5408] loop5: detected capacity change from 0 to 1024 [ 110.169323][ T5414] loop4: detected capacity change from 0 to 2048 [ 110.243092][ T5417] loop3: detected capacity change from 0 to 1024 [ 110.293680][ T5395] REISERFS (device loop1): Using r5 hash to sort names [ 110.308715][ T5395] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 110.321737][ T1276] hfsplus: b-tree write err: -5, ino 25 [ 110.329849][ T1276] hfsplus: b-tree write err: -5, ino 4 [ 110.336288][ T1276] hfsplus: b-tree write err: -5, ino 2 [ 110.403786][ T5417] hfsplus: walked past end of dir [ 110.411842][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 110.555953][ T5423] loop5: detected capacity change from 0 to 512 [ 110.721858][ T5423] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 110.825799][ T5439] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 110.903149][ T5423] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.030889][ T5443] loop6: detected capacity change from 0 to 1024 [ 111.386945][ T5456] loop1: detected capacity change from 0 to 64 [ 111.539132][ T5464] loop3: detected capacity change from 0 to 64 [ 111.685442][ T1335] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 111.897060][ T5477] loop3: detected capacity change from 0 to 512 [ 111.945438][ T1335] usb 7-1: Using ep0 maxpacket: 16 [ 111.953917][ T5477] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.085647][ T1335] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.127193][ T5477] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 112.146015][ T1335] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.174789][ T5446] loop4: detected capacity change from 0 to 40427 [ 112.261925][ T5446] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 112.277113][ T5495] loop1: detected capacity change from 0 to 256 [ 112.282834][ T5446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.340433][ T5446] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 112.385609][ T1335] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.433757][ T5446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.442016][ T1335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.512608][ T1335] usb 7-1: Product: syz [ 112.544414][ T1335] usb 7-1: Manufacturer: syz [ 112.572969][ T1335] usb 7-1: SerialNumber: syz [ 112.577262][ T5512] loop3: detected capacity change from 0 to 256 [ 112.617223][ T5513] loop5: detected capacity change from 0 to 1024 [ 112.635364][ T5446] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.644678][ T5446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.665522][ T5512] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.713104][ T5512] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 112.759192][ T5513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.858428][ T5512] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 112.877971][ T5513] EXT4-fs warning (device loop5): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 112.892125][ T26] audit: type=1800 audit(1776899756.425:3): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.376" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 113.146082][ T1335] usb 7-1: cannot find UAC_HEADER [ 113.299440][ T1335] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 113.391033][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.425812][ T1108] usb 7-1: USB disconnect, device number 2 [ 113.435608][ T5115] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.575526][ T5110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.726904][ T1335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.799778][ T5115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.824503][ T5115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.841690][ T5110] usb 2-1: Using ep0 maxpacket: 32 [ 113.847556][ T5115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.867383][ T5115] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.902097][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.919158][ T5115] usb 6-1: config 0 descriptor?? [ 113.965994][ T5110] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.974545][ T5110] usb 2-1: config 0 has no interface number 0 [ 113.985666][ T1335] usb 4-1: Using ep0 maxpacket: 16 [ 114.071672][ T5562] loop6: detected capacity change from 0 to 128 [ 114.145673][ T1335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.155692][ T5110] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.169366][ T1335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.192584][ T5110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.197539][ T1335] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 114.223097][ T5110] usb 2-1: Product: syz [ 114.223814][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.232383][ T5110] usb 2-1: Manufacturer: syz [ 114.245942][ T1335] usb 4-1: config 0 descriptor?? [ 114.251110][ T5110] usb 2-1: SerialNumber: syz [ 114.267750][ T5110] usb 2-1: config 0 descriptor?? [ 114.317207][ T5110] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.419872][ T5115] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 114.452017][ T5115] plantronics 0003:047F:FFFF.0005: parse failed [ 114.470738][ T5115] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 114.553572][ T5110] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.580885][ T5110] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.649447][ T1108] usb 6-1: USB disconnect, device number 2 [ 114.736202][ T1335] hid (null): bogus close delimiter [ 114.744839][ T1335] wacom 0003:056A:0084.0006: bogus close delimiter [ 114.775350][ T1335] wacom 0003:056A:0084.0006: item 0 4 2 10 parsing failed [ 114.806825][ T1335] wacom 0003:056A:0084.0006: parse failed [ 114.842603][ T1335] wacom: probe of 0003:056A:0084.0006 failed with error -22 [ 114.991021][ T5110] usb 4-1: USB disconnect, device number 4 [ 115.009474][ T1335] usb 2-1: USB disconnect, device number 5 [ 115.017323][ T5594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.025389][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.079539][ T1335] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 115.082305][ T5600] program syz.6.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.150415][ T1335] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 115.235602][ T1335] quatech2 2-1:0.51: device disconnected [ 115.742580][ T5625] set_capacity_and_notify: 2 callbacks suppressed [ 115.742599][ T5625] loop6: detected capacity change from 0 to 512 [ 115.814326][ T5627] tipc: Started in network mode [ 115.842300][ T5627] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 115.897732][ T5627] tipc: Enabling of bearer rejected, failed to enable media [ 115.916033][ T5625] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.006160][ T5637] loop3: detected capacity change from 0 to 512 [ 116.014572][ T5625] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.068965][ T5637] EXT4-fs (loop3): Ignoring removed nobh option [ 116.077509][ T5637] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.154233][ T5637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 116.192697][ T5637] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.293587][ T5637] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.444: attempt to clear invalid blocks 1024 len 1 [ 116.327944][ T5625] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.441: bg 0: block 145: padding at end of block bitmap is not set [ 116.430890][ T5637] EXT4-fs (loop3): Remounting filesystem read-only [ 116.473065][ T5637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.444: bg 0: block 361: padding at end of block bitmap is not set [ 116.510651][ T5637] EXT4-fs (loop3): Remounting filesystem read-only [ 116.563151][ T5637] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 116.585636][ T5658] loop5: detected capacity change from 0 to 256 [ 116.636087][ T5637] EXT4-fs (loop3): Remounting filesystem read-only [ 116.668167][ T5637] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.444: invalid indirect mapped block 1811939328 (level 0) [ 116.751577][ T5637] EXT4-fs (loop3): Remounting filesystem read-only [ 116.778333][ T5637] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.444: invalid indirect mapped block 2185560079 (level 1) [ 116.804248][ T5637] EXT4-fs (loop3): Remounting filesystem read-only [ 116.830776][ T5637] EXT4-fs (loop3): 1 truncate cleaned up [ 116.843775][ T5637] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 116.972281][ T5671] loop6: detected capacity change from 0 to 1024 [ 117.107513][ T5675] loop1: detected capacity change from 0 to 2048 [ 117.176343][ T144] hfsplus: b-tree write err: -5, ino 25 [ 117.216115][ T144] hfsplus: b-tree write err: -5, ino 4 [ 117.222041][ T144] hfsplus: b-tree write err: -5, ino 2 [ 117.231176][ T5675] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 117.502662][ T5688] loop4: detected capacity change from 0 to 2048 [ 117.608276][ T5688] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 117.637352][ T5688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.900016][ T5704] loop3: detected capacity change from 0 to 1024 [ 118.096585][ T5709] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 118.298880][ T5714] loop3: detected capacity change from 0 to 128 [ 118.393468][ T5712] loop1: detected capacity change from 0 to 4096 [ 118.461043][ T5692] loop6: detected capacity change from 0 to 32768 [ 118.493166][ T5712] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 118.562673][ T5712] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 118.587249][ T5692] [ 118.587249][ T5692] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.587249][ T5692] [ 118.645435][ T5117] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.665049][ T4195] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 118.672817][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.674047][ T4195] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 118.700619][ T5692] jfs_create: dtInsert returned -EIO [ 118.706323][ T5692] ERROR: (device loop6): jfs_create: [ 118.706323][ T5692] [ 118.815163][ T4979] [ 118.815163][ T4979] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.815163][ T4979] [ 118.839573][ T5734] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 118.853663][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.895596][ T4979] [ 118.895596][ T4979] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.895596][ T4979] [ 118.898164][ T5117] usb 5-1: Using ep0 maxpacket: 32 [ 118.912369][ T5734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 118.947252][ T5734] device batadv0 entered promiscuous mode [ 118.974627][ T5734] bridge0: port 3(batadv0) entered blocking state [ 119.003936][ T5734] bridge0: port 3(batadv0) entered disabled state [ 119.051471][ T5734] bridge0: port 3(batadv0) entered blocking state [ 119.058087][ T5734] bridge0: port 3(batadv0) entered forwarding state [ 119.092386][ T5117] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.121845][ T5117] usb 5-1: config 0 has no interface number 0 [ 119.136159][ T1276] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 119.145721][ T1276] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 119.175587][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 119.298369][ T5742] netlink: 'syz.6.474': attribute type 62 has an invalid length. [ 119.315902][ T4229] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.317875][ T5117] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.324312][ T4229] usb 6-1: config 0 has no interface number 0 [ 119.324359][ T4229] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.350606][ T5117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.384543][ T5117] usb 5-1: Product: syz [ 119.403146][ T5117] usb 5-1: Manufacturer: syz [ 119.428700][ T5117] usb 5-1: SerialNumber: syz [ 119.433196][ T4229] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.504567][ T5117] usb 5-1: config 0 descriptor?? [ 119.576124][ T5117] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.655602][ T4229] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.680356][ T5114] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.685329][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.715383][ T4229] usb 6-1: Product: syz [ 119.719620][ T4229] usb 6-1: Manufacturer: syz [ 119.724338][ T4229] usb 6-1: SerialNumber: syz [ 119.752817][ T4229] usb 6-1: config 0 descriptor?? [ 119.780548][ T5732] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.790868][ T5117] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 119.797768][ T5727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.824055][ T5117] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 119.827244][ T5727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.841472][ T5732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.883436][ T5732] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 119.935530][ T5114] usb 4-1: Using ep0 maxpacket: 16 [ 119.957688][ T5732] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.055667][ T5114] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.066722][ T5732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.082399][ T5114] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.084669][ T5732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.160847][ T5727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.176692][ T5727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.218324][ T26] audit: type=1800 audit(1776899763.755:4): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.481" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 120.262072][ T5114] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.288117][ T5114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.306962][ T5114] usb 4-1: Product: syz [ 120.325355][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.333126][ T5114] usb 4-1: Manufacturer: syz [ 120.343352][ T5114] usb 4-1: SerialNumber: syz [ 120.368801][ T5115] usb 5-1: USB disconnect, device number 3 [ 120.425641][ T5115] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.468370][ T5115] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.514533][ T5115] quatech2 5-1:0.51: device disconnected [ 120.655566][ T4229] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.685157][ T4229] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 120.715550][ T4229] asix: probe of 6-1:0.251 failed with error -71 [ 120.731040][ T4229] usb 6-1: USB disconnect, device number 3 [ 120.795046][ T5773] set_capacity_and_notify: 3 callbacks suppressed [ 120.795063][ T5773] loop1: detected capacity change from 0 to 256 [ 120.825838][ T5114] usb 4-1: cannot find UAC_HEADER [ 120.844681][ T5114] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 120.954439][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.049423][ T5114] usb 4-1: USB disconnect, device number 5 [ 121.220896][ T5783] loop4: detected capacity change from 0 to 512 [ 121.310452][ T5787] loop1: detected capacity change from 0 to 128 [ 121.350055][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 121.383914][ T5783] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.514839][ T5792] loop5: detected capacity change from 0 to 8192 [ 121.523140][ T5783] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 121.628222][ T5792] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 121.717649][ T5792] REISERFS (device loop5): using ordered data mode [ 121.753165][ T5792] reiserfs: using flush barriers [ 121.818949][ T5792] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.007128][ T5817] loop6: detected capacity change from 0 to 128 [ 122.026873][ T5792] REISERFS (device loop5): checking transaction log (loop5) [ 122.086293][ T5817] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: none. [ 122.156749][ T5827] loop1: detected capacity change from 0 to 512 [ 122.246103][ T5817] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.259512][ T5827] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 122.284090][ T5827] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.288637][ T5792] REISERFS (device loop5): Using r5 hash to sort names [ 122.307470][ T5827] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 122.346418][ T5792] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 122.392629][ T5819] loop3: detected capacity change from 0 to 8192 [ 122.486505][ T5819] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 122.526503][ T5819] REISERFS (device loop3): using ordered data mode [ 122.541658][ T5819] reiserfs: using flush barriers [ 122.557426][ T5819] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.607344][ T5819] REISERFS (device loop3): checking transaction log (loop3) [ 122.777495][ T5842] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lW»=¸Ý•¹µ«= [ 122.784389][ T5842] [U] J"—e:ÀÆ" [ 122.826570][ T5841] [U] ­Ý‘M [ 122.945437][ T5819] REISERFS (device loop3): Using tea hash to sort names [ 122.952831][ T5819] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 123.253587][ T5833] loop4: detected capacity change from 0 to 32768 [ 123.354138][ T5833] JBD2: Ignoring recovery information on journal [ 123.385435][ T4227] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.494603][ T5833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.593258][ T5869] loop1: detected capacity change from 0 to 512 [ 123.649012][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 123.696038][ T5873] loop3: detected capacity change from 0 to 256 [ 123.774268][ T5869] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 123.806495][ T5873] FAT-fs (loop3): Directory bread(block 64) failed [ 123.815644][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.827367][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.837478][ T4227] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.838325][ T5878] EXT4-fs (loop6): Ignoring removed nobh option [ 123.850561][ T4227] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.868257][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.880559][ T4227] usb 6-1: config 0 descriptor?? [ 123.890254][ T5869] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.891653][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 123.901247][ T5873] FAT-fs (loop3): Directory bread(block 65) failed [ 123.929357][ T5878] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 123.956433][ T5873] FAT-fs (loop3): Directory bread(block 66) failed [ 123.965187][ T5873] FAT-fs (loop3): Directory bread(block 67) failed [ 123.972411][ T5873] FAT-fs (loop3): Directory bread(block 68) failed [ 123.979828][ T5873] FAT-fs (loop3): Directory bread(block 69) failed [ 123.987438][ T5873] FAT-fs (loop3): Directory bread(block 70) failed [ 123.995607][ T5873] FAT-fs (loop3): Directory bread(block 71) failed [ 123.998729][ T5878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 124.002268][ T5873] FAT-fs (loop3): Directory bread(block 72) failed [ 124.011788][ T5878] EXT4-fs (loop6): orphan cleanup on readonly fs [ 124.043714][ T5878] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.516: attempt to clear invalid blocks 1024 len 1 [ 124.052492][ T5873] FAT-fs (loop3): Directory bread(block 73) failed [ 124.093725][ T5878] EXT4-fs (loop6): Remounting filesystem read-only [ 124.102060][ T5878] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.516: bg 0: block 361: padding at end of block bitmap is not set [ 124.129131][ T5878] EXT4-fs (loop6): Remounting filesystem read-only [ 124.162625][ T5878] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 124.185022][ T5878] EXT4-fs (loop6): Remounting filesystem read-only [ 124.195583][ T5878] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.516: invalid indirect mapped block 1811939328 (level 0) [ 124.212184][ T5878] EXT4-fs (loop6): Remounting filesystem read-only [ 124.222818][ T5878] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.516: invalid indirect mapped block 2185560079 (level 1) [ 124.251738][ T5878] EXT4-fs (loop6): Remounting filesystem read-only [ 124.265469][ T5878] EXT4-fs (loop6): 1 truncate cleaned up [ 124.274307][ T5878] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 124.331174][ T5881] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.346920][ T5881] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 124.365146][ T5881] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 124.376935][ T5881] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.518: Failed to acquire dquot type 1 [ 124.396719][ T5881] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 124.427026][ T5881] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 124.437700][ T5881] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.518: Failed to acquire dquot type 1 [ 124.440386][ T4227] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input9 [ 124.473879][ T5881] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.518: bg 0: block 248: padding at end of block bitmap is not set [ 124.479381][ T5884] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.517: ea_inode file size=4 entry size=6 [ 124.497668][ T5881] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 124.517683][ T5884] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.517: corrupted inode contents [ 124.538116][ T5881] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 124.549272][ T5881] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 124.560259][ T5881] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.518: Failed to acquire dquot type 1 [ 124.573209][ T5881] EXT4-fs (loop1): 1 orphan inode deleted [ 124.610229][ T4227] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 124.631155][ T4227] usb 6-1: USB disconnect, device number 4 [ 124.641909][ T5884] EXT4-fs (loop4): Remounting filesystem read-only [ 124.651266][ T5881] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.663642][ T5884] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.517: mark_inode_dirty error [ 124.766756][ T5884] EXT4-fs (loop4): Remounting filesystem read-only [ 124.898654][ T5884] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.517: corrupted inode contents [ 124.974879][ T5884] EXT4-fs (loop4): Remounting filesystem read-only [ 124.991174][ T5894] netlink: 'syz.3.522': attribute type 4 has an invalid length. [ 125.009838][ T5884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2952: inode #15: comm syz.4.517: mark_inode_dirty error [ 125.063258][ T5890] fido_id[5890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 125.074077][ T5884] EXT4-fs (loop4): Remounting filesystem read-only [ 125.085771][ T5884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2955: inode #15: comm syz.4.517: mark inode dirty (error -117) [ 125.106583][ T5884] EXT4-fs (loop4): Remounting filesystem read-only [ 125.113563][ T5884] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 125.128467][ T5884] EXT4-fs (loop4): 1 orphan inode deleted [ 125.134480][ T5884] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x00000000000000ff,init_itable=0x0000000000008d55,nouid32,resgid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,nojournal_checksum,sb=0x0000000000000006,. Quota mode: none. [ 125.201917][ T5892] XFS (loop6): Mounting V5 Filesystem [ 125.302964][ T5892] XFS (loop6): Starting recovery (logdev: internal) [ 125.310903][ T5892] XFS (loop6): log record CRC mismatch: found 0x0, expected 0x510a7222. [ 125.319479][ T5892] 00000000: 00 00 00 01 00 00 00 08 aa 20 00 00 6e 55 00 00 ......... ..nU.. [ 125.328625][ T5892] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.337854][ T5892] XFS (loop6): Internal error xlog_recover_process at line 2919 of file fs/xfs/xfs_log_recover.c. Caller xlog_do_recovery_pass+0x826/0xd50 [ 125.352404][ T5892] CPU: 0 PID: 5892 Comm: syz.6.520 Not tainted syzkaller #0 [ 125.359957][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.370222][ T5892] Call Trace: [ 125.373639][ T5892] [ 125.376614][ T5892] dump_stack_lvl+0x188/0x250 [ 125.381422][ T5892] ? show_regs_print_info+0x20/0x20 [ 125.386848][ T5892] ? xfs_rw_bdev+0x467/0x4e0 [ 125.391474][ T5892] ? xfs_error_report+0x8e/0xc0 [ 125.396459][ T5892] ? xlog_do_recovery_pass+0x826/0xd50 [ 125.402135][ T5892] ? xlog_do_recovery_pass+0x826/0xd50 [ 125.408000][ T5892] xlog_recover_process+0x30c/0x3c0 [ 125.413444][ T5892] xlog_do_recovery_pass+0x826/0xd50 [ 125.418882][ T5892] ? xlog_do_io+0x340/0x340 [ 125.423629][ T5892] ? xlog_alloc_buf_cancel_table+0x1b8/0x1e0 [ 125.429784][ T5892] xlog_do_log_recovery+0x48/0x90 [ 125.435164][ T5892] xlog_do_recover+0xe9/0x4a0 [ 125.439893][ T5892] xlog_recover+0x35d/0x410 [ 125.444736][ T5892] xfs_log_mount+0x393/0x6b0 [ 125.449552][ T5892] xfs_mountfs+0xb37/0x1b30 [ 125.454215][ T5892] ? xfs_default_resblks+0x70/0x70 [ 125.459377][ T5892] ? rcu_is_watching+0x11/0xa0 [ 125.464182][ T5892] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 125.470665][ T5892] xfs_fs_fill_super+0x11a4/0x13f0 [ 125.475840][ T5892] get_tree_bdev+0x3f1/0x610 [ 125.480566][ T5892] ? xfs_mount_set_dax_mode+0x100/0x100 [ 125.486164][ T5892] vfs_get_tree+0x88/0x270 [ 125.490850][ T5892] do_new_mount+0x24a/0xa40 [ 125.495601][ T5892] __se_sys_mount+0x2e3/0x3d0 [ 125.500715][ T5892] ? __x64_sys_mount+0xc0/0xc0 [ 125.505655][ T5892] ? lockdep_hardirqs_on+0x94/0x140 [ 125.510889][ T5892] ? __x64_sys_mount+0x1c/0xc0 [ 125.515850][ T5892] do_syscall_64+0x4c/0xa0 [ 125.520311][ T5892] ? clear_bhb_loop+0x30/0x80 [ 125.525216][ T5892] ? clear_bhb_loop+0x30/0x80 [ 125.530170][ T5892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.536294][ T5892] RIP: 0033:0x7ff61ef03a8a [ 125.541013][ T5892] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.560917][ T5892] RSP: 002b:00007ff61d15be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.569638][ T5892] RAX: ffffffffffffffda RBX: 00007ff61d15bee0 RCX: 00007ff61ef03a8a [ 125.577647][ T5892] RDX: 0000200000000000 RSI: 00002000000096c0 RDI: 00007ff61d15bea0 [ 125.585694][ T5892] RBP: 0000200000000000 R08: 00007ff61d15bee0 R09: 0000000000000000 [ 125.593985][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000096c0 [ 125.602130][ T5892] R13: 00007ff61d15bea0 R14: 0000000000009768 R15: 0000200000000040 [ 125.610169][ T5892] [ 125.614837][ T5892] XFS (loop6): log mount/recovery failed: error -117 [ 125.686459][ T5892] XFS (loop6): log mount failed [ 125.705471][ T5116] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.945471][ T5116] usb 2-1: Using ep0 maxpacket: 16 [ 126.065945][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.096179][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.175056][ T5116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.231420][ T5116] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.293398][ T4227] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.295712][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.371664][ T5116] usb 2-1: config 0 descriptor?? [ 126.485805][ T5955] Cannot find add_set index 46338 as target [ 126.549865][ T5961] netlink: 52 bytes leftover after parsing attributes in process `syz.3.544'. [ 126.565728][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 126.715626][ T4227] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.717367][ T5970] set_capacity_and_notify: 4 callbacks suppressed [ 126.717384][ T5970] loop4: detected capacity change from 0 to 16 [ 126.738786][ T4227] usb 6-1: config 0 has no interface number 0 [ 126.752717][ T5971] loop3: detected capacity change from 0 to 512 [ 126.767230][ T4227] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 126.803144][ T4227] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 126.818265][ T5971] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.854245][ T5971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.877451][ T5116] microsoft 0003:045E:07DA.0008: unbalanced collection at end of report description [ 126.903064][ T5970] erofs: (device loop4): mounted with root inode @ nid 36. [ 126.921990][ T5116] microsoft 0003:045E:07DA.0008: parse failed [ 126.943740][ T5116] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 126.966562][ T5971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.548: Invalid block bitmap block 0 in block_group 0 [ 127.025844][ T4227] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 127.032373][ T5971] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 127.035160][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.035189][ T4227] usb 6-1: Product: syz [ 127.035207][ T4227] usb 6-1: Manufacturer: syz [ 127.035224][ T4227] usb 6-1: SerialNumber: syz [ 127.049088][ T4227] usb 6-1: config 0 descriptor?? [ 127.072815][ T5971] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.548: attempt to clear invalid blocks 983261 len 1 [ 127.106858][ T5981] loop6: detected capacity change from 0 to 16 [ 127.117779][ T5935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.125088][ T5935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.137918][ T1335] usb 2-1: USB disconnect, device number 6 [ 127.150860][ T5971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.548: Invalid inode table block 0 in block_group 0 [ 127.191599][ T5981] erofs: (device loop6): mounted with root inode @ nid 36. [ 127.199451][ T5971] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 127.275684][ T5971] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 127.347911][ T5971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.548: Invalid inode table block 0 in block_group 0 [ 127.404691][ T5935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.485677][ T5935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.493428][ T5971] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 127.499189][ T5985] loop4: detected capacity change from 0 to 32768 [ 127.522463][ T5971] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.548: mark_inode_dirty error [ 127.539774][ T5971] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 127.623529][ T5971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.548: Invalid inode table block 0 in block_group 0 [ 127.652140][ T5971] EXT4-fs (loop3): 1 truncate cleaned up [ 127.665681][ T5971] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 127.679687][ T5985] XFS (loop4): Mounting V5 Filesystem [ 127.775509][ T4227] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.792169][ T4227] asix: probe of 6-1:0.34 failed with error -71 [ 127.804476][ T4227] usb 6-1: USB disconnect, device number 5 [ 127.930864][ T5985] XFS (loop4): Starting recovery (logdev: internal) [ 127.942885][ T5985] XFS (loop4): log record CRC mismatch: found 0x0, expected 0x510a7222. [ 127.951678][ T5985] 00000000: 00 00 00 01 00 00 00 08 aa 20 00 00 6e 55 00 00 ......... ..nU.. [ 127.961115][ T5985] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.971339][ T5985] XFS (loop4): Internal error xlog_recover_process at line 2919 of file fs/xfs/xfs_log_recover.c. Caller xlog_do_recovery_pass+0x826/0xd50 [ 127.985847][ T5985] CPU: 1 PID: 5985 Comm: syz.4.550 Not tainted syzkaller #0 [ 127.993398][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.003597][ T5985] Call Trace: [ 128.007099][ T5985] [ 128.010168][ T5985] dump_stack_lvl+0x188/0x250 [ 128.014902][ T5985] ? show_regs_print_info+0x20/0x20 [ 128.020280][ T5985] ? xfs_rw_bdev+0x467/0x4e0 [ 128.024929][ T5985] ? xfs_error_report+0x8e/0xc0 [ 128.030120][ T5985] ? xlog_do_recovery_pass+0x826/0xd50 [ 128.035719][ T5985] ? xlog_do_recovery_pass+0x826/0xd50 [ 128.041349][ T5985] xlog_recover_process+0x30c/0x3c0 [ 128.046961][ T5985] xlog_do_recovery_pass+0x826/0xd50 [ 128.053020][ T5985] ? xlog_do_io+0x340/0x340 [ 128.057678][ T5985] ? xlog_alloc_buf_cancel_table+0x1b8/0x1e0 [ 128.063901][ T5985] xlog_do_log_recovery+0x48/0x90 [ 128.068996][ T5985] xlog_do_recover+0xe9/0x4a0 [ 128.073858][ T5985] xlog_recover+0x35d/0x410 [ 128.078612][ T5985] xfs_log_mount+0x393/0x6b0 [ 128.083360][ T5985] xfs_mountfs+0xb37/0x1b30 [ 128.088026][ T5985] ? xfs_default_resblks+0x70/0x70 [ 128.093303][ T5985] ? rcu_is_watching+0x11/0xa0 [ 128.098205][ T5985] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 128.104611][ T5985] xfs_fs_fill_super+0x11a4/0x13f0 [ 128.109974][ T5985] get_tree_bdev+0x3f1/0x610 [ 128.114618][ T5985] ? xfs_mount_set_dax_mode+0x100/0x100 [ 128.120390][ T5985] vfs_get_tree+0x88/0x270 [ 128.124863][ T5985] do_new_mount+0x24a/0xa40 [ 128.129429][ T5985] __se_sys_mount+0x2e3/0x3d0 [ 128.134261][ T5985] ? __x64_sys_mount+0xc0/0xc0 [ 128.139171][ T5985] ? lockdep_hardirqs_on+0x94/0x140 [ 128.144666][ T5985] ? __x64_sys_mount+0x1c/0xc0 [ 128.149764][ T5985] do_syscall_64+0x4c/0xa0 [ 128.154328][ T5985] ? clear_bhb_loop+0x30/0x80 [ 128.159052][ T5985] ? clear_bhb_loop+0x30/0x80 [ 128.163780][ T5985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.170112][ T5985] RIP: 0033:0x7faf0110ca8a [ 128.174660][ T5985] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.194895][ T5985] RSP: 002b:00007faeff364e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.203391][ T5985] RAX: ffffffffffffffda RBX: 00007faeff364ee0 RCX: 00007faf0110ca8a [ 128.211722][ T5985] RDX: 0000200000000000 RSI: 00002000000096c0 RDI: 00007faeff364ea0 [ 128.220007][ T5985] RBP: 0000200000000000 R08: 00007faeff364ee0 R09: 0000000000000000 [ 128.228317][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000096c0 [ 128.236613][ T5985] R13: 00007faeff364ea0 R14: 0000000000009768 R15: 0000200000000040 [ 128.244741][ T5985] [ 128.248677][ T5985] XFS (loop4): log mount/recovery failed: error -117 [ 128.292931][ T5985] XFS (loop4): log mount failed [ 128.799948][ T6046] loop1: detected capacity change from 0 to 16 [ 128.802719][ T6031] loop3: detected capacity change from 0 to 8192 [ 128.889455][ T6048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.896769][ T6048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.945768][ T6048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.952507][ T6048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.972230][ T6048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.978850][ T6048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.989130][ T6048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.996158][ T6048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.003432][ T6048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.010395][ T6048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.652794][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 129.740655][ T6046] erofs: (device loop1): mounted with root inode @ nid 36. [ 129.781218][ T6031] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 129.831714][ T6031] REISERFS (device loop3): using ordered data mode [ 129.892360][ T6031] reiserfs: using flush barriers [ 129.902078][ T6057] loop5: detected capacity change from 0 to 32768 [ 129.938814][ T6031] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.994769][ T6031] REISERFS (device loop3): checking transaction log (loop3) [ 130.004566][ T6057] XFS: ikeep mount option is deprecated. [ 130.028213][ T6076] netlink: 'syz.4.572': attribute type 29 has an invalid length. [ 130.054298][ T6076] netlink: 'syz.4.572': attribute type 29 has an invalid length. [ 130.112439][ T6076] netlink: 'syz.4.572': attribute type 29 has an invalid length. [ 130.141502][ T6057] XFS (loop5): Mounting V5 Filesystem [ 130.370533][ T6057] XFS (loop5): Ending clean mount [ 130.383999][ T6031] REISERFS (device loop3): Using r5 hash to sort names [ 130.385344][ T1335] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.449796][ T6031] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 130.669716][ T4473] XFS (loop5): Unmounting Filesystem [ 130.685497][ T1335] usb 2-1: Using ep0 maxpacket: 16 [ 130.688919][ T6105] loop4: detected capacity change from 0 to 256 [ 130.710922][ T6105] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.825542][ T1335] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 130.834075][ T1335] usb 2-1: config 0 has no interface number 0 [ 130.867266][ T1335] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 130.889108][ T1335] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 131.105574][ T1335] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 131.114874][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.154114][ T1335] usb 2-1: Product: syz [ 131.182718][ T1335] usb 2-1: Manufacturer: syz [ 131.199228][ T1335] usb 2-1: SerialNumber: syz [ 131.223311][ T1335] usb 2-1: config 0 descriptor?? [ 131.286337][ T6082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.293567][ T6082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.431332][ T6126] loop6: detected capacity change from 0 to 256 [ 131.476749][ T6128] loop3: detected capacity change from 0 to 16 [ 131.503171][ T6128] erofs: (device loop3): mounted with root inode @ nid 36. [ 131.526397][ T6126] exfat: Deprecated parameter 'namecase' [ 131.534697][ T6126] exfat: Deprecated parameter 'namecase' [ 131.568926][ T6082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.585614][ T6126] exfat: Deprecated parameter 'utf8' [ 131.591110][ T6126] exfat: Deprecated parameter 'namecase' [ 131.652141][ T6126] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 131.665183][ T6082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.738340][ T6133] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.795448][ T6133] hpfs: filesystem error: improperly stopped [ 131.832213][ T6133] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.843774][ T6140] mmap: syz.3.587 (6140) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 131.895626][ T6133] hpfs: You really don't want any checks? You are crazy... [ 131.903212][ T6133] hpfs: hpfs_map_sector(): read error [ 131.909458][ T1335] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 131.917031][ T6142] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 131.939754][ T1335] asix: probe of 2-1:0.34 failed with error -71 [ 132.004972][ T6133] hpfs: code page support is disabled [ 132.011776][ T1335] usb 2-1: USB disconnect, device number 7 [ 132.037503][ T6133] hpfs: hpfs_map_4sectors(): unaligned read [ 132.043600][ T6133] hpfs: hpfs_map_4sectors(): unaligned read [ 132.151787][ T6133] hpfs: filesystem error: unable to find root dir [ 132.730220][ T6180] set_capacity_and_notify: 1 callbacks suppressed [ 132.730240][ T6180] loop6: detected capacity change from 0 to 256 [ 132.798072][ T6180] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.954358][ T6191] loop1: detected capacity change from 0 to 512 [ 133.059160][ T6191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.101683][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108106][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184517][ T6191] EXT4-fs (loop1): 1 orphan inode deleted [ 133.213962][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 133.225620][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,errors=remount-ro,quota,. Quota mode: writeback. [ 133.352918][ T6191] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.610: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 133.451603][ T6191] EXT4-fs (loop1): Remounting filesystem read-only [ 133.674497][ T6224] loop4: detected capacity change from 0 to 736 [ 133.859283][ T6230] loop1: detected capacity change from 0 to 256 [ 133.936129][ T6230] exfat: Deprecated parameter 'utf8' [ 133.953212][ T6230] exfat: Deprecated parameter 'utf8' [ 133.981348][ T6230] exfat: Deprecated parameter 'namecase' [ 134.024624][ T6230] exfat: Deprecated parameter 'utf8' [ 134.035548][ T6230] exfat: Deprecated parameter 'namecase' [ 134.135770][ T6230] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 134.248668][ T6185] loop5: detected capacity change from 0 to 40427 [ 134.427664][ T6185] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 134.462722][ T6185] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 134.498989][ T6185] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 134.594947][ T6185] F2FS-fs (loop5): invalid crc value [ 134.676182][ T4267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.705185][ T6185] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.814960][ T6269] sch_fq: defrate 4294967295 ignored. [ 134.843836][ T4267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.932972][ T6185] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 134.987771][ T6185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 135.013939][ T4267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.166422][ T4267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.306003][ T5114] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 135.500813][ T6295] loop3: detected capacity change from 0 to 512 [ 135.584870][ T6295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.675636][ T5114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 135.705601][ T6295] EXT4-fs (loop3): 1 orphan inode deleted [ 135.713726][ T5114] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 135.753324][ T6295] EXT4-fs (loop3): 1 truncate cleaned up [ 135.799348][ T6295] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,errors=remount-ro,quota,. Quota mode: writeback. [ 135.840532][ T5114] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 135.871324][ T6295] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.646: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 135.905657][ T6295] EXT4-fs (loop3): Remounting filesystem read-only [ 135.927546][ T6299] chnl_net:caif_netlink_parms(): no params data found [ 135.945384][ T5114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.973129][ T5114] usb 2-1: config 0 descriptor?? [ 136.035691][ T6278] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.066605][ T6318] net_ratelimit: 1990 callbacks suppressed [ 136.066625][ T6318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.079185][ T6318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.087781][ T6318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.094328][ T6318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.151415][ T6318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.158059][ T6318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.246597][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.265085][ T6318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.271752][ T6318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.289832][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.325903][ T6299] device bridge_slave_0 entered promiscuous mode [ 136.333773][ T6318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.340611][ T6318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.405151][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.430311][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.478938][ T6299] device bridge_slave_1 entered promiscuous mode [ 136.503063][ T6335] loop6: detected capacity change from 0 to 1024 [ 136.537367][ T5114] acrux 0003:1A34:0802.0009: unknown main item tag 0x0 [ 136.567822][ T5114] acrux 0003:1A34:0802.0009: item fetching failed at offset 37/40 [ 136.601075][ T5114] acrux 0003:1A34:0802.0009: parse failed [ 136.635560][ T5114] acrux: probe of 0003:1A34:0802.0009 failed with error -22 [ 136.693860][ T6335] hfsplus: request for non-existent node 3 in B*Tree [ 136.712832][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.725486][ T6335] hfsplus: request for non-existent node 3 in B*Tree [ 136.764117][ T5114] usb 2-1: USB disconnect, device number 8 [ 136.819482][ T6335] hfsplus: request for non-existent node 4 in B*Tree [ 136.830274][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.840144][ T6335] hfsplus: request for non-existent node 4 in B*Tree [ 137.018880][ T6327] loop3: detected capacity change from 0 to 32768 [ 137.044621][ T6299] team0: Port device team_slave_0 added [ 137.082549][ T6299] team0: Port device team_slave_1 added [ 137.096564][ T4229] kernel write not supported for file /sg0 (pid: 4229 comm: kworker/0:6) [ 137.303723][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.336298][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.417459][ T6351] loop5: detected capacity change from 0 to 64 [ 137.422186][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.509143][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.517282][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.620209][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.645453][ T5114] Bluetooth: hci2: command 0x0409 tx timeout [ 137.869548][ T6299] device hsr_slave_0 entered promiscuous mode [ 137.969898][ T6299] device hsr_slave_1 entered promiscuous mode [ 138.020864][ T6299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.035313][ T26] audit: type=1326 audit(1776899781.565:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.3.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facaabed819 code=0x0 [ 138.058166][ T6299] Cannot create hsr debugfs directory [ 138.324025][ T4267] device hsr_slave_0 left promiscuous mode [ 138.350975][ T4267] device hsr_slave_1 left promiscuous mode [ 138.369792][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.401279][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.454343][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.492243][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.500817][ T4267] device bridge_slave_1 left promiscuous mode [ 138.509195][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.565089][ T4267] device bridge_slave_0 left promiscuous mode [ 138.592193][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.613063][ T4267] device veth1_macvtap left promiscuous mode [ 138.669561][ T4267] device veth0_macvtap left promiscuous mode [ 138.694541][ T4267] device veth1_vlan left promiscuous mode [ 138.701650][ T4267] device veth0_vlan left promiscuous mode [ 138.970477][ T6414] loop5: detected capacity change from 0 to 4096 [ 139.162958][ T6423] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.163417][ T6414] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 139.267070][ T6414] NILFS (loop5): mounting fs with errors [ 139.454088][ T6392] loop6: detected capacity change from 0 to 32768 [ 139.597214][ T6392] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.615686][ T6392] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.710640][ T6392] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 139.725779][ T5110] Bluetooth: hci2: command 0x041b tx timeout [ 139.733904][ T4267] team0 (unregistering): Port device team_slave_1 removed [ 139.742291][ T4227] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 139.754334][ T4267] team0 (unregistering): Port device team_slave_0 removed [ 139.759138][ T4227] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 139.808181][ T4267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.841902][ T4267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.869534][ T4227] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 139.884390][ T4227] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.899407][ T6392] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 140.034368][ T4267] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 140.087652][ T4267] bond0 (unregistering): Released all slaves [ 140.576680][ T6445] loop1: detected capacity change from 0 to 512 [ 140.643837][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.692'. [ 140.655982][ T6445] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 140.701380][ T6445] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 140.717783][ T6299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.735042][ T6299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 140.756525][ T6445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 140.830923][ T6299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 140.849398][ T6445] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 140.855470][ T5110] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.915341][ T6445] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 140.924512][ T6445] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 140.955659][ T6299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 141.056137][ T6445] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.696: dx entry: limit 65535 != root limit 120 [ 141.132607][ T6445] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.696: Corrupt directory, running e2fsck is recommended [ 141.236398][ T4263] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 141.246241][ T5110] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 141.254752][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.274214][ T5110] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 141.311493][ T5110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.337830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.348267][ T6466] loop5: detected capacity change from 0 to 4096 [ 141.356814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.400511][ T5110] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 141.401886][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.425925][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.446275][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.500965][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.508446][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.525577][ T4263] usb 7-1: Using ep0 maxpacket: 16 [ 141.542150][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.566105][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.606465][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.649977][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.657235][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.665447][ T4263] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.686906][ T4263] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 141.717435][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.726587][ T4263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.744830][ T4263] usb 7-1: config 0 descriptor?? [ 141.763236][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.794158][ T4473] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 141.802971][ T6478] loop1: detected capacity change from 0 to 512 [ 141.809780][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 141.815821][ T4473] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.832657][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.854117][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.896946][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.932959][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.970142][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.981856][ T6478] EXT4-fs (loop1): Ignoring removed nobh option [ 142.022938][ T6299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.094671][ T6299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.109806][ T6478] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 142.173334][ T6478] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.190130][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.211122][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.267058][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.288313][ T4263] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review [ 142.303569][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.316172][ T4263] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 142.323388][ T4263] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 142.329865][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.395471][ T4263] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 142.402915][ T4263] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 142.431405][ T4263] bigben 0003:146B:0902.000A: item fetching failed at offset 4/5 [ 142.452150][ T4263] bigben 0003:146B:0902.000A: parse failed [ 142.482180][ T4263] bigben: probe of 0003:146B:0902.000A failed with error -22 [ 142.565602][ T4263] usb 7-1: USB disconnect, device number 3 [ 142.642743][ T6496] loop5: detected capacity change from 0 to 4096 [ 142.746853][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.755689][ T5110] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 142.764111][ T5110] stv0680 4-1:4.0: Could not get descriptor 0200 [ 142.784499][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.809736][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.819737][ T5110] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 142.847238][ T5110] stv0680 4-1:4.0: last error: 88, command = 0x9 [ 142.885198][ T5110] usb 4-1: USB disconnect, device number 6 [ 143.244636][ T6517] tipc: Enabled bearer , priority 10 [ 143.428412][ T26] audit: type=1326 audit(1776899786.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.3.708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facaabed819 code=0x0 [ 143.654879][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.677751][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.784978][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.826904][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.878514][ T6299] device veth0_vlan entered promiscuous mode [ 143.885471][ T5116] Bluetooth: hci2: command 0x0419 tx timeout [ 143.905389][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.934165][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.969926][ T6299] device veth1_vlan entered promiscuous mode [ 144.137238][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.176448][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.214310][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.262055][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.311529][ T4229] tipc: Node number set to 1073741825 [ 144.324532][ T6550] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 144.327389][ T6299] device veth0_macvtap entered promiscuous mode [ 144.422597][ T6299] device veth1_macvtap entered promiscuous mode [ 144.566008][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.624706][ T6559] loop1: detected capacity change from 0 to 1024 [ 144.636917][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.678032][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.701644][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.724162][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.747555][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.770965][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.795865][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.830557][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.871941][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.880593][ T6519] loop6: detected capacity change from 0 to 40427 [ 144.895240][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.931981][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.967383][ T6519] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64) [ 144.981758][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.004422][ T6519] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 145.025091][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.060413][ T6559] hfsplus: xattr search failed [ 145.077615][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.086205][ T6519] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 145.118078][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.181120][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.187367][ T6519] F2FS-fs (loop6): invalid crc value [ 145.222763][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.275748][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.289533][ T6519] F2FS-fs (loop6): Found nat_bits in checkpoint [ 145.327742][ T6299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.341534][ T6569] loop3: detected capacity change from 0 to 128 [ 145.379388][ T6299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.423632][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.482687][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.509000][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.523747][ T6569] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 145.542063][ T6519] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 145.549978][ T6519] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 145.562247][ T6569] FAT-fs (loop3): Filesystem has been set read-only [ 145.581388][ T6299] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.598189][ T6299] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.645404][ T6299] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.654494][ T6299] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.677778][ T6574] loop5: detected capacity change from 0 to 512 [ 145.737738][ T6574] EXT4-fs (loop5): Ignoring removed nobh option [ 145.827510][ T6574] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 145.905631][ T6574] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.002887][ T6573] loop1: detected capacity change from 0 to 8192 [ 146.019308][ T6579] loop3: detected capacity change from 0 to 1024 [ 146.127955][ T6579] hfsplus: bad catalog entry type [ 146.146174][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.163815][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.235723][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.255187][ T6573] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 146.284287][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.292885][ T6573] REISERFS (device loop1): using ordered data mode [ 146.301788][ T6573] reiserfs: using flush barriers [ 146.307431][ T429] hfsplus: b-tree write err: -5, ino 25 [ 146.313358][ T429] hfsplus: b-tree write err: -5, ino 4 [ 146.379933][ T6573] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.393346][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.405398][ T429] hfsplus: b-tree write err: -5, ino 2 [ 146.413965][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.495156][ T6573] REISERFS (device loop1): checking transaction log (loop1) [ 146.596537][ T6573] REISERFS (device loop1): Using r5 hash to sort names [ 146.635738][ T6573] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.853330][ T6596] loop3: detected capacity change from 0 to 512 [ 147.077626][ T6596] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.226938][ T6596] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.465862][ T6596] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 147.482186][ T6627] device macsec0 entered promiscuous mode [ 147.489355][ T5116] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 147.496059][ T6596] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 147.514584][ T6626] netlink: 88 bytes leftover after parsing attributes in process `syz.5.744'. [ 147.552874][ T6596] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.735: Failed to acquire dquot type 0 [ 147.745569][ T5116] usb 7-1: Using ep0 maxpacket: 8 [ 147.865577][ T5116] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 147.887941][ T5116] usb 7-1: config 0 has no interface number 0 [ 147.909263][ T5116] usb 7-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 147.936956][ T6648] netlink: 128 bytes leftover after parsing attributes in process `syz.7.751'. [ 147.958378][ T6651] sock: sock_timestamping_bind_phc: sock not bind to device [ 147.973542][ T5116] usb 7-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.010524][ T5116] usb 7-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.051771][ T5116] usb 7-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 148.107490][ T5116] usb 7-1: config 0 interface 30 has no altsetting 0 [ 148.114257][ T5116] usb 7-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 148.160672][ T5116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.191894][ T5116] usb 7-1: config 0 descriptor?? [ 148.265162][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 148.284474][ T6666] netlink: 88 bytes leftover after parsing attributes in process `syz.7.757'. [ 148.442751][ T6673] netlink: 'syz.7.759': attribute type 17 has an invalid length. [ 148.475009][ T6674] device macsec0 entered promiscuous mode [ 148.684912][ T6635] loop5: detected capacity change from 0 to 32768 [ 148.711519][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.735453][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.766043][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.797314][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.807430][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.814784][ T6635] XFS (loop5): Mounting V5 Filesystem [ 148.826514][ T5116] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 148.843237][ T5116] uclogic 0003:256C:006E.000B: No inputs registered, leaving [ 148.933023][ T5116] uclogic 0003:256C:006E.000B: hidraw0: USB HID v0.00 Device [HID 256c:006e] on usb-dummy_hcd.6-1/input30 [ 148.966614][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.769'. [ 149.050234][ T5116] usb 7-1: USB disconnect, device number 4 [ 149.117330][ T6635] XFS (loop5): Ending clean mount [ 149.262174][ T6715] loop1: detected capacity change from 0 to 2048 [ 149.306505][ T6713] fido_id[6713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 149.391711][ T6715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.401259][ T5117] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 149.483735][ T4473] XFS (loop5): Unmounting Filesystem [ 149.765829][ T5117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.803918][ T5117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 149.866737][ T5117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.902511][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.779'. [ 149.916293][ T5117] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 149.927205][ T5117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.937148][ T6735] bridge_slave_0: default FDB implementation only supports local addresses [ 149.952296][ T5117] usb 4-1: config 0 descriptor?? [ 149.975873][ T6698] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.099624][ T6743] loop7: detected capacity change from 0 to 512 [ 150.241312][ T6743] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 150.315461][ T6743] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.470664][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x3 [ 150.489603][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.523834][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.560156][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.593679][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.621606][ T6762] netlink: 'syz.5.773': attribute type 17 has an invalid length. [ 150.625468][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.660672][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.689255][ T5117] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0 [ 150.814709][ T5117] gt683r_led 0003:1770:FF00.000C: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 150.936598][ T5117] usb 4-1: USB disconnect, device number 7 [ 150.972565][ T5116] gt683r_led 0003:1770:FF00.000C: failed to send set report request: -19 [ 151.023086][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.5.792'. [ 151.058828][ T6739] loop1: detected capacity change from 0 to 32768 [ 151.214506][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 151.214688][ T6783] bridge_slave_0: default FDB implementation only supports local addresses [ 151.245065][ T6779] fido_id[6779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.460594][ T6790] loop3: detected capacity change from 0 to 512 [ 151.672563][ T6790] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 151.743497][ T6803] loop1: detected capacity change from 0 to 512 [ 151.775195][ T6790] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.779243][ T6805] netlink: 64 bytes leftover after parsing attributes in process `syz.7.801'. [ 151.850272][ T6803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.005594][ T6803] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.275390][ T6803] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 23 (only 1 groups) [ 152.352543][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 152.598825][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'. [ 153.045514][ T4227] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.061370][ T6810] loop6: detected capacity change from 0 to 32768 [ 153.260120][ T6810] XFS (loop6): Mounting V5 Filesystem [ 153.346346][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 153.378160][ T6824] loop7: detected capacity change from 0 to 32768 [ 153.487397][ T6810] XFS (loop6): Ending clean mount [ 153.519722][ T6871] netlink: 'syz.5.816': attribute type 1 has an invalid length. [ 153.535317][ T6810] XFS (loop6): Quotacheck needed: Please wait. [ 153.655813][ T4227] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.697370][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.741178][ T4227] usb 2-1: Product: syz [ 153.759682][ T6810] XFS (loop6): Quotacheck: Done. [ 153.785475][ T4227] usb 2-1: Manufacturer: syz [ 153.825328][ T4227] usb 2-1: SerialNumber: syz [ 153.833650][ T4227] r8152-cfgselector 2-1: config 0 descriptor?? [ 154.134458][ T4979] XFS (loop6): Unmounting Filesystem [ 154.140545][ T4227] r8152-cfgselector 2-1: Unknown version 0x0000 [ 154.147342][ T6894] netlink: 'syz.7.826': attribute type 1 has an invalid length. [ 154.176364][ T6894] netlink: 128 bytes leftover after parsing attributes in process `syz.7.826'. [ 154.283521][ T6890] loop5: detected capacity change from 0 to 4096 [ 154.391342][ T6890] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 154.441771][ T4227] r8152-cfgselector 2-1: Unknown version 0x0000 [ 154.454872][ T6901] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 154.465051][ T4227] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 154.648471][ T6890] ntfs: volume version 3.1. [ 155.625392][ T4227] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 155.713996][ T6952] tipc: Started in network mode [ 155.742737][ T6952] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 155.755550][ T6952] tipc: Enabled bearer , priority 10 [ 155.929752][ T6959] loop3: detected capacity change from 0 to 256 [ 156.004673][ T6905] loop7: detected capacity change from 0 to 40427 [ 156.018018][ T6959] FAT-fs (loop3): Directory bread(block 64) failed [ 156.024702][ T6959] FAT-fs (loop3): Directory bread(block 65) failed [ 156.054445][ T6905] F2FS-fs (loop7): invalid crc value [ 156.075730][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.084664][ T6959] FAT-fs (loop3): Directory bread(block 66) failed [ 156.107225][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 156.128918][ T6905] F2FS-fs (loop7): Found nat_bits in checkpoint [ 156.129737][ T6959] FAT-fs (loop3): Directory bread(block 67) failed [ 156.166485][ T4227] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.180857][ T6959] FAT-fs (loop3): Directory bread(block 68) failed [ 156.215465][ T4227] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 156.236201][ T6959] FAT-fs (loop3): Directory bread(block 69) failed [ 156.251086][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.255480][ T6959] FAT-fs (loop3): Directory bread(block 70) failed [ 156.278373][ T4227] usb 6-1: config 0 descriptor?? [ 156.294740][ T6905] F2FS-fs (loop7): Start checkpoint disabled! [ 156.303149][ T6959] FAT-fs (loop3): Directory bread(block 71) failed [ 156.325470][ T6959] FAT-fs (loop3): Directory bread(block 72) failed [ 156.327403][ T6934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.332105][ T6959] FAT-fs (loop3): Directory bread(block 73) failed [ 156.356879][ T6905] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 156.733326][ T4267] attempt to access beyond end of device [ 156.733326][ T4267] loop7: rw=2049, want=40976, limit=40427 [ 156.765428][ T4263] tipc: Node number set to 10136234 [ 156.863893][ T6978] sp0: Synchronizing with TNC [ 156.894370][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x3 [ 156.905221][ T6957] loop1: detected capacity change from 0 to 32768 [ 156.911558][ T6977] [U] è` [ 156.943959][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 156.980396][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.006984][ T6957] XFS (loop1): Mounting V5 Filesystem [ 157.043410][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.111142][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.169385][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.202189][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.220608][ T4227] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 157.237770][ T4227] gt683r_led 0003:1770:FF00.000D: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0 [ 157.283197][ T4227] usb 6-1: USB disconnect, device number 6 [ 157.349068][ T6992] loop7: detected capacity change from 0 to 64 [ 157.377308][ T13] gt683r_led 0003:1770:FF00.000D: failed to send set report request: -19 [ 157.381930][ T6971] loop6: detected capacity change from 0 to 40427 [ 157.418294][ T6957] XFS (loop1): Ending clean mount [ 157.421633][ T6993] fido_id[6993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 157.476370][ T6971] F2FS-fs (loop6): invalid crc value [ 157.537310][ T4195] XFS (loop1): Unmounting Filesystem [ 157.564431][ T6971] F2FS-fs (loop6): Found nat_bits in checkpoint [ 157.868345][ T6971] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 157.967544][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 158.213575][ T7018] loop7: detected capacity change from 0 to 512 [ 158.285029][ T7018] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 158.295729][ T7018] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.305965][ T7018] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.315454][ T7018] EXT4-fs (loop7): The Hurd can't support 64-bit file systems [ 158.349028][ T4979] attempt to access beyond end of device [ 158.349028][ T4979] loop6: rw=2049, want=45104, limit=40427 [ 158.624662][ T7029] loop3: detected capacity change from 0 to 512 [ 158.817023][ T7029] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 158.849518][ T7029] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 159.215154][ T7051] loop1: detected capacity change from 0 to 1024 [ 159.269942][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.880'. [ 159.299926][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 159.312988][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'. [ 159.333085][ T7054] netlink: 108 bytes leftover after parsing attributes in process `syz.5.880'. [ 159.355348][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.880'. [ 159.401002][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.880'. [ 159.429808][ T7057] loop7: detected capacity change from 0 to 8192 [ 159.492972][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 159.532977][ T7051] hfsplus: bad catalog entry type [ 159.549438][ T7057] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 159.564009][ T7057] REISERFS (device loop7): using ordered data mode [ 159.578645][ T7057] reiserfs: using flush barriers [ 159.592517][ T7057] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.727261][ T7057] REISERFS (device loop7): checking transaction log (loop7) [ 159.794936][ T7057] REISERFS (device loop7): Using r5 hash to sort names [ 159.809414][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 159.830161][ T7085] loop5: detected capacity change from 0 to 256 [ 159.835780][ T7057] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 159.965012][ T7085] FAT-fs (loop5): Directory bread(block 64) failed [ 160.015399][ T7085] FAT-fs (loop5): Directory bread(block 65) failed [ 160.028314][ T7085] FAT-fs (loop5): Directory bread(block 66) failed [ 160.045607][ T7085] FAT-fs (loop5): Directory bread(block 67) failed [ 160.052853][ T7085] FAT-fs (loop5): Directory bread(block 68) failed [ 160.093273][ T7085] FAT-fs (loop5): Directory bread(block 69) failed [ 160.114565][ T7085] FAT-fs (loop5): Directory bread(block 70) failed [ 160.118308][ T7093] hfsplus: bad catalog entry type [ 160.131928][ T7085] FAT-fs (loop5): Directory bread(block 71) failed [ 160.147266][ T7085] FAT-fs (loop5): Directory bread(block 72) failed [ 160.162361][ T7085] FAT-fs (loop5): Directory bread(block 73) failed [ 160.164508][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.7.897'. [ 160.472473][ T7104] EXT4-fs (loop3): Ignoring removed bh option [ 160.488740][ T7109] netlink: 'syz.1.905': attribute type 2 has an invalid length. [ 160.497960][ T7104] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 160.610301][ T7104] EXT4-fs (loop3): 1 truncate cleaned up [ 160.626739][ T7104] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 160.772770][ T7118] FAT-fs (loop5): Directory bread(block 162) failed [ 160.809957][ T7118] FAT-fs (loop5): Directory bread(block 163) failed [ 160.844170][ T7118] FAT-fs (loop5): Directory bread(block 164) failed [ 160.884794][ T7118] FAT-fs (loop5): Directory bread(block 165) failed [ 160.921119][ T7118] FAT-fs (loop5): Directory bread(block 166) failed [ 160.956810][ T7118] FAT-fs (loop5): Directory bread(block 167) failed [ 160.961702][ T7131] hfsplus: bad catalog entry type [ 160.989153][ T7118] FAT-fs (loop5): Directory bread(block 168) failed [ 161.022098][ T7118] FAT-fs (loop5): Directory bread(block 169) failed [ 161.053268][ T7118] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.096081][ T7118] FAT-fs (loop5): Directory bread(block 162) failed [ 161.155664][ T7118] FAT-fs (loop5): Directory bread(block 163) failed [ 161.186731][ T7118] attempt to access beyond end of device [ 161.186731][ T7118] loop5: rw=3, want=232, limit=128 [ 161.221070][ T7118] attempt to access beyond end of device [ 161.221070][ T7118] loop5: rw=2051, want=234, limit=128 [ 161.399570][ T7157] set_capacity_and_notify: 4 callbacks suppressed [ 161.399590][ T7157] loop1: detected capacity change from 0 to 16 [ 161.538187][ T7157] cramfs: Error -3 while decompressing! [ 161.566315][ T7157] cramfs: ffffffff964040c8(27)->ffff88805c0fc000(4096) [ 161.593219][ T26] audit: type=1800 audit(1776899805.125:7): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.919" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 161.594829][ T7157] cramfs: Error -3 while decompressing! [ 161.713461][ T7157] cramfs: ffffffff964040e3(16)->ffff888059548000(4096) [ 161.720882][ T7157] cramfs: Error -3 while decompressing! [ 161.735696][ T7157] cramfs: ffffffff964040c8(27)->ffff88805c0fc000(4096) [ 161.787994][ T26] audit: type=1800 audit(1776899805.325:8): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.922" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 161.833829][ T7172] loop5: detected capacity change from 0 to 1024 [ 161.912400][ T7172] hfsplus: bad catalog entry type [ 161.935509][ T7178] loop6: detected capacity change from 0 to 1024 [ 162.108583][ T7183] loop5: detected capacity change from 0 to 512 [ 162.132876][ T7178] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 162.194538][ T7183] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 162.204496][ T7183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.214692][ T7183] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.224404][ T7183] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 162.245520][ T7178] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.539698][ T7195] loop1: detected capacity change from 0 to 512 [ 162.689360][ T7195] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 162.754251][ T7177] loop7: detected capacity change from 0 to 40427 [ 162.781070][ T7205] program syz.3.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.797680][ T7195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 162.806402][ T7195] System zones: 0-1, 15-15, 18-18, 34-34 [ 162.813569][ T7195] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.820963][ T7195] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 162.831314][ T7195] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.850737][ T7195] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 162.890872][ T7195] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #16: comm syz.1.938: iget: bad extended attribute block 1 [ 162.903939][ T7177] F2FS-fs (loop7): invalid crc value [ 162.973148][ T7209] loop5: detected capacity change from 0 to 16 [ 162.991164][ T7177] F2FS-fs (loop7): Found nat_bits in checkpoint [ 163.095381][ T7195] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.938: couldn't read orphan inode 16 (err -117) [ 163.107556][ T7209] cramfs: Error -3 while decompressing! [ 163.113932][ T7209] cramfs: ffffffff964040c8(27)->ffff888058ff4000(4096) [ 163.172248][ T7201] loop6: detected capacity change from 0 to 8192 [ 163.185711][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000008000,delalloc,grpquota,nouid32,nouid32,data=writeback,,errors=continue. Quota mode: writeback. [ 163.204983][ T7209] cramfs: Error -3 while decompressing! [ 163.205015][ T7209] cramfs: ffffffff964040e3(16)->ffff888058ff5000(4096) [ 163.205070][ T7209] cramfs: Error -3 while decompressing! [ 163.315350][ T7177] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 163.337551][ T7209] cramfs: ffffffff964040c8(27)->ffff888058ff4000(4096) [ 163.365513][ T7201] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 163.375042][ T26] audit: type=1800 audit(1776899806.905:9): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.944" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 163.462789][ T6299] attempt to access beyond end of device [ 163.462789][ T6299] loop7: rw=2049, want=45104, limit=40427 [ 163.491129][ T7201] REISERFS (device loop6): using ordered data mode [ 163.568950][ T7201] reiserfs: using flush barriers [ 163.598223][ T7195] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 163.620076][ T7201] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.648990][ T7195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 163.735075][ T7201] REISERFS (device loop6): checking transaction log (loop6) [ 163.761672][ T7201] REISERFS (device loop6): Using r5 hash to sort names [ 163.799766][ T7201] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 164.208487][ T7229] loop5: detected capacity change from 0 to 1024 [ 164.307852][ T7231] loop6: detected capacity change from 0 to 128 [ 164.422395][ T7231] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.453016][ T7229] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 164.530672][ T7229] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.541424][ T7231] hpfs: filesystem error: improperly stopped [ 164.556263][ T7231] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.585406][ T7231] hpfs: You really don't want any checks? You are crazy... [ 164.631033][ T7231] hpfs: hpfs_map_sector(): read error [ 164.695548][ T7231] hpfs: code page support is disabled [ 164.701194][ T7231] hpfs: hpfs_map_4sectors(): unaligned read [ 164.724167][ T7231] hpfs: hpfs_map_4sectors(): unaligned read [ 164.745601][ T7231] hpfs: filesystem error: unable to find root dir [ 164.775088][ T7215] XFS (loop3): Mounting V5 Filesystem [ 164.963824][ T7215] XFS (loop3): Ending clean mount [ 164.998979][ T7215] XFS (loop3): Quotacheck needed: Please wait. [ 165.067866][ T7261] program syz.6.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.127573][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.265719][ T7215] XFS (loop3): Quotacheck: Done. [ 165.324879][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.403079][ T4189] XFS (loop3): Unmounting Filesystem [ 165.519945][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.657430][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.834773][ T7272] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 165.885547][ T7272] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 165.950646][ T7272] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 166.025313][ T7272] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.085748][ T7272] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 166.111437][ T7279] EXT4-fs (loop5): inline encryption not supported [ 166.124369][ T7272] ntfs: volume version 3.1. [ 166.162367][ T7272] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 166.256432][ T7279] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 166.345830][ T9] tipc: Left network mode [ 166.614900][ T7297] ntfs3: loop6: ino=21, "cgroup.controllers" mmap(write) compressed not supported [ 166.868190][ T4979] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 166.930612][ T4979] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 166.967775][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 167.005790][ T5114] Bluetooth: hci2: command 0x0405 tx timeout [ 167.313361][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.321172][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.330363][ T7278] device bridge_slave_0 entered promiscuous mode [ 167.337519][ T7302] set_capacity_and_notify: 5 callbacks suppressed [ 167.337537][ T7302] loop7: detected capacity change from 0 to 32768 [ 167.418604][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.444067][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.471543][ T7302] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.975 (7302) [ 167.483681][ T7278] device bridge_slave_1 entered promiscuous mode [ 167.516525][ T7327] netlink: 'syz.6.981': attribute type 4 has an invalid length. [ 167.524334][ T7327] __nla_validate_parse: 4 callbacks suppressed [ 167.524353][ T7327] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.981'. [ 167.561273][ T7302] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 167.605554][ T7302] BTRFS info (device loop7): using free space tree [ 167.639453][ T7302] BTRFS info (device loop7): has skinny extents [ 167.728563][ T7336] loop5: detected capacity change from 0 to 1764 [ 167.790759][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.928045][ T7354] loop3: detected capacity change from 0 to 512 [ 167.942784][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.023625][ T7278] team0: Port device team_slave_0 added [ 168.045636][ T5117] Bluetooth: hci3: command 0x0409 tx timeout [ 168.098816][ T7278] team0: Port device team_slave_1 added [ 168.136003][ T7354] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.988: invalid block [ 168.152158][ T7302] BTRFS info (device loop7): enabling ssd optimizations [ 168.255515][ T7354] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.988: invalid indirect mapped block 10 (level 1) [ 168.335675][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.349380][ T7354] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.988: invalid indirect mapped block 8 (level 1) [ 168.375782][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.456090][ T7354] EXT4-fs (loop3): 1 truncate cleaned up [ 168.462412][ T7354] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 168.535400][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.578582][ T7382] tipc: Enabling of bearer rejected, failed to enable media [ 168.643055][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.664493][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.824736][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.244094][ T7278] device hsr_slave_0 entered promiscuous mode [ 169.292348][ T7278] device hsr_slave_1 entered promiscuous mode [ 169.344099][ T7278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.361103][ T7278] Cannot create hsr debugfs directory [ 169.464177][ T9] device hsr_slave_0 left promiscuous mode [ 169.501965][ T9] device hsr_slave_1 left promiscuous mode [ 169.589103][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.639035][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.658538][ T7420] loop3: detected capacity change from 0 to 512 [ 169.677411][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.720676][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.756973][ T7420] EXT4-fs (loop3): inline encryption not supported [ 169.764715][ T9] bridge0: port 3(batadv0) entered disabled state [ 169.837410][ T7420] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1003: bad orphan inode 15 [ 169.875911][ T9] device bridge_slave_1 left promiscuous mode [ 169.882620][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.987364][ T7420] ext4_test_bit(bit=14, block=5) = 0 [ 169.992835][ T7420] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 170.026387][ T9] device bridge_slave_0 left promiscuous mode [ 170.032911][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.035590][ T7445] loop5: detected capacity change from 0 to 8 [ 170.088791][ T9] device veth1_macvtap left promiscuous mode [ 170.094951][ T9] device veth0_macvtap left promiscuous mode [ 170.101808][ T9] device veth1_vlan left promiscuous mode [ 170.109382][ T7445] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 170.114295][ T7420] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #11: block 14: comm syz.3.1003: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=255, size=1024 fake=1 [ 170.139103][ T5115] Bluetooth: hci3: command 0x041b tx timeout [ 170.145632][ T9] device veth0_vlan left promiscuous mode [ 170.182364][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop5 [ 170.753295][ T9] team0 (unregistering): Port device team_slave_1 removed [ 170.773283][ T9] team0 (unregistering): Port device team_slave_0 removed [ 170.790815][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.807155][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.892714][ T9] bond0 (unregistering): Released all slaves [ 171.317906][ T1108] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 171.338963][ T7278] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 171.373839][ T7278] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 171.412692][ T7278] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 171.445043][ T7278] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 171.566428][ T7482] loop6: detected capacity change from 0 to 512 [ 171.678687][ T7482] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.1024: invalid block [ 171.699106][ T7482] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1024: invalid indirect mapped block 10 (level 1) [ 171.716673][ T7482] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1024: invalid indirect mapped block 8 (level 1) [ 171.733627][ T7482] EXT4-fs (loop6): 1 truncate cleaned up [ 171.739592][ T7482] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 171.745189][ T1108] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 171.773490][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.808321][ T7490] sctp: [Deprecated]: syz.3.1026 (pid 7490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.808321][ T7490] Use struct sctp_sack_info instead [ 171.832400][ T1108] usb 6-1: config 0 descriptor?? [ 171.857197][ T7490] sctp: [Deprecated]: syz.3.1026 (pid 7490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.857197][ T7490] Use struct sctp_sack_info instead [ 171.901850][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.907777][ T1108] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 172.001824][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.065761][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.084407][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.166178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.177850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.205625][ T5105] Bluetooth: hci3: command 0x040f tx timeout [ 172.220765][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.227728][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 172.228437][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.312134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.325641][ T1108] gspca_stv06xx: I2C: Read error writing address: -71 [ 172.363408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.411533][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.413000][ T1108] usb 6-1: USB disconnect, device number 7 [ 172.419018][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.536528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.560403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.612702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.657799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.675101][ T7524] loop7: detected capacity change from 0 to 512 [ 172.724845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.766753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.790204][ T7524] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.1038: invalid block [ 172.807146][ T7524] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1038: invalid indirect mapped block 10 (level 1) [ 172.831705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.892661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.912907][ T7524] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1038: invalid indirect mapped block 8 (level 1) [ 172.966696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.985401][ T7501] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.026041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.051982][ T7524] EXT4-fs (loop7): 1 truncate cleaned up [ 173.067361][ T7524] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 173.080965][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.107262][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.207913][ T7278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.425735][ T7501] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 173.434778][ T7501] usb 4-1: config 0 has no interface number 0 [ 173.486175][ T7501] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.535355][ T7501] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.595611][ T7501] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 173.655389][ T7501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.670374][ T7501] usb 4-1: config 0 descriptor?? [ 173.736125][ T7562] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1050'. [ 173.792535][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.807102][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.845723][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.891439][ T5105] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 173.964751][ T7571] loop7: detected capacity change from 0 to 512 [ 173.982395][ T7572] __ntfs_error: 10 callbacks suppressed [ 173.982417][ T7572] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 174.025404][ T7572] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 174.060679][ T7571] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1052: invalid indirect mapped block 4294967295 (level 1) [ 174.065122][ T7572] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 174.181948][ T7571] EXT4-fs (loop7): Remounting filesystem read-only [ 174.199192][ T7501] elo 0003:04E7:0030.000E: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input22 [ 174.242537][ T7571] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1052: invalid indirect mapped block 4294967295 (level 1) [ 174.286523][ T5115] Bluetooth: hci3: command 0x0419 tx timeout [ 174.354047][ T7571] EXT4-fs (loop7): Remounting filesystem read-only [ 174.384686][ T7571] EXT4-fs (loop7): 2 truncates cleaned up [ 174.405353][ T7571] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,delalloc,. Quota mode: writeback. [ 174.435644][ T5105] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 174.437431][ T7501] usb 4-1: USB disconnect, device number 8 [ 174.455361][ T5105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.473663][ T5105] usb 6-1: Product: syz [ 174.480604][ T7581] fido_id[7581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 174.515385][ T5105] usb 6-1: Manufacturer: syz [ 174.520444][ T5105] usb 6-1: SerialNumber: syz [ 174.540289][ T5105] usb 6-1: config 0 descriptor?? [ 174.559053][ T7571] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.7.1052: path /73/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 174.608129][ T5105] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 008 [ 174.643994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.670948][ T7571] EXT4-fs (loop7): Remounting filesystem read-only [ 174.678828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.734600][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.753513][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.800314][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.847523][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.880882][ T7278] device veth0_vlan entered promiscuous mode [ 174.969232][ T7278] device veth1_vlan entered promiscuous mode [ 175.116081][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.136107][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.167341][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.232860][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.242911][ T5105] i2c i2c-1: failure reading functionality [ 175.300225][ T5105] i2c i2c-1: connected i2c-tiny-usb device [ 175.309844][ T7278] device veth0_macvtap entered promiscuous mode [ 175.360766][ T7278] device veth1_macvtap entered promiscuous mode [ 175.385611][ T5105] usb 6-1: USB disconnect, device number 8 [ 175.447554][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.509860][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.544094][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.591546][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.632500][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.652026][ T7613] [U] [ 175.680369][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.724177][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.743994][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.781317][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.815644][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.831870][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.852502][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.864912][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.892477][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.932238][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.960020][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.000030][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.047780][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.075555][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.104120][ T7599] loop6: detected capacity change from 0 to 40427 [ 176.117548][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.156156][ T7599] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 176.170217][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.179611][ T7599] F2FS-fs (loop6): invalid crc value [ 176.197478][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.218749][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.242619][ T7599] F2FS-fs (loop6): Found nat_bits in checkpoint [ 176.266275][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.323380][ T7278] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.339288][ T7278] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.365452][ T5115] Bluetooth: hci3: command 0x0405 tx timeout [ 176.386180][ T7278] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.435536][ T7278] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.470208][ T7599] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 176.717055][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.725117][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.798098][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.840646][ T4979] attempt to access beyond end of device [ 176.840646][ T4979] loop6: rw=2049, want=45104, limit=40427 [ 176.969384][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.002787][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.042201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.395909][ T7668] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1089'. [ 178.134039][ T7709] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1095'. [ 178.655323][ T5107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.757194][ T7753] loop8: detected capacity change from 0 to 64 [ 179.031748][ T5107] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 179.047119][ T5107] usb 6-1: config 0 has no interface number 0 [ 179.096323][ T5107] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.115488][ T5107] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.135415][ T5107] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 179.179810][ T5107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.232193][ T5107] usb 6-1: config 0 descriptor?? [ 179.405178][ T26] audit: type=1326 audit(1776899822.935:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.428873][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.521381][ T26] audit: type=1326 audit(1776899822.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.544745][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.629176][ T7784] loop8: detected capacity change from 0 to 64 [ 179.650803][ T26] audit: type=1326 audit(1776899822.975:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.753989][ T26] audit: type=1326 audit(1776899822.975:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.776519][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.780298][ T7754] loop7: detected capacity change from 0 to 32768 [ 179.788564][ T5107] elo 0003:04E7:0030.000F: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input22 [ 179.851182][ T26] audit: type=1326 audit(1776899822.975:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.971650][ T26] audit: type=1326 audit(1776899822.975:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 179.994395][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.039858][ T7754] read_mapping_page failed! [ 180.122012][ T7754] ERROR: (device loop7): txCommit: [ 180.122012][ T7754] [ 180.139329][ T4228] usb 6-1: USB disconnect, device number 9 [ 180.170970][ T26] audit: type=1326 audit(1776899822.975:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 180.182609][ T7802] loop8: detected capacity change from 0 to 256 [ 180.194479][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.248597][ T7797] fido_id[7797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 180.271320][ T7795] Invalid ELF header magic: != ELF [ 180.285938][ T275] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 180.301461][ T275] ------------[ cut here ]------------ [ 180.330297][ T26] audit: type=1326 audit(1776899822.975:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 180.363744][ T7802] FAT-fs (loop8): Directory bread(block 64) failed [ 180.381754][ T7802] FAT-fs (loop8): Directory bread(block 65) failed [ 180.400125][ T275] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 180.429381][ T26] audit: type=1326 audit(1776899822.975:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.6.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff61ef02819 code=0x7ffc0000 [ 180.455087][ T7802] FAT-fs (loop8): Directory bread(block 66) failed [ 180.475601][ T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 180.479098][ T7802] FAT-fs (loop8): Directory bread(block 67) failed [ 180.481845][ T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 180.481869][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.505980][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 180.511148][ T275] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 180.514247][ T7802] FAT-fs (loop8): Directory bread(block 68) failed [ 180.531319][ T275] RSP: 0018:ffffc9000262fd28 EFLAGS: 00010246 [ 180.531346][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f442d369134bb700 [ 180.531360][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 180.531372][ T275] RBP: ffffc900028721b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 180.531385][ T275] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88801feb36c8 [ 180.531399][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002651220 [ 180.531412][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 180.531427][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.531439][ T275] CR2: 00007f5d8af98000 CR3: 000000002a675000 CR4: 00000000003506f0 [ 180.531459][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.531470][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.531485][ T275] Call Trace: [ 180.531492][ T275] [ 180.562440][ T7802] FAT-fs (loop8): Directory bread(block 69) failed [ 180.569174][ T275] ? lockdep_hardirqs_on+0x94/0x140 [ 180.569207][ T275] jfs_lazycommit+0x581/0xb40 [ 180.569228][ T275] ? txFreelock+0x5a0/0x5a0 [ 180.569246][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 180.577822][ T7802] FAT-fs (loop8): Directory bread(block 70) failed [ 180.585199][ T275] ? sched_dynamic_update+0x210/0x210 [ 180.585228][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.585249][ T275] ? __kthread_parkme+0x157/0x1b0 [ 180.585269][ T275] kthread+0x436/0x520 [ 180.585287][ T275] ? txFreelock+0x5a0/0x5a0 [ 180.595307][ T7802] FAT-fs (loop8): Directory bread(block 71) failed [ 180.601342][ T275] ? kthread_blkcg+0xd0/0xd0 [ 180.601367][ T275] ret_from_fork+0x1f/0x30 [ 180.611237][ T7802] FAT-fs (loop8): Directory bread(block 72) failed [ 180.618099][ T275] [ 180.618109][ T275] Modules linked in: [ 180.702403][ T275] ---[ end trace e32cdf6687098704 ]--- [ 180.758856][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 180.764182][ T275] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 180.809239][ T275] RSP: 0018:ffffc9000262fd28 EFLAGS: 00010246 [ 180.811192][ T7802] FAT-fs (loop8): Directory bread(block 73) failed [ 180.819527][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f442d369134bb700 [ 180.830868][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 180.874420][ T275] RBP: ffffc900028721b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 180.884898][ T275] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88801feb36c8 [ 180.893557][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002651220 [ 180.929632][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 180.939548][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.946505][ T275] CR2: 00007ff61f14f2f8 CR3: 000000006300a000 CR4: 00000000003506f0 [ 180.957199][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.969578][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.978241][ T275] Kernel panic - not syncing: Fatal exception [ 180.984627][ T275] Kernel Offset: disabled [ 180.989571][ T275] Rebooting in 86400 seconds..