last executing test programs: 4.252501009s ago: executing program 2 (id=676): r0 = syz_usb_connect$hid(0x3, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.154579386s ago: executing program 0 (id=681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x600}}, 0x26}}, 0x0) 2.87701406s ago: executing program 0 (id=683): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000007c0)="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", 0xcff}], 0x1) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001400)={0x9, @vbi={0x0, 0x0, 0x33565348, 0x0, [0x2], [0x0, 0x7]}}) 2.647128322s ago: executing program 0 (id=685): io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.276753091s ago: executing program 0 (id=689): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 2.164395987s ago: executing program 3 (id=690): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) recvmsg(r0, 0x0, 0x10100) 2.008607615s ago: executing program 0 (id=692): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000000)='./file1\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$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") timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.846520543s ago: executing program 3 (id=694): unshare(0x2c020400) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)="a27a7300a4fd9f14594112d39574", 0xe}, {0x0}], 0x2, &(0x7f0000004340)=ANY=[@ANYBLOB="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"], 0x2470}, 0x4c000) 1.701134181s ago: executing program 3 (id=695): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) 1.700813751s ago: executing program 1 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 1.515694191s ago: executing program 1 (id=697): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x2}, {0x4, 0xf, 0x3000}, {0x0, 0x7, 0x1000}, {0x3, 0x2, 0x3800}], 0x20, 0x0) 1.464048253s ago: executing program 3 (id=698): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a", 0x222}], 0x1}}], 0x1, 0x240080e4) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB='#s'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1.356270209s ago: executing program 3 (id=699): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.255444714s ago: executing program 2 (id=700): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xa) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 1.137029661s ago: executing program 1 (id=701): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 1.103998642s ago: executing program 2 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x5a, 0xfffeffff, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 935.953131ms ago: executing program 1 (id=703): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 808.569328ms ago: executing program 2 (id=704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 779.900819ms ago: executing program 1 (id=705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 609.101668ms ago: executing program 0 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f0000006a00)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {0x0, 0x800b}}}, 0x1c}}, 0xc000) 608.531028ms ago: executing program 2 (id=707): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0xfd80, 0x118, 0xfa00, {{0xd, 0x10001, "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", 0x3, 0x6, 0x5, 0x0, 0xc, 0x7, 0x3, 0x1}}}, 0x120) 598.480089ms ago: executing program 1 (id=708): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 333.202273ms ago: executing program 2 (id=709): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001ff000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 0s ago: executing program 3 (id=710): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f00000006c0)={0x20, 0x1, 0x45, {0x45, 0x1, "33ed4286ce10a804a83f83f226e6b33fafff0689fce2f335c61a248712cd81107f40e849bee5d5c2294fd5d33741c9894b95a902a639c7bff0afd4d11d0ee46b42df32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 67.514553][ T5756] cgroup: Unknown subsys name 'net' [ 67.679856][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.384801][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.926583][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.943228][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.961503][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.972231][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.981877][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.011937][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.101358][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.117232][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.126945][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.148024][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.172010][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.179794][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.204174][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.251136][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.259886][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.283172][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.300986][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.310757][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.311302][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.330506][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.337057][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.347866][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.359177][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.371692][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.665300][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 71.704130][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.713842][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.849996][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.858719][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.867495][ T5768] bridge_slave_0: entered allmulticast mode [ 71.876682][ T5768] bridge_slave_0: entered promiscuous mode [ 71.887643][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.897227][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.906061][ T5768] bridge_slave_1: entered allmulticast mode [ 71.915074][ T5768] bridge_slave_1: entered promiscuous mode [ 71.965775][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.989517][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 72.011968][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.113839][ T5768] team0: Port device team_slave_0 added [ 72.123671][ T5768] team0: Port device team_slave_1 added [ 72.147514][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 72.196231][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.204449][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.236385][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.254650][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.262468][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.293594][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.407692][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.423311][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.432162][ T5771] bridge_slave_0: entered allmulticast mode [ 72.443852][ T5771] bridge_slave_0: entered promiscuous mode [ 72.458810][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.468097][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.476443][ T5771] bridge_slave_1: entered allmulticast mode [ 72.485418][ T5771] bridge_slave_1: entered promiscuous mode [ 72.499167][ T5768] hsr_slave_0: entered promiscuous mode [ 72.506363][ T5768] hsr_slave_1: entered promiscuous mode [ 72.520106][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 72.591922][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.601378][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.609932][ T5776] bridge_slave_0: entered allmulticast mode [ 72.618748][ T5776] bridge_slave_0: entered promiscuous mode [ 72.645460][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.670257][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.678039][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.688189][ T5776] bridge_slave_1: entered allmulticast mode [ 72.697847][ T5776] bridge_slave_1: entered promiscuous mode [ 72.723135][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.824023][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.839160][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.861166][ T5771] team0: Port device team_slave_0 added [ 72.905923][ T5771] team0: Port device team_slave_1 added [ 72.957916][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.966699][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976403][ T5772] bridge_slave_0: entered allmulticast mode [ 72.986127][ T5772] bridge_slave_0: entered promiscuous mode [ 72.996746][ T5776] team0: Port device team_slave_0 added [ 73.028491][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.037300][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.045646][ T5772] bridge_slave_1: entered allmulticast mode [ 73.052364][ T5770] Bluetooth: hci0: command tx timeout [ 73.061149][ T5772] bridge_slave_1: entered promiscuous mode [ 73.070166][ T5776] team0: Port device team_slave_1 added [ 73.093378][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.103497][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.136871][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.185398][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.196993][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.226624][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.287178][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.302737][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.314478][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.326967][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.360972][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.371544][ T5770] Bluetooth: hci1: command tx timeout [ 73.380156][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.393862][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.428977][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.451655][ T5770] Bluetooth: hci2: command tx timeout [ 73.459571][ T5770] Bluetooth: hci3: command tx timeout [ 73.517637][ T5771] hsr_slave_0: entered promiscuous mode [ 73.524892][ T5771] hsr_slave_1: entered promiscuous mode [ 73.535142][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.545180][ T5771] Cannot create hsr debugfs directory [ 73.568639][ T5772] team0: Port device team_slave_0 added [ 73.579887][ T5772] team0: Port device team_slave_1 added [ 73.673391][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.685039][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.714184][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.753715][ T5776] hsr_slave_0: entered promiscuous mode [ 73.763438][ T5776] hsr_slave_1: entered promiscuous mode [ 73.769988][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.780001][ T5776] Cannot create hsr debugfs directory [ 73.787100][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.796895][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.830594][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.975899][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.009414][ T5772] hsr_slave_0: entered promiscuous mode [ 74.020210][ T5772] hsr_slave_1: entered promiscuous mode [ 74.027103][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.037144][ T5772] Cannot create hsr debugfs directory [ 74.067157][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.079183][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.090307][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.297051][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.313350][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.372219][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.389473][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.450303][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.485377][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.522713][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.543327][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.653741][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.668368][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.697545][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.709697][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.756967][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.857079][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.877752][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.922072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.931298][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.947786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.957082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.012870][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.081804][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.091082][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.099116][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.129262][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.137992][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.146598][ T5770] Bluetooth: hci0: command tx timeout [ 75.167714][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.222141][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.276396][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.285494][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.313555][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.334444][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.342355][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.389736][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.397864][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.421433][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.429072][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.451528][ T5770] Bluetooth: hci1: command tx timeout [ 75.476888][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.492809][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.534851][ T5770] Bluetooth: hci3: command tx timeout [ 75.543833][ T5084] Bluetooth: hci2: command tx timeout [ 75.830415][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.876584][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.038547][ T5771] veth0_vlan: entered promiscuous mode [ 76.078689][ T5771] veth1_vlan: entered promiscuous mode [ 76.102557][ T5768] veth0_vlan: entered promiscuous mode [ 76.166960][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.180346][ T5768] veth1_vlan: entered promiscuous mode [ 76.205382][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.228698][ T5771] veth0_macvtap: entered promiscuous mode [ 76.256687][ T5771] veth1_macvtap: entered promiscuous mode [ 76.315345][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.358562][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.389241][ T5768] veth0_macvtap: entered promiscuous mode [ 76.408160][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.424624][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.435068][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.446079][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.473575][ T5776] veth0_vlan: entered promiscuous mode [ 76.492406][ T5768] veth1_macvtap: entered promiscuous mode [ 76.500506][ T5772] veth0_vlan: entered promiscuous mode [ 76.518930][ T5772] veth1_vlan: entered promiscuous mode [ 76.594501][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.608826][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.625305][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.638047][ T5776] veth1_vlan: entered promiscuous mode [ 76.683170][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.705313][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.724725][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.769918][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.782008][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.797093][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806285][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857800][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.878965][ T5776] veth0_macvtap: entered promiscuous mode [ 76.889256][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.953498][ T5776] veth1_macvtap: entered promiscuous mode [ 76.981889][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.995469][ T5772] veth0_macvtap: entered promiscuous mode [ 77.000785][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.008855][ T5772] veth1_macvtap: entered promiscuous mode [ 77.069272][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.086439][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.097222][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.108447][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.127145][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.157092][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.169600][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.183040][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.195034][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.207835][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.218108][ T5770] Bluetooth: hci0: command tx timeout [ 77.230948][ T4139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.247922][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.249749][ T4139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.259802][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277122][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.286628][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304430][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.317111][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.328369][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.341237][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.352208][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.365823][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.413418][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.484174][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.500203][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.512011][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.523874][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.535553][ T5770] Bluetooth: hci1: command tx timeout [ 77.547106][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.565230][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.577761][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.613220][ T5770] Bluetooth: hci3: command tx timeout [ 77.613709][ T5084] Bluetooth: hci2: command tx timeout [ 77.706737][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.729628][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.740509][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751073][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.766189][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.778261][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.794215][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.819090][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.986423][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.007178][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.012271][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.027584][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.046577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.144608][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.175323][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.240809][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 78.310837][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.345076][ T5839] syz.0.7[5839]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.360135][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.379094][ T8] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 78.397896][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.458093][ T8] usb 3-1: config 0 descriptor?? [ 78.807982][ T5844] loop3: detected capacity change from 0 to 4096 [ 78.838848][ T5844] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 78.986124][ T8] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 79.205554][ T8] usb 3-1: USB disconnect, device number 2 [ 79.292334][ T5084] Bluetooth: hci0: command tx timeout [ 79.356321][ T5849] fido_id[5849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 79.611418][ T5084] Bluetooth: hci1: command tx timeout [ 79.676695][ T5839] loop0: detected capacity change from 0 to 40427 [ 79.691378][ T5084] Bluetooth: hci2: command tx timeout [ 79.696461][ T5770] Bluetooth: hci3: command tx timeout [ 79.771153][ T5839] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.831477][ T5839] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.887191][ T5839] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 79.930415][ T5839] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.206724][ T5839] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.229282][ T5839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.377578][ T5876] Zero length message leads to an empty skb [ 80.864970][ T5884] loop1: detected capacity change from 0 to 4096 [ 80.969015][ T5889] loop3: detected capacity change from 0 to 512 [ 81.025101][ T5891] loop2: detected capacity change from 0 to 256 [ 81.055835][ T5889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 81.082134][ T5889] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.151912][ T5889] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 81.250032][ T5889] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 81.251714][ T5891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 81.282740][ T5889] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.25: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.346015][ T5889] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.25: couldn't read orphan inode 13 (err -117) [ 81.412726][ T5889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.727221][ T5889] ======================================================= [ 81.727221][ T5889] WARNING: The mand mount option has been deprecated and [ 81.727221][ T5889] and is ignored by this kernel. Remove the mand [ 81.727221][ T5889] option from the mount to silence this warning. [ 81.727221][ T5889] ======================================================= [ 81.727443][ T5889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.781158][ T5889] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 81.782658][ T5889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 81.939457][ T5889] System zones: 0-2, 18-18, 34-34 [ 81.963870][ T5889] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.024773][ T5909] ip6gretap0: entered promiscuous mode [ 82.284167][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.801266][ T5955] loop0: detected capacity change from 0 to 1024 [ 83.943056][ T5955] hfsplus: bad catalog entry type [ 84.021221][ T12] hfsplus: b-tree write err: -5, ino 25 [ 84.045627][ T12] hfsplus: b-tree write err: -5, ino 4 [ 84.061241][ T12] hfsplus: b-tree write err: -5, ino 2 [ 84.074219][ T5941] loop1: detected capacity change from 0 to 32768 [ 84.164891][ T5941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.47 (5941) [ 84.282415][ T5941] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.317844][ T5941] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 84.348615][ T5941] BTRFS info (device loop1): setting nodatacow, compression disabled [ 84.359098][ T5965] loop0: detected capacity change from 0 to 4096 [ 84.370788][ T5941] BTRFS info (device loop1): enabling auto defrag [ 84.395423][ T5941] BTRFS info (device loop1): max_inline at 0 [ 84.420326][ T5941] BTRFS info (device loop1): using free space tree [ 84.525316][ T5977] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.742933][ T5941] BTRFS info (device loop1): enabling ssd optimizations [ 84.799749][ T5941] BTRFS info (device loop1): auto enabling async discard [ 84.904408][ T5965] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 84.959190][ T5965] Remounting filesystem read-only [ 85.043025][ T5997] overlayfs: workdir and upperdir must be separate subtrees [ 85.157527][ T5768] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 85.201792][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 85.210414][ T5768] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 85.267476][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 85.288392][ T5768] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 85.299284][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 85.315285][ T5941] BTRFS info (device loop1): scrub: started on devid 1 [ 85.361726][ T5768] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 85.374337][ T5941] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 85.403642][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 85.420373][ T5768] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 85.470771][ T5768] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 85.520825][ T5768] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 85.577833][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 85.613149][ T5768] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 85.619854][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 85.637810][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 85.650240][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.676086][ T5768] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 85.699943][ T5768] NILFS (loop0): discard dirty page: offset=270336, ino=3 [ 85.737229][ T5768] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 85.969769][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 86.633232][ T6026] mmap: syz.3.80 (6026) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.958040][ T6032] loop3: detected capacity change from 0 to 4096 [ 86.983151][ T6032] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 87.005314][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.072957][ T967] cfg80211: failed to load regulatory.db [ 87.112581][ T6025] loop0: detected capacity change from 0 to 32768 [ 87.138431][ T6032] ntfs: (device loop3): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 87.214756][ T6025] JBD2: Ignoring recovery information on journal [ 87.253597][ T6021] loop2: detected capacity change from 0 to 32768 [ 87.274555][ T6032] ntfs: volume version 3.1. [ 87.322245][ T6032] ntfs: (device loop3): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 87.364423][ T6025] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.383079][ T6032] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 87.436740][ T6032] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 87.565728][ T6025] (syz.0.78,6025,0):ocfs2_reflink_ioctl:4434 ERROR: status = -14 [ 87.607603][ T6032] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macturkish. You might want to try to use the mount option nls=utf8. [ 87.660814][ T6032] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 87.832544][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 88.019242][ T6041] loop3: detected capacity change from 0 to 512 [ 88.072207][ T6041] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.143302][ T6041] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.192588][ T6041] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.86: Block bitmap for bg 0 marked uninitialized [ 88.262093][ T6041] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 88.304259][ T6041] EXT4-fs (loop3): 1 orphan inode deleted [ 88.312424][ T6041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.416390][ T6041] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.86: Block bitmap for bg 0 marked uninitialized [ 88.558455][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.730425][ T6037] loop2: detected capacity change from 0 to 40427 [ 88.767476][ T6037] F2FS-fs (loop2): invalid crc value [ 88.805489][ T6037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.970416][ T6064] loop1: detected capacity change from 0 to 16 [ 88.985395][ T6037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.024777][ T6064] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 89.067514][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop1 [ 89.149550][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop1 [ 89.291708][ T6070] netlink: zone id is out of range [ 89.661333][ T6075] loop0: detected capacity change from 0 to 8192 [ 89.722837][ T6075] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.760827][ T6075] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 89.774998][ T6075] REISERFS (device loop0): using ordered data mode [ 89.782772][ T6075] reiserfs: using flush barriers [ 89.831790][ T6075] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.851977][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.922107][ T6075] REISERFS (device loop0): checking transaction log (loop0) [ 89.975599][ T6075] REISERFS (device loop0): Using r5 hash to sort names [ 89.994415][ T6075] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.304435][ T6091] loop1: detected capacity change from 0 to 16 [ 90.427763][ T6091] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.581730][ T6076] loop3: detected capacity change from 0 to 32768 [ 90.708105][ T6076] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.835692][ T6076] XFS (loop3): Ending clean mount [ 90.864882][ T6076] XFS (loop3): Quotacheck needed: Please wait. [ 91.035813][ T6076] XFS (loop3): Quotacheck: Done. [ 91.134202][ T6087] loop2: detected capacity change from 0 to 32768 [ 91.297571][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.770124][ T6098] loop0: detected capacity change from 0 to 32768 [ 91.878813][ T6098] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.151410][ T6098] XFS (loop0): Ending clean mount [ 92.209659][ T8] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 92.247872][ T8] XFS (loop0): Unmount and run xfs_repair [ 92.290065][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 92.340376][ T8] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 92.364516][ T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 92.413246][ T8] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 92.459341][ T8] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 92.517199][ T8] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 92.566825][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.589645][ T8] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 92.606554][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.618300][ T6098] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 92.642140][ T6098] XFS (loop0): Failed to initialize disk quotas. [ 92.814392][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.852773][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.055123][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 93.064081][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.087024][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 93.100436][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.179060][ T23] usb 4-1: config 0 descriptor?? [ 93.374495][ T23] rc_core: IR keymap rc-xbox-dvd not found [ 93.400209][ T23] Registered IR keymap rc-empty [ 93.436601][ T23] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 93.501684][ T23] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 93.662880][ T23] usb 4-1: USB disconnect, device number 2 [ 93.669659][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 93.959953][ T6161] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.270960][ T6169] loop0: detected capacity change from 0 to 512 [ 94.358021][ T6169] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.133: invalid indirect mapped block 4294967295 (level 1) [ 94.433295][ T6174] loop3: detected capacity change from 0 to 64 [ 94.463763][ T6169] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.133: invalid indirect mapped block 4294967295 (level 1) [ 94.534179][ T6169] EXT4-fs (loop0): 2 truncates cleaned up [ 94.545793][ T6169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.749239][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.821254][ T6154] loop2: detected capacity change from 0 to 32768 [ 94.901699][ T49] kworker/u4:3: attempt to access beyond end of device [ 94.901699][ T49] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 94.904382][ T6154] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.934928][ T49] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 95.004933][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.004933][ T49] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 95.062987][ T6154] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.104963][ T49] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 95.138968][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.138968][ T49] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 95.160562][ T49] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 95.172709][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.172709][ T49] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 95.193564][ T49] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 95.204962][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.204962][ T49] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 95.221294][ T49] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 95.236539][ T6154] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 95.259665][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.259665][ T49] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 95.283133][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 95.300575][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 95.317064][ T49] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 95.346319][ T6189] bridge_slave_0: invalid flags given to default FDB implementation [ 95.370125][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.370125][ T49] loop3: rw=1, sector=76, nr_sectors = 1 limit=64 [ 95.385938][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 95.412921][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 112ms [ 95.426743][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 95.436260][ T6154] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 95.442686][ T49] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 95.492230][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.492230][ T49] loop3: rw=1, sector=77, nr_sectors = 1 limit=64 [ 95.560818][ T49] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 95.580566][ T49] kworker/u4:3: attempt to access beyond end of device [ 95.580566][ T49] loop3: rw=1, sector=78, nr_sectors = 91 limit=64 [ 95.789962][ T6198] netlink: 'syz.3.140': attribute type 15 has an invalid length. [ 95.807018][ T6154] gfs2: fsid=syz:syz.0: found 1 quota changes [ 95.945909][ T6154] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 95.945909][ T6154] inode = 11 2339 [ 95.945909][ T6154] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 417 [ 95.987585][ T6154] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 96.032470][ T6154] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6154 [syz.2.127] gfs2_quota_sync+0x411/0x5a0 [ 96.072670][ T6154] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 96.102644][ T6154] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 96.140229][ T6154] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 96.200860][ T6154] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 96.209276][ T6154] gfs2: fsid=syz:syz.0: File system withdrawn [ 96.250877][ T6154] CPU: 1 PID: 6154 Comm: syz.2.127 Not tainted syzkaller #0 [ 96.259135][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.272409][ T6154] Call Trace: [ 96.275743][ T6154] [ 96.279246][ T6154] dump_stack_lvl+0x18c/0x250 [ 96.284351][ T6154] ? kobject_uevent_env+0x363/0x8b0 [ 96.292051][ T6154] ? show_regs_print_info+0x20/0x20 [ 96.299120][ T6154] ? load_image+0x420/0x420 [ 96.304043][ T6154] ? kobject_uevent_env+0x363/0x8b0 [ 96.309766][ T6154] gfs2_withdraw+0xb24/0x13d0 [ 96.314836][ T6154] ? gfs2_lm+0x240/0x240 [ 96.321732][ T6154] ? queue_delayed_work_on+0x114/0x200 [ 96.328814][ T6154] ? gfs2_consist_inode_i+0xf5/0x110 [ 96.334529][ T6154] gfs2_inode_refresh+0xc50/0x1160 [ 96.342142][ T6154] ? gfs2_inode_metasync+0xf0/0xf0 [ 96.347950][ T6154] ? gfs2_glock_nq+0xd4f/0x1420 [ 96.353835][ T6154] gfs2_instantiate+0x162/0x220 [ 96.359985][ T6154] gfs2_glock_wait+0x1d4/0x2a0 [ 96.365524][ T6154] do_sync+0x4c6/0xe50 [ 96.370281][ T6154] ? gfs2_quota_sync+0x411/0x5a0 [ 96.375350][ T6154] ? bh_get+0x760/0x760 [ 96.381054][ T6154] ? gfs2_quota_sync+0x31a/0x5a0 [ 96.386844][ T6154] ? gfs2_quota_sync+0x411/0x5a0 [ 96.392756][ T6154] ? do_raw_spin_unlock+0x121/0x230 [ 96.398792][ T6154] ? do_raw_spin_unlock+0x121/0x230 [ 96.405109][ T6154] gfs2_quota_sync+0x411/0x5a0 [ 96.410813][ T6154] gfs2_sync_fs+0x4c/0xb0 [ 96.415380][ T6154] sync_filesystem+0xea/0x220 [ 96.422003][ T6154] gfs2_reconfigure+0xbb/0xb10 [ 96.428410][ T6154] ? hook_sb_remount+0x1b/0xc0 [ 96.433779][ T6154] ? bpf_lsm_sb_remount+0x9/0x10 [ 96.439751][ T6154] reconfigure_super+0x21e/0x8a0 [ 96.446937][ T6154] vfs_fsconfig_locked+0x16c/0x320 [ 96.452430][ T6154] __se_sys_fsconfig+0x70d/0x850 [ 96.457539][ T6154] ? __x64_sys_fsconfig+0xc0/0xc0 [ 96.462786][ T6154] ? lockdep_hardirqs_on+0x98/0x150 [ 96.468195][ T6154] ? __x64_sys_fsconfig+0x20/0xc0 [ 96.473546][ T6154] do_syscall_64+0x55/0xa0 [ 96.479497][ T6154] ? clear_bhb_loop+0x40/0x90 [ 96.484677][ T6154] ? clear_bhb_loop+0x40/0x90 [ 96.489963][ T6154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.496316][ T6154] RIP: 0033:0x7fd18db9c819 [ 96.501748][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.532278][ T6154] RSP: 002b:00007fd18ea06028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 96.542709][ T6154] RAX: ffffffffffffffda RBX: 00007fd18de15fa0 RCX: 00007fd18db9c819 [ 96.551408][ T6154] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 96.561469][ T6154] RBP: 00007fd18dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 96.573358][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.582249][ T6154] R13: 00007fd18de16038 R14: 00007fd18de15fa0 R15: 00007ffeca5a7958 [ 96.591611][ T6154] [ 96.801880][ T6210] netlink: 72 bytes leftover after parsing attributes in process `syz.3.152'. [ 97.011735][ T6194] loop1: detected capacity change from 0 to 40427 [ 97.069065][ T6194] F2FS-fs (loop1): invalid crc value [ 97.079536][ T6216] tipc: Started in network mode [ 97.101411][ T6216] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 97.116155][ T6216] tipc: Enabled bearer , priority 10 [ 97.125235][ T6194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.420587][ T6194] F2FS-fs (loop1): Start checkpoint disabled! [ 97.460922][ T6194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 97.607216][ T28] audit: type=1800 audit(1776749990.654:2): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.146" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 97.849623][ T6235] loop2: detected capacity change from 0 to 1024 [ 97.878355][ T6235] EXT4-fs: inline encryption not supported [ 97.919368][ T4122] kworker/u4:10: attempt to access beyond end of device [ 97.919368][ T4122] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.963065][ T6235] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.979582][ T4122] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 97.980820][ T5611] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.998260][ T4122] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 97.998564][ T6238] loop3: detected capacity change from 0 to 764 [ 98.112475][ T6238] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.148454][ T6235] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.163: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.184715][ T6235] EXT4-fs (loop2): Remounting filesystem read-only [ 98.194300][ T6235] EXT4-fs (loop2): 1 orphan inode deleted [ 98.207462][ T6235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.244663][ T23] tipc: Node number set to 9480874 [ 98.250999][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 98.260574][ T6238] Symlink component flag not implemented [ 98.277560][ T1108] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 98.288391][ T5611] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.302070][ T6238] Symlink component flag not implemented (7) [ 98.333837][ T1108] Quota error (device loop2): write_blk: dquota write failed [ 98.381753][ T6241] Symlink component flag not implemented (7) [ 98.387170][ T5611] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.394709][ T1108] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries [ 98.444428][ T1108] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 98.447448][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.461797][ T1108] Quota error (device loop2): write_blk: dquota write failed [ 98.471742][ T5611] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.487739][ T1108] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list [ 98.519450][ T1108] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 98.544698][ T1108] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 98.546532][ T5611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.601714][ T5611] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 98.649680][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.695008][ T5611] usb 1-1: config 0 descriptor?? [ 99.166254][ T5611] mcp2200 0003:04D8:00DF.0002: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 99.341350][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 99.447837][ T5611] usb 1-1: USB disconnect, device number 2 [ 99.615270][ T6247] loop2: detected capacity change from 0 to 32768 [ 99.685573][ T6247] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.832286][ T6247] XFS (loop2): Ending clean mount [ 99.929559][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 100.000620][ T6258] loop1: detected capacity change from 0 to 32768 [ 100.073376][ T6258] (syz.1.173,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.111727][ T6258] (syz.1.173,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.146197][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.274090][ T6258] JBD2: Ignoring recovery information on journal [ 100.328573][ T6276] loop3: detected capacity change from 0 to 4096 [ 100.467757][ T6258] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.089161][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 101.695981][ T6304] loop1: detected capacity change from 0 to 256 [ 101.818992][ T6304] FAT-fs (loop1): Directory bread(block 64) failed [ 101.847648][ T6310] loop0: detected capacity change from 0 to 64 [ 101.859929][ T6304] FAT-fs (loop1): Directory bread(block 65) failed [ 101.874947][ T6304] FAT-fs (loop1): Directory bread(block 66) failed [ 101.886215][ T6304] FAT-fs (loop1): Directory bread(block 67) failed [ 101.911276][ T6304] FAT-fs (loop1): Directory bread(block 68) failed [ 101.948118][ T6304] FAT-fs (loop1): Directory bread(block 69) failed [ 101.976742][ T28] audit: type=1800 audit(1776749995.024:3): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 101.986440][ T6304] FAT-fs (loop1): Directory bread(block 70) failed [ 102.076717][ T6304] FAT-fs (loop1): Directory bread(block 71) failed [ 102.096680][ T6304] FAT-fs (loop1): Directory bread(block 72) failed [ 102.154241][ T6304] FAT-fs (loop1): Directory bread(block 73) failed [ 102.310838][ T967] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.531444][ T6321] loop2: detected capacity change from 0 to 8192 [ 102.549509][ T6321] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.573734][ T967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.589679][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.608426][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.620772][ T6321] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 102.622059][ T6321] REISERFS (device loop2): using ordered data mode [ 102.633323][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.661135][ T967] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.661148][ T6321] reiserfs: using flush barriers [ 102.661166][ T967] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.731623][ T967] usb 4-1: Manufacturer: syz [ 102.731742][ T6321] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.748248][ T967] usb 4-1: config 0 descriptor?? [ 102.786706][ T6330] loop1: detected capacity change from 0 to 512 [ 102.812701][ T6321] REISERFS (device loop2): checking transaction log (loop2) [ 103.141480][ T967] rc_core: IR keymap rc-hauppauge not found [ 103.162124][ T967] Registered IR keymap rc-empty [ 103.184026][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.219229][ T6321] REISERFS (device loop2): Using tea hash to sort names [ 103.240889][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.245112][ T6321] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 103.306083][ T6321] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 103.344153][ T967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 103.396747][ T967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 103.471530][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.526256][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.585674][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.630833][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.692096][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.750922][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.796444][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.850912][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.888304][ T6347] loop1: detected capacity change from 0 to 128 [ 103.920496][ T6347] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.946654][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.965403][ T6349] gretap0: entered promiscuous mode [ 103.985858][ T6347] hpfs: filesystem error: improperly stopped [ 103.991146][ T6349] vlan2: entered promiscuous mode [ 104.001279][ T967] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.015406][ T6347] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 104.038399][ T6347] hpfs: You really don't want any checks? You are crazy... [ 104.064744][ T967] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.080765][ T6347] hpfs: Code page index out of array [ 104.106532][ T6347] hpfs: code page support is disabled [ 104.115531][ T967] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.129394][ T6347] hpfs: hpfs_map_4sectors(): unaligned read [ 104.138562][ T6347] hpfs: hpfs_map_4sectors(): unaligned read [ 104.152654][ T6347] hpfs: filesystem error: unable to find root dir [ 104.183775][ T967] usb 4-1: USB disconnect, device number 3 [ 104.449058][ T6353] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 104.755152][ T6365] loop3: detected capacity change from 0 to 256 [ 104.805521][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 104.848852][ T6365] FAT-fs (loop3): Directory bread(block 64) failed [ 104.877352][ T6365] FAT-fs (loop3): Directory bread(block 65) failed [ 104.915502][ T6365] FAT-fs (loop3): Directory bread(block 66) failed [ 104.961008][ T6365] FAT-fs (loop3): Directory bread(block 67) failed [ 104.983305][ T6365] FAT-fs (loop3): Directory bread(block 68) failed [ 105.016590][ T6365] FAT-fs (loop3): Directory bread(block 69) failed [ 105.027659][ T6365] FAT-fs (loop3): Directory bread(block 70) failed [ 105.050929][ T6365] FAT-fs (loop3): Directory bread(block 71) failed [ 105.060429][ T6365] FAT-fs (loop3): Directory bread(block 72) failed [ 105.074721][ T6365] FAT-fs (loop3): Directory bread(block 73) failed [ 105.413027][ T6375] netlink: 128 bytes leftover after parsing attributes in process `syz.1.222'. [ 105.433183][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 105.745703][ T6359] loop2: detected capacity change from 0 to 32768 [ 105.756906][ T6381] sp0: Synchronizing with TNC [ 105.828179][ T6359] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.951572][ T6359] XFS (loop2): Ending clean mount [ 106.138182][ T6359] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 106.351804][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.544954][ T6403] loop0: detected capacity change from 0 to 4096 [ 106.616009][ T6399] loop1: detected capacity change from 0 to 32768 [ 106.691355][ T6399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.132623][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 107.151839][ T6415] loop0: detected capacity change from 0 to 1024 [ 107.222473][ T6415] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 107.331203][ T6415] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.236: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.410553][ T6421] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 107.460495][ T6415] EXT4-fs (loop0): Remounting filesystem read-only [ 107.478750][ T6415] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 107.515378][ T6415] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 107.538393][ T6415] EXT4-fs (loop0): 1 orphan inode deleted [ 107.569200][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.991955][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.185657][ T6433] loop2: detected capacity change from 0 to 512 [ 108.322949][ T6433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.390784][ T6433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.450000][ T6433] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.231: bad orphan inode 131083 [ 108.549531][ T6433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.563142][ T6442] tipc: Started in network mode [ 108.571254][ T6442] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 108.584730][ T6442] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 108.603430][ T6442] tipc: Enabled bearer , priority 10 [ 108.839616][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.588790][ T6466] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 109.616376][ T6466] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 109.643084][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 109.659461][ T6466] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 109.684613][ T6466] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 109.696312][ T6466] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 109.722888][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 109.733468][ T23] tipc: Node number set to 1 [ 109.770854][ T6466] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 109.790850][ T6466] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 109.811472][ T6466] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 109.831065][ T6466] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 109.852227][ T6466] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 110.011841][ T6474] loop3: detected capacity change from 0 to 512 [ 110.054908][ T6474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.143566][ T6474] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.172071][ T6474] EXT4-fs (loop3): 1 truncate cleaned up [ 110.188595][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 110.203995][ T6474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.436758][ T6460] loop0: detected capacity change from 0 to 32768 [ 110.565831][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.925930][ T6477] loop1: detected capacity change from 0 to 32768 [ 110.991589][ T6477] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.180886][ T6477] XFS (loop1): Ending clean mount [ 111.212211][ T6477] XFS (loop1): Quotacheck needed: Please wait. [ 111.320858][ T6477] XFS (loop1): Quotacheck: Done. [ 111.331053][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.548405][ T6488] loop3: detected capacity change from 0 to 32768 [ 111.622954][ T23] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 111.639699][ T6488] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 111.661211][ T23] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 111.681838][ T6488] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.711281][ T23] usb 3-1: config 220 has no interface number 2 [ 111.731013][ T23] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 111.767094][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.819874][ T23] usb 3-1: config 220 interface 0 has no altsetting 0 [ 111.833851][ T6488] XFS (loop3): Ending clean mount [ 111.845199][ T23] usb 3-1: config 220 interface 76 has no altsetting 0 [ 111.862259][ T23] usb 3-1: config 220 interface 1 has no altsetting 0 [ 111.878069][ T6488] XFS (loop3): Quotacheck needed: Please wait. [ 111.878968][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 111.921603][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.939763][ T23] usb 3-1: Product: syz [ 111.945978][ T23] usb 3-1: Manufacturer: syz [ 111.955007][ T23] usb 3-1: SerialNumber: syz [ 112.031122][ T6488] XFS (loop3): Quotacheck: Done. [ 112.258030][ T23] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 112.282731][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.286534][ T23] usb 3-1: No valid video chain found. [ 112.305971][ T23] usb 3-1: selecting invalid altsetting 0 [ 112.349527][ T23] usb 3-1: selecting invalid altsetting 0 [ 112.358337][ T23] usbtest: probe of 3-1:220.1 failed with error -22 [ 112.383878][ T23] usb 3-1: USB disconnect, device number 3 [ 112.679403][ T6520] loop0: detected capacity change from 0 to 256 [ 112.741707][ T6520] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 112.932173][ T28] audit: type=1800 audit(1776750005.984:4): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.275" name="file1" dev="loop0" ino=1048620 res=0 errno=0 [ 113.449949][ T6527] loop0: detected capacity change from 0 to 4096 [ 113.497609][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'. [ 113.570151][ T6527] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 113.639365][ T6527] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.704277][ T6537] loop1: detected capacity change from 0 to 64 [ 113.870754][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.090839][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 114.097939][ T5776] hfs: node 4:3 still has 1 user(s)! [ 114.135383][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 114.196880][ T787] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 114.221523][ T787] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 114.253424][ T787] usb 3-1: Product: syz [ 114.262656][ T787] usb 3-1: Manufacturer: syz [ 114.282523][ T787] usb 3-1: SerialNumber: syz [ 114.550507][ T787] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 114.562756][ T787] usb 3-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 114.573246][ T787] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 114.582398][ T787] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 114.768966][ T787] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 114.806761][ T787] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 114.846653][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 114.876438][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 114.911233][ T787] usb 3-1: USB disconnect, device number 4 [ 114.974738][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 115.029843][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 115.059751][ T787] visor 3-1:1.0: device disconnected [ 115.080274][ T6569] capability: warning: `syz.1.294' uses deprecated v2 capabilities in a way that may be insecure [ 115.110838][ T967] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 115.258296][ T23] IPVS: starting estimator thread 0... [ 115.313909][ T967] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.343641][ T967] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 115.381866][ T6574] IPVS: using max 25 ests per chain, 60000 per kthread [ 115.412878][ T967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.445853][ T967] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 115.490841][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.522403][ T967] usb 4-1: config 0 descriptor?? [ 115.547373][ T6577] loop1: detected capacity change from 0 to 1024 [ 115.599660][ T6582] loop2: detected capacity change from 0 to 128 [ 115.652705][ T6582] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 115.799920][ T6582] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.867637][ T6577] hfsplus: bad catalog entry type [ 115.885269][ T6582] ext2 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.952003][ T967] hid (null): invalid report_size 26545 [ 115.991189][ T64] hfsplus: b-tree write err: -5, ino 25 [ 115.997825][ T64] hfsplus: b-tree write err: -5, ino 4 [ 116.026359][ T967] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0003/input/input7 [ 116.030833][ T64] hfsplus: b-tree write err: -5, ino 2 [ 116.115353][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.241745][ T967] uclogic 0003:28BD:0909.0003: input,hidraw0: USB HID vff.fb Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 116.326787][ T6595] loop1: detected capacity change from 0 to 128 [ 116.344297][ T967] usb 4-1: USB disconnect, device number 4 [ 116.400799][ T6595] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 116.489333][ T6595] hpfs: filesystem error: improperly stopped [ 116.539842][ T6595] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 116.591340][ T6595] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 116.622925][ T6595] hpfs: You really don't want any checks? You are crazy... [ 116.655793][ T6595] hpfs: hpfs_map_sector(): read error [ 116.670436][ T6595] hpfs: code page support is disabled [ 116.686847][ T6595] hpfs: hpfs_map_4sectors(): unaligned read [ 116.721865][ T6595] hpfs: hpfs_map_4sectors(): unaligned read [ 116.730100][ T6595] hpfs: filesystem error: unable to find root dir [ 116.757958][ T6600] fido_id[6600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 116.947794][ T6609] loop2: detected capacity change from 0 to 256 [ 117.083458][ T6609] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.135657][ T6609] FAT-fs (loop2): Filesystem has been set read-only [ 117.215664][ T6609] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.292065][ T6609] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.713747][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 117.726509][ T6632] loop2: detected capacity change from 0 to 1024 [ 117.832508][ T6632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.163283][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.625273][ T6668] loop0: detected capacity change from 0 to 512 [ 118.654063][ T6669] tipc: Started in network mode [ 118.691293][ T6669] tipc: Node identity , cluster identity 4711 [ 118.799360][ T6668] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.327: corrupted inode contents [ 118.847466][ T6668] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #16: comm syz.0.327: mark_inode_dirty error [ 118.935542][ T6668] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.327: corrupted inode contents [ 118.982473][ T6668] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.327: mark_inode_dirty error [ 119.047392][ T6668] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.327: corrupted inode contents [ 119.111928][ T6668] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 119.122897][ T6680] loop1: detected capacity change from 0 to 2048 [ 119.186286][ T6668] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.327: corrupted inode contents [ 119.194538][ T6680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.309109][ T6668] EXT4-fs error (device loop0): ext4_truncate:4301: inode #16: comm syz.0.327: mark_inode_dirty error [ 119.366337][ T28] audit: type=1326 audit(1776750012.414:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.3.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09bf9c819 code=0x0 [ 119.416810][ T6668] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 119.472435][ T6668] EXT4-fs (loop0): 1 truncate cleaned up [ 119.487937][ T6668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.506403][ T4122] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.509263][ T6668] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.555863][ T4122] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 119.604114][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.748155][ T28] audit: type=1800 audit(1776750012.794:6): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 119.819137][ T6686] loop2: detected capacity change from 0 to 32768 [ 119.890951][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.911522][ T4122] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.966886][ T4122] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 120.294423][ T6693] loop1: detected capacity change from 0 to 8192 [ 120.369138][ T6693] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.522076][ T6693] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 120.546743][ T6693] REISERFS (device loop1): using ordered data mode [ 120.563214][ T6693] reiserfs: using flush barriers [ 120.592935][ T6693] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.677122][ T6693] REISERFS (device loop1): checking transaction log (loop1) [ 120.723456][ T6693] REISERFS (device loop1): Using r5 hash to sort names [ 120.767311][ T6693] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 120.809298][ T6706] loop3: detected capacity change from 0 to 8192 [ 120.871289][ T6706] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.007507][ T6706] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 121.047419][ T6706] REISERFS (device loop3): using ordered data mode [ 121.107735][ T6706] reiserfs: using flush barriers [ 121.138283][ T6706] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.171014][ T6713] netlink: 19 bytes leftover after parsing attributes in process `syz.0.346'. [ 121.219882][ T6706] REISERFS (device loop3): checking transaction log (loop3) [ 121.279170][ T6706] REISERFS (device loop3): Using rupasov hash to sort names [ 121.308042][ T6706] REISERFS (device loop3): using 3.5.x disk format [ 121.351234][ T6706] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.401005][ T6706] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.456181][ T6706] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.491281][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 121.494027][ T6706] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.699085][ T6722] loop0: detected capacity change from 0 to 256 [ 121.752178][ T6710] loop2: detected capacity change from 0 to 32768 [ 121.792628][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.345 (6710) [ 121.831313][ T6706] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.864460][ T6710] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.891808][ T6706] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 121.922287][ T6710] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.000264][ T6710] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.054335][ T6710] BTRFS info (device loop2): trying to use backup root at mount time [ 122.084784][ T6710] BTRFS info (device loop2): setting nodatasum [ 122.123889][ T6710] BTRFS info (device loop2): enabling ssd optimizations [ 122.184335][ T6710] BTRFS info (device loop2): using spread ssd allocation scheme [ 122.226898][ T6728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.353'. [ 122.277289][ T6710] BTRFS info (device loop2): turning on flush-on-commit [ 122.350938][ T6710] BTRFS info (device loop2): force zlib compression, level 3 [ 122.447150][ T6710] BTRFS info (device loop2): using free space tree [ 122.723051][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 122.948230][ T6757] loop1: detected capacity change from 0 to 2368 [ 123.015033][ T5759] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.046224][ T6751] loop0: detected capacity change from 0 to 8192 [ 123.458805][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.862031][ T6767] sp0: Synchronizing with TNC [ 123.924758][ T6766] [U] è` [ 124.508948][ T6775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 124.767757][ T6779] loop1: detected capacity change from 0 to 4096 [ 124.797227][ T6783] loop2: detected capacity change from 0 to 256 [ 124.834129][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.010888][ T28] audit: type=1800 audit(1776750018.054:7): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.369" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 125.226910][ T6769] loop0: detected capacity change from 0 to 32768 [ 125.247868][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.290453][ T6792] loop2: detected capacity change from 0 to 512 [ 125.366836][ T6769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.393156][ T6792] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.396245][ T6798] netlink: 'syz.3.377': attribute type 7 has an invalid length. [ 125.414125][ T6798] netlink: 'syz.3.377': attribute type 8 has an invalid length. [ 125.579520][ T6769] (syz.0.364,6769,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 125.602862][ T6769] (syz.0.364,6769,1):ocfs2_trim_mainbm:7610 ERROR: status = -12 [ 125.911248][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 126.654593][ T6823] loop1: detected capacity change from 0 to 256 [ 126.715803][ T6802] loop3: detected capacity change from 0 to 40427 [ 126.768479][ T6802] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 126.779968][ T6802] F2FS-fs (loop3): Image doesn't support compression [ 126.788676][ T6802] F2FS-fs (loop3): Image doesn't support compression [ 126.803817][ T6802] F2FS-fs (loop3): invalid crc value [ 126.813481][ T6823] FAT-fs (loop1): Directory bread(block 64) failed [ 126.849093][ T6823] FAT-fs (loop1): Directory bread(block 65) failed [ 126.866205][ T6802] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.870975][ T6823] FAT-fs (loop1): Directory bread(block 66) failed [ 126.903467][ T6823] FAT-fs (loop1): Directory bread(block 67) failed [ 126.962000][ T6823] FAT-fs (loop1): Directory bread(block 68) failed [ 126.995417][ T6823] FAT-fs (loop1): Directory bread(block 69) failed [ 127.020993][ T6823] FAT-fs (loop1): Directory bread(block 70) failed [ 127.051243][ T6802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.063879][ T6823] FAT-fs (loop1): Directory bread(block 71) failed [ 127.090858][ T6823] FAT-fs (loop1): Directory bread(block 72) failed [ 127.118444][ T6823] FAT-fs (loop1): Directory bread(block 73) failed [ 127.225184][ T6802] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 127.291769][ T6802] syz.3.378: attempt to access beyond end of device [ 127.291769][ T6802] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 127.501448][ T5772] syz-executor: attempt to access beyond end of device [ 127.501448][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.530119][ T6821] loop0: detected capacity change from 0 to 32768 [ 127.549378][ T5772] F2FS-fs (loop3): Remounting filesystem read-only [ 127.573629][ T6821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.388 (6821) [ 127.642949][ T6821] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.671077][ T6821] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 127.696831][ T6821] BTRFS info (device loop0): using free space tree [ 127.824019][ T6821] BTRFS info (device loop0): enabling ssd optimizations [ 127.855031][ T6821] BTRFS info (device loop0): auto enabling async discard [ 128.179342][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.446156][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5759) [ 128.639767][ T6863] loop3: detected capacity change from 0 to 16 [ 128.693550][ T6865] loop2: detected capacity change from 0 to 64 [ 128.721342][ T6863] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.030880][ T6902] loop1: detected capacity change from 0 to 512 [ 130.067508][ T6905] loop3: detected capacity change from 0 to 512 [ 130.070460][ T6906] loop0: detected capacity change from 0 to 512 [ 130.081466][ T6905] EXT4-fs: Ignoring removed orlov option [ 130.110549][ T6905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.175332][ T6906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.204468][ T6906] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.249185][ T6905] EXT4-fs (loop3): 1 orphan inode deleted [ 130.264486][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.290113][ T6905] EXT4-fs (loop3): 1 truncate cleaned up [ 130.328753][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.355656][ T6902] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.570381][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.614170][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.651070][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.781343][ T787] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 130.924163][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.426'. [ 131.022324][ T787] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 131.022610][ T6931] loop1: detected capacity change from 0 to 512 [ 131.051374][ T787] usb 3-1: config 0 has no interface number 0 [ 131.063881][ T787] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.110483][ T787] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 131.144513][ T787] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 131.172514][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.191012][ T787] usb 3-1: Manufacturer: syz [ 131.196071][ T787] usb 3-1: SerialNumber: syz [ 131.218964][ T6933] loop3: detected capacity change from 0 to 4096 [ 131.237400][ T787] usb 3-1: config 0 descriptor?? [ 131.256054][ T6933] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 131.262537][ T6931] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.271663][ T6933] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.308603][ T6933] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 131.345661][ T6933] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 131.383074][ T6933] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 131.415834][ T6933] ntfs: volume version 3.1. [ 131.446921][ T6933] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 131.471358][ T6933] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 131.507117][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.518085][ T6933] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 131.544533][ T6933] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 131.570071][ T6933] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 131.890065][ T6939] loop1: detected capacity change from 0 to 1024 [ 131.924624][ T787] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 131.955912][ T787] usb 3-1: USB disconnect, device number 5 [ 131.972721][ T6939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.049478][ T6925] loop0: detected capacity change from 0 to 40427 [ 132.074182][ T6925] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 132.075473][ T6939] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.431: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 132.084568][ T6925] F2FS-fs (loop0): Image doesn't support compression [ 132.084674][ T6925] F2FS-fs (loop0): Image doesn't support compression [ 132.115082][ T6925] F2FS-fs (loop0): invalid crc value [ 132.145322][ T6925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.216712][ T6925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.228350][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.314882][ T6925] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 132.368000][ T6925] syz.0.424: attempt to access beyond end of device [ 132.368000][ T6925] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 132.387624][ T6948] bridge0: entered promiscuous mode [ 132.409494][ T6948] bridge0: left promiscuous mode [ 132.457184][ T5768] syz-executor: attempt to access beyond end of device [ 132.457184][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.475644][ T5768] F2FS-fs (loop0): Remounting filesystem read-only [ 133.141807][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151309][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.269090][ T6964] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 133.277957][ T6964] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 133.295476][ T6964] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 133.437180][ T6968] loop0: detected capacity change from 0 to 512 [ 133.451731][ T6968] EXT4-fs: Ignoring removed orlov option [ 133.469340][ T6968] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.502374][ T6968] EXT4-fs (loop0): 1 orphan inode deleted [ 133.509224][ T6968] EXT4-fs (loop0): 1 truncate cleaned up [ 133.518340][ T6968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.643628][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.834401][ T6960] loop1: detected capacity change from 0 to 32768 [ 133.910948][ T6960] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.919099][ T6956] loop2: detected capacity change from 0 to 32768 [ 134.007696][ T6980] loop3: detected capacity change from 0 to 2048 [ 134.107693][ T6980] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 134.127069][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 134.187916][ T6960] XFS (loop1): Ending clean mount [ 134.245031][ T6980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.426952][ T6989] loop2: detected capacity change from 0 to 512 [ 134.473720][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.568902][ T6989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.672637][ T6989] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.007241][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.293177][ T7003] loop2: detected capacity change from 0 to 512 [ 135.306005][ T7005] loop1: detected capacity change from 0 to 164 [ 135.338519][ T7005] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.382440][ T7003] EXT4-fs: Ignoring removed orlov option [ 135.411032][ T7003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.441649][ T7005] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.486725][ T7003] EXT4-fs (loop2): 1 orphan inode deleted [ 135.546335][ T7003] EXT4-fs (loop2): 1 truncate cleaned up [ 135.563692][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.810120][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.942226][ T7013] sctp: [Deprecated]: syz.2.458 (pid 7013) Use of int in max_burst socket option. [ 135.942226][ T7013] Use struct sctp_assoc_value instead [ 136.204243][ T7015] loop2: detected capacity change from 0 to 4096 [ 136.226375][ T7015] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 136.284892][ T7001] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 136.299048][ T7015] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 136.310896][ T7001] F2FS-fs (loop0): heap/no_heap options were deprecated [ 136.349985][ T7001] F2FS-fs (loop0): invalid crc value [ 136.366305][ T7015] ntfs3: loop2: ino=5, "/" directory corrupted [ 136.404325][ T7001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.519527][ T7001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.592094][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 136.592108][ T28] audit: type=1800 audit(1776750029.644:8): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.455" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 136.680237][ T5768] syz-executor: attempt to access beyond end of device [ 136.680237][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.725321][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 136.789364][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 137.032007][ T7032] set_capacity_and_notify: 1 callbacks suppressed [ 137.032022][ T7032] loop3: detected capacity change from 0 to 2048 [ 137.222124][ T7032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.396321][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.825877][ T7051] loop3: detected capacity change from 0 to 512 [ 137.876978][ T7051] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 137.941582][ T7051] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.945731][ T7036] loop2: detected capacity change from 0 to 32768 [ 137.981670][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.021874][ T7051] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 138.046306][ T7036] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 138.063329][ T7051] EXT4-fs (loop3): 1 orphan inode deleted [ 138.079774][ T7051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.115207][ T7036] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.196398][ T7051] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 138.254396][ T7051] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 138.269909][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.368225][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.412419][ T7036] XFS (loop2): Ending clean mount [ 138.428931][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.435550][ T7036] XFS (loop2): Quotacheck needed: Please wait. [ 138.483431][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.528516][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.537848][ T7036] XFS (loop2): Quotacheck: Done. [ 138.589994][ T7047] loop1: detected capacity change from 0 to 32768 [ 138.600868][ T7051] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.474: Block bitmap for bg 0 marked uninitialized [ 138.644165][ T7047] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.473 (7047) [ 138.724277][ T7047] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 138.787929][ T7047] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.820216][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.835707][ T7047] BTRFS info (device loop1): using free space tree [ 139.107563][ T7047] BTRFS info (device loop1): enabling ssd optimizations [ 139.107614][ T7047] BTRFS info (device loop1): auto enabling async discard [ 139.162260][ T7079] loop0: detected capacity change from 0 to 1024 [ 139.166437][ T7079] EXT4-fs: Ignoring removed orlov option [ 139.217611][ T7079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.304899][ T5776] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 139.463553][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.465094][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.901733][ T7095] loop0: detected capacity change from 0 to 1024 [ 139.929619][ T7095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.037013][ T7095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.118377][ T7095] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.483: missing EA_INODE flag [ 140.150773][ T7095] EXT4-fs (loop0): Remounting filesystem read-only [ 140.268747][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.579197][ T7118] loop0: detected capacity change from 0 to 1024 [ 140.849798][ T49] hfsplus: b-tree write err: -5, ino 25 [ 140.910265][ T49] hfsplus: b-tree write err: -5, ino 4 [ 140.923577][ T49] hfsplus: b-tree write err: -5, ino 2 [ 140.952314][ T49] hfsplus: b-tree write err: -5, ino 26 [ 141.043727][ T7124] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.495'. [ 141.056241][ T7124] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.495'. [ 141.832293][ T7149] netlink: 332 bytes leftover after parsing attributes in process `syz.2.506'. [ 141.950558][ T7131] loop0: detected capacity change from 0 to 32768 [ 142.029511][ T7131] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.100385][ T7156] loop2: detected capacity change from 0 to 4096 [ 142.175886][ T7131] XFS (loop0): Ending clean mount [ 142.208993][ T7166] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.387312][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.320492][ T7184] capability: warning: `syz.3.521' uses 32-bit capabilities (legacy support in use) [ 143.357050][ T7158] loop1: detected capacity change from 0 to 40427 [ 143.410977][ T7158] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 143.472414][ T7158] F2FS-fs (loop1): heap/no_heap options were deprecated [ 143.513993][ T7158] F2FS-fs (loop1): invalid crc value [ 143.592971][ T7158] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.609209][ T7172] loop0: detected capacity change from 0 to 32768 [ 143.695196][ T7172] JBD2: Ignoring recovery information on journal [ 143.773220][ T7158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.974101][ T7172] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.997027][ T28] audit: type=1800 audit(1776750037.044:9): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.509" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 143.997423][ T7195] loop3: detected capacity change from 0 to 64 [ 144.214365][ T5776] syz-executor: attempt to access beyond end of device [ 144.214365][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.276658][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 144.432255][ T7197] syz.0.514 (7197) used greatest stack depth: 17840 bytes left [ 144.559293][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 145.084601][ T7206] netlink: 'syz.1.524': attribute type 5 has an invalid length. [ 145.209467][ T7211] overlayfs: conflicting options: nfs_export=on,index=off [ 145.390020][ T7216] loop1: detected capacity change from 0 to 256 [ 145.467154][ T7216] FAT-fs (loop1): Directory bread(block 64) failed [ 145.501904][ T7216] FAT-fs (loop1): Directory bread(block 65) failed [ 145.508801][ T7216] FAT-fs (loop1): Directory bread(block 66) failed [ 145.550752][ T7216] FAT-fs (loop1): Directory bread(block 67) failed [ 145.581251][ T7216] FAT-fs (loop1): Directory bread(block 68) failed [ 145.587862][ T7216] FAT-fs (loop1): Directory bread(block 69) failed [ 145.608228][ T7221] loop3: detected capacity change from 0 to 1024 [ 145.611256][ T7216] FAT-fs (loop1): Directory bread(block 70) failed [ 145.640730][ T7216] FAT-fs (loop1): Directory bread(block 71) failed [ 145.648169][ T7216] FAT-fs (loop1): Directory bread(block 72) failed [ 145.652550][ T7221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.680987][ T7216] FAT-fs (loop1): Directory bread(block 73) failed [ 145.767173][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.827057][ T7221] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.975353][ T7221] EXT4-fs (loop3): re-mounted 00000000-0000-0006-0000-000000000000. [ 146.106785][ T7231] netlink: 'syz.1.536': attribute type 6 has an invalid length. [ 146.117546][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.913820][ T7253] loop3: detected capacity change from 0 to 512 [ 146.961962][ T7253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.008414][ T7253] EXT4-fs (loop3): 2 truncates cleaned up [ 147.057567][ T7253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.182164][ T7253] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.3.548: path /154/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 147.217239][ T7239] loop2: detected capacity change from 0 to 32768 [ 147.237010][ T7239] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.541 (7239) [ 147.267568][ T7239] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.273238][ T7253] EXT4-fs (loop3): Remounting filesystem read-only [ 147.289680][ T7239] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 147.299950][ T7239] BTRFS info (device loop2): using free space tree [ 147.358079][ T7239] BTRFS info (device loop2): enabling ssd optimizations [ 147.359186][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.378266][ T7239] BTRFS info (device loop2): auto enabling async discard [ 147.491089][ T5771] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.962796][ T7286] loop1: detected capacity change from 0 to 2048 [ 148.056509][ T7286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.555020][ T7282] loop3: detected capacity change from 0 to 32768 [ 148.593477][ T7282] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.552 (7282) [ 148.676617][ T7282] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 148.690318][ T7305] tmpfs: Bad value for 'nr_inodes' [ 148.713369][ T7282] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 148.750731][ T7282] BTRFS info (device loop3): using free space tree [ 149.005282][ T7282] BTRFS info (device loop3): enabling ssd optimizations [ 149.041257][ T7282] BTRFS info (device loop3): auto enabling async discard [ 149.444814][ T5772] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 149.998251][ T7355] ipvlan2: entered promiscuous mode [ 150.256061][ T7343] loop0: detected capacity change from 0 to 32768 [ 150.265485][ T7358] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.312948][ T7343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.575 (7343) [ 150.394301][ T7345] loop2: detected capacity change from 0 to 32768 [ 150.420776][ T7343] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.454194][ T7343] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.499560][ T7362] loop1: detected capacity change from 0 to 256 [ 150.512754][ T7343] BTRFS info (device loop0): using free space tree [ 150.538228][ T7345] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 150.739157][ T7380] loop3: detected capacity change from 0 to 64 [ 150.780912][ T7343] BTRFS info (device loop0): enabling ssd optimizations [ 150.788574][ T7343] BTRFS info (device loop0): auto enabling async discard [ 150.884772][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 151.249224][ T7389] loop2: detected capacity change from 0 to 164 [ 151.291789][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.323108][ T7387] loop3: detected capacity change from 0 to 8192 [ 151.334177][ T7389] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 151.396934][ T7387] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.494181][ T7387] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 151.541866][ T7387] REISERFS (device loop3): using ordered data mode [ 151.561435][ T7387] reiserfs: using flush barriers [ 151.613826][ T7387] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.711590][ T7387] REISERFS (device loop3): checking transaction log (loop3) [ 151.932945][ T7387] REISERFS (device loop3): Using tea hash to sort names [ 151.940595][ T7387] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 152.300714][ T7408] loop0: detected capacity change from 0 to 4096 [ 152.321020][ T7408] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 152.425382][ T7408] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 152.768545][ T7425] loop2: detected capacity change from 0 to 64 [ 152.803717][ T64] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22. [ 152.926645][ T7425] Trying to free block not in datazone [ 153.637064][ T7461] loop1: detected capacity change from 0 to 256 [ 153.972724][ T7476] loop1: detected capacity change from 0 to 8 [ 155.239490][ T7492] loop3: detected capacity change from 0 to 32768 [ 155.251187][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.278389][ T7492] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.343541][ T7492] XFS (loop3): Ending clean mount [ 155.478603][ T787] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 155.500310][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.528482][ T787] usb 1-1: Product: syz [ 155.531608][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.540822][ T787] usb 1-1: Manufacturer: syz [ 155.551148][ T787] usb 1-1: SerialNumber: syz [ 155.568431][ T787] usb 1-1: config 0 descriptor?? [ 155.575323][ T7530] loop1: detected capacity change from 0 to 2048 [ 155.652855][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.692155][ T7530] EXT4-fs error (device loop1): ext4_find_extent:909: inode #2: comm syz.1.637: inode has invalid extent depth: 9 [ 155.729061][ T7530] EXT4-fs (loop1): Remounting filesystem read-only [ 155.766085][ T7508] loop2: detected capacity change from 0 to 32768 [ 155.824593][ T787] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 155.835353][ T7508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.631 (7508) [ 155.865411][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.922760][ T7508] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.015568][ T7508] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 156.056948][ T787] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 156.060758][ T7508] BTRFS info (device loop2): using free space tree [ 156.071279][ T787] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 156.088901][ T787] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 156.210541][ T787] peak_usb: probe of 1-1:0.0 failed with error -22 [ 156.220480][ T7508] BTRFS info (device loop2): enabling ssd optimizations [ 156.231355][ T7508] BTRFS info (device loop2): auto enabling async discard [ 156.286075][ T787] usb 1-1: USB disconnect, device number 3 [ 156.320466][ T7557] tipc: Started in network mode [ 156.332224][ T7557] tipc: Node identity fff, cluster identity 4711 [ 156.351081][ T7557] tipc: Node number set to 4095 [ 156.380789][ T7557] tipc: Cannot configure node identity twice [ 156.467558][ T7559] loop3: detected capacity change from 0 to 8 [ 156.664962][ T7562] loop1: detected capacity change from 0 to 4096 [ 156.682351][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.712357][ T7562] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 156.731638][ T7562] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 156.958209][ T1108] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 157.010985][ T5776] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 157.043859][ T5776] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 157.086808][ T5776] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 157.117450][ T49] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 157.503423][ T7580] ipvlan2: entered promiscuous mode [ 158.034938][ T7602] loop2: detected capacity change from 0 to 512 [ 158.077227][ T7602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.130093][ T7602] EXT4-fs (loop2): 1 truncate cleaned up [ 158.140274][ T7602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.279879][ T7590] loop1: detected capacity change from 0 to 32768 [ 158.308075][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.341765][ T7590] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.653 (7590) [ 158.414692][ T7590] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 158.470937][ T7590] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 158.508371][ T7590] BTRFS info (device loop1): using free space tree [ 158.655160][ T7590] BTRFS info (device loop1): enabling ssd optimizations [ 158.669978][ T7590] BTRFS info (device loop1): auto enabling async discard [ 158.922306][ T5776] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 159.568227][ T7652] loop1: detected capacity change from 0 to 256 [ 159.630285][ T7612] loop0: detected capacity change from 0 to 32768 [ 159.669966][ T7612] XFS: attr2 mount option is deprecated. [ 159.689747][ T7652] FAT-fs (loop1): Directory bread(block 64) failed [ 159.730327][ T7652] FAT-fs (loop1): Directory bread(block 65) failed [ 159.771630][ T7652] FAT-fs (loop1): Directory bread(block 66) failed [ 159.791837][ T7652] FAT-fs (loop1): Directory bread(block 67) failed [ 159.801055][ T7612] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.840986][ T7652] FAT-fs (loop1): Directory bread(block 68) failed [ 159.866742][ T7652] FAT-fs (loop1): Directory bread(block 69) failed [ 159.905977][ T7652] FAT-fs (loop1): Directory bread(block 70) failed [ 159.970863][ T7652] FAT-fs (loop1): Directory bread(block 71) failed [ 159.974587][ T7636] loop2: detected capacity change from 0 to 40427 [ 159.991227][ T7636] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 160.002535][ T7636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 160.016966][ T7636] F2FS-fs (loop2): invalid crc value [ 160.022754][ T7652] FAT-fs (loop1): Directory bread(block 72) failed [ 160.057208][ T7612] XFS (loop0): Ending clean mount [ 160.073388][ T7652] FAT-fs (loop1): Directory bread(block 73) failed [ 160.092562][ T7612] XFS (loop0): Quotacheck needed: Please wait. [ 160.323345][ T7612] XFS (loop0): Quotacheck: Done. [ 160.428555][ T7636] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 160.450765][ T7636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.534736][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.661204][ T5771] syz-executor: attempt to access beyond end of device [ 160.661204][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.684212][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.014961][ T7687] loop3: detected capacity change from 0 to 8192 [ 161.072350][ T7687] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.115959][ T7687] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 161.182621][ T7687] REISERFS (device loop3): using ordered data mode [ 161.218726][ T7687] reiserfs: using flush barriers [ 161.235578][ T7687] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.254425][ T7687] REISERFS (device loop3): checking transaction log (loop3) [ 161.306415][ T7687] REISERFS (device loop3): Using r5 hash to sort names [ 161.321746][ T7690] netlink: 'syz.0.675': attribute type 32 has an invalid length. [ 161.333715][ T7687] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 161.339659][ T7683] loop1: detected capacity change from 0 to 32768 [ 161.386459][ T7683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.673 (7683) [ 161.399715][ T7687] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 161.432339][ T7683] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.491446][ T7683] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.500339][ T7683] BTRFS info (device loop1): using free space tree [ 161.680961][ T7683] BTRFS info (device loop1): enabling ssd optimizations [ 161.688245][ T7683] BTRFS info (device loop1): auto enabling async discard [ 161.886920][ T7712] netlink: 6 bytes leftover after parsing attributes in process `syz.0.681'. [ 161.931306][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.950832][ T5611] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.106943][ T7717] loop3: detected capacity change from 0 to 16 [ 162.134870][ T7717] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 162.163901][ T5611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 162.227042][ T5611] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 162.245483][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.299056][ T5611] usb 3-1: config 0 descriptor?? [ 162.419039][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5759) [ 162.423924][ T7725] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.523990][ T7725] loop3: detected capacity change from 0 to 128 [ 162.632536][ T5762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.770978][ T7731] No buffer was provided with the request [ 162.795914][ T5611] pantherlord 0003:0F30:0111.0004: item fetching failed at offset 2/40 [ 162.825697][ T5611] pantherlord 0003:0F30:0111.0004: parse failed [ 162.856139][ T5611] pantherlord: probe of 0003:0F30:0111.0004 failed with error -22 [ 163.049405][ T5611] usb 3-1: USB disconnect, device number 6 [ 163.448487][ T7750] kAFS: unable to lookup cell 'sÕ§K²ùyyµ¬ [ 163.448487][ T7750] [ 163.448487][ T7750] =6%ñ©*°;¾eÕܲ5ô;ZÑ*ëÜd{ªÀ¿iElÝZS—j—­UF/»øk!ªb…tF\_·Üvf£Vn¯D…ìPʳ¤ý´PÑB1Ú%ÐA)X¥ã‰\YT"8ÏŽŽµd²J_¿.ÖÁÐé5d×#ãÛœÒh»Gp6è"±5ͺô*§ÛÒ,‚š°âI—ÚémÞíIæ-(WÕAž?”¨¹WÏZ)nÑ[ÿ®qG jnÚ‡%(„J-ô%ؘccʵÌÎÅ{|ê6ZØÉûçËA–5Îkó@¥aÀ­’+o­éSŽT;ÅÞò¨]5«Ò !œG3ƒ{âÁK¤ÓÓ,' [ 163.821023][ T7737] loop0: detected capacity change from 0 to 40427 [ 163.854689][ T7737] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 163.879850][ T7737] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.932898][ T7759] vcan0: MTU too low for tipc bearer [ 163.951230][ T7737] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.960854][ T7759] tipc: Enabling of bearer rejected, failed to enable media [ 164.037133][ T7764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.703'. [ 164.133303][ T7737] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.156634][ T7737] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.223125][ T7768] nftables ruleset with unbound set [ 164.483844][ T7753] loop3: detected capacity change from 0 to 32768 [ 164.704927][ T7753] read_mapping_page failed! [ 164.739880][ T7753] ERROR: (device loop3): txCommit: [ 164.739880][ T7753] [ 164.783713][ T7753] ERROR: (device loop3): remounting filesystem as read-only [ 164.848881][ T112] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 164.867114][ T112] ------------[ cut here ]------------ [ 164.873374][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 164.900913][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 164.907149][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 164.914671][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.925078][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 164.930210][ T112] Code: 0f 36 73 07 0f 0b e8 68 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 e9 35 73 07 <0f> 0b e8 42 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 164.950429][ T112] RSP: 0018:ffffc90002667d08 EFLAGS: 00010246 [ 164.956498][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 93dd80147906ee00 [ 164.964557][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 164.972604][ T112] RBP: ffffc9000288a0d8 R08: ffffc90002667a07 R09: 1ffff920004ccf40 [ 164.980941][ T112] R10: dffffc0000000000 R11: fffff520004ccf41 R12: ffff8880307be6c8 [ 164.988980][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807cc13494 [ 164.997220][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 165.006166][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.012933][ T112] CR2: 0000001b2d61eff8 CR3: 00000000648ce000 CR4: 00000000003506e0 [ 165.021252][ T112] Call Trace: [ 165.024620][ T112] [ 165.027595][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 165.032887][ T112] jfs_lazycommit+0x56e/0xa70 [ 165.037869][ T112] ? txFreelock+0x5a0/0x5a0 [ 165.042489][ T112] ? do_task_dead+0xd0/0xd0 [ 165.047126][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 165.052181][ T112] kthread+0x2fa/0x390 [ 165.056252][ T112] ? txFreelock+0x5a0/0x5a0 [ 165.060780][ T112] ? kthread_blkcg+0xd0/0xd0 [ 165.065506][ T112] ret_from_fork+0x48/0x80 [ 165.069953][ T112] ? kthread_blkcg+0xd0/0xd0 [ 165.074587][ T112] ret_from_fork_asm+0x11/0x20 [ 165.079365][ T112] [ 165.082397][ T112] Modules linked in: [ 165.190461][ T112] ---[ end trace 0000000000000000 ]--- [ 165.195486][ T7773] loop1: detected capacity change from 0 to 40427 [ 165.197368][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 165.210141][ T112] Code: 0f 36 73 07 0f 0b e8 68 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 e9 35 73 07 <0f> 0b e8 42 9b 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 165.255044][ T112] RSP: 0018:ffffc90002667d08 EFLAGS: 00010246 [ 165.261694][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 93dd80147906ee00 [ 165.270280][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 165.290942][ T7773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.300937][ T112] RBP: ffffc9000288a0d8 R08: ffffc90002667a07 R09: 1ffff920004ccf40 [ 165.314742][ T112] R10: dffffc0000000000 R11: fffff520004ccf41 R12: ffff8880307be6c8 [ 165.325119][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807cc13494 [ 165.345048][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 165.351211][ T7773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.364516][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.380731][ T112] CR2: 0000001b2d81bff8 CR3: 000000002e222000 CR4: 00000000003506e0 [ 165.392315][ T112] Kernel panic - not syncing: Fatal exception [ 165.398843][ T112] Kernel Offset: disabled [ 165.403391][ T112] Rebooting in 86400 seconds..