last executing test programs: 3m55.233615668s ago: executing program 4 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003700"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m54.839485036s ago: executing program 4 (id=954): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x9909cb}) 3m54.461208136s ago: executing program 4 (id=957): syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x8847, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0) 3m54.138511015s ago: executing program 4 (id=961): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000002d80)={[{@noquota}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@discard}, {@errors_continue}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 3m52.238347339s ago: executing program 4 (id=977): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 3m51.335756596s ago: executing program 4 (id=985): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) 3m50.654668632s ago: executing program 32 (id=985): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) 1m1.689549659s ago: executing program 1 (id=2468): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2200000, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x1, 0xef4, &(0x7f0000000f80)="$eJzs3UFsHNUZAOA3a6/txCZeAwUDJaTQikDBDkmkpjcjUI+IS++gkNAoJo0aeiAKxPSAqIQoUsSp4kDFhVIpRSoSqFIV9dT21Kq3HirUC5WqVArqoY2UuIr9Zr377GHXY3vWu/t90u+3b97s/P94o83MePZtAIZWbeXn0aOzWQjvfnbp6VdfyD65teyB5hoHVn5msdcIIdRb+lmyvc/jghvXLhzfqM3C4ZWfeT88c7X53MkQwlI4EK6ERvhofvHLD9976uDHb0zc9fb506/t0O43pfsBAACD6PKfFv/2yD//+NjM9cv7F8J4c3l+fN6I/cl43H8oHijnx8u10N7PWqLVWLLeSIxast5Ist5okme0IF892U69YL2xDvlGWpZttJ8AAADQj/Lz2kbIanNt/Vptbm71vP+Wz6fHsrkzpxZPnutRoQAAAEBp/7m4ctOtEEIIIYQQQgghBjiWp3t9BQIAAAAYNul8Yessbe9MXc2tNbrLf/XJ2sbPh21Q9b9/+fsr/weve8cBAKC8QT2azPcrP47O5zFI5xEcSZ63yeP/5sWAkWS73SqaV7Bf5hssqjP9ve5WRfVv9nXslaL60/kwd6ui+tN5OnerovrHK66jrKL6Jyquo6yi+vdUXEdZRfXvrbiOsorqn6y4jrKK6p+quI6yiuq/reI6yiqqf1/FdZRVVH+/3FZbVH+j4jrKKqp/puI6yiqq//aK6yirqP47Kq6jrKL676y4jl65P7b572F/Mt56/pye0/XLOR4AAAAMu/+Z/08IIYQQQgghehlrt5/2vhYxwHFx85cM+uXWUAAAAKBL+ecC8k+9L0f5+EiH8dHW8Ym1FfLxeofnj3UYH+8wDgAAAITw2zdP3vNOtvY5/y3Oh9e8OWBP+ORmKDGPUTof4Wbzb3Xes63m75d5ywAAABgu2feu3Hz06fdfnrl+ef9Cy9nvzXi+m88DOhqvDXwa+/l9AVNJP8vPoRfa89QK1kuvD9xWtL1nt7ijAAAAMMTy8/dGyGpzLefdjVCrzc2tnY/Phnp28tTiiUOxn38/yx+m6+O3lj9Rcd0AAABA99bO9zc+/8+/x3c2jGVzZ04tnjy32p9qLq/XWq8LTK8tz1qvCzSS5YcLlh+J/fz7O38wvWdl+dzxHy6+sN07DwAAAEPi3CvnTz+/uHjiRx544IEHzQe9fmcCAAC22xdfXKr/+MjU71Y//782/13++f8Dsd+Ic/v9Oa6Q3yeQfw5g3ef1n2vPM1203tn29RrJeiMxxpO6J1q2E1bmG2x/3kxRvkb7dsYK8k0m+aaSfOk8BaPJ+nm+fcnydH7CfL3pZHk6D+NokiNL8j8YAAAAoNj8yy+dnT/3yvnHT730/IsnXjxx5sjhY989duzQE995Yn7lvv751rv7AQAAgH60dtNv98/5+04WBAAAAAAAAAAAAAAAAAAAAEOoiq8T6/U+AgAAwLD798UQwpIQQpSO5fHe1yB2a0zsghqEEEIIIcRKLC+n3zQPAAAAsLNuXLtwvLVdZynb1nzNrTVWm5sxb95OPf7XmVuRr3b1yfbrJXu3tRqGXdX//uXvr/wfvL69+SfyB12//9XaN7BQLu/D87+cbc1/72iX+dP9f7Zc/oNJ/odDd/mX30/yP1cu/yNJ/r1d5l+3/2fL5X805p+N/YMPdZu//fUfj22+H3u6zP/tZP9fCN3mT/a/0WXCxGMxPwAMo1qvC9gh+VFCfhw9Gfv5/sbDzZDe/bDZ4/9asp3RLVfevt38OOju2M+Pl6aSvLnN1j+ZbO+2knWm+uWukqL6t+t13GlF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovq7PQ/ttaL6++W6clH9kxXXUVZR/VMV11FWUf2b/X+8V4rq31dxHWUV1T9dcR1lFdVf8rJa5Yrqn6m4jrKK6r+94jrKKqr/jorrKKuo/jsrrqNX7ott0flwfv45HcfyfiPpj2/wuxzUawsAAADQb/612+b/e3YX1CCEEEIMd6z+WaD3dQghvjKWl5sH9duwvf8ur+r9fgmRxMIuqGFAouVdgyG0s59mBmC38v4/3Lz+w83rP9y8/nyV/B7+LOnnRjqMj3YYr3cYH0vG03+v4x3G70i2u5xf14zu7DD+tQ7j+zqM391hfLbD+D0dxu/tMH5fh3EAAACGw12xdX4IAAAAg+vVX3361m8efu7azPXL+xfC2Lp55w/F/nj82/qbsZ/Oe5+rx7/5/yT2fxHb38f2H8n67j8BAACAnZd/T4y//wMAAMDgyr+n1Pk/AAAADK6Z2Dr/BwAAgMF1e2yd/wMAAMAAyyY2Xhzb/LrAg7Htdl4/AGD3+3ps74/t/tg+ENtvxDY/Dngott+sqD4AYPv8/Ps/PfZOtjbf/5Fk/EZcnrfrLK1eKchq7TP574nt3th+q8t60u8D6DZ/bl+XeXYq//QW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg6O28vPo0dkshHc/u/T0z8be+sutZQ801ziw8jOLvUYIod58Xj661v91XPHGtQvHW9ubsc3C4ZCFrLk8PHO1mWkyhLAUDoQroRE+ml/88sP3njr48RsTd719/vRrO/graNs/AAAAGET/DwAA//+M3Sdg") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x149442, 0xb3) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 1m0.817304435s ago: executing program 1 (id=2475): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x6, 0x8, &(0x7f0000000080)={0x1b, "f401f648b6548ae23ef239ae1e70cb9a1959d0028b5182610dcdaa0922d29616d0"}}) 59.063797798s ago: executing program 1 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}}, 0x0) 58.699377935s ago: executing program 1 (id=2495): syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x61d3, &(0x7f0000008140)="$eJzs3c1vHGcdB/DfvvqltLV6qEqFkJuWl1KaxEkJgQJND3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0XER09FbG2vr9aLLxyyH9/9499/98Mn3vrbHwbn/vunO73XJ6139+6v/vPne0fbZgAAAChNVVVVJ33Mfz59vu+23SkAYCry63+V5OWnvv71P9/6yyz1R61Wq9XqKdRN1Xj3mkVEbDRvU79ncDgeAE6Yjfi47S7QIvkXrR8RT7TdCWCmddruAMdia3t9tZPy7TRfD5Z32/O5IPvy3+g8uL5j0vQgo+eYTOvxtRm9eGZCfxam1IdZkvPvjuZ/bbd9mNY77vynZVL+w91Ln4qT8++N5j/i9OTfHZt/qXL+/UfKvyd/AAAAAACYYfn//5daPv47d/RNOZRPOv67PKU+AAAAAAAAAMDjdtTx/x4w/h8AAADMrPqzeu03T+0tm/RdbPXyq52IJ0fWBwqTLpZZbLsfAAAAAAAAAAAAAFCS/u45vFc7EYOIeHJxsaqq+qdptH5UR739SVf69kPJ2n6SBwCAXR89NXItfydiPiKupu/6GywuLlbV/MJitVgtzOX3s8O5+Wqh8bk2T+tlc8NDvCHuD6v6l803btd00Oflg9pHf199X8Oqd4iOPSaD9Nec0NxS2ACQ7L4abXlFOmWq6ulJbz5gH/v/KbQUS20/rph9bT9MAQAAgONXVVXVSV/n/Xw65t9tu1MAwFTk1//R4wJHqrsT2iMez+9Xq9VqtVr9qeqmarx7zSIiNpq3qd8zGI4fAE6Yjfi47S7QIvkXrR8Rz7XdCWCmddruAMdia3t9tZPy7TRfD9L47vlckH35b3R2bpdvP256kNFzTKb1+NqMXjwzoT/PTqkPsyTn3x3N/9pu+zCtd9z5T8uk/Ic7l8yVJ+ffG81/xOnJvzs2/1Ll/PuPlH9P/gAAAAAAMMPy//8vOf6bNxkAAAAAAAAATpyt7fXVfN1rPv7/uTHruf7zdMr5dx41/4U0L/8TLeffHcn/yyPr9Rrz99/c2///vb2++vs7//psnh42/7k800mPrE56RHTSPXX6aXqUrXvY5qA3rO9p0On2+umcn2rwTtyIm7EW5/et201/j732lX3tdU8H+9ov7GvvP9R+cV/7IH3vQLWQ28/GavwkbsbbO+1129wB2z9/QHt1QHvOv+f5v0g5/37jp85/MbV3Rqa1+x92H9rvm9Nx93Plxud/ef74N+dAm9F7sG1N9fadaaE/O3+TJ4bxs9trt87evX7nzq2VSJN9Sy9EmjxmOf/Bzs/c3vP/i7vt+Xm/ub/e/3D4yPnPis3oT8z/xcZ8vb0vT7lvbcj5D9NPzv/t1D5+/z/J+U/e/19poT8AAAAAAAAAAAAAAADwSaqq2rlE9EpEXErX/7R1bSYAMF1XIu5Fej9Qy8vVarVarVafvrqpGu+NZhERf23e5lJE/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpS213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+aWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOMvxM743Gcnjf99Jh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5v9AY77zO//mR4ddLGP91dMz7EuT8zzQez3X+XxpZr5l/9duZy3/jsCtuRndf/ufuvPfTc7ff/+DVG+9df3ft3bUfX1xZOX/x0qXLly+fe+fGzbXzu/8eT69nQM4/j33tPNCy5Pxz5vIvS87/C6mWf1ly/l9MtfzLkvPP7/fkX5acf/7sI/+y5PxfTrX8y5Lz/0qq5V+Wre31uTr/V1It/7Lk/f+rqZZ/WXL+r6Za/mXJ+Z9NtfzLkvM/l+pD5O/r4U+RnH8+wmX/L0vOfyXV8i9Lzv9CquVflpz/xVTLvyw5/9dSLf+y5Py/lmr5lyXnfynV8i9Lzv/rqZZ/WXL+l1Mt/7Lk/L+RavmXJef/zVTLvyw5/9dTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5v5Fq+Zdl7/v/zZgxYybPtP3MBAAAAAAAAAAAAACMmsbpxG1vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TevHUIMhODkb2CTmBCSJbu2E7/wb4oJrw1QCiQU+oLjetdmwW947RIokk0DJRJGpRVV04u2gFAbqaqIKi5oRWkuqr5clfaC3lRUlZAaVQEFVKS2otlq5jzP45nZ2Zld73h99jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnH+s42iKJp/Wn9tL4oXND/eOrW9ddnrrvUWAgAAAOv1v62/n7shXXBoFTdqW+ZvX/EPX19aWloq3j/6O+NfXFpKV0wVxfiWomhdFz31bx9otC8TPFZMNkbaPh8ZsPrRAdePDbh+fMD1EwOu3zLg+skB1y/bActsLX8e07qzXa0Pt5e7tLixGG9dt6vHrR5rbBkZiT/LaWm0brM0fqxYKE4U88Vsx/Llso3W8t+8tbmutxVxXSNt69rZPEJ++MmjcRsaYR/v6ljX5fuMvv+GYupHP/zk0T869+zNvebA3dBxf+V23nlbczs/HS4pt7VRbEn7JG7nSNt27uzxnIx2bGejdbvmx93b+dwqt3P08mZuqO7nfLIYaX387dZ+Gmv/sV7aTzvDZf91e1EUFy9vdvcyy9ZVjBTbOi4Zufz8TJZHZPM+mofSi4uxNR2nt67iOG3OuV2dx2n3ayI+/7eG242tsA3tT9P3PzWx7Hlf63EaNR/1Sq+V7mNw2K+VqhyD8bj4dutBP97zGNwVHv8n71j5GOx57PQ4BtPjbjsGbxt0DI5MjLa2OT0JjdZtLh+DuzuWH22tqdGaz9zR/xicOXfyzMzixz/x2oWTR47PH58/tXf37tm9+/YdOHBg5tjCifnZ8u8r3NvVt60YSa+B28K+i6+BV3ct236oLn15eK/DyT6vw+1dyw77dTjW/eAaG/OCXH5Ml6+Nh5o7ffLSSLHCa6z1/Ny1/tdhetxtr8Oxttdhz68pPV6HY6t4HTaXOXPX6r5nGWv702sbrtbXgu1tx2D39yPdx+Cwvx+pyjE4GY6Lf7lr5a8FO8P2Pj691u9HRpcdg+nhhvee5iXp+/3JA63R67i8pXnFdRPF+cX5s/c8euTcubO7izA2xEvajpXu43Vb22Mqlh2vI2s+Xg8tvOLxW3pcvj3sq8nXNv+aXPG5ai5z7z39n6vWV7fe+7Pj0j1FGEO20fuz11fz5v5MWbLP/mwu8+mZ9X8vnnJp2/vv+ArvvzH3P1+uL93VY6PjY+XrdzTtnfGO9+POp2qs9d7VaK37uZnVvR+Phz8b/X58Y5/34x1dyw77/Xi8+8HF9+PGoJ92rE/38zkZjpMTs/3fj5vL7Niz1mNyrO/78e1hNsL+f01ICikXtR07Kx23aV1jY+PhcY3FNXQep3s7lh8P2ay5rif3XNlxeuft5X2Npkd32UYdp1Ndyw77OE3vVysdp41BP327Mt3P52Q4Lm7c2/84bS7z9L3rf+/cGj9se++cGHQMjo9ONLd5PB2E5fv90tZ4DN5THC1OFyeKuda1E63jqdFa1/R9qzsGJ8KfjX6v3NHnGLyza9lhH4Pp69hKx15jbPmDH4Lu53MyHBdP3Nf/GGwu86b9w/3e9c5wSVqm7XvX7p+vrfQzr1u6dtPV/JlXczv/en//n802lzlxYK05s/9+ujtccl2P/dT9+l3pNTVXbMx+2hG289kDK++n5vY0l/niwVUeT4eKorjw0QdaP+8N/77yZ+e/8/WOf3fp9W86Fz76wA+uP/Y3a9l+ADa/58uxrfxa1/YvU6v5938AAABgU4i5fyTMRP4HAACA2oi5P/6v8ET+BwAAgNqIuX8szCST/L/jTc8uPH+hSM38pSBen3bDg+VyseM6Gz6fWrqsefkDX53/8V9cWN26R4qi+MmDv9Zz+R0Pxu0qTYXtfOrNnZcvv+GFVa3/kYcvL9feX/9SuP/4eFZ7GPSq4M4WRfHNGz7fWs/UBy615tMPPtKa77n4+GPNZZ47WH4eb//MS8rlfz+Ufw8dO9Jx+2fCfvhemLNv770/4u2+duk1O/e/7/L64u0at72w9bCf+GB5v/H35HzhsXL5uJ9X2v6//NyTX2su/+irem//hZHe2/9kuN+vhvnfLy+Xb38Omp/H230mbH9cX7zdPV/5Vs/tf+qz5fJn3lIu90iYcf13hs93veXZhfb99WjjSMfjKt5aLhfXP/ud32xdH+8v3n/39k8evtSxP7qPj6f/qbyfma7l4+VxPdGfd62/eT/tx2dc/5O/8UjHfh60/qfe88zLm/fbvf67u5Yb7bp9929s+oPPfL7n+uL2HPrTMx2P59C7w+s4rP+JD4bjMVz/P099vmO90SPv7nz/ict/afuFjscTve1H5fqfev3x1vz3qR//3nUvuP6FF1/Z3HdF8e33lvc3aP3H//B0x/Z/+aa7Ws9HvD529LvXv5K4/rMfmz51evH8wlzbXm397px3lNuzZXLrtub23hDeW7s/P3z63Ifmz07NTs0WxVR9f4XeFftKmD8ox8W13v6uh8PzecvvfnPbHf/4uXj5Pz9UXn7p7eXXrVeH5b4QLt9ePn9LjXWu/4lbb2q9vhtPl5939NiHYOeu/ziwqgXD4+/+viAe72de+qHWfmhe1/q6EV/X69z+786V9/ONsF+Xwm9mvu2my+trXz7+boRL7y1f7+vef+FtLj6vfxye73d+r7z/uF3x8X43fB/zrR2d73fx+PjGhZHu+2/9Fo+L4f2kuFheH5eK+/vSczf13Lz4e0iKize3Pv/tdD83r+lhrmTx44szJxZOnX905tz84rmZxY9/4vDJ0+dPnTvc+l2ehz886PaX35+2td6f5ub33VvMbi2K4nQxuwFvWFdn+5sfrW77zzx8dG7/7B1z88eOnD927uEz82ePH11cPDo/t3jHkWPH5j826PYLc/fv3nNw7/4908cX5u4/cPDg3oPTC6dONzej3KgB9s1+ZPrU2cOtmyzef+/B3ffdd+/s9MnTc/P375+dnT4/6Patr03TzVv/6vTZ+RNHzi2cnJ9eXPjE/P27D+7bt2fgbwM8eebY4tTM2fOnZs4vzp+dKR/L1LnWxc2vfYNuTz0t/mv5/Wy3RvmL+Ip33b0v/X7Wpq9+asW7Khfp+gWiz4bfRfP3LzpzYDWfx9w/HmaSSf4HAACAHMTcPxFmIv8DAABAbcTcvyXMRP4HAACA2oi5fzLMJJP8r/+v/7+6/n95vf5/Xv3/Mx8te6Wbvf8f+/P6/3m4xv3/da9f/1//v379/9X35zf79uv/6/+zXNX6/zH3by2KLPM/AAAA5CDm/m1hJvI/AAAA1EbM/deFmcj/AAAAUBsx978gzCST/K//v6r+/55Bhav69/+d/1//v9ic/f/45Oj/Z2PN/fv3PdTxqf5/oP+v/6//r/+v/8+6ja94TY/+f+tX81/t/n/M/deHmWSS/wEAACAHMfe/MMxE/gcAAIDaiLn/hjAT+R8AAABqI+b+7WEmmeR//X/n/9f/1/9ff/+/c42V6v+v9/z/bRuj/785OP9/f/r/A1xx/39S/38z9v/Hh7v91e7/D9x8/X+uiqqd/z/m/heFmWSS/wEAACAHMfe/OMxE/gcAAIDaiLn/JWEm8j8AAADURsz9N4aZZJL/9f/1//X/9f9rff7/9fb/+57/v/xI/79a9P/70/8fwPn/8+r/D3n7q93/H/b5/8ff3H17/X96qVr/P+b+l4aZZJL/AQAAIAcx998UZiL/AwAAQG3E3P+yMBP5HwAAAGoj5v4dYSaZ5H/9f/1//X/9f/3/3usf3P8v6f9Xi/5/f/r/A+j/6//r/6+u/9/jm9/O/n/8aqn/n7uq9f9j7r85zCST/A8AAAA5iLn/ljAT+R8AAABqI+b+/xdmIv8DAABAbcTcvzPMJJP8r/+v/6//n1f//+4J/X/9/3rT/+9P/38A/X/9f/3/VZ7/f7m1nP9/y6A7ozaq1v+Puf/lYSaZ5H8AAADIQcz9rwgzkf8BAACgNmLuf2WYifwPAAAAtRFz/1SYSSb5X/+/Xv3/P/mrJ15Z6P/r/w9Yf037//Ew0P/PnP5/f/r/A+j/6//r/29I/598VK3/H3P/rWEmmeR/AAAAyEHM/beFmcj/AAAAUBsx998eZiL/AwAAQG3E3L8rzCST/K//X6/+f6T/r//fb/017f8n+v950//voe1Fqv8/gP6//n/2/f/43a/+P8NRtf5/zP2vCjPJJP8DAABADmLuvyPMRP4HAACA2oi5/9VhJvI/AAAA1EbM/XeGmWSS//X/9f/1//X/9f97r1//f3PS/+9vrf3/Cf1//X/9/8z6/87/z3BVrf8fc/9rwkwyyf8AAACQg5j77wozkf8BAACgNuL/3yz/36v8DwAAAHUUc/90mEkm+V//X/8/p/5/Q/9f/1//v/b0//tz/v8B9P/1/ze0///9js/69P8n2g73Fen/U0VV6//H3P/aMJNM8j8AAADkIOb+e8JM5H8AAACojZj7Z8JM5H8AAACojZj7Z8NMMsn/+v/6/zn1/53/X/9f/7/+9P/70/8fQP9f/79u5/8vCv1/rqmq9f9j7t8dZpJJ/gcAAIAcxNy/J8xE/gcAAIDaiLl/b5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9/97rr3j/v6H/35v+f3/6/wPo/+v/163/7/z/XGNV6//H3H9fmEkm+R8AAAByEHP/vjAT+R8AAABqI+b+/WEmIf/3+n/dAAAAwOYSc/+BMJNM/v1f/78m/f9f/7uOdev/6//3W/9w+v9b9f/DdP7/aqlp/7/7ZXHF9P8H0P/X/9f/1/9nqKrW/4+5/2CYSSb5HwAAAHIQc//rwkzkfwAAAKiNmPv/f5iJ/A8AAAC1EXP/T4WZZJL/9f9r0v/vov+v/99v/c7/r/9fZzXt/w9Nrfr/I/r/+v/V2n79f/1/lrv6/f/40er6/zH33x9mkkn+BwAAgBzE3P/TYSbyPwAAANRGzP2vDzOR/wEAAKA2Yu4/FGZSt/z/st4X6//r/+v/6/9fnf7/64tuVez/Nw8e/f960f/vr1b9f+f/1/+v2Pbr/+v/s1zVzv8fc/8bwkzqlv8BAAAgYzH3PxBmIv8DAABAbcTc/8YwE/kfAAAAaiPm/jeFmWSS//X/9f/1//X/nf+/9/r1/zcn/f/+9P8H0P/X/9f/1/9nqKrW/4+5/81hJpnkfwAAAMhBzP1vCTOR/wEAAKA2Yu5/a5iJ/A8AAAC1EXP/28JMMsn/+v/6//r/+v/6/73Xr/+/Oen/96f/P4D+v/6//r/+P0NVtf5/zP0/E2aSSf4HAACAHMTc/2CYifwPAAAAtRFz/9vDTOR/AAAAqI2Y+98RZpJJ/tf/1//X/9f/1//vvX79/81J/78//f8B9P/1//X/9f+5EltXuqJq/f+Y+98ZZpJJ/gcAAIAcxNz/s2Em8j8AAADURsz97wozkf8BAACgNmLu/7kwk0zyv/6//n+1+v9LF9pvp/+v/18Mq//fvJH+fxb0//vT/x+gR/9/i/6//r/+v/4/V6xq/f+Y+98dZpJJ/gcAAIAcxNz/njAT+R8AAABqI+b+94aZyP8AAABQGzH3PxRmkkn+1//Psv8/EnvL1ev/O/+//r/z/+v/r4/+f3/6/wM4/7/+v/6//j9DVbX+f8z9D4eZZJL/AQAAIAcx978vzET+BwAAgNqIuf/nw0zkfwAAAKiNmPvfH2aSSf7X/8+y/1/h8//Xrf8/1nF85NT/n2x7PtNxqf+v/78B9P/70/8fQP9f/7/K/f9wNG9d4fb6/1RR1fr/Mfd/IMwkk/wPAAAAOYi5/xfCTOR/AAAAqI2Y+38xzET+BwAAgNqIuf+Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Oen/96f/P4D+v/5/lfv/A+j/U0VV6//H3P/LYSYrBr8f/OcqHiYAAABQITH3fzDMJJN//wcAAIAcxNx/OMxE/gcAAIDaiLn/kTCTTPK//n93/z+eUVX/X/9f/1//X/9/Mxpe//9l1xeF/r/+v/6//r/+v/4/61G1/n/M/UfCTDLJ/wAAAJCDmPt/JcxE/gcAAIDaiLn/aJiJ/A8AAAC1EXP/XJhJJvn/Gvb/x6vZ/3f+/yvt//9E/1//P9D/703/f2M4/39/+v8D6P/r/+v/6/8zVFXr/8fcPx9mkkn+BwAAgBpLPw6Ouf9YmIn8DwAAALURc//xMBP5HwAAAGoj5v4PhZlkkv+d/1//3/n/r0X/f6xjef3/kv6//v8w6P/3p/8/gP6//r/+v/4/Q1W1/n/M/QthJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/iTCTTPK//r/+f+79/0ZRXHT+f/3/XuvX/9+c9P/70/8fQP9f/39T9f+f+K32z/T/qaKq9f9j7j8ZZpJJ/gcAAIAcxNx/Ksz/Y+8+miQ7szoOp0TbIAL4CKxZsYSV+Ahs2RHBmsAJ4ZGE9yC8N8J7GO9HMxrvNd6PxnursZqJqAlVn3PUVZV1b3dXduW973mezaE7upRZrZJafyp+c4v9DwAAAMPI3f8jcYv9DwAAAMPI3f+jcUuT/a//1/937/83e3n+/9Ffr/+/Rv+v/9+FE/39he2/7rQo/NT+/7u/5+4f1P/r//X/k/T/nv+v/+e4pfX/uft/LG5psv8BAACgg9z9Px632P8AAAAwjNz9PxG32P8AAAAwjNz9d8ctTfa//l//r//X/x/p/x/S/+v/183z/6fp/2fo//X/+n/9Pzu1tP4/d/9Pxi1N9j8AAAB0kLv/nrjF/gcAAIBh5O7/qbjF/gcAAIBh5O7/6bilyf7X/+v/9f9r6f8vef7/sc9H/6//30b/P03/P0P/r//X/+v/2aml9f+5+38mbmmy/wEAAKCD3P0/G7fY/wAAADCM3P0/F7fY/wAAADCM3P0/H7c02f9d+v9Hjv1Y/6//v/73ax39/zk9/1//r/9fuQc3T/47Qf9/kv5/xkz/v9no/6fccD+//dNbz/s/hf5f/89JS+v/c/f/QtzyfZvNpVv9JAEAAIBFyd3/i3FLk+//AwAAQAe5+++NW+x/AAAAGEbu/vvilib7v0v/f5z+X/9//e+X/l//v+319f/r5Pn/087e/3/Xd/zwD/Xt/z3/f5rn/++6/3/iK0P/z7otrf/P3X9/3NJk/wMAAEAHuft/KW6x/wEAAGAYuft/OW6x/wEAAGAYuft/JW5psv/1/6P1/99y5OOu6/8Paxf9v/5f/6//H53+f5rn/884/Nfc1fqh/l//7/n/+n/OZmn9f+7+X41bmux/AAAA6CB3/6/FLfY/AAAADCN3/6/HLfY/AAAADCN3/2/ELU32v/5/tP7/6Md5/n/1//d827Vfov/X/+v/B6f/n6b/nzHK8/9v8atm3/38Wd2u93+g/9f/c8uW1v/n7v/NuKXJ/gcAAIAOcvf/Vtxi/wMAAMAwcvf/dtxi/wMAAMAwcvf/TtzSZP/r//X/6+j/8xU8/1//f/v7/6T/Xyf9/zT9/4xR+v9bpP/3/H/9P7u2tP4/d//vxi1N9j8AAAB0kLv/9+IW+x8AAACGkbv/9+MW+x8AAACGkbv/D+KWJvtf/6//X0f/f+bn/+v/9f+e/9+E/n+a/n+G/l//r//X/7NTS+v/c/c/ELc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/+X/9/hv7/wkb/r//X/y+M/n+a/n+G/l//r//X/7NTC+r/r/uoK5s/iVua7H8AAADoIHf/n8Yt9j8AAAAMI3f/n8Ut9j8AAAAMI3f/n8ctTfa//n8x/f9hzrfw/v/g5vr/q5vNZvD+3/P/T+3/r17397O+LvX/+v9zoP+fpv+fof/X/+v/9f/s1IL6/8Mf5+7/i7ilyf4HAACADnL3/2XcYv8DAADAMHL3/1XcYv8DAADAMHL3/3Xc0mT/6/8X0/8fWnj/7/n/+v8jf13P/79G/78s+v9p+v8Z+n/9v/5f/89OLa3/z93/N3HTpYu3/CkCAAAAC5O7/2/jlibf/wcAAIAOcvf/Xdxi/wMAAMBKPXDiZ3L3/33c0mT/6/932/9fuu7n9P/6/+NfH/p//b/+//bT/0/T/8/Q/+v/9f/6f3Zqaf1/7v5/iFua7H8AAADoIHf/g3GL/Q8AAADDyN3/j3GL/Q8AAADDyN3/T3FLk/2v//f8f/2//l//v/319f/rpP+fpv+fof/X/++3/7/85P+p/2cMN9H/Hxwc3Hvb+//c/f8ctzTZ/wAAANBB7v5/iVvsfwAAABhG7v5/jVvsfwAAABhG7v5/i1ua7H/9f9P+P7/U19X/37fZ6P/1//p//f80/f80/f8M/b/+3/P/9f/s1NKe/5+7/9/jlmPD786b+iwBAACAJcnd/x9xS5Pv/wMAAEAHufv/M26x/wEAAGAYufv/K25psv/1/037f8//1//r/8+7/398o/8/F6vo/6+e/vpL7//v1//r/ye06/+//3uP/FD/r/9v6fh/uB2ztP4/d/9/xy1N9j8AAAB0kLv/f+IW+x8AAACGkbv/f+MW+x8AAACGkbv//+KmC032v/5f/6//1//r/7e//jk////SZrPR/+/AKvr/CUvv/3fz/P/TY1H9v/5/ze9f/6//56Sl9f+5+/8/bmmy/wEAAKCD3P1PiVvsfwAAABhG7v6nxi32PwAAAAwjd//T4pYm+1//r//X/+v/h+//719F/+/5/zui/5+2jP7/dPp//f+a37/+X//PjdtX/5+7/+lxS5P9DwAAAB3k7n9G3GL/AwAAwDBy9z8zbrH/AQAAYBi5+58VtzTZ//p//f/N9P/5PvX/Y/X/lxfX/1858tdr8vx//f+O6P+n6f9n6P/1//r/B/T/7NLSnv+fu//ZcUuT/Q8AAAAd5O5/Ttz6f93a/wAAADCM3P3PjVvsfwAAABhG7v7nxS1N9r/+X//v+f/6/+Gf/6//b0X/P03/P0P/r//X/3v+Pzu1tP4/d//z45Ym+x8AAAA6yN3/grjF/gcAAIBh5O5/Ydxi/wMAAMAwcvc/FLc02f/6f/2//l//r/+/9vdQ/z8G/f+08+n/r+r/9f/Vz98R/xTo//X/cx/PmJbW/+fuf1Hc0mT/AwAAQAe5+18ct9j/AAAAMIzc/Q/HLfY/AAAArNKFLT+Xu/8lcUuT/a//1/+frf8/+rr6f/3/ZqX9/7bX1/+v0176//yi0P97/n/o0/9/55Efre35/8f//NL/6//ZvaX1/7n7Xxq3NNn/AAAA0EHu/pfFLfY/AAAADCN3/8vjFvsfAAAAhpG7/xVxS5P9r//X/3v+v/5f/7/99fX/6+T5/9P0/zP0//P9/Lb/Qa2wtv5/1+9f/6//56Sl9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAAwjd/+r4xb7HwAAAIZxuPszLmu4//X/+n/9v/5f/7/99fX/66T/n6b/n6H/32s/v/b3r//X/3PS0vr/1xx+1JXNa+OWJvsfAAAAOsjd/7q4xf4HAACAYeTuf33cYv8DAADAMHL3vyFuabL/9f/6/3X0/wcHB/c26v/zHzT9/6H5/v9R/T9F/z9N/z9D/6//1//r/9mppfX/ufsfiVua7H8AAADoIHf/G+MW+x8AAACGkbv/TXGL/Q8AAADDyN3/5rilyf7X/y+g/7+i//f8f8//33j+v/5/R/T/0/T/M0bs/6/c+Ke/737+rPb9/vX/+n9OWlr/n7v/LXFLk/0PAAAAHeTuf2vcYv8DAADAMHL3vy1usf8BAABgGLn73x63NNn/+v/z6/+f+L3r8vz/q5vt71//r//X/+v/bzf9/zT9/4wR+/+bsO9+fu3vX/+v/+ek7P/vOPZn4r76/9z974hbjg6/i7fyuQIAAADLkLv/nXFLk+//AwAAQAe5+98Vt9j/AAAAMIzc/e+OW5rsf/3/Ap7/P2D/7/n/278+9P+L7v/v1P+PQf8/Tf8/Q/+v/99D/59/rozV/+dXs/6/u+z/j9tX/5+7/z1xS5P9DwAAAB3k7n9v3GL/AwAAwDBy978vbrH/AQAAYBi5+x+NW67b/9va7lHo//X/+n/9v/5/++vr/9dJ/z/tRvv/y5uz9f9J/6//1/97/r/+v7el9f+5+98ft/j+PwAAAKzOxVN+Pnf/B+IW+x8AAACGkbv/g3GL/Q8AAADDyN3/objlsTv39ZbOlf5f/z9E///wtx5+rP5f/7/R/7en/5/m+f8z9P+76Ofv0v+P0f9vNvp/zm5p/X/u/g/HLb7/DwAAAMPI3f+RuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v8z9v+Haebe+//4WP2//n+j/29P/z9N/z/jNvT/F4/+9Tv0/57/P0j/7/n/7MLS+v/c/R+PW5rsfwAAAOggd/8n4hb7HwAAAIaRu/+TcYv9DwAAAMPI3f+puKXJ/t9b/x+/1fr/1ff/y3j+f3ys/l//v9H/t6f/n6b/n+H5//p//b/+n51aWv+fu//TcUuT/Q8AAAAd5O7/TNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f+e/6//1//r//X/219f/79O+v9p+v/t6m+U/l//r//X/7NTS+v/c/d/Pm5psv8BAACgg9z9X4hb7H8AAAAYRu7+x+IW+x8AAACGkbv/i3FLk/2v/9f/6//1//r/E69/10b/v1r6/2n77P9/4NvnX9bz//fe/+db0P/r//X/7MTS+v/c/V+KW5rsfwAAAOggd/+X4xb7HwAAAIaRu/8rcYv9DwAAAMPI3f/VuKXJ/p/p/y/XL9T/T9L/H33/+v/tXx/6/9X0/4f0/+uk/5/m+f8z9P+e/6//1/+zU0vr/3P3fy1uabL/AQAAoIPc/Y/HLfY/AAAADCN3/9fjFvsfAAAAhpG7/xtxS5P97/n/a+r/79L/6//1//p//f8M/f80/f+MZfX/J/7zQv+/7Pev/9f/c9LS+v/c/d8MAAD//yBlU3A=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3115024, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 56.390442478s ago: executing program 1 (id=2515): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000480)=""/167, 0x0, 0xa7, 0x1}, 0x28) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 55.770074397s ago: executing program 1 (id=2522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 54.952696491s ago: executing program 33 (id=2522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 31.521557899s ago: executing program 5 (id=2695): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) 31.305324172s ago: executing program 5 (id=2696): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 30.869414353s ago: executing program 5 (id=2698): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x4004) 30.210107938s ago: executing program 5 (id=2702): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0x800c08, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x21, 0x624a, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000002000100", @ANYRES8=r0], 0x456681) 27.743589845s ago: executing program 5 (id=2722): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f00000000c0)=ANY=[], 0x8, 0x1d9, &(0x7f0000000440)="$eJzsmD/r00AYx793SdM/iODi4CRYsEKbJqmKi0N9BULrP3Cw2FiqaStthrbgUFxcfBm+AsGhk4Obm6sOKggOdhRBh8ill+TsPwm2CL/f84E++V7uucvdN5dnKAiCOLZ8/vT94/NrV5plACdQRFbe/6olOVzJ/5CT4v2LN/2TT+ar87GUz9cBvK5r8GU7CIJA7S/KaxM81jfAcUHqW2Awpb4HjptSu2C4I/VDRQ/yUniueX/gtR90PdcSwRbBEaG2ur7FjKGtA2Lrgfbn+keT6aOW57nDVZEJouesdaUVf/FPX9Q5rir+ifd1+9nTmWhH3liKfzY4bKlrYGhEniAL0zQTS5T9n9GT+RULotPw75s8hDhV2ZVT3j381/9Zs7E0lO3n6Bx9kU9vFFOHCyHMju+cXszfro/6cshdnD2sUdFXutb1rrCXs4qNOUn9FK/ovFKfdOhxAan6vcfV0WRa6fZaHbfj9h2ndtm6aFmXnGpYiJZxW/m7+wO5sD4VlPkzW5INZmDc8v2hPQb8oR23HRFzjlJxG68G38IxPKx/HKVzyXdpLEvlRpj88fAqVEnbtniCIAiCIAiCIAiCIAiCIIh0vPwZRDD5h+gmnOth9u8AAAD//z05W0I=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 26.974173092s ago: executing program 5 (id=2728): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 11.125498269s ago: executing program 34 (id=2728): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 5.113504815s ago: executing program 7 (id=2886): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x1000000}) write$sndseq(r0, &(0x7f0000000880)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result={0x5}}], 0x1c) 5.014292469s ago: executing program 7 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'macsec0\x00', @link_local}) 4.293028105s ago: executing program 7 (id=2892): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, "a2"}]}}, 0x0}, 0x0) 4.213928475s ago: executing program 6 (id=2894): syz_emit_ethernet(0x81, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x4b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e"}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp, 0x1}, 0x20) 3.777012903s ago: executing program 6 (id=2896): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2294], 0xff, 0x5e54, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 3.46800511s ago: executing program 3 (id=2897): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/131) 2.412343839s ago: executing program 0 (id=2904): rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x10, 0xb, 0x5}, 0x2}, 0x20, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) 1.976629179s ago: executing program 0 (id=2906): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000040)={0x18, r1, 0xfffffffffffffdb6, 0x0, 0x0}) 1.860437921s ago: executing program 3 (id=2907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @void, @val={0xc, 0x99, {0x5, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.848504683s ago: executing program 2 (id=2908): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0xa400, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x13) 1.591295247s ago: executing program 0 (id=2909): syz_mount_image$exfat(&(0x7f0000001bc0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224], 0x1, 0x1543, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) getdents64(r0, &(0x7f0000000280)=""/153, 0x99) 1.58046914s ago: executing program 2 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8, 0x3, r1}]}, 0x2c}}, 0x24000006) 1.567424053s ago: executing program 3 (id=2911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfeff) 1.507312731s ago: executing program 6 (id=2912): r0 = socket$inet(0x2, 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000882}], 0x1, 0x20040040) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 1.241362307s ago: executing program 3 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xd, &(0x7f00000024c0)=ANY=[@ANYBLOB="1802000004000000000000000b000010850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.180682631s ago: executing program 2 (id=2914): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a0000008a"], 0x18}}, 0x8000) 1.031483301s ago: executing program 0 (id=2915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 973.895533ms ago: executing program 6 (id=2916): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x20042) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/96, 0x60}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 961.497079ms ago: executing program 7 (id=2927): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x1, @loopback}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) 759.294143ms ago: executing program 2 (id=2917): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) mount(0x0, 0x0, &(0x7f0000001180)='ocfs2_dlmfs\x00', 0x210d010, 0x0) 651.806032ms ago: executing program 3 (id=2918): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000000)='./file7\x00', 0x3a424bc, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRESHEX, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 538.512ms ago: executing program 7 (id=2919): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 537.953608ms ago: executing program 6 (id=2920): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) 533.17654ms ago: executing program 0 (id=2921): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000280)=0x14) 467.814599ms ago: executing program 2 (id=2922): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 219.229752ms ago: executing program 0 (id=2923): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe0, 0x10, 0x20, 0x70bd2d, 0x25dfdbfd, {{'ctr-aes-aesni\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 109.354551ms ago: executing program 3 (id=2924): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x3}, 0x5}}}, 0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) 71.96789ms ago: executing program 7 (id=2925): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 23.392291ms ago: executing program 2 (id=2926): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x89, &(0x7f0000000180)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") r0 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x194) getdents(r0, 0x0, 0x0) 0s ago: executing program 6 (id=2928): setregid(0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) kernel console output (not intermixed with test programs): umber 24 [ 376.778186][ T6159] udevd[6159]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.895585][T11749] loop6: detected capacity change from 0 to 2048 [ 376.950782][T11749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.967005][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'. [ 377.428894][T11740] loop2: detected capacity change from 0 to 32768 [ 377.439727][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 377.506946][T11740] JBD2: Ignoring recovery information on journal [ 377.606746][T11760] loop1: detected capacity change from 0 to 4096 [ 377.653987][T11740] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 377.697440][T11760] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 377.771096][ T6003] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 377.823018][T11760] ntfs3(loop1): ino=1a, mi_enum_attr [ 377.900409][T11760] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 377.959334][T11760] ntfs3(loop1): ino=1a, mi_enum_attr [ 377.966038][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 377.982388][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.991839][T11760] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 378.071917][ T6003] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 378.142965][ T5834] ocfs2: Unmounting device (7,2) on (node local) [ 378.145451][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.226973][ T6003] usb 4-1: config 0 descriptor?? [ 378.294393][ T88] kernel read not supported for file /media6 (pid: 88 comm: kworker/0:2) [ 378.312532][T11780] loop5: detected capacity change from 0 to 2048 [ 378.438852][T11780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.556452][T11785] loop2: detected capacity change from 0 to 1024 [ 378.674357][T11789] loop0: detected capacity change from 0 to 16 [ 378.744519][T11785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.776459][T11789] erofs (device loop0): mounted with root inode @ nid 36. [ 378.780792][ T6003] aquacomputer_d5next 0003:0C70:F014.004F: hidraw0: USB HID v0.02 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 378.962510][ T6003] usb 4-1: USB disconnect, device number 25 [ 379.216057][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.357243][T11795] fido_id[11795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 379.486494][T11806] tmpfs: Bad value for 'mpol' [ 379.681309][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2325'. [ 379.862652][T11814] loop1: detected capacity change from 0 to 1024 [ 380.158565][ T8827] hfsplus: b-tree write err: -5, ino 4 [ 380.205594][T11826] loop3: detected capacity change from 0 to 128 [ 380.271499][T11826] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 380.320546][T11826] hpfs: filesystem error: improperly stopped [ 380.353797][T11826] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 380.404760][T11826] hpfs: You really don't want any checks? You are crazy... [ 380.446952][T11826] hpfs: hpfs_map_sector(): read error [ 380.476090][T11826] hpfs: code page support is disabled [ 380.514850][T11826] hpfs: hpfs_map_4sectors(): unaligned read [ 380.535682][T11826] hpfs: hpfs_map_4sectors(): unaligned read [ 380.560592][T11826] hpfs: filesystem error: unable to find root dir [ 380.620540][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 380.633524][ T5817] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 380.718222][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 380.813904][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 380.852012][ T5817] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 380.888378][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.938528][ T5817] usb 2-1: config 0 descriptor?? [ 380.962611][T11828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.037507][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2340'. [ 381.077091][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2340'. [ 381.283983][ T6043] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 381.368528][T11852] loop0: detected capacity change from 0 to 2048 [ 381.389312][T11852] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 381.426453][ T5817] nti 0003:0757:0A00.0050: unknown main item tag 0x0 [ 381.444084][ T5817] nti 0003:0757:0A00.0050: item fetching failed at offset 3/5 [ 381.451727][ T6043] usb 4-1: Using ep0 maxpacket: 32 [ 381.454079][ T6043] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.472076][ T5909] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 381.478627][ T5817] nti 0003:0757:0A00.0050: probe with driver nti failed with error -22 [ 381.491398][ T6159] udevd[6159]: incorrect nilfs2 checksum on /dev/loop0 [ 381.495867][T11858] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.500391][ T6043] usb 4-1: config 0 has no interface number 0 [ 381.572243][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2348'. [ 381.582256][ T6043] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.603284][ T6043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.612626][ T6043] usb 4-1: Product: syz [ 381.629619][ T6043] usb 4-1: Manufacturer: syz [ 381.647512][ T6043] usb 4-1: SerialNumber: syz [ 381.653259][ T5909] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 381.674554][ T6043] usb 4-1: config 0 descriptor?? [ 381.683682][ T5817] usb 2-1: USB disconnect, device number 26 [ 381.684111][ T5909] usb 3-1: config 0 has no interface number 0 [ 381.733856][ T6043] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 381.742850][ T5909] usb 3-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 381.768744][ T5909] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 381.790053][T11858] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 381.830645][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.838664][ T5909] usb 3-1: Product: syz [ 381.847342][T11858] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 381.857943][ T5909] usb 3-1: Manufacturer: syz [ 381.874959][ T5909] usb 3-1: SerialNumber: syz [ 381.889879][ T5909] usb 3-1: config 0 descriptor?? [ 381.902304][T11858] Remounting filesystem read-only [ 381.902869][T11850] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 381.943691][ T5831] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 381.977013][ T6043] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 382.001296][T11866] loop6: detected capacity change from 0 to 64 [ 382.017204][ T6043] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 382.192018][T11868] loop5: detected capacity change from 0 to 1024 [ 382.223008][ T5909] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 382.307734][ T5909] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input33 [ 382.365083][T11868] hfsplus: request for non-existent node 134217728 in B*Tree [ 382.374262][T11868] hfsplus: request for non-existent node 134217728 in B*Tree [ 382.563362][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 382.578959][ T5909] usb 4-1: USB disconnect, device number 26 [ 382.594752][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 382.627799][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 382.690702][ T5909] quatech2 4-1:0.51: device disconnected [ 382.856433][ C1] powermate: config urb returned -71 [ 382.856908][ T5817] usb 3-1: USB disconnect, device number 18 [ 382.861761][ C1] powermate: usb_submit_urb(config) failed [ 382.861863][ C1] powermate 3-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 383.356161][T11884] loop6: detected capacity change from 0 to 4096 [ 383.473116][T11891] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.473957][T11884] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 383.544777][T11884] Remounting filesystem read-only [ 383.819287][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 383.928386][T11902] loop2: detected capacity change from 0 to 1024 [ 384.311040][ T3538] hfsplus: b-tree write err: -5, ino 4 [ 384.334118][T11915] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 384.857140][T11927] loop1: detected capacity change from 0 to 2048 [ 384.935123][T11931] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.126199][T11931] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 385.159787][T11931] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 385.202837][T11931] Remounting filesystem read-only [ 385.321447][ T5817] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 385.333013][ T6003] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 385.501269][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 385.515328][ T5817] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.515505][ T6003] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 385.517286][T11943] loop1: detected capacity change from 0 to 2048 [ 385.562059][ T6003] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.572464][ T6003] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 385.581573][ T5817] usb 1-1: config 0 has no interface number 0 [ 385.587858][ T5817] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.630344][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.634320][T11944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.640176][ T5817] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.672268][ T6003] usb 4-1: config 0 descriptor?? [ 385.680497][T11937] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.723093][ T5817] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 385.753175][T11943] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 385.753267][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.793660][T11943] Remounting filesystem read-only [ 385.818398][T11947] loop2: detected capacity change from 0 to 2048 [ 385.828919][ T5817] usb 1-1: config 0 descriptor?? [ 385.870243][T11947] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 385.938214][T11949] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.024809][ T5832] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 386.119640][T11925] loop6: detected capacity change from 0 to 40427 [ 386.138781][T11925] F2FS-fs (loop6): Image doesn't support compression [ 386.149340][T11925] F2FS-fs (loop6): build fault injection rate: 690 [ 386.193835][T11925] F2FS-fs (loop6): invalid crc value [ 386.208913][ T6003] samsung 0003:0419:0600.0051: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 386.365670][T11951] loop5: detected capacity change from 0 to 4096 [ 386.373214][T11956] loop1: detected capacity change from 0 to 512 [ 386.392922][T11956] EXT4-fs: inline encryption not supported [ 386.411109][T11956] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.427956][T11951] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 386.453380][T11956] EXT4-fs (loop1): Test dummy encryption mode enabled [ 386.502752][ T7426] usb 4-1: USB disconnect, device number 27 [ 386.513116][ T5817] uclogic 0003:28BD:0071.0052: failed retrieving string descriptor #100: -71 [ 386.542119][T11956] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.550395][ T5817] uclogic 0003:28BD:0071.0052: failed retrieving pen parameters: -71 [ 386.558488][ T5817] uclogic 0003:28BD:0071.0052: pen probing failed: -71 [ 386.571753][T11956] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.2391: inode #13: comm syz.1.2391: iget: illegal inode # [ 386.629081][T11951] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 386.639514][ T5817] uclogic 0003:28BD:0071.0052: failed probing parameters: -71 [ 386.657454][T11925] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 386.662516][T11957] fido_id[11957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 386.681922][ T5817] uclogic 0003:28BD:0071.0052: probe with driver uclogic failed with error -71 [ 386.695277][T11956] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2391: couldn't read orphan inode 13 (err -117) [ 386.711322][T11951] ntfs3(loop5): ino=1a, mi_enum_attr [ 386.717064][ T5817] usb 1-1: USB disconnect, device number 22 [ 386.745675][T11951] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 386.762581][T11925] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 386.806951][T11956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.864418][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 386.864444][ T31] audit: type=1800 audit(1766957928.252:73): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2380" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 386.878824][T11956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.2391: bg 0: block 426: padding at end of block bitmap is not set [ 387.017278][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.026428][ T8370] syz-executor: attempt to access beyond end of device [ 387.026428][ T8370] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.171147][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 387.171205][ T8370] Tainted: [L]=SOFTLOCKUP [ 387.171217][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.171239][ T8370] Call Trace: [ 387.171251][ T8370] [ 387.171265][ T8370] dump_stack_lvl+0x16c/0x1f0 [ 387.171329][ T8370] f2fs_handle_critical_error+0x624/0x9f0 [ 387.171372][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.171418][ T8370] ? f2fs_build_fault_attr+0x53/0x1f0 [ 387.171490][ T8370] f2fs_write_end_io+0x958/0xcf0 [ 387.171541][ T8370] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 387.171593][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.171649][ T8370] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 387.171693][ T8370] bio_endio+0x751/0x8a0 [ 387.171760][ T8370] submit_bio_noacct+0x306/0x1f40 [ 387.171817][ T8370] __submit_merged_bio+0x33c/0x710 [ 387.171869][ T8370] __submit_merged_write_cond+0x315/0x3f0 [ 387.171928][ T8370] f2fs_write_cache_pages+0x2075/0x2570 [ 387.172014][ T8370] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 387.172074][ T8370] ? __lock_acquire+0x436/0x2890 [ 387.172132][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172176][ T8370] ? __lock_acquire+0x436/0x2890 [ 387.172268][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172356][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172400][ T8370] ? rcu_is_watching+0x12/0xc0 [ 387.172436][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172481][ T8370] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 387.172549][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172606][ T8370] f2fs_write_data_pages+0x5ac/0x1080 [ 387.172674][ T8370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.172749][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172800][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.172845][ T8370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.172903][ T8370] do_writepages+0x27a/0x600 [ 387.172954][ T8370] ? __pfx_do_writepages+0x10/0x10 [ 387.172995][ T8370] ? do_raw_spin_unlock+0x172/0x230 [ 387.173050][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173095][ T8370] ? _raw_spin_unlock+0x28/0x50 [ 387.173154][ T8370] filemap_writeback+0x225/0x2d0 [ 387.173204][ T8370] ? __pfx_filemap_writeback+0x10/0x10 [ 387.173320][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173365][ T8370] ? find_held_lock+0x2b/0x80 [ 387.173427][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173489][ T8370] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 387.173572][ T8370] block_operations+0x2b0/0xff0 [ 387.173624][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173689][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173755][ T8370] ? __pfx_block_operations+0x10/0x10 [ 387.173807][ T8370] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 387.173923][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.173973][ T8370] ? ktime_get+0x200/0x310 [ 387.174015][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.174060][ T8370] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.174120][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.174166][ T8370] ? rcu_is_watching+0x12/0xc0 [ 387.174210][ T8370] f2fs_write_checkpoint+0x326/0x52f0 [ 387.174288][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.174334][ T8370] ? rcu_is_watching+0x12/0xc0 [ 387.174368][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.174413][ T8370] ? kthread_stop+0x272/0x5d0 [ 387.174465][ T8370] kill_f2fs_super+0x3d0/0x480 [ 387.174523][ T8370] ? __pfx_kill_f2fs_super+0x10/0x10 [ 387.174602][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.174669][ T8370] deactivate_locked_super+0xc1/0x1a0 [ 387.174715][ T8370] deactivate_super+0xde/0x100 [ 387.174758][ T8370] cleanup_mnt+0x225/0x450 [ 387.174809][ T8370] task_work_run+0x150/0x240 [ 387.174864][ T8370] ? __pfx_task_work_run+0x10/0x10 [ 387.174933][ T8370] exit_to_user_mode_loop+0xfb/0x540 [ 387.174988][ T8370] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.175042][ T8370] do_syscall_64+0x4ee/0xf80 [ 387.175107][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.175144][ T8370] RIP: 0033:0x7f195f990a77 [ 387.175173][ T8370] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 387.175210][ T8370] RSP: 002b:00007ffe1baec598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 387.175245][ T8370] RAX: 0000000000000000 RBX: 00007f195fa13d7d RCX: 00007f195f990a77 [ 387.175270][ T8370] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1baec650 [ 387.175293][ T8370] RBP: 00007ffe1baec650 R08: 0000000000000000 R09: 0000000000000000 [ 387.175317][ T8370] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1baed6e0 [ 387.175341][ T8370] R13: 00007f195fa13d7d R14: 000000000005e73e R15: 00007ffe1baed720 [ 387.175401][ T8370] [ 387.175414][ T8370] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 387.613279][T11966] loop1: detected capacity change from 0 to 512 [ 387.785094][T11966] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.2393: invalid indirect mapped block 4294967295 (level 1) [ 387.847707][T11966] EXT4-fs (loop1): Remounting filesystem read-only [ 387.903714][T11966] EXT4-fs (loop1): 2 truncates cleaned up [ 387.944718][T11966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.141897][ T31] audit: type=1326 audit(1766957929.522:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.168538][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.168654][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.255880][ T31] audit: type=1326 audit(1766957929.552:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.335564][ T31] audit: type=1326 audit(1766957929.552:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.436433][ T31] audit: type=1326 audit(1766957929.582:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.594979][ T31] audit: type=1326 audit(1766957929.582:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.662927][ T31] audit: type=1326 audit(1766957929.582:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.782204][T11985] loop0: detected capacity change from 0 to 4096 [ 388.790719][ T31] audit: type=1326 audit(1766957929.582:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.850391][ T31] audit: type=1326 audit(1766957929.582:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 388.879372][ T31] audit: type=1326 audit(1766957929.602:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.0.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 389.087074][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.143716][T11993] loop2: detected capacity change from 0 to 4096 [ 389.182693][T11993] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 389.280124][T11993] ntfs3(loop2): ino=1a, mi_enum_attr [ 389.311361][T11993] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 389.395497][T12001] loop3: detected capacity change from 0 to 512 [ 389.525394][T12001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.645736][T12001] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.803079][T12001] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.2410: Failed to acquire dquot type 0 [ 390.097310][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.326990][T12022] loop0: detected capacity change from 0 to 512 [ 390.379384][T12022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.421396][T12022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.503531][T12022] EXT4-fs (loop0): 1 truncate cleaned up [ 390.622490][T12022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.763101][T12033] loop3: detected capacity change from 0 to 64 [ 390.794021][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.248587][T12009] loop6: detected capacity change from 0 to 32768 [ 391.337148][T12009] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.441456][T12009] XFS (loop6): Ending clean mount [ 391.576540][T12060] loop0: detected capacity change from 0 to 256 [ 391.655868][T12060] exfat: Deprecated parameter 'utf8' [ 391.698391][T12062] loop3: detected capacity change from 0 to 1024 [ 391.766244][T12060] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 391.785749][ T8370] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.815283][T12062] hfsplus: bad catalog entry type [ 392.079421][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 392.690424][ T7958] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 392.860223][ T7958] usb 6-1: Using ep0 maxpacket: 16 [ 392.872683][ T7958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.921106][ T7958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.943297][ T7958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.019872][ T7958] usb 6-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 393.041252][ T7958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.072727][ T7958] usb 6-1: config 0 descriptor?? [ 393.541547][ T7958] hid-generic 0003:045E:00DA.0053: hidraw0: USB HID v0.00 Device [HID 045e:00da] on usb-dummy_hcd.5-1/input0 [ 393.717947][ T7958] usb 6-1: USB disconnect, device number 17 [ 393.780473][ T6043] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 393.829476][T12112] loop3: detected capacity change from 0 to 4096 [ 393.841310][T12114] fido_id[12114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 393.961602][ T6043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.016273][ T6043] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 394.068944][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.144851][ T6043] usb 7-1: config 0 descriptor?? [ 394.522587][T12131] loop5: detected capacity change from 0 to 256 [ 394.619421][ T6043] hid-corsair-void 0003:1B1C:1B27.0054: item fetching failed at offset 0/3 [ 394.634887][T12129] loop3: detected capacity change from 0 to 4096 [ 394.645801][ T6043] hid-corsair-void 0003:1B1C:1B27.0054: parse failed (reason: -22) [ 394.653677][T12135] tipc: MTU too low for tipc bearer [ 394.680536][T12129] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 394.682208][ T6043] hid-corsair-void 0003:1B1C:1B27.0054: probe with driver hid-corsair-void failed with error -22 [ 394.706772][T12131] FAT-fs (loop5): Directory bread(block 64) failed [ 394.718625][T12131] FAT-fs (loop5): Directory bread(block 65) failed [ 394.735843][T12131] FAT-fs (loop5): Directory bread(block 66) failed [ 394.765765][T12131] FAT-fs (loop5): Directory bread(block 67) failed [ 394.779543][T12131] FAT-fs (loop5): Directory bread(block 68) failed [ 394.786430][T12131] FAT-fs (loop5): Directory bread(block 69) failed [ 394.794896][T12131] FAT-fs (loop5): Directory bread(block 70) failed [ 394.838638][T12129] ntfs3(loop3): ino=1a, mi_enum_attr [ 394.848640][ T24] usb 7-1: USB disconnect, device number 19 [ 394.860507][T12131] FAT-fs (loop5): Directory bread(block 71) failed [ 394.871844][T12129] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 394.885546][T12133] loop2: detected capacity change from 0 to 4096 [ 394.886353][T12131] FAT-fs (loop5): Directory bread(block 72) failed [ 394.899669][T12131] FAT-fs (loop5): Directory bread(block 73) failed [ 394.906411][T12129] ntfs3(loop3): ino=1a, mi_enum_attr [ 394.918782][T12129] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 394.975385][T12129] ntfs3(loop3): ino=1b, mi_enum_attr [ 394.999478][T12129] ntfs3(loop3): ino=1b, mi_enum_attr [ 395.109571][T12131] FAT-fs (loop5): Filesystem has been set read-only [ 395.149113][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 395.149135][ T31] audit: type=1800 audit(1766957936.542:88): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2465" name="cpu.stat" dev="loop5" ino=1048817 res=0 errno=0 [ 395.258720][T12137] loop1: detected capacity change from 0 to 4096 [ 395.332221][T12140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.639914][T12146] loop5: detected capacity change from 0 to 512 [ 395.712649][T12148] veth1_to_bridge: default FDB implementation only supports local addresses [ 395.801682][T12146] EXT4-fs error (device loop5): ext4_read_inode_bitmap:138: comm syz.5.2472: Invalid inode bitmap blk 4 in block_group 0 [ 395.922723][T12146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.053195][T12152] loop6: detected capacity change from 0 to 4096 [ 396.082315][T12152] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 396.183091][ T88] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 396.213225][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.367273][ T88] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.405810][ T88] usb 2-1: config 0 has no interface number 0 [ 396.433749][ T88] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 396.465570][ T88] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.504301][ T88] usb 2-1: config 0 descriptor?? [ 396.532565][ T88] usb 2-1: selecting invalid altsetting 1 [ 396.542785][ T88] dvb_ttusb_budget: ttusb_init_controller: error [ 396.549236][ T88] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 396.850667][ T88] DVB: Unable to find symbol cx22700_attach() [ 396.872621][T12172] loop3: detected capacity change from 0 to 2048 [ 396.920140][T12178] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.112395][ T88] DVB: Unable to find symbol tda10046_attach() [ 397.118594][ T88] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 397.139518][T12180] sp0: Synchronizing with TNC [ 397.190083][ T88] usb 2-1: USB disconnect, device number 27 [ 397.367291][T12185] loop5: detected capacity change from 0 to 256 [ 397.407399][T12185] exfat: Deprecated parameter 'utf8' [ 397.456810][T12187] loop3: detected capacity change from 0 to 1024 [ 397.464835][T12185] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 397.560670][T12187] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 397.643453][T12192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 397.668400][T12160] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 397.668400][T12160] [ 397.689798][T12193] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 397.706300][T12187] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2488: lblock 2 mapped to illegal pblock 2 (length 1) [ 397.773346][T12160] ERROR: (device loop0): remounting filesystem as read-only [ 397.799385][T12187] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 397.842562][T12187] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2488: lblock 0 mapped to illegal pblock 48 (length 1) [ 397.934655][T12187] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 398.037333][T12187] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.2488: Failed to acquire dquot type 0 [ 398.151131][T12187] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 398.242610][T12187] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2488: mark_inode_dirty error [ 398.336949][T12187] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 398.387006][T12187] EXT4-fs (loop3): 1 orphan inode deleted [ 398.392981][T12204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.405586][ T1097] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 398.460011][T12187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.502061][ T1097] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 398.519274][T12204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.538984][ T1097] EXT4-fs error (device loop3): ext4_release_dquot:7020: comm kworker/u8:7: Failed to release dquot type 0 [ 398.550076][T12187] EXT4-fs error (device loop3): __ext4_get_inode_loc:4829: comm syz.3.2488: Invalid inode table block 1 in block_group 0 [ 398.573422][T12187] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 398.657289][T12204] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.899435][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.951330][ T5835] EXT4-fs error (device loop3): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 398.993026][ T8370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.018201][ T5835] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 399.081956][ T5835] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 399.310613][T12223] set_capacity_and_notify: 3 callbacks suppressed [ 399.310639][T12223] loop6: detected capacity change from 0 to 256 [ 399.366767][T12227] netlink: 'syz.0.2508': attribute type 11 has an invalid length. [ 399.398081][T12227] netlink: 'syz.0.2508': attribute type 4 has an invalid length. [ 399.424720][T12223] exfat: Deprecated parameter 'namecase' [ 399.443910][T12227] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.2508'. [ 399.448166][T12223] exfat: Deprecated parameter 'utf8' [ 399.460376][ T6043] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 399.512975][T12223] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 399.623642][T12200] loop1: detected capacity change from 0 to 32768 [ 399.634341][ T6043] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.685517][ T31] audit: type=1800 audit(1766957941.082:89): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2505" name="file1" dev="loop6" ino=1048822 res=0 errno=0 [ 399.688735][ T6043] usb 3-1: config 0 interface 0 has no altsetting 0 [ 399.768050][T12200] overlayfs: upper fs needs to support d_type. [ 399.820626][ T6043] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 399.826052][T12200] overlayfs: upper fs does not support tmpfile. [ 399.871034][ T6043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.891222][T12200] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 399.937824][ T6043] usb 3-1: config 0 descriptor?? [ 400.194553][T12238] Zero length message leads to an empty skb [ 400.444993][ T6043] hid-alps 0003:044E:120B.0055: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 400.753032][ T6043] usb 3-1: USB disconnect, device number 19 [ 400.797716][ T31] audit: type=1326 audit(1766957942.192:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 400.918018][ T31] audit: type=1326 audit(1766957942.242:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 400.926324][T12257] random: crng reseeded on system resumption [ 400.991990][ T31] audit: type=1326 audit(1766957942.242:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.038116][T12255] loop5: detected capacity change from 0 to 2048 [ 401.103482][ T31] audit: type=1326 audit(1766957942.242:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.133597][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.139550][T12255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.177447][ T31] audit: type=1326 audit(1766957942.242:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.256029][ T31] audit: type=1326 audit(1766957942.242:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.325903][ T31] audit: type=1326 audit(1766957942.242:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.413370][ T31] audit: type=1326 audit(1766957942.242:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.442949][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.485448][ T31] audit: type=1326 audit(1766957942.242:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12250 comm="syz.0.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3b998f749 code=0x7ffc0000 [ 401.835569][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.950441][ T6043] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 401.990371][ T88] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 402.055342][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.068133][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.076563][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.092234][ T7958] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 402.111775][ T6043] usb 3-1: Using ep0 maxpacket: 32 [ 402.117783][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.125614][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.162474][ T6043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.176127][ T6043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.186356][ T6043] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 402.195475][ T6043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.203876][ T88] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.203928][ T88] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.203977][ T88] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.204027][ T88] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.204075][ T88] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 402.204116][ T88] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.207900][ T88] usb 6-1: config 0 descriptor?? [ 402.274393][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.338131][ T6043] usb 3-1: config 0 descriptor?? [ 402.375539][ T7958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 402.388321][ T7958] usb 1-1: config 6 has an invalid interface number: 158 but max is 0 [ 402.418182][ T7958] usb 1-1: config 6 has no interface number 0 [ 402.448053][ T7958] usb 1-1: config 6 interface 158 has no altsetting 0 [ 402.490026][ T7958] usb 1-1: string descriptor 0 read error: -22 [ 402.532669][ T7958] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 402.555853][ T7958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.749607][ T88] magicmouse 0003:05AC:0265.0056: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 402.792343][ T88] magicmouse 0003:05AC:0265.0056: magicmouse input not registered [ 402.807631][ T6043] koneplus 0003:1E7D:2D51.0057: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 402.830509][ T7958] rtsx_usb 1-1:6.158: probe with driver rtsx_usb failed with error -71 [ 402.845564][ T88] magicmouse 0003:05AC:0265.0056: probe with driver magicmouse failed with error -12 [ 402.889927][ T7958] usb 1-1: USB disconnect, device number 23 [ 402.931339][T12289] loop3: detected capacity change from 0 to 64 [ 402.949355][ T88] usb 6-1: USB disconnect, device number 18 [ 402.988227][ T6043] koneplus 0003:1E7D:2D51.0057: couldn't init struct koneplus_device [ 403.050698][ T6043] koneplus 0003:1E7D:2D51.0057: couldn't install mouse [ 403.078071][T12293] loop6: detected capacity change from 0 to 8 [ 403.104434][ T6043] koneplus 0003:1E7D:2D51.0057: probe with driver koneplus failed with error -71 [ 403.168938][T12290] fido_id[12290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 403.179128][ T6043] usb 3-1: USB disconnect, device number 20 [ 403.305768][T12291] fido_id[12291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 403.564845][ T12] bridge_slave_1: left allmulticast mode [ 403.621798][ T12] bridge_slave_1: left promiscuous mode [ 403.627627][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.737003][ T12] bridge_slave_0: left allmulticast mode [ 403.776367][ T12] bridge_slave_0: left promiscuous mode [ 403.801975][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.834326][T12305] loop2: detected capacity change from 0 to 1024 [ 403.884702][T12305] hfsplus: bad catalog entry type [ 404.102519][ T9087] hfsplus: b-tree write err: -5, ino 4 [ 404.167123][ T5841] Bluetooth: hci1: command tx timeout [ 404.815156][T12331] loop2: detected capacity change from 0 to 256 [ 404.842787][T12331] exfat: Deprecated parameter 'utf8' [ 404.865640][T12331] exfat: Deprecated parameter 'namecase' [ 404.899855][T12331] exfat: Deprecated parameter 'namecase' [ 404.934451][T12331] exfat: Deprecated parameter 'utf8' [ 404.979576][T12331] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 405.019113][T12331] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 405.559715][T12344] loop2: detected capacity change from 0 to 64 [ 405.634968][T12344] hfs: unexpected record length: entrylength 108 [ 405.722593][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.724666][ T5834] hfs: node 4:2 still has 1 user(s)! [ 405.772110][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.822261][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 405.851403][ T12] bond0 (unregistering): Released all slaves [ 406.040534][ T5916] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 406.086846][ T6043] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 406.202995][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 406.211649][ T5916] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.219909][ T5916] usb 7-1: config 0 has no interface number 0 [ 406.227850][ T5916] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.236990][T12276] chnl_net:caif_netlink_parms(): no params data found [ 406.240653][ T5841] Bluetooth: hci1: command tx timeout [ 406.272747][ T6043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.296896][ T5916] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.309928][ T6043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.319879][ T5916] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.334658][ T6043] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 406.343883][ T6043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.352184][ T5916] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 406.368586][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.379876][ T6043] usb 3-1: config 0 descriptor?? [ 406.419036][ T5916] usb 7-1: config 0 descriptor?? [ 406.617883][ T12] hsr_slave_0: left promiscuous mode [ 406.625562][ T12] hsr_slave_1: left promiscuous mode [ 406.632753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.640264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.649802][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.658014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.681758][ T12] team_slave_0: left promiscuous mode [ 406.687468][ T12] team_slave_1: left promiscuous mode [ 406.693281][ T12] veth1_macvtap: left promiscuous mode [ 406.698828][ T12] veth0_macvtap: left promiscuous mode [ 406.707172][ T12] veth1_vlan: left promiscuous mode [ 406.713427][ T12] veth0_vlan: left promiscuous mode [ 406.813072][ T6043] arvo 0003:1E7D:30D4.0058: unknown main item tag 0x0 [ 406.829293][ T6043] arvo 0003:1E7D:30D4.0058: item fetching failed at offset 5/7 [ 406.838126][ T6043] arvo 0003:1E7D:30D4.0058: parse failed [ 406.845943][ T6043] arvo 0003:1E7D:30D4.0058: probe with driver arvo failed with error -22 [ 406.878532][ T5916] holtek_mouse 0003:04D9:A072.0059: unknown main item tag 0x0 [ 406.888558][ T5916] holtek_mouse 0003:04D9:A072.0059: unknown main item tag 0x0 [ 406.897171][ T5916] holtek_mouse 0003:04D9:A072.0059: unknown main item tag 0x0 [ 406.906494][ T5916] holtek_mouse 0003:04D9:A072.0059: unknown main item tag 0x0 [ 406.941725][ T5916] holtek_mouse 0003:04D9:A072.0059: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.6-1/input1 [ 407.084207][ T7958] usb 3-1: USB disconnect, device number 21 [ 407.156744][T12365] loop0: detected capacity change from 0 to 16 [ 407.192641][ T88] usb 7-1: USB disconnect, device number 20 [ 407.228272][T12365] erofs (device loop0): mounted with root inode @ nid 36. [ 407.543418][T12373] loop0: detected capacity change from 0 to 1024 [ 408.046274][T12383] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 408.046656][T12386] loop2: detected capacity change from 0 to 512 [ 408.094930][T12386] EXT4-fs: Ignoring removed i_version option [ 408.111443][T12383] CIFS: Unable to determine destination address [ 408.130009][T12386] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.223691][T12386] EXT4-fs (loop2): 1 truncate cleaned up [ 408.255581][T12386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.323598][ T5841] Bluetooth: hci1: command tx timeout [ 408.584325][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.647057][T12396] loop5: detected capacity change from 0 to 256 [ 408.707542][T12396] exfat: Deprecated parameter 'namecase' [ 408.759760][T12396] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 408.945460][ T12] team0 (unregistering): Port device team_slave_1 removed [ 409.088629][ T12] team0 (unregistering): Port device team_slave_0 removed [ 409.324898][T12411] nbd: must specify a size in bytes for the device [ 409.377947][T12409] loop5: detected capacity change from 0 to 8192 [ 409.456140][ T31] audit: type=1800 audit(1766957950.852:99): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2583" name="file2" dev="loop5" ino=1048824 res=0 errno=0 [ 409.484791][T12409] syz.5.2583: attempt to access beyond end of device [ 409.484791][T12409] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 410.411154][ T5841] Bluetooth: hci1: command tx timeout [ 410.653661][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.668262][T12441] Bluetooth: MGMT ver 1.23 [ 410.684907][ T7426] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 410.710948][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.757664][T12276] bridge_slave_0: entered allmulticast mode [ 410.782729][T12276] bridge_slave_0: entered promiscuous mode [ 410.823854][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.831215][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.838502][T12276] bridge_slave_1: entered allmulticast mode [ 410.848048][T12276] bridge_slave_1: entered promiscuous mode [ 410.865273][ T7426] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.900393][ T7426] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 410.948646][ T7426] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 410.951006][T12447] loop3: detected capacity change from 0 to 4096 [ 411.015891][ T7426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.081448][ T7426] usb 1-1: config 0 descriptor?? [ 411.118355][ T7426] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.138476][T12447] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 411.147715][ T7426] dvb-usb: bulk message failed: -22 (3/0) [ 411.166432][T12455] loop5: detected capacity change from 0 to 256 [ 411.203563][ T7426] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.224921][T12447] ntfs3(loop3): ino=1a, mi_enum_attr [ 411.259015][T12455] exfat: Deprecated parameter 'namecase' [ 411.261148][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.284679][T12455] exfat: Deprecated parameter 'utf8' [ 411.285853][ T7426] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.301968][T12447] ntfs3(loop3): ino=1a, mi_enum_attr [ 411.338902][T12455] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 411.350347][T12447] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 411.376125][ T7426] usb 1-1: media controller created [ 411.387398][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.426588][ T7426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.487107][ T31] audit: type=1800 audit(1766957952.882:100): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2601" name="file1" dev="loop5" ino=1048825 res=0 errno=0 [ 411.561348][ T7426] dvb-usb: bulk message failed: -22 (6/0) [ 411.581452][T12447] overlayfs: upper fs does not support tmpfile. [ 411.602038][ T7426] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 411.615625][T12447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 411.637333][ T7426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 411.676795][ T7426] dvb-usb: schedule remote query interval to 150 msecs. [ 411.705981][ T7426] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 411.758261][ T7426] usb 1-1: USB disconnect, device number 24 [ 411.777218][T12276] team0: Port device team_slave_0 added [ 411.801234][T12276] team0: Port device team_slave_1 added [ 411.873771][ T7426] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 411.982022][T12465] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 412.067127][T12467] loop2: detected capacity change from 0 to 256 [ 412.206693][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.263029][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.357434][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.456056][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.501850][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.596854][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.979375][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2614'. [ 413.028057][T12276] hsr_slave_0: entered promiscuous mode [ 413.055289][T12276] hsr_slave_1: entered promiscuous mode [ 413.081491][T12276] debugfs: 'hsr0' already exists in 'hsr' [ 413.094593][T12276] Cannot create hsr debugfs directory [ 413.129839][T12495] loop0: detected capacity change from 0 to 256 [ 413.171205][T12495] exfat: Deprecated parameter 'namecase' [ 413.208503][T12495] exfat: Deprecated parameter 'utf8' [ 413.267980][T12495] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 413.364466][ T31] audit: type=1800 audit(1766957954.762:101): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2616" name="file1" dev="loop0" ino=1048827 res=0 errno=0 [ 413.502783][T12497] loop5: detected capacity change from 0 to 4096 [ 413.558704][T12497] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 413.648837][T12501] loop2: detected capacity change from 0 to 2048 [ 413.717549][T12501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.882776][ T31] audit: type=1800 audit(1766957955.282:102): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2619" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 414.083624][T12509] loop6: detected capacity change from 0 to 1024 [ 414.323981][T12276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.399474][T12276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.489778][ T9087] hfsplus: b-tree write err: -5, ino 4 [ 414.494725][T12276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.593126][T12276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.909626][T12534] loop2: detected capacity change from 0 to 128 [ 414.937133][T12534] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 414.981181][ T6003] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 415.048984][ T31] audit: type=1800 audit(1766957956.442:103): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2628" name="file2" dev="loop2" ino=95 res=0 errno=0 [ 415.077188][T12530] loop6: detected capacity change from 0 to 4096 [ 415.140565][T12530] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 415.180349][ T6003] usb 1-1: Using ep0 maxpacket: 8 [ 415.209987][ T6003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.222116][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.274042][ T6003] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 415.294559][T12530] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 415.329834][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.345558][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 415.407651][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 415.434663][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.441878][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.468369][ T6003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 415.473241][T12541] loop3: detected capacity change from 0 to 1024 [ 415.560037][T12546] xt_l2tp: v2 sid > 0xffff: 1114112 [ 415.569493][ T6003] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 415.604433][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.611652][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.629603][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 415.661661][T12541] hfsplus: bad catalog entry type [ 415.667525][ T6003] usb 1-1: Product: syz [ 415.694287][ T6003] usb 1-1: Manufacturer: syz [ 415.698910][ T6003] usb 1-1: SerialNumber: syz [ 415.782191][ T6003] usb 1-1: config 0 descriptor?? [ 416.027166][ T6003] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 416.066308][ T6003] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 416.229900][ T6003] radio-si470x 1-1:0.0: software version 173, hardware version 122 [ 416.259977][ T6003] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 416.439980][ T6003] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 416.478152][ T6003] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 416.493717][T12562] loop6: detected capacity change from 0 to 64 [ 416.506721][ T6003] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 416.521387][ T6003] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 416.602337][ T6003] usb 1-1: USB disconnect, device number 25 [ 416.851069][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 416.914144][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.955473][T12571] loop6: detected capacity change from 0 to 64 [ 417.041333][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 417.075111][ T5916] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 417.117666][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.167385][ T5916] usb 4-1: Product: syz [ 417.200824][ T5916] usb 4-1: Manufacturer: syz [ 417.221160][ T5916] usb 4-1: SerialNumber: syz [ 417.243303][ T5916] usb 4-1: config 0 descriptor?? [ 417.285633][ T5916] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 417.307441][ T8370] hfs: node 4:3 still has 1 user(s)! [ 417.406298][T12579] loop0: detected capacity change from 0 to 1024 [ 417.534328][T12579] syz.0.2641: attempt to access beyond end of device [ 417.534328][T12579] loop0: rw=8390657, sector=5778, nr_sectors = 2 limit=1024 [ 417.620563][T12579] Buffer I/O error on dev loop0, logical block 2889, lost async page write [ 417.907240][ T5916] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 417.939356][ T5916] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 417.987595][T12556] loop2: detected capacity change from 0 to 40427 [ 417.995733][ T5916] usb 4-1: USB disconnect, device number 28 [ 418.044089][T12556] F2FS-fs (loop2): build fault injection rate: 771 [ 418.074337][T12556] F2FS-fs (loop2): invalid crc value [ 418.183477][T12565] loop5: detected capacity change from 0 to 32768 [ 418.222045][T12276] veth0_vlan: entered promiscuous mode [ 418.240133][T12276] veth1_vlan: entered promiscuous mode [ 418.263832][T12565] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.312221][T12276] veth0_macvtap: entered promiscuous mode [ 418.323699][T12276] veth1_macvtap: entered promiscuous mode [ 418.347436][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.374089][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.431571][T12565] XFS (loop5): Ending clean mount [ 418.454321][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.466759][T12565] XFS (loop5): Quotacheck needed: Please wait. [ 418.483567][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.494834][T12556] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 418.535837][T12556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 418.570132][ T6489] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.615387][T12565] XFS (loop5): Quotacheck: Done. [ 418.639227][ T3434] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.712776][ T5834] syz-executor: attempt to access beyond end of device [ 418.712776][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 418.730112][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 418.730171][ T5834] Tainted: [L]=SOFTLOCKUP [ 418.730185][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.730208][ T5834] Call Trace: [ 418.730220][ T5834] [ 418.730233][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 418.730301][ T5834] f2fs_handle_critical_error+0x624/0x9f0 [ 418.730347][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.730396][ T5834] ? f2fs_build_fault_attr+0x53/0x1f0 [ 418.730474][ T5834] f2fs_write_end_io+0x958/0xcf0 [ 418.730528][ T5834] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 418.730584][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.730645][ T5834] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 418.730691][ T5834] bio_endio+0x751/0x8a0 [ 418.730756][ T5834] submit_bio_noacct+0x306/0x1f40 [ 418.730818][ T5834] __submit_merged_bio+0x33c/0x710 [ 418.730874][ T5834] __submit_merged_write_cond+0x315/0x3f0 [ 418.730939][ T5834] f2fs_write_cache_pages+0x2075/0x2570 [ 418.731037][ T5834] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 418.731103][ T5834] ? __lock_acquire+0x436/0x2890 [ 418.731166][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731212][ T5834] ? __lock_acquire+0x436/0x2890 [ 418.731312][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731410][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731457][ T5834] ? rcu_is_watching+0x12/0xc0 [ 418.731495][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731542][ T5834] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 418.731613][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731672][ T5834] f2fs_write_data_pages+0x5ac/0x1080 [ 418.731742][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 418.731811][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731864][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.731912][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 418.731977][ T5834] do_writepages+0x27a/0x600 [ 418.732028][ T5834] ? __pfx_do_writepages+0x10/0x10 [ 418.732068][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 418.732121][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.732167][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 418.732223][ T5834] filemap_writeback+0x225/0x2d0 [ 418.732273][ T5834] ? __pfx_filemap_writeback+0x10/0x10 [ 418.732385][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.732432][ T5834] ? find_held_lock+0x2b/0x80 [ 418.732495][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.732558][ T5834] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 418.732641][ T5834] block_operations+0x2b0/0xff0 [ 418.732696][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.732758][ T5834] ? __pfx_block_operations+0x10/0x10 [ 418.732812][ T5834] ? kasan_save_stack+0x33/0x60 [ 418.732851][ T5834] ? kasan_save_free_info+0x3b/0x60 [ 418.732980][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733031][ T5834] ? ktime_get+0x200/0x310 [ 418.733076][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733122][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.733184][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733228][ T5834] ? rcu_is_watching+0x12/0xc0 [ 418.733270][ T5834] f2fs_write_checkpoint+0x326/0x52f0 [ 418.733331][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733377][ T5834] ? kfree+0x2f8/0x6e0 [ 418.733429][ T5834] ? f2fs_stop_gc_thread+0x79/0xd0 [ 418.733494][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733549][ T5834] ? f2fs_stop_gc_thread+0x79/0xd0 [ 418.733618][ T5834] kill_f2fs_super+0x3d0/0x480 [ 418.733697][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 418.733777][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.733844][ T5834] deactivate_locked_super+0xc1/0x1a0 [ 418.733887][ T5834] deactivate_super+0xde/0x100 [ 418.733930][ T5834] cleanup_mnt+0x225/0x450 [ 418.733988][ T5834] task_work_run+0x150/0x240 [ 418.734043][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 418.734114][ T5834] exit_to_user_mode_loop+0xfb/0x540 [ 418.734170][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 418.734226][ T5834] do_syscall_64+0x4ee/0xf80 [ 418.734292][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.734330][ T5834] RIP: 0033:0x7fd4fe790a77 [ 418.734359][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 418.734397][ T5834] RSP: 002b:00007ffc06f0a5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 418.734433][ T5834] RAX: 0000000000000000 RBX: 00007fd4fe813d7d RCX: 00007fd4fe790a77 [ 418.734458][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc06f0a680 [ 418.734482][ T5834] RBP: 00007ffc06f0a680 R08: 0000000000000000 R09: 0000000000000000 [ 418.734507][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc06f0b710 [ 418.734532][ T5834] R13: 00007fd4fe813d7d R14: 0000000000066350 R15: 00007ffc06f0b750 [ 418.734591][ T5834] [ 418.781387][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.786661][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 418.932325][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.131445][ T6489] batman_adv: batadv0: IGMP Querier disappeared - multicast optimizations disabled [ 419.244453][ T5839] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.359510][ T9087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.404135][ T9087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.002750][T12616] dlm: no local IP address has been set [ 420.051584][T12616] dlm: cannot start dlm midcomms -107 [ 420.087210][T12619] loop3: detected capacity change from 0 to 764 [ 420.200588][T12619] rock: directory entry would overflow storage [ 420.206784][T12619] rock: sig=0x4654, size=5, remaining=4 [ 420.296523][T12625] loop6: detected capacity change from 0 to 512 [ 420.360851][T12619] isofs: isofs_export_get_parent(): child directory not normalized! [ 420.397906][T12625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.630019][ T8370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.970366][T12645] loop6: detected capacity change from 0 to 2048 [ 421.023878][T12645] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 421.140681][T12649] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.154480][ T6159] udevd[6159]: incorrect nilfs2 checksum on /dev/loop6 [ 421.328380][ T31] audit: type=1326 audit(1766957962.722:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.427656][ T31] audit: type=1326 audit(1766957962.752:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.492349][ T31] audit: type=1326 audit(1766957962.762:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.519789][ T31] audit: type=1326 audit(1766957962.762:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.528781][T12649] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 421.544933][ T31] audit: type=1326 audit(1766957962.762:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.588346][T12649] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 421.640875][T12649] Remounting filesystem read-only [ 421.734335][T12662] CUSE: info not properly terminated [ 421.750037][ T31] audit: type=1326 audit(1766957962.762:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.811061][T12657] loop0: detected capacity change from 0 to 4096 [ 421.829686][T12657] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 421.845298][ T31] audit: type=1326 audit(1766957962.762:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.3.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b498f749 code=0x7ffc0000 [ 421.944046][ T8370] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 421.971912][T12657] ntfs3(loop0): ino=1a, mi_enum_attr [ 421.977239][T12657] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 422.052913][T12664] loop2: detected capacity change from 0 to 4096 [ 422.174635][T12664] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 422.222653][T12664] ntfs3(loop2): ino=1a, mi_enum_attr [ 422.232771][T12664] ntfs3(loop2): ino=1a, mi_enum_attr [ 422.272730][T12664] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 422.855644][T12682] loop0: detected capacity change from 0 to 128 [ 422.931350][T12682] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 422.965453][T12685] loop3: detected capacity change from 0 to 256 [ 422.993480][T12682] hpfs: filesystem error: improperly stopped [ 422.999509][T12682] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 423.082700][T12682] hpfs: You really don't want any checks? You are crazy... [ 423.135199][T12682] hpfs: hpfs_map_sector(): read error [ 423.163151][T12682] hpfs: code page support is disabled [ 423.178864][T12682] hpfs: hpfs_map_4sectors(): unaligned read [ 423.215144][T12682] hpfs: hpfs_map_4sectors(): unaligned read [ 423.247915][T12682] hpfs: filesystem error: unable to find root dir [ 423.436046][T12695] loop5: detected capacity change from 0 to 2048 [ 423.522750][T12695] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 423.641813][T12701] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.849309][T12704] loop0: detected capacity change from 0 to 2048 [ 423.909522][T12704] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 424.021169][T12710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.805310][T12710] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 424.860459][T12710] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 424.910031][T12710] Remounting filesystem read-only [ 424.944076][T12694] loop2: detected capacity change from 0 to 32768 [ 424.950827][ T5831] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 425.052898][T12694] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.204075][T12702] loop6: detected capacity change from 0 to 32768 [ 425.262027][T12730] loop3: detected capacity change from 0 to 2048 [ 425.265605][T12694] XFS (loop2): Ending clean mount [ 425.291752][T12730] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 425.320887][T12730] NILFS (loop3): mounting unchecked fs [ 425.421038][T12730] NILFS (loop3): recovery complete [ 425.464867][T12740] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.491726][ T7958] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 425.698161][ T7958] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 425.752874][ T7958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.814755][ T7958] usb 1-1: config 0 descriptor?? [ 425.821171][ T5834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.830225][T12715] loop7: detected capacity change from 0 to 32768 [ 425.869641][ T7958] cp210x 1-1:0.0: cp210x converter detected [ 425.975002][T12715] [ 425.975002][T12715] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 425.975002][T12715] [ 426.086164][T12715] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 426.086164][T12715] [ 426.289693][ T7958] usb 1-1: cp210x converter now attached to ttyUSB0 [ 426.411233][ T49] read_mapping_page failed! [ 426.415775][ T49] ERROR: (device loop7): txAbort: [ 426.415775][ T49] [ 426.431870][ T49] jfs_write_inode: jfs_commit_inode failed! [ 426.437848][T12276] [ 426.437848][T12276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 426.437848][T12276] [ 426.511151][T12602] usb 1-1: USB disconnect, device number 26 [ 426.531661][T12276] [ 426.531661][T12276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 426.531661][T12276] [ 426.547219][T12602] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 426.883277][T12752] loop6: detected capacity change from 0 to 32768 [ 426.923180][T12602] cp210x 1-1:0.0: device disconnected [ 426.986059][T12752] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 427.133243][T12752] XFS (loop6): Metadata corruption detected at xfs_inode_buf_verify+0x439/0x4d0, xfs_inode block 0x3000 xfs_inode_buf_verify [ 427.146359][T12752] XFS (loop6): Unmount and run xfs_repair [ 427.152867][T12752] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 427.160262][T12752] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 427.169931][T12752] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.178865][T12752] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.191414][T12752] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.200804][T12752] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.209682][T12752] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.219394][T12752] 00000060: ff ff ff 05 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.228430][T12752] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.237348][T12752] XFS (loop6): metadata I/O error in "xfs_imap_to_bp+0x10f/0x2b0" at daddr 0x3000 len 64 error 117 [ 427.249033][T12752] XFS (loop6): Failed to read root inode 0x1800, error 117 [ 427.256863][T12752] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 427.814871][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2708'. [ 428.545094][T12754] loop5: detected capacity change from 0 to 32768 [ 428.658850][T12799] vlan2: entered promiscuous mode [ 428.681401][T12799] bridge0: entered promiscuous mode [ 428.941221][T12794] loop3: detected capacity change from 0 to 8192 [ 429.024864][T12804] loop2: detected capacity change from 0 to 2048 [ 429.030895][ T31] audit: type=1800 audit(1766957970.422:111): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2716" name="file2" dev="loop3" ino=1048834 res=0 errno=0 [ 429.055641][T12804] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 429.064048][T12794] syz.3.2716: attempt to access beyond end of device [ 429.064048][T12794] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 429.079121][T12806] loop5: detected capacity change from 0 to 16 [ 429.129262][T12806] erofs (device loop5): mounted with root inode @ nid 36. [ 429.177431][T12809] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.241028][ T6159] udevd[6159]: incorrect nilfs2 checksum on /dev/loop2 [ 429.243022][T12806] erofs (device loop5): unsupported i_format 247 of nid 86 [ 429.508915][T12813] loop6: detected capacity change from 0 to 512 [ 429.522803][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.529675][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.598463][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.613584][T12813] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.644321][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.668959][T12813] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 429.691448][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.698353][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.738949][T12813] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 429.747944][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.767642][T12813] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 429.809012][T12809] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 429.827292][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.830100][T12809] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 429.835808][T12813] System zones: 0-2, 18-18, 34-35 [ 429.866017][T12809] Remounting filesystem read-only [ 429.879021][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.941904][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.962538][T12813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.983695][T12817] loop3: detected capacity change from 0 to 4096 [ 429.990998][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 429.991384][ T5834] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 429.997917][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.092811][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.100755][T12824] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.124577][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.161180][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.200760][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.231161][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.238006][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.303588][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.315822][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.363323][ T8370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.376141][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.426084][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.457386][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.515202][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.528101][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.569842][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.598206][T12833] loop0: detected capacity change from 0 to 1024 [ 430.622139][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.628992][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.658713][T12833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.681274][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.696473][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.740919][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.770712][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.801043][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.821927][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.885049][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.945873][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 430.968898][T12833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 431.023117][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.079225][T12833] System zones: 0-1, 3-12 [ 431.095062][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.136999][T12833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.168244][T12844] netlink: 7060 bytes leftover after parsing attributes in process `syz.7.2738'. [ 431.203168][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.210212][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.229290][T12846] loop3: detected capacity change from 0 to 65 [ 431.232012][T12837] loop6: detected capacity change from 0 to 32768 [ 431.277306][T12837] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 431.287433][T12837] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 431.300556][T12846] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 431.321382][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.354162][T12837] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 431.370772][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.6.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.370826][T12837] Tainted: [L]=SOFTLOCKUP [ 431.370839][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.370861][T12837] Call Trace: [ 431.370872][T12837] [ 431.370885][T12837] dump_stack_lvl+0x16c/0x1f0 [ 431.370948][T12837] gfs2_withdraw+0xc6/0x1d0 [ 431.371004][T12837] gfs2_meta_buffer+0x310/0x3d0 [ 431.371044][T12837] ? __pfx_gfs2_meta_buffer+0x10/0x10 [ 431.371082][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.371127][T12837] ? schedule+0xf1/0x3a0 [ 431.371185][T12837] inode_go_instantiate+0xea/0x12a0 [ 431.371231][T12837] ? __pfx_bit_wait+0x10/0x10 [ 431.371292][T12837] ? __pfx_inode_go_instantiate+0x10/0x10 [ 431.371338][T12837] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 431.371395][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.371452][T12837] gfs2_instantiate+0x16c/0x250 [ 431.371514][T12837] gfs2_glock_wait+0x214/0x330 [ 431.371549][T12837] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 431.371586][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.371637][T12837] gfs2_glock_nq+0xd1f/0x17b0 [ 431.371683][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.371735][T12837] init_inodes+0x14a9/0x2ce0 [ 431.371804][T12837] ? __pfx_init_inodes+0x10/0x10 [ 431.371862][T12837] ? gfs2_fill_super+0x1d3f/0x2f90 [ 431.371909][T12837] ? init_sb+0xa50/0x10d0 [ 431.371974][T12837] ? __pfx_snprintf+0x10/0x10 [ 431.372051][T12837] ? gfs2_fill_super+0x1d3f/0x2f90 [ 431.372100][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372143][T12837] gfs2_fill_super+0x1d3f/0x2f90 [ 431.372213][T12837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 431.372269][T12837] ? gfs2_fill_super+0x19ba/0x2f90 [ 431.372317][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372361][T12837] ? find_held_lock+0x2b/0x80 [ 431.372418][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372462][T12837] ? set_blocksize+0x406/0x500 [ 431.372504][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372548][T12837] ? sb_set_blocksize+0xfe/0x320 [ 431.372594][T12837] ? get_tree_bdev_flags+0x38c/0x620 [ 431.372634][T12837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 431.372682][T12837] get_tree_bdev_flags+0x38c/0x620 [ 431.372722][T12837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 431.372774][T12837] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 431.372815][T12837] ? vfs_parse_fs_qstr+0x144/0x1c0 [ 431.372876][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372924][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.372975][T12837] ? apparmor_capable+0x1d7/0x4e0 [ 431.373019][T12837] gfs2_get_tree+0x4e/0x280 [ 431.373072][T12837] vfs_get_tree+0x8e/0x330 [ 431.373132][T12837] path_mount+0x7bf/0x23a0 [ 431.373186][T12837] ? rcu_is_watching+0x12/0xc0 [ 431.373227][T12837] ? __pfx_path_mount+0x10/0x10 [ 431.373282][T12837] ? kmem_cache_free+0x2d8/0x770 [ 431.373343][T12837] ? putname+0xf5/0x1a0 [ 431.373401][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.373446][T12837] ? putname+0xf5/0x1a0 [ 431.373499][T12837] ? __x64_sys_mount+0x293/0x310 [ 431.373553][T12837] __x64_sys_mount+0x293/0x310 [ 431.373609][T12837] ? __pfx___x64_sys_mount+0x10/0x10 [ 431.373679][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.373722][T12837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.373778][T12837] do_syscall_64+0xcd/0xf80 [ 431.373842][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.373878][T12837] RIP: 0033:0x7f195f990eea [ 431.373908][T12837] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.373945][T12837] RSP: 002b:00007f19608d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.373987][T12837] RAX: ffffffffffffffda RBX: 00007f19608d5ef0 RCX: 00007f195f990eea [ 431.374013][T12837] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f19608d5eb0 [ 431.374038][T12837] RBP: 0000200000000400 R08: 00007f19608d5ef0 R09: 0000000000010080 [ 431.374063][T12837] R10: 0000000000010080 R11: 0000000000000246 R12: 0000200000012500 [ 431.374086][T12837] R13: 00007f19608d5eb0 R14: 000000000001260d R15: 0000200000000640 [ 431.374137][T12837] [ 431.374477][T12837] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 431.379261][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.952785][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.959876][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 431.980843][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.053833][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.101173][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.128704][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.161648][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.206117][T12852] loop2: detected capacity change from 0 to 8192 [ 432.214183][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.254379][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.271396][T12860] loop3: detected capacity change from 0 to 8 [ 432.293236][ T31] audit: type=1800 audit(1766957973.692:112): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2740" name="file2" dev="loop2" ino=1048835 res=0 errno=0 [ 432.302104][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.324602][T12852] syz.2.2740: attempt to access beyond end of device [ 432.324602][T12852] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 432.344641][T12860] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 432.393976][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.469140][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.469458][ T8737] udevd[8737]: incorrect cramfs checksum on /dev/loop3 [ 432.519309][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.555713][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.623449][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.657984][T12866] mkiss: ax0: crc mode is auto. [ 432.671077][ T5850] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 432.703113][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.717736][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.751767][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.771370][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.794741][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.836527][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.875828][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.896999][ T5850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.933557][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.960411][ T5850] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 432.960457][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.960492][ T5850] usb 1-1: Product: syz [ 432.960519][ T5850] usb 1-1: Manufacturer: syz [ 432.960545][ T5850] usb 1-1: SerialNumber: syz [ 432.976359][ T5850] usb 1-1: config 0 descriptor?? [ 432.979418][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 432.981548][ T5850] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 432.981611][ T5850] dvb-usb: bulk message failed: -22 (3/0) [ 433.017056][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.017920][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.030069][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.031261][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.038451][ T5850] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 433.047479][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.048615][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.055043][ T5850] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 433.055111][ T5850] usb 1-1: media controller created [ 433.057343][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.062399][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.063367][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.064757][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.082214][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.083177][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.084114][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.085089][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.086025][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.086948][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.087875][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.092984][ T5850] dvb-usb: bulk message failed: -22 (6/0) [ 433.093099][ T5850] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 433.097070][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 433.104780][ T5850] dvb-usb: schedule remote query interval to 150 msecs. [ 433.104836][ T5850] dvb-usb: bulk message failed: -22 (3/0) [ 433.110037][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.111109][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.112084][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.113564][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.114505][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.115407][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.116503][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.117454][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.164152][ T5850] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 433.189116][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.190183][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.192626][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.193615][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.194613][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.195537][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.196613][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.197542][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.198541][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.199491][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.235551][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.236601][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.247567][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.248692][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.264085][ T5850] dvb-usb: bulk message failed: -22 (1/0) [ 433.264156][ T5850] dvb-usb: error while querying for an remote control event. [ 433.271435][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.284318][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.285327][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.296257][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.298378][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.304535][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.305557][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.307696][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.313524][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.345130][T12863] dvb-usb: bulk message failed: -22 (2/0) [ 433.416506][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.523721][ T88] dvb-usb: bulk message failed: -22 (1/0) [ 433.523766][ T88] dvb-usb: error while querying for an remote control event. [ 433.611166][ T88] usb 1-1: USB disconnect, device number 27 [ 433.633262][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.695563][ T5850] dvb-usb: bulk message failed: -22 (1/0) [ 433.932930][ T5850] dvb-usb: error while querying for an remote control event. [ 433.973587][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 433.987465][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.008102][ T88] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 434.032473][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.057706][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.077853][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.096268][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.112252][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.153183][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.182095][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.203555][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.239227][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.265148][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.305754][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.332336][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.345195][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.379872][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.401848][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.432692][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.459323][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.501225][ T5902] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 434.501501][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.559600][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.580908][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.625525][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.665627][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.666982][ T5902] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 434.701520][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.713901][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.728902][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.751457][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.758919][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 434.794367][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.821014][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 434.822373][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.861912][ T5902] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 434.882895][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.886143][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 434.889952][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.907364][ T5902] usb 4-1: Product: syz [ 434.917469][ T5902] usb 4-1: Manufacturer: syz [ 434.927574][ T5902] usb 4-1: SerialNumber: syz [ 434.959431][ T5902] usb 4-1: config 0 descriptor?? [ 434.971645][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 434.981258][T12901] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 435.000409][ T6043] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 435.012555][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.039916][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.058687][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.074515][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.075573][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.077284][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.078209][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.079147][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.080091][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.088565][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.089543][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.090561][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.091536][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.102373][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.103420][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.104484][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.105446][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.106410][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.107361][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.108293][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.117511][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.118515][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.119511][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.127904][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.128878][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.129807][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.138191][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.139270][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.140244][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.147534][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.148722][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.163526][ T6043] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.164954][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.170150][ T6043] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 435.189751][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.248462][ T6043] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 435.371401][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.372391][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.373607][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.403673][ T5902] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 435.403710][ T5902] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 435.405685][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.431740][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.439035][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.440210][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.457641][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.465053][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.466229][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.483674][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.491188][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.498632][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.507567][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.515225][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.518914][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.531389][ T6043] usb 7-1: config 0 descriptor?? [ 435.536530][ T5902] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 435.545698][ T5902] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 435.558433][ T5902] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 435.563230][ T6043] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 435.573610][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.579758][ T6043] dvb-usb: bulk message failed: -22 (3/0) [ 435.600018][ T6043] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 435.615284][ T6043] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 435.629452][ T6043] usb 7-1: media controller created [ 435.641835][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.645170][ T6043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.670462][ T6043] dvb-usb: bulk message failed: -22 (6/0) [ 435.676307][ T6043] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 435.696667][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.704174][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.731561][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.737810][ T5902] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 435.746435][ T6043] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 435.775173][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.783294][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.792463][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.799115][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.805901][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.814092][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.820755][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.827380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.834056][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.842234][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.849146][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.855798][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.857409][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.857631][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.857853][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.858073][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.858286][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.858499][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.858710][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.858947][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 435.859026][ T5902] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 435.859520][ T5902] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 435.862950][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.864063][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.864360][ T5902] usb 4-1: USB disconnect, device number 29 [ 435.864999][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.865924][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.866863][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.891517][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.892650][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.903361][ T6043] dvb-usb: schedule remote query interval to 150 msecs. [ 435.903388][ T6043] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 435.904307][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.905340][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.905965][ T6043] usb 7-1: USB disconnect, device number 21 [ 435.906314][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.918861][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.919806][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.933005][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.933960][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.942737][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.943784][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 435.944743][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.048667][ T6043] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 436.172937][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.179938][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.225621][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.239223][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.247680][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.255805][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.265003][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.272565][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.279693][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.287336][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.296305][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.306441][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.313818][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.322895][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.330126][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.337821][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.346451][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.371358][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.383975][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.402953][ T5839] erofs (device loop5): bogus dirent @ nid 36 [ 436.552435][T12921] loop0: detected capacity change from 0 to 32768 [ 436.620685][T12921] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.823699][T12921] XFS (loop0): Ending clean mount [ 437.223732][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 437.783794][T12929] loop2: detected capacity change from 0 to 32768 [ 437.870600][T12929] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2765 (12929) [ 437.991455][T12929] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 438.031221][T12929] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 438.216027][T12929] BTRFS info (device loop2): rebuilding free space tree [ 438.312253][T12929] BTRFS info (device loop2): disabling free space tree [ 438.319252][T12929] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 438.359028][T12982] loop0: detected capacity change from 0 to 1024 [ 438.412377][T12929] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 438.523460][T12982] hfsplus: xattr exists yet [ 438.538974][T12929] BTRFS info (device loop2): enabling ssd optimizations [ 438.610353][T12929] BTRFS info (device loop2): turning on async discard [ 438.649810][T12929] BTRFS info (device loop2): force clearing of disk cache [ 438.701918][T12929] BTRFS info (device loop2): enabling auto defrag [ 438.708397][T12929] BTRFS info (device loop2): max_inline set to 4096 [ 438.761845][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 439.183408][ T5834] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 439.827342][T13012] loop0: detected capacity change from 0 to 4096 [ 439.952113][T13012] ntfs3(loop0): ino=0, ni_load_mi_ex [ 440.010872][T13012] ntfs3(loop0): ino=0, ni_load_mi_ex [ 440.016330][T13012] ntfs3(loop0): Failed to load $MFT (-22). [ 440.452438][T13036] futex_wake_op: syz.0.2795 tries to shift op by -1; fix this program [ 441.625668][T13026] loop6: detected capacity change from 0 to 32768 [ 441.720234][T13026] JBD2: Ignoring recovery information on journal [ 441.825655][T13026] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 442.184095][ T8370] ocfs2: Unmounting device (7,6) on (node local) [ 442.244308][T13077] loop3: detected capacity change from 0 to 2048 [ 442.301358][T13077] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 442.338784][T13077] System zones: 0-7 [ 442.363876][T13077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.666751][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.292033][ T1080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.318241][T13100] loop3: detected capacity change from 0 to 64 [ 443.676161][T13104] loop2: detected capacity change from 0 to 2048 [ 443.679741][ T1080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.741859][T13104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.789810][T13106] tipc: Enabled bearer , priority 0 [ 443.884478][T13108] loop3: detected capacity change from 0 to 2048 [ 443.956212][T13108] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 444.007635][ T1080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.071828][ T5194] udevd[5194]: worker [6159] terminated by signal 33 (Unknown signal 33) [ 444.130371][ T5194] udevd[5194]: worker [6159] failed while handling '/devices/virtual/block/loop3' [ 444.139752][T13111] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.229005][ T5194] udevd[5194]: worker [5844] terminated by signal 33 (Unknown signal 33) [ 444.292440][ T5194] udevd[5194]: worker [5844] failed while handling '/devices/virtual/block/loop2' [ 444.487362][ T1080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.033020][ T1080] bridge0: port 3(batadv0) entered disabled state [ 445.049814][ T1080] bridge_slave_1: left allmulticast mode [ 445.071260][ T1080] bridge_slave_1: left promiscuous mode [ 445.077075][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.163240][ T1080] bridge_slave_0: left allmulticast mode [ 445.174078][ T1080] bridge_slave_0: left promiscuous mode [ 445.180000][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.730786][ T7426] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 445.862546][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.882711][T13150] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2842'. [ 445.886841][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.887747][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.889308][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.890024][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.930195][ T7426] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 445.930249][ T7426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.949609][ T7426] usb 1-1: config 0 descriptor?? [ 446.395501][ T7426] corsair-psu 0003:1B1C:1C03.005A: unknown main item tag 0x7 [ 446.420108][ T7426] corsair-psu 0003:1B1C:1C03.005A: hidraw0: USB HID v8.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0 [ 446.477063][T13162] loop3: detected capacity change from 0 to 1024 [ 446.502950][ T7426] corsair-psu 0003:1B1C:1C03.005A: unable to initialize device (-38) [ 446.534879][ T7426] corsair-psu 0003:1B1C:1C03.005A: probe with driver corsair-psu failed with error -38 [ 446.541877][T13162] EXT4-fs: Ignoring removed bh option [ 446.576306][T13162] EXT4-fs: inline encryption not supported [ 446.593358][ T7426] usb 1-1: USB disconnect, device number 28 [ 446.614119][T13163] fido_id[13163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 446.621371][T13162] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 446.715298][T13162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 446.772526][T13162] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2847: lblock 2 mapped to illegal pblock 2 (length 1) [ 446.853229][T13162] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 446.892799][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.927740][T13162] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2847: lblock 0 mapped to illegal pblock 48 (length 1) [ 446.967787][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.977488][T13162] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 446.992514][T13162] EXT4-fs error (device loop3): ext4_acquire_dquot:6984: comm syz.3.2847: Failed to acquire dquot type 0 [ 447.006525][ T1080] bond0 (unregistering): Released all slaves [ 447.023895][T13162] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 447.100953][T13162] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2847: mark_inode_dirty error [ 447.117491][ T1080] tipc: Left network mode [ 447.140737][T13162] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 447.181452][T13162] EXT4-fs (loop3): 1 orphan inode deleted [ 447.206369][ T3434] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 447.246960][ T3434] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 447.262122][ T3434] EXT4-fs error (device loop3): ext4_release_dquot:7020: comm kworker/u8:10: Failed to release dquot type 0 [ 447.302824][T13162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.470112][T13175] nftables ruleset with unbound set [ 447.646924][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.711954][ T5835] EXT4-fs error (device loop3): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 447.765328][ T5835] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 447.785322][ T5835] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 448.003449][ T5144] Bluetooth: hci4: command tx timeout [ 448.208847][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 448.245141][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'. [ 448.290398][T13193] netlink: 'syz.3.2856': attribute type 15 has an invalid length. [ 448.447255][T13198] loop0: detected capacity change from 0 to 2048 [ 448.466439][T13198] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 448.481148][ T1080] hsr_slave_0: left promiscuous mode [ 448.568936][ T1080] hsr_slave_1: left promiscuous mode [ 448.580665][T13204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.595148][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.611716][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.661792][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.669234][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.853973][ T1080] veth1_macvtap: left promiscuous mode [ 448.874539][ T1080] veth0_macvtap: left promiscuous mode [ 448.914896][ T1080] veth1_vlan: left promiscuous mode [ 448.932585][ T1080] veth0_vlan: left promiscuous mode [ 449.085608][T13217] loop0: detected capacity change from 0 to 1024 [ 449.213359][T13220] CIFS mount error: No usable UNC path provided in device string! [ 449.213359][T13220] [ 449.254481][T13220] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.367689][ T9087] hfsplus: b-tree write err: -5, ino 4 [ 449.572203][T13190] loop6: detected capacity change from 0 to 32768 [ 449.613272][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.619797][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.624436][T13190] xfs: Deprecated parameter 'noikeep' [ 449.693286][T13228] syz.2.2871 uses obsolete (PF_INET,SOCK_PACKET) [ 449.699062][T13190] XFS: noikeep mount option is deprecated. [ 449.753332][T13190] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.933744][T13190] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 450.006519][T13190] XFS (loop6): Starting recovery (logdev: internal) [ 450.089178][ T5144] Bluetooth: hci4: command tx timeout [ 450.102771][T13190] XFS (loop6): Ending recovery (logdev: internal) [ 450.227223][ T8370] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 450.925608][ T7426] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 450.934772][T13262] vivid-007: ================= START STATUS ================= [ 450.946632][T13262] vivid-007: Enable Output Cropping: true grabbed [ 450.969794][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 450.971770][T13262] vivid-007: Enable Output Composing: true grabbed [ 450.998504][T13262] vivid-007: Enable Output Scaler: true grabbed [ 451.015587][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 451.017197][T13262] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 451.050056][T13262] vivid-007: Transmit Mode: HDMI grabbed [ 451.057157][T13262] vivid-007: Hotplug Present: 0x00000000 [ 451.064319][T13262] vivid-007: RxSense Present: 0x00000000 [ 451.070090][T13262] vivid-007: EDID Present: 0x00000000 [ 451.074074][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 451.077426][T13262] vivid-007: ================== END STATUS ================== [ 451.101741][ T7426] usb 3-1: Using ep0 maxpacket: 16 [ 451.127868][ T7426] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 451.138499][ T7426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.163672][ T7426] usb 3-1: Product: syz [ 451.167881][ T7426] usb 3-1: Manufacturer: syz [ 451.173263][ T7426] usb 3-1: SerialNumber: syz [ 451.195866][ T7426] usb 3-1: config 0 descriptor?? [ 451.229654][ T7426] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 451.251928][ T24] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 451.274738][ T24] usb 7-1: config 0 has no interface number 0 [ 451.285351][ T24] usb 7-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=19.c9 [ 451.313915][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.322455][ T24] usb 7-1: Product: syz [ 451.333945][ T24] usb 7-1: Manufacturer: syz [ 451.338612][ T24] usb 7-1: SerialNumber: syz [ 451.362697][ T24] usb 7-1: config 0 descriptor?? [ 451.598082][ T24] ftdi_sio 7-1:0.16: FTDI USB Serial Device converter detected [ 451.608962][ T24] ftdi_sio ttyUSB0: unknown device type: 0x19c9 [ 451.629801][ T7426] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB1 [ 451.641433][ T24] usb 7-1: USB disconnect, device number 22 [ 451.670149][ T24] ftdi_sio 7-1:0.16: device disconnected [ 451.866127][ T6003] usb 3-1: USB disconnect, device number 22 [ 451.887439][ T6003] clie_3.5 ttyUSB1: Sony Clie 3.5 converter now disconnected from ttyUSB1 [ 451.911257][ T6003] visor 3-1:0.0: device disconnected [ 452.057066][T13277] xt_hashlimit: max too large, truncated to 1048576 [ 452.161494][ T5144] Bluetooth: hci4: command tx timeout [ 452.329194][T13151] chnl_net:caif_netlink_parms(): no params data found [ 452.605763][T13286] loop0: detected capacity change from 0 to 4096 [ 452.642498][T13286] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 453.182337][T13151] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.201994][ T1080] IPVS: stop unused estimator thread 0... [ 453.217572][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.250017][T13151] bridge_slave_0: entered allmulticast mode [ 453.270359][ T88] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 453.275351][T13151] bridge_slave_0: entered promiscuous mode [ 453.335185][T13151] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.344886][T13151] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.356522][T13151] bridge_slave_1: entered allmulticast mode [ 453.390417][T13151] bridge_slave_1: entered promiscuous mode [ 453.450397][ T88] usb 4-1: Using ep0 maxpacket: 16 [ 453.488081][ T88] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 453.536081][ T88] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 453.555542][ T88] usb 4-1: Product: syz [ 453.564889][ T88] usb 4-1: Manufacturer: syz [ 453.576257][ T88] usb 4-1: SerialNumber: syz [ 453.582660][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.595104][ T88] usb 4-1: config 0 descriptor?? [ 453.614532][T13316] futex_wake_op: syz.2.2900 tries to shift op by -1; fix this program [ 453.640175][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.896177][T13151] team0: Port device team_slave_0 added [ 453.919180][ T88] usb 4-1: USB disconnect, device number 30 [ 453.954476][T13151] team0: Port device team_slave_1 added [ 453.983597][T13322] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 454.195950][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.227304][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.261790][ T5144] Bluetooth: hci4: command tx timeout [ 454.294119][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.307460][T13302] loop6: detected capacity change from 0 to 32768 [ 454.334534][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.344499][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.373280][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.415951][T13302] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 454.415951][T13302] [ 454.455052][T13302] ERROR: (device loop6): remounting filesystem as read-only [ 454.764203][T13151] hsr_slave_0: entered promiscuous mode [ 454.794122][T13151] hsr_slave_1: entered promiscuous mode [ 454.813567][T13151] debugfs: 'hsr0' already exists in 'hsr' [ 454.819338][T13151] Cannot create hsr debugfs directory [ 455.036449][T13339] loop0: detected capacity change from 0 to 256 [ 455.066831][T13339] exfat: Deprecated parameter 'namecase' [ 455.097398][T13339] exfat: Deprecated parameter 'utf8' [ 455.148035][T13339] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 456.111221][T13366] loop3: detected capacity change from 0 to 128 [ 456.123763][T13367] loop2: detected capacity change from 0 to 64 [ 456.224870][T13151] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 456.295562][T13151] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 456.393878][T13151] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.438348][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 456.486484][ T12] ------------[ cut here ]------------ [ 456.492871][ T12] kernel BUG at fs/hfs/inode.c:456! [ 456.512697][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 456.519164][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.530040][ T12] Tainted: [L]=SOFTLOCKUP [ 456.534369][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.544437][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 456.550463][ T12] RIP: 0010:hfs_write_inode+0x37b/0xad0 [ 456.556041][ T12] Code: f7 e8 29 95 13 ff 49 83 fe 03 0f 84 88 03 00 00 49 83 fe 04 0f 84 cb 00 00 00 49 83 fe 02 0f 84 ab fd ff ff e8 06 9a 13 ff 90 <0f> 0b e8 fe 99 13 ff 48 8d 7d 40 48 b8 00 00 00 00 00 fc ff df 48 [ 456.575670][ T12] RSP: 0018:ffffc90000117450 EFLAGS: 00010293 [ 456.581756][ T12] RAX: 0000000000000000 RBX: 1ffff92000022e8c RCX: ffffffff82ab3c37 [ 456.589736][ T12] RDX: ffff88801d695b80 RSI: ffffffff82ab3c5a RDI: 0000000000000007 [ 456.597712][ T12] RBP: ffff88807d1d6958 R08: 0000000000000007 R09: 0000000000000004 [ 456.605694][ T12] R10: 0000000000000000 R11: ffff88801d6966b0 R12: 0000000000000000 [ 456.613689][ T12] R13: ffffc90000117490 R14: 0000000000000000 R15: ffffc900001174f0 [ 456.621663][ T12] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 456.630602][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.637187][ T12] CR2: 00007f195fbb42f8 CR3: 00000000522dc000 CR4: 0000000000350ef0 [ 456.645159][ T12] Call Trace: [ 456.648430][ T12] [ 456.651356][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 456.656655][ T12] ? __lock_acquire+0x436/0x2890 [ 456.661622][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.667277][ T12] __writeback_single_inode+0xe68/0x14a0 [ 456.672936][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 456.679021][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.684676][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 456.689901][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.695556][ T12] writeback_sb_inodes+0x72e/0x1ce0 [ 456.700784][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 456.706438][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 456.711861][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.717513][ T12] ? rcu_is_watching+0x12/0xc0 [ 456.722280][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.727931][ T12] ? queue_io+0x3f6/0x4f0 [ 456.732292][ T12] wb_writeback+0x419/0xae0 [ 456.736809][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 456.741837][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.747488][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.753136][ T12] ? mark_held_locks+0x49/0x80 [ 456.757919][ T12] wb_workfn+0x14d/0xbb0 [ 456.762181][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.767828][ T12] ? try_to_wake_up+0x160/0x1860 [ 456.772794][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 456.777574][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.783244][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.788895][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.794542][ T12] ? rcu_is_watching+0x12/0xc0 [ 456.799314][ T12] process_one_work+0x9ba/0x1b20 [ 456.804275][ T12] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 456.809939][ T12] ? __pfx_process_one_work+0x10/0x10 [ 456.815334][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.820999][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.826656][ T12] ? assign_work+0x1a0/0x250 [ 456.831261][ T12] worker_thread+0x6c8/0xf10 [ 456.835877][ T12] ? __pfx_worker_thread+0x10/0x10 [ 456.841004][ T12] kthread+0x3c5/0x780 [ 456.845087][ T12] ? __pfx_kthread+0x10/0x10 [ 456.849689][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.855334][ T12] ? rcu_is_watching+0x12/0xc0 [ 456.860105][ T12] ? __pfx_kthread+0x10/0x10 [ 456.864710][ T12] ret_from_fork+0x983/0xb10 [ 456.869311][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 456.874431][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.880080][ T12] ? __switch_to+0x7af/0x10d0 [ 456.884781][ T12] ? __pfx_kthread+0x10/0x10 [ 456.889387][ T12] ret_from_fork_asm+0x1a/0x30 [ 456.894188][ T12] [ 456.897197][ T12] Modules linked in: [ 456.904308][ T12] ---[ end trace 0000000000000000 ]--- [ 456.919211][T13151] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.027533][ T12] RIP: 0010:hfs_write_inode+0x37b/0xad0 [ 457.036891][ T12] Code: f7 e8 29 95 13 ff 49 83 fe 03 0f 84 88 03 00 00 49 83 fe 04 0f 84 cb 00 00 00 49 83 fe 02 0f 84 ab fd ff ff e8 06 9a 13 ff 90 <0f> 0b e8 fe 99 13 ff 48 8d 7d 40 48 b8 00 00 00 00 00 fc ff df 48 [ 457.070575][ T12] RSP: 0018:ffffc90000117450 EFLAGS: 00010293 [ 457.105268][ T5144] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 457.115106][ T12] RAX: 0000000000000000 RBX: 1ffff92000022e8c RCX: ffffffff82ab3c37 [ 457.138646][ T12] RDX: ffff88801d695b80 RSI: ffffffff82ab3c5a RDI: 0000000000000007 [ 457.149232][ T12] RBP: ffff88807d1d6958 R08: 0000000000000007 R09: 0000000000000004 [ 457.157331][ T12] R10: 0000000000000000 R11: ffff88801d6966b0 R12: 0000000000000000 [ 457.165405][ T12] R13: ffffc90000117490 R14: 0000000000000000 R15: ffffc900001174f0 [ 457.174313][ T12] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 457.183434][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.191633][ T12] CR2: 00007f195fbb42f8 CR3: 000000005dbc7000 CR4: 0000000000350ef0 [ 457.195074][T13151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.199680][ T12] Kernel panic - not syncing: Fatal exception [ 457.206484][ T12] Kernel Offset: disabled