last executing test programs: 1m42.26239133s ago: executing program 0 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x1, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x3, 0x8, 0x1ff, 0x6, 0x0, 0x7, 0x74ba, 0x40, 0x35e, 0x6, 0xc, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc5, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0xfff, 0xfffff801, 0xc, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xa, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0xfffffffd, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0xfffffffa, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x7, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x8001, 0x3, 0xcf800, 0x2b9c, 0x1000, 0xfffffff8, 0x3, 0x1, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf1, 0x3, 0x6ea, 0x4, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x2, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x80, 0x2, 0x200, 0x8, 0xb56, 0x5, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0xfffffff7, 0x9, 0xfffffff6, 0x0, 0x2, 0x7fff, 0x9a, 0x1, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x4, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x1, 0x0, 0x1, 0xd2f3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1m42.140017996s ago: executing program 0 (id=343): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB='@0\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000380)={0x0, 0xb, 0x28, "9c64eeddac373c524d8f57868cda74c6598505dd5294c535f404095544c12dcfaa2816f5e4d8ae4b"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="40157a000000b4"], 0x0, 0x0, 0x0, 0x0}) 1m39.822175322s ago: executing program 0 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1m39.682574421s ago: executing program 0 (id=353): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m39.035577758s ago: executing program 0 (id=357): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x12, 0x400eeb7, 0x4000014}, 0x2c) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m38.073091924s ago: executing program 0 (id=364): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2008004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021ff17a7070000000003060000000000000000aaa6", 0x16}], 0x1, 0x7, 0x1) 1m37.697323536s ago: executing program 32 (id=364): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2008004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021ff17a7070000000003060000000000000000aaa6", 0x16}], 0x1, 0x7, 0x1) 48.474934395s ago: executing program 4 (id=709): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f0000000000)="8d", 0x9, 0x3, 0xb57, 0x2, 0xc338, 0x2, 0x7, 'syz0\x00'}) 48.310661365s ago: executing program 4 (id=711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) sendto$inet(r0, &(0x7f0000000000)="f2ce", 0x2, 0x80c1, 0x0, 0x0) 48.138933685s ago: executing program 3 (id=713): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x23, 0x5, {0x5, 0x4, "10150f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="2ed9", 0x2}], 0x1) 47.405495668s ago: executing program 4 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 47.268097916s ago: executing program 4 (id=719): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$eJzskr1OOkEUxc/sLh//f5RoYkUDBfGjUJZFjZ2W2NvZSGBF4qLCkiiEYo0xFBbG0ifgNUx8AS2MD0BNQazNmtm5OxnwEZxfsWfumTt35l4489t+CsD3dFDDASJMZPDOGCwAOSa8iSH0ifSD9FEI3ijvkPw70qzf6ycpJ49lYZxXPc/t5AF8RZ60/P1bA5Oo1Od0UOOLEwBhGIbcqwM8HQtKjgmgreRkLWAlaiKUObwRHqwBKHZbV0W/199stqoNt+FeOGZ519627R2neNr0XFt8mXIFtQKuGwBSaUj4fgLAPcX/MQtTnkb77B+O5dlkPMMMwzyGcjZWhhf5rhTi3ws4wir4s64DpriFqIqFqKUKGEwKSpbyPnFXOtrYql169SEYWHxsBEvWKI2RkIGjBuW9AIui1JBKFkgrpCPSMWlu7i9jBfz7QNF6ACRxU+12OyU+JLFi8cqRnrMUqAPjtz4bs829Gr9mq9FoNBqNRqPRaDR/jZ8AAAD//8JqdgE=") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') setuid(0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) 46.869414329s ago: executing program 4 (id=721): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) read$FUSE(r1, 0x0, 0x6c) 46.328314901s ago: executing program 4 (id=723): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) 45.894122046s ago: executing program 33 (id=723): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) 45.271690033s ago: executing program 3 (id=731): r0 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_getsetattr(r0, 0x0, 0x0) 44.11043207s ago: executing program 3 (id=733): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x80, 0x3, 0x125}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x7, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 43.977536168s ago: executing program 3 (id=734): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPNbWKwR9Jk1btwYui4EFB0EM9xiQttWkjTQRbilaRepSCF0/iUfAv8CB6EfUkePGgdykU6aWtIIzM7kyz2e5uk3STjdnPB6Z9b+fNvvfdN2/3zbxOA+haQ/kfScT2iPgjIgaq2cUFhqp/Xb96fvLG1fOTSWTZG38nlXLXrp6fLIuWx20rMsNpRPpJEnsb1Dt39tzJiZmZ6TNFfnT+1Lujc2fPPX3i1MTx6ePTp8ePHDl8aOy5Z8efqTtyf/9K4szbdG3PB7P7dr/y1qXXJo9eevvnb5Iy/ro42mSo1c7HsqzN1XXWjpp00tvBhrAsPRGRd1dfZfwPRE8sdN5AvPxxRxsHrKosy7JtzXdfyIANLImlljxZfF8AG0P5Q59f/5bbGk091oUrL1QvgPK4rxdbdU9vpEWZvrrr23YaioijF/75Mt9iefchdn63Sm0CADa27/P5z1ON5n9p3FdT7q5ibWgwIu7OJx8RcU9E7IqIeyMqZe+PiAeWWX/9Ismt85/0ckR88fuKoru9fP73fLG2tXj+V87+YrCnyO2oxN+XHDsxM32w+EyGo29Tnh9rUccPL/32WbN9tfO/fMvrL+eCRTsu925afMzUxPzEncRc68pHEXt6G8Wf3FwJSCJid0TsafYmm1vXceKJr/c129cs/r6lNL4N60zZVxGPV/v/QtTFX0par0+Obo6Z6YOj5Vlxq19+vfh6s/pv3/+rK+//rQ3P/5vxDya167Vzy6/j4p+fNr2mWen535+8WUmXi8HvT8zPnxmL6E9erTa69vXxhWPLfFk+j3/4QOPxvzMWPom9EZGfxA9GxEMR8XDR9v0R8UhEHGgR/08vPvrO0uNP17z/p5bV/wuJ/qh/pXGi5+SP3y6qdLBV/I36/3AlNVy8spTvvxbNuZFl2R2czQAAAPD/k0bE9kjSkZvpNB0Zqf57+V2xNZ2ZnZt/8tjse6enqs8IDEZfWt7pGqi5HzpWXNaX+fG6/KHivvHnPVsq+ZHJ2ZmpTgcPXW5bk/Gf+6un060DVp3ntaB7Gf/QvYx/6F7GP3SvBuN/SyfaAay9Rr//H3agHcDaqxv/lv2gi7j+h+5l/EP36r39M/zAxjO3JVo/vL/ixL/FfyDQ/neWWA+JSNdFMyRWKdHpbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//E8nlDg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 43.43482601s ago: executing program 3 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="1c", 0x1, 0x48015, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 42.838177695s ago: executing program 3 (id=741): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f6, &(0x7f0000000880)="$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") close(0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/48, 0x30) getdents(r0, 0xfffffffffffffffd, 0x58) 42.491121255s ago: executing program 34 (id=741): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES64], 0x8, 0x2f6, &(0x7f0000000880)="$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") close(0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/48, 0x30) getdents(r0, 0xfffffffffffffffd, 0x58) 4.910233543s ago: executing program 6 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)={0x74, r1, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @random=0x4, 0x21, @void, @void, @void, @val={0x4, 0x6, {0xe, 0x2d, 0x4, 0x5}}, @val={0x6, 0x2, 0xf7a}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xf}]}, 0x74}}, 0x40000) 4.738383663s ago: executing program 6 (id=989): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x5, 0x40, 0x9, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.633046597s ago: executing program 5 (id=998): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e4"}, 0x43) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.497766824s ago: executing program 2 (id=999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0x436}]}) 2.290339657s ago: executing program 6 (id=1000): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 2.276435497s ago: executing program 5 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.130941186s ago: executing program 2 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.039418681s ago: executing program 5 (id=1003): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0xd5b203, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.994013523s ago: executing program 6 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.89315895s ago: executing program 5 (id=1005): r0 = fanotify_init(0x20, 0x800) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x401) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1020, r2, 0x0) 1.87577372s ago: executing program 2 (id=1006): syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f000001f840)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0036e43517c28e902319644ba0ff0a360cd1868ba1056935b0e60688f52a6341502669cd1b9d724c6a63d709000000c9e6481138c22c4ad94409a4f7eebd5d45e688b8501d66c50f43b37c906435e44b08927520e904bc6caa96d02bb81afa15050e90b90b577a2ca4f02fdea6050139aa6a02b2ff557d8d9fb4d0"], 0x1, 0x1f7f5, &(0x7f000003f0c0)="$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") r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1.750535658s ago: executing program 6 (id=1007): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 1.741200229s ago: executing program 1 (id=1008): userfaultfd(0x80001) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 1.661928283s ago: executing program 5 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x74, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.55063218s ago: executing program 6 (id=1010): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3, 0x2, 0x401}) 1.54949791s ago: executing program 1 (id=1011): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24d, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0x2, 0xffffffffffff8000, 0x1000, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x2, 0xc, 0x4, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0xff, 0x1ff, 0x7, 0xe648, 0x3, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.326815673s ago: executing program 5 (id=1012): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) truncate(&(0x7f00000002c0)='./file1\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.326467833s ago: executing program 1 (id=1013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2}) 1.270346437s ago: executing program 2 (id=1014): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x7d043}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x21ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 404.692597ms ago: executing program 1 (id=1015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 276.229565ms ago: executing program 1 (id=1016): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r0, 0x4) listen(r0, 0x0) listen(r0, 0x1) 203.902829ms ago: executing program 2 (id=1017): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 40.930458ms ago: executing program 2 (id=1018): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000010140)="$eJzs3LtvW1UcB/DjpGn6okSIga1XqpASqbbiPCrYArTiIVJFPAYmcGzHcmv7RrHjhEwMjIiB/wSBxMTI38DAzIYYQGxIIN9zQpvyWOLECfl8pOvvvcfXv3uOVVX6XUc3ABfWXPbbL6VwM1wNIUyHEG6EUOyX0lZYi/FCCOFWCGHqia2Uxv8auBxCuBZCuJkKJqO3vrgzvL3681u/fvv97KXrX37zwwSWC5wRL4YQuttxf68bM2/FfJjGa8N2kd2VYcr4RvdROs5j7jU3iwp7tcPzakUut+L5+fZuf5RbnVp9lK32VjG+3YsX7A9bh3WKDzys7RTHjeZmke1+XmTrIM5r/yD+93bQH8Q6jVTv46J8GAwOM44395txPduPiqz3Bmk81s0bzf1RDlOmy4V63mkU89g8zjd9tr3d7u3uZ8PmTr+d97LVSvWlSvVuubqTN5qD5kq51m3cXcnmW53RaeVBs9Zda+V5q9Os1PPuQjbfqtfL1Wo2f6+52a71smq1slxZLK8upL072esP3s86jWx+lK+2e7uDdqefbeU7WfzEQrZUWX55Ibtdzd5d38g23rl/f33jvQ/vffDglfU3X0sn/W1a2fzS4tJSubpYXqouXKD1f5omPcb1w7GUJj0BgPPnRPv/uVizpP8HnnLe+/+g/x+Lc9X/XvT+/wTWD8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLB+nPnqjWJnLh5fT+PPpKHn0nEphDAVQvjjH0yHy0dqTqc6M/9y/sxTc1gLoagwusZs2q6l8dH2+7Mn/S0AAADA/9fXn9z6PHbr8WVu0hPiNMWbNlM3PhpTvVIIYWbupzFVmxq9PD+mYsW/70thf0zVihtYV8ZULN5yuzSuav/h8X236SNx5YkoxZg6hekAAACn7GgncBpdCAAAAJPx2aQnwGSUwuPfBNMf8M/GSD8IXj1yBAAAAJxDpUlPAAAAADhxRf9/Fp7/913J8/8AAADgpMTn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxPTsJAFAfg10IF/0Vi3HsVd3AMj+DSpeEAXoIj4BW8AGfAnUcwYGhLtAYTkw7FkO9L2jIT8uOVsHkzpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD69FfPJy9Ptc9uc1bqdNHcDAAAA7LIs5pPyxagan9fzl/XUdT3OIiKPiF29ey9OGpm9Oqf45f3FjxpeI8qEzWcM6uMsIu7q4+Nq398CAAAAHK/FdDauuvXqNDp0QXSpWrTJL+4T5WURUYzeE6Xlm9NNorDy992Px0Rp5QLWMFFYteTWT5X2J73GZfjtklWXvNNyAACATjQ7gW67EAAAALr0cOgCOIwstluZ273g8p/3XxuCp40RAAAA8L8Ndk1m3dcBAAAAdKzs/z3/DwAAAI5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mlZzCeL6WzcNme1bifN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLI/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPF1pAHAFlCEIgMcBCr9fS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/6HzImUJWwZbggSc5B9duL8kDgIsa/J5yM9v+9Z1nvf50RRvn5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS8L2DOMkOnVEcF+c2dh8vZP3mkT6ztrI1m7UsjupM+unwavVDNNNcIgAAAFwcSVnfhxC209W5rI87ef2fltdkNf8Pz4/isp4/WveXfVn7Z+3333Ze3p+oM5onG/TO4qB/9XgqrbNb5WR74R+vaOV3Pn/2kuRfkPjD5ZeGaX4/o+/W199v5+FUHdkCAP/FlbIvgvL3oazvNZkYABdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6DJfDs2UchRBmWwdxZnP38cJJ/drK1mzZbj55slIdMxsiDSHcWRz0r9a4lkn34OGjz+YHg/79+oPXQgjNzV4EH49xTQhNZig4bRAX3+v/48h70QSs62yDhn8wAQBw7qRFy+r67XR1LjsXTYew9+Ph+v/NShzGrP93Prm5UZ2rWv/3alvh5Osu3fuy++Dho7cX783f7d/tf/7Otd67veu3bty41c2flXQ9MQEAAOB02kWr1v/x9PH9/8uVOIxZ/3/1fe+b6lyJ+v9EB5t+TWcCAABwsb34+l9/Riecj9rt8PX80tL93ui4//na6NhAqv/aVNGq9X8y3XRWAAAAQB2Gy9Gh/f/blTiMuf//3E+v/FIdMwkhXCr2/68sfDG4Xd9yJlodf07c9BoBAABo1qWiVff/0/z9/3j/lYc4hPDWG6O4+DeAY9X/yQff/lydq/r+//X6ljiR4pnR/cj7qRBaM01nBAAAwHn2TNGyYv+PdHXu018vf9T2/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//xwcQP8=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="d9", 0x1}], 0x1, 0x3000, 0x0, 0x3) 0s ago: executing program 1 (id=1019): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 1/22 14:59 (1000) [ 131.868172][ T27] usb 2-1: usb_control_msg returned -32 [ 131.876090][ T27] usbtmc 2-1:16.0: can't read capabilities [ 132.118906][ T5766] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 132.251748][ T6876] usbtmc 2-1:16.0: control status returned f7 [ 132.453710][ T9] usb 2-1: USB disconnect, device number 9 [ 132.740269][ T5856] usb 1-1: USB disconnect, device number 6 [ 133.025087][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031576][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130178][ T6886] loop1: detected capacity change from 0 to 128 [ 133.150505][ T6886] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.198953][ T6886] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.602764][ T6899] loop0: detected capacity change from 0 to 512 [ 133.622339][ T6899] EXT4-fs: Ignoring removed oldalloc option [ 133.657148][ T6899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.740594][ T6899] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #11: comm syz.0.353: corrupted in-inode xattr: invalid ea_ino [ 133.768064][ T6899] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.353: couldn't read orphan inode 11 (err -117) [ 133.812693][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.033277][ T6899] overlayfs: invalid origin (0000) [ 134.132177][ T6909] loop3: detected capacity change from 0 to 512 [ 134.163042][ T5760] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 134.169437][ T6909] EXT4-fs: Ignoring removed i_version option [ 134.221239][ T5760] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 134.234387][ T6909] EXT4-fs: Ignoring removed bh option [ 134.285111][ T6909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.349985][ T6914] loop1: detected capacity change from 0 to 256 [ 134.427347][ T6909] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.497557][ T6909] EXT4-fs (loop3): shut down requested (1) [ 134.643059][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.003012][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.088398][ T5760] syz-executor (5760) used greatest stack depth: 20488 bytes left [ 135.242042][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.310692][ T6939] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 135.321256][ T6939] syz_tun: entered promiscuous mode [ 135.344652][ T6939] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.453906][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.584740][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.751970][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 135.784109][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.941688][ T6948] loop1: detected capacity change from 0 to 8192 [ 136.012113][ T6948] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.414611][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.426005][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.438373][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.459085][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.477478][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.499235][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.848367][ T6970] block nbd1: server does not support multiple connections per device. [ 136.866399][ T6969] block nbd1: shutting down sockets [ 137.112935][ T6980] loop1: detected capacity change from 0 to 512 [ 137.142817][ T6980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.167771][ T6980] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.182711][ T6980] EXT4-fs (loop1): 1 truncate cleaned up [ 137.195729][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.225066][ T28] audit: type=1800 audit(1770687410.387:32): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 137.311652][ T28] audit: type=1800 audit(1770687410.387:33): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 137.323785][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.334235][ T28] audit: type=1800 audit(1770687410.387:34): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 137.540535][ T6995] loop1: detected capacity change from 0 to 256 [ 137.560520][ T5811] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.574315][ T6995] FAT-fs (loop1): bogus number of FAT sectors [ 137.593173][ T6995] FAT-fs (loop1): Can't find a valid FAT filesystem [ 137.764437][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.795679][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.817474][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.841549][ T5811] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.852543][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.879904][ T5811] usb 4-1: config 0 descriptor?? [ 138.174822][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 138.211135][ T7012] input: syz0 as /devices/virtual/input/input13 [ 138.319430][ T5811] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 138.355005][ T5811] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 138.407940][ T5811] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 138.537087][ T5771] Bluetooth: hci0: command tx timeout [ 138.591431][ T5811] usb 4-1: USB disconnect, device number 10 [ 138.646525][ T7018] fido_id[7018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 139.243998][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.286384][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.307203][ T6955] bridge_slave_0: entered allmulticast mode [ 139.323707][ T6955] bridge_slave_0: entered promiscuous mode [ 139.479046][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.510163][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.533516][ T6955] bridge_slave_1: entered allmulticast mode [ 139.558070][ T6955] bridge_slave_1: entered promiscuous mode [ 139.724221][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.786043][ T59] hsr_slave_0: left promiscuous mode [ 139.822920][ T59] hsr_slave_1: left promiscuous mode [ 139.836746][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.854834][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.860273][ T7054] loop2: detected capacity change from 0 to 1024 [ 139.885345][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.912212][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.931806][ T59] bridge_slave_1: left allmulticast mode [ 139.955549][ T59] bridge_slave_1: left promiscuous mode [ 139.958222][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.989126][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.006790][ T7054] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.062976][ T7054] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 2: comm syz.2.397: lblock 2 mapped to illegal pblock 2 (length 4) [ 140.080329][ T7054] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 4 with error 117 [ 140.092713][ T7054] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.092713][ T7054] [ 140.123476][ T7063] loop3: detected capacity change from 0 to 512 [ 140.142798][ T59] bridge_slave_0: left allmulticast mode [ 140.149028][ T7063] EXT4-fs: Ignoring removed nobh option [ 140.168252][ T59] bridge_slave_0: left promiscuous mode [ 140.174053][ T7063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.185468][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.204336][ T49] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 140.222597][ T7063] EXT4-fs (loop3): 1 truncate cleaned up [ 140.262748][ T7063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.306338][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 140.328145][ T59] veth1_macvtap: left promiscuous mode [ 140.334246][ T59] veth0_macvtap: left promiscuous mode [ 140.366592][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.366592][ T49] [ 140.371464][ T59] veth1_vlan: left promiscuous mode [ 140.382684][ T59] veth0_vlan: left promiscuous mode [ 140.404786][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.417990][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.576067][ T7072] capability: warning: `syz.3.402' uses 32-bit capabilities (legacy support in use) [ 140.618269][ T5771] Bluetooth: hci0: command tx timeout [ 141.349644][ T59] team0 (unregistering): Port device team_slave_1 removed [ 141.403096][ T59] team0 (unregistering): Port device team_slave_0 removed [ 141.454679][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.509999][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.846316][ T59] bond0 (unregistering): Released all slaves [ 141.930015][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.135429][ T6955] team0: Port device team_slave_0 added [ 142.160878][ T7082] loop1: detected capacity change from 0 to 64 [ 142.196632][ T6955] team0: Port device team_slave_1 added [ 142.314430][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.360643][ T7082] Trying to free block not in datazone [ 142.380023][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.425567][ T7090] Trying to free block not in datazone [ 142.437720][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.470625][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.497453][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.546956][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.637373][ T5856] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.697142][ T5771] Bluetooth: hci0: command tx timeout [ 142.802230][ T6955] hsr_slave_0: entered promiscuous mode [ 142.827190][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 142.837828][ T6955] hsr_slave_1: entered promiscuous mode [ 142.843242][ T5856] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 142.877017][ T5856] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.886801][ T5856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.932310][ T5856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.956213][ T5856] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.997030][ T5856] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.006111][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.287885][ T5856] usb 3-1: GET_CAPABILITIES returned 0 [ 143.293445][ T5856] usbtmc 3-1:16.0: can't read capabilities [ 143.475463][ T6955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.509834][ T5856] usb 3-1: USB disconnect, device number 8 [ 143.534745][ T6955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.575240][ T6955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.594668][ T6955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.879825][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.942673][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.972819][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.980106][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.019995][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.027217][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.514253][ T7160] loop3: detected capacity change from 0 to 1024 [ 144.535541][ T7160] EXT4-fs: Ignoring removed nobh option [ 144.584554][ T7160] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.652175][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.721728][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.778784][ T5771] Bluetooth: hci0: command tx timeout [ 144.803979][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.136503][ T7173] loop3: detected capacity change from 0 to 4096 [ 145.225969][ T7173] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 145.316097][ T7158] loop1: detected capacity change from 0 to 32768 [ 145.352707][ T7173] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 145.403030][ T6955] veth0_vlan: entered promiscuous mode [ 145.415881][ T7158] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.424362][ T6955] veth1_vlan: entered promiscuous mode [ 145.512292][ T6955] veth0_macvtap: entered promiscuous mode [ 145.576262][ T6955] veth1_macvtap: entered promiscuous mode [ 145.641951][ T7173] overlayfs: upper fs does not support tmpfile. [ 145.646137][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.690855][ T7158] XFS (loop1): Ending clean mount [ 145.691479][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.706526][ T7173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.722024][ T7158] XFS (loop1): Quotacheck needed: Please wait. [ 145.763191][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.795172][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.831021][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.856354][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.872388][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.893185][ T7158] XFS (loop1): Quotacheck: Done. [ 145.909372][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.961098][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.003016][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.047031][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.056883][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.134003][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.171437][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.171749][ T5761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.189284][ T7199] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 146.232026][ T6955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.267059][ T6955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.275805][ T6955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.339064][ T6955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.717266][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.754548][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.805882][ T7206] loop2: detected capacity change from 0 to 8192 [ 146.819755][ T7206] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.838031][ T7206] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 146.878777][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.886634][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.912981][ T7206] REISERFS (device loop2): using ordered data mode [ 146.982310][ T7206] reiserfs: using flush barriers [ 147.014152][ T7206] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.047284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.077375][ T7206] REISERFS (device loop2): checking transaction log (loop2) [ 147.227296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.465307][ T7206] REISERFS (device loop2): Using tea hash to sort names [ 147.477784][ T7231] loop1: detected capacity change from 0 to 128 [ 147.487726][ T7206] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 147.488476][ T7229] loop4: detected capacity change from 0 to 512 [ 147.574177][ T7206] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 147.583768][ T7229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.594516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 147.684734][ T7229] EXT4-fs (loop4): 1 truncate cleaned up [ 147.709785][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.744186][ T7206] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 147.790547][ T7206] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 147.863489][ T7229] fscrypt (loop4, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 147.878285][ T7237] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 147.985432][ T7237] REISERFS error (device loop2): vs-15011 reiserfs_release_objectid: tried to free free object id (4) [ 148.032237][ T7237] REISERFS (device loop2): Remounting filesystem read-only [ 148.056576][ T6955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.114339][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 148.297324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.689107][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 150.014356][ T7280] loop4: detected capacity change from 0 to 8192 [ 150.052461][ T7280] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.117244][ T7280] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 150.124701][ T7288] Bluetooth: MGMT ver 1.22 [ 150.126469][ T7280] REISERFS (device loop4): using ordered data mode [ 150.137946][ T7280] reiserfs: using flush barriers [ 150.181359][ T7280] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.217746][ T7280] REISERFS (device loop4): checking transaction log (loop4) [ 150.375230][ T7295] loop1: detected capacity change from 0 to 512 [ 150.410862][ T7295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.420948][ T7297] sctp: [Deprecated]: syz.3.456 (pid 7297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.420948][ T7297] Use struct sctp_sack_info instead [ 150.451775][ T7295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 150.473018][ T7295] System zones: 1-2, 4-12, 8-8 [ 150.493069][ T7295] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.455: iget: bad i_size value: 38620345925642 [ 150.524473][ T7295] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.455: couldn't read orphan inode 15 (err -117) [ 150.539160][ T7295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.610975][ T7280] REISERFS (device loop4): Using tea hash to sort names [ 150.618747][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.657440][ T7280] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 150.697531][ T7280] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 150.754143][ T7308] loop1: detected capacity change from 0 to 64 [ 150.837941][ T7280] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 150.915710][ T7309] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 150.987815][ T7280] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 151.034688][ T7280] REISERFS error (device loop4): vs-15011 reiserfs_release_objectid: tried to free free object id (4) [ 151.048565][ T7316] loop1: detected capacity change from 0 to 128 [ 151.075058][ T7280] REISERFS (device loop4): Remounting filesystem read-only [ 151.100571][ T7316] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.129488][ T7316] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.301003][ T7316] EXT4-fs error (device loop1): make_indexed_dir:2333: inode #2: block 18: comm syz.1.460: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 151.379232][ T7316] EXT4-fs (loop1): Remounting filesystem read-only [ 151.540210][ T5761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.946133][ T7335] loop4: detected capacity change from 0 to 256 [ 152.054830][ T7314] loop3: detected capacity change from 0 to 40427 [ 152.087864][ T7314] F2FS-fs (loop3): invalid crc value [ 152.125379][ T7314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.261057][ T7314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 152.486272][ T5764] syz-executor: attempt to access beyond end of device [ 152.486272][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.546105][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 153.255941][ T7371] loop4: detected capacity change from 0 to 2048 [ 153.264925][ T7370] 9pnet_fd: p9_fd_create_tcp (7370): problem connecting socket to 127.0.0.1 [ 153.305725][ T7371] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 153.637199][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.786600][ T7389] loop2: detected capacity change from 0 to 64 [ 153.854975][ T7391] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 153.858394][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 153.890653][ T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.906163][ T23] usb 5-1: config 179 has no interface number 0 [ 153.912471][ T7391] syz_tun: entered promiscuous mode [ 153.939725][ T7391] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 153.943703][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.962147][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.008073][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 22, changing to 8 [ 154.035590][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 9216, setting to 1024 [ 154.063531][ T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 154.101316][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.118026][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.136576][ T7371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.233215][ T28] audit: type=1326 audit(1770687427.397:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.282028][ T28] audit: type=1326 audit(1770687427.397:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.340708][ T28] audit: type=1326 audit(1770687427.397:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.368213][ T28] audit: type=1326 audit(1770687427.397:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.421691][ T28] audit: type=1326 audit(1770687427.397:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.461569][ T7399] loop1: detected capacity change from 0 to 4096 [ 154.509482][ T28] audit: type=1326 audit(1770687427.397:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.604397][ T28] audit: type=1326 audit(1770687427.407:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.611384][ T5856] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15 [ 154.719120][ T28] audit: type=1326 audit(1770687427.417:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509779af79 code=0x7ffc0000 [ 154.785950][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 154.979387][ T7409] loop3: detected capacity change from 0 to 128 [ 155.230348][ T5811] usb 5-1: USB disconnect, device number 2 [ 155.230397][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.244904][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.253520][ T5811] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 155.412622][ T7417] loop1: detected capacity change from 0 to 128 [ 155.464481][ T7417] FAT-fs (loop1): bogus number of FAT structure [ 155.472540][ T7417] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 155.482949][ T7417] FAT-fs (loop1): Can't find a valid FAT filesystem [ 155.795093][ T28] audit: type=1326 audit(1770687428.957:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41dd9af79 code=0x7ffc0000 [ 155.849627][ T28] audit: type=1326 audit(1770687428.987:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41dd9af79 code=0x7ffc0000 [ 155.997111][ T5856] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.043497][ T7439] loop4: detected capacity change from 0 to 128 [ 156.175600][ T7432] loop2: detected capacity change from 0 to 32768 [ 156.209853][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.224187][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.235774][ T7432] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.245332][ T5856] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 156.255301][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.282632][ T5856] usb 4-1: config 0 descriptor?? [ 156.366223][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 156.418544][ T7432] XFS (loop2): Ending clean mount [ 156.428336][ T7432] XFS (loop2): Quotacheck needed: Please wait. [ 156.533277][ T7432] XFS (loop2): Quotacheck: Done. [ 156.673566][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.764705][ T5856] uclogic 0003:5543:0005.000A: No inputs registered, leaving [ 156.820817][ T5856] uclogic 0003:5543:0005.000A: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 156.954014][ T23] usb 4-1: USB disconnect, device number 11 [ 157.055068][ T7459] fido_id[7459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 157.083032][ T7464] loop4: detected capacity change from 0 to 128 [ 157.113172][ T7464] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.135611][ T7464] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.232303][ T7464] EXT4-fs error (device loop4): make_indexed_dir:2333: inode #2: block 18: comm syz.4.511: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 157.257426][ T7464] EXT4-fs (loop4): Remounting filesystem read-only [ 157.320659][ T6955] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.357948][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 157.608835][ T5819] kernel write not supported for file /301/coredump_filter (pid: 5819 comm: kworker/0:6) [ 157.844373][ T7493] loop4: detected capacity change from 0 to 1024 [ 157.852019][ T7493] EXT4-fs: inline encryption not supported [ 157.877850][ T7493] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.915158][ T7493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.928401][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.019127][ T7498] loop3: detected capacity change from 0 to 2048 [ 158.029012][ T7498] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 158.131622][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.156782][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.171438][ T6955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.182975][ T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.192477][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.201111][ T27] usb 2-1: SerialNumber: syz [ 158.327432][ T5819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.397814][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.432895][ T27] usb 2-1: 0:2 : does not exist [ 158.452960][ T27] usb 2-1: USB disconnect, device number 10 [ 158.483589][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.537941][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 158.551586][ T5819] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.562915][ T5819] usb 4-1: config 179 has no interface number 0 [ 158.573574][ T5819] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.585794][ T5819] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.599635][ T5819] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 22, changing to 8 [ 158.611995][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 158.619068][ T5819] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 9216, setting to 1024 [ 158.633943][ T5819] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.648424][ T5819] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.648604][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.669147][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.681278][ T7498] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.695718][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.727986][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.745753][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.759784][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.769013][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.994044][ T5819] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 159.015181][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 159.023939][ T9] usbtmc 3-1:16.0: can't read capabilities [ 159.167310][ T5775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.279663][ T27] usb 3-1: USB disconnect, device number 9 [ 159.357374][ T5775] usb 5-1: Using ep0 maxpacket: 32 [ 159.370262][ T5775] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 159.381916][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.394990][ T5775] usb 5-1: config 0 descriptor?? [ 159.488982][ T23] usb 4-1: USB disconnect, device number 12 [ 159.488990][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.489128][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 159.514107][ T23] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 159.609765][ T7515] loop1: detected capacity change from 0 to 32768 [ 159.640353][ T5775] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 159.649899][ T7515] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.660156][ T5775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.674382][ T5775] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 159.682267][ T5775] usb 5-1: media controller created [ 159.713241][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.754116][ T7515] XFS (loop1): Ending clean mount [ 159.778912][ T7515] XFS (loop1): Quotacheck needed: Please wait. [ 159.791680][ T5775] DVB: Unable to find symbol dib7000p_attach() [ 159.798079][ T5775] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 159.866553][ T7515] XFS (loop1): Quotacheck: Done. [ 159.957871][ T5775] rc_core: IR keymap rc-dib0700-rc5 not found [ 159.966556][ T5775] Registered IR keymap rc-empty [ 159.975346][ T7528] loop2: detected capacity change from 0 to 64 [ 159.982450][ T5775] dvb-usb: could not initialize remote control. [ 159.994250][ T5775] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 159.994994][ T5761] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.056468][ T5775] usb 5-1: USB disconnect, device number 3 [ 160.155732][ T5775] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 160.587073][ T5856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.770280][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.786568][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.797158][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.827183][ T5856] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.852249][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.873596][ T5856] usb 4-1: config 0 descriptor?? [ 161.208873][ T5775] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.324021][ T5856] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 161.353300][ T5856] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.418870][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.441896][ T5775] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.458628][ T5775] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.469769][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.478091][ T5775] usb 2-1: SerialNumber: syz [ 161.697443][ T5856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.720841][ T5775] usb 2-1: 0:2 : does not exist [ 161.754448][ T5775] usb 2-1: USB disconnect, device number 11 [ 161.834287][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.927382][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 161.939111][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.956304][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.967489][ T5856] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.980380][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.999101][ T5856] usb 5-1: config 0 descriptor?? [ 162.445292][ T5856] savu 0003:1E7D:2D5A.000C: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 162.739154][ T23] usb 5-1: USB disconnect, device number 4 [ 163.401133][ T7581] loop4: detected capacity change from 0 to 256 [ 163.437461][ T9] usb 4-1: USB disconnect, device number 13 [ 163.464603][ T7581] FAT-fs (loop4): bogus number of FAT sectors [ 163.471021][ T5775] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.495011][ T7581] FAT-fs (loop4): Can't find a valid FAT filesystem [ 163.689623][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.710844][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.739255][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.782489][ T5775] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.812016][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.848271][ T5775] usb 3-1: config 0 descriptor?? [ 163.955670][ T7573] loop1: detected capacity change from 0 to 32768 [ 164.312991][ T5775] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 164.317262][ T7583] loop3: detected capacity change from 0 to 32768 [ 164.328219][ T7602] loop1: detected capacity change from 0 to 512 [ 164.339830][ T5775] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 164.357484][ T7602] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.380218][ T7603] netlink: 'syz.4.556': attribute type 10 has an invalid length. [ 164.389822][ T7603] bond0: (slave bond_slave_0): Releasing backup interface [ 164.407653][ T5775] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 164.432361][ T7583] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.474717][ T7602] EXT4-fs (loop1): 1 truncate cleaned up [ 164.482722][ T7602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.572689][ T7602] fscrypt (loop1, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 164.635352][ T5775] usb 3-1: USB disconnect, device number 10 [ 164.770919][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.771007][ T7583] XFS (loop3): Ending clean mount [ 164.787955][ T7615] fido_id[7615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.816830][ T7583] XFS (loop3): Quotacheck needed: Please wait. [ 164.986082][ T7583] XFS (loop3): Quotacheck: Done. [ 165.061072][ T7626] loop4: detected capacity change from 0 to 736 [ 165.395998][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.587174][ T5775] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.811549][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.823066][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.843433][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.875972][ T5775] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.886343][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.909598][ T5775] usb 3-1: config 0 descriptor?? [ 166.324434][ T7654] loop4: detected capacity change from 0 to 4096 [ 166.338912][ T5775] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 166.374920][ T5775] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.403825][ T7654] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 166.440215][ T7654] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 166.497061][ T5856] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.577363][ T7654] overlayfs: upper fs does not support tmpfile. [ 166.584486][ T7654] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.686990][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 166.736776][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.777128][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.795908][ T5856] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.814963][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.833753][ T5856] usb 2-1: config 0 descriptor?? [ 167.294951][ T7680] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 167.321179][ T7680] bond0: (slave bond_slave_0): Releasing backup interface [ 167.332330][ T5856] savu 0003:1E7D:2D5A.000F: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 167.769431][ T7696] loop4: detected capacity change from 0 to 512 [ 167.787473][ T7696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.802375][ T5856] usb 2-1: USB disconnect, device number 12 [ 167.842673][ T7696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 167.885376][ T7696] System zones: 1-2, 4-12, 8-8 [ 167.915391][ T7696] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.571: iget: bad i_size value: 38620345925642 [ 167.973081][ T7696] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.571: couldn't read orphan inode 15 (err -117) [ 168.020216][ T7696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.097276][ T7611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 168.165737][ T6955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.558478][ T9] usb 3-1: USB disconnect, device number 11 [ 168.577214][ T7719] loop2: detected capacity change from 0 to 512 [ 168.623562][ T7719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.690551][ T7719] EXT4-fs (loop2): 1 truncate cleaned up [ 168.735957][ T7719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.827344][ T7719] fscrypt (loop2, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 168.957960][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.254405][ T7711] loop4: detected capacity change from 0 to 32768 [ 169.345899][ T7737] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 169.375007][ T7737] bond0: (slave bond_slave_0): Releasing backup interface [ 169.501231][ T7716] loop1: detected capacity change from 0 to 32768 [ 169.526493][ T7716] XFS: attr2 mount option is deprecated. [ 169.615865][ T7716] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.839274][ T7716] XFS (loop1): Ending clean mount [ 169.865725][ T7716] XFS (loop1): Quotacheck needed: Please wait. [ 169.931507][ T7716] XFS (loop1): Quotacheck: Done. [ 170.056320][ T5761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.354166][ T7763] loop4: detected capacity change from 0 to 1024 [ 170.392397][ T7763] EXT4-fs: Ignoring removed orlov option [ 170.432350][ T7763] EXT4-fs: inline encryption not supported [ 170.469583][ T7763] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 170.487196][ T7763] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 170.506609][ T7763] EXT4-fs (loop4): invalid journal inode [ 170.520594][ T7763] EXT4-fs (loop4): can't get journal size [ 170.532585][ T7763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.628543][ T6955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.967870][ T5775] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.084945][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.157184][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 171.180432][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.212475][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.227443][ T5775] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 171.246089][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.264220][ T5775] usb 3-1: config 0 descriptor?? [ 171.295556][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.307286][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.325063][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.363385][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.385955][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.401045][ T9] usb 5-1: config 0 descriptor?? [ 171.725761][ T5775] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 171.852067][ T9] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 171.888195][ T9] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 172.021911][ T5775] usb 3-1: USB disconnect, device number 12 [ 172.079347][ T9] usb 5-1: USB disconnect, device number 5 [ 172.526285][ T7831] loop3: detected capacity change from 0 to 64 [ 172.920499][ T7840] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 172.963837][ T7840] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 173.300784][ T7851] loop4: detected capacity change from 0 to 4096 [ 173.331593][ T7851] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 173.379974][ T7851] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 173.503122][ T6955] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 173.717118][ T5775] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.899993][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.923712][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.948340][ T5775] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.970160][ T5775] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.987019][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.007809][ T5775] usb 2-1: config 0 descriptor?? [ 174.137162][ T7881] loop3: detected capacity change from 0 to 64 [ 174.368986][ T7888] loop2: detected capacity change from 0 to 256 [ 174.388773][ T7888] exfat: Deprecated parameter 'namecase' [ 174.441309][ T7888] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 174.451275][ T5775] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 174.513534][ T5775] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.018900][ T7901] input: syz0 as /devices/virtual/input/input19 [ 175.037125][ T7901] input: failed to attach handler leds to device input19, error: -6 [ 175.077038][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.277155][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 175.306220][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 175.322901][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.331551][ T23] usb 4-1: Product: syz [ 175.335854][ T23] usb 4-1: Manufacturer: syz [ 175.342065][ T23] usb 4-1: SerialNumber: syz [ 175.359217][ T23] usb 4-1: config 0 descriptor?? [ 175.572867][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.813859][ T7910] loop4: detected capacity change from 0 to 40427 [ 175.832648][ T7910] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 175.846420][ T7910] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 175.856110][ T7910] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 175.864665][ T7910] F2FS-fs (loop4): heap/no_heap options were deprecated [ 175.883371][ T7910] F2FS-fs (loop4): invalid crc value [ 175.896816][ T7910] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.972579][ T7910] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 175.980874][ T7910] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.024929][ T7911] f2fs_ckpt-7:4: attempt to access beyond end of device [ 176.024929][ T7911] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.039355][ T7911] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 176.215468][ T7918] sock: sock_set_timeout: `syz.2.635' (pid 7918) tries to set negative timeout [ 176.388588][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 176.409439][ T23] usb 4-1: USB disconnect, device number 14 [ 176.760493][ T7930] loop4: detected capacity change from 0 to 8192 [ 176.771331][ T7930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.784809][ T7930] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 176.794547][ T7930] REISERFS (device loop4): using ordered data mode [ 176.804366][ T7930] reiserfs: using flush barriers [ 176.811982][ T7930] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.829234][ T7930] REISERFS (device loop4): checking transaction log (loop4) [ 176.910610][ T7930] REISERFS (device loop4): Using tea hash to sort names [ 176.923701][ T7930] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.057308][ T5775] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 177.258677][ T7941] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 177.281362][ T7941] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 177.297934][ T5775] usb 2-1: device firmware changed [ 177.309668][ T5856] usb 2-1: USB disconnect, device number 13 [ 177.477295][ T5856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.509262][ T7945] loop4: detected capacity change from 0 to 512 [ 177.564350][ T7945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.578408][ T7945] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.682843][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.708474][ T7937] loop3: detected capacity change from 0 to 40427 [ 177.713426][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.736714][ T7937] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 177.748622][ T7937] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 177.758254][ T7937] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 177.759431][ T5856] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 177.767339][ T7937] F2FS-fs (loop3): heap/no_heap options were deprecated [ 177.783833][ T7937] F2FS-fs (loop3): invalid crc value [ 177.788286][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.820468][ T5856] usb 2-1: config 0 descriptor?? [ 177.821398][ T7937] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.916023][ T7937] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 177.923785][ T6955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.929429][ T7937] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.020243][ T7950] f2fs_ckpt-7:3: attempt to access beyond end of device [ 178.020243][ T7950] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.039617][ T7950] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 178.245459][ T5856] uclogic 0003:5543:0005.0013: No inputs registered, leaving [ 178.269734][ T5856] uclogic 0003:5543:0005.0013: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 178.629532][ T5819] usb 2-1: USB disconnect, device number 14 [ 178.822180][ T7969] loop3: detected capacity change from 0 to 2048 [ 178.857932][ T7969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.909164][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 178.909178][ T28] audit: type=1800 audit(1770687452.067:93): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 179.210419][ T7979] loop2: detected capacity change from 0 to 4096 [ 179.226439][ T7979] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 179.307381][ T7979] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 179.514875][ T5763] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 179.692274][ T7990] loop3: detected capacity change from 0 to 1024 [ 179.703136][ T7990] EXT4-fs: Ignoring removed orlov option [ 179.747181][ T7990] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 179.811303][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.880160][ T7997] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.067280][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.126330][ T8005] loop4: detected capacity change from 0 to 2048 [ 180.145410][ T8005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.226518][ T28] audit: type=1800 audit(1770687453.387:94): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.665" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 180.261374][ T8008] loop3: detected capacity change from 0 to 256 [ 180.651796][ T8015] batadv_slave_0: entered promiscuous mode [ 180.687459][ T8014] batadv_slave_0: left promiscuous mode [ 180.773308][ T8013] loop3: detected capacity change from 0 to 4096 [ 180.817274][ T8013] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 180.951568][ T8021] loop2: detected capacity change from 0 to 1024 [ 180.965516][ T8013] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 181.036139][ T8021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.072369][ T8021] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.250885][ T5764] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 181.282393][ T8021] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm syz.2.683: lblock 0 mapped to illegal pblock 0 (length 6) [ 181.362891][ T8021] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 181.409520][ T8021] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.409520][ T8021] [ 181.445036][ T8034] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: comm syz.2.683: lblock 0 mapped to illegal pblock 0 (length 1) [ 181.465183][ T8039] loop3: detected capacity change from 0 to 512 [ 181.478888][ T8034] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.683: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 181.560728][ T8039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.582846][ T8034] EXT4-fs error (device loop2) in ext4_setattr:5663: Corrupt filesystem [ 181.596759][ T8039] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.685108][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.034884][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.041422][ T8054] input: syz0 as /devices/virtual/input/input20 [ 182.270212][ T8062] loop1: detected capacity change from 0 to 512 [ 182.377462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.418373][ T8062] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 183.335435][ T8077] loop1: detected capacity change from 0 to 4096 [ 183.487284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 183.496872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 183.515527][ T8085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.727450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 183.792276][ T8077] syz.1.705 (8077) used greatest stack depth: 19344 bytes left [ 184.143675][ T8097] loop1: detected capacity change from 0 to 512 [ 184.166585][ T8097] EXT4-fs: Ignoring removed nobh option [ 184.190390][ T8097] EXT4-fs error (device loop1): __ext4_iget:5071: inode #11: block 1: comm syz.1.703: invalid block [ 184.202883][ T8097] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.703: couldn't read orphan inode 11 (err -117) [ 184.250981][ T8097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.420752][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.689438][ T8110] loop1: detected capacity change from 0 to 2048 [ 184.770615][ T8110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.806724][ T5811] hid-generic 0005:0B57:0002.0014: item fetching failed at offset 0/1 [ 184.818809][ T5811] hid-generic: probe of 0005:0B57:0002.0014 failed with error -22 [ 184.945513][ T28] audit: type=1800 audit(1770687458.097:95): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.716" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 185.367141][ T5811] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 185.549102][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 185.560240][ T5811] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.569449][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.579964][ T5811] usb 4-1: config 0 descriptor?? [ 185.585598][ T8124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.930746][ T8133] loop1: detected capacity change from 0 to 512 [ 185.961857][ T8133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.996034][ T8133] EXT4-fs (loop1): 1 truncate cleaned up [ 186.015212][ T8136] loop4: detected capacity change from 0 to 8 [ 186.015289][ T8133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.031083][ T5811] elan 0003:04F3:0755.0015: unknown main item tag 0x1 [ 186.118517][ T5811] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 186.300194][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 186.302132][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 186.350337][ T6955] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 186.371142][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.385194][ T6955] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 187.046562][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.264796][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.385338][ T8156] loop1: detected capacity change from 0 to 1024 [ 187.394709][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.484947][ T8156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.576457][ T8156] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4047: comm syz.1.735: Allocating blocks 497-513 which overlap fs metadata [ 187.618681][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.642451][ T28] audit: type=1800 audit(1770687460.807:96): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 187.654821][ T8156] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4047: comm syz.1.735: Allocating blocks 497-513 which overlap fs metadata [ 187.748732][ T8156] EXT4-fs (loop1): pa ffff88805e57a488: logic 16, phys. 129, len 24 [ 187.757488][ T8156] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 187.787652][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.812564][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.827364][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.850238][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.860704][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.876188][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.897991][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.038337][ T5811] usb 4-1: USB disconnect, device number 15 [ 188.191784][ T8173] loop1: detected capacity change from 0 to 128 [ 188.269367][ T5766] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.433320][ T8178] loop1: detected capacity change from 0 to 1024 [ 188.440938][ T8178] EXT4-fs: Ignoring removed bh option [ 188.449781][ T8178] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.481435][ T5766] usb 3-1: Using ep0 maxpacket: 32 [ 188.488808][ T5766] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.506700][ T5766] usb 3-1: config 0 has no interface number 0 [ 188.523495][ T5766] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.541166][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.557166][ T5766] usb 3-1: Product: syz [ 188.566648][ T5766] usb 3-1: Manufacturer: syz [ 188.580106][ T8178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.592640][ T5766] usb 3-1: SerialNumber: syz [ 188.610303][ T5766] usb 3-1: config 0 descriptor?? [ 188.648658][ T5766] smsc95xx v2.0.0 [ 188.751784][ T8178] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.732: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 188.841609][ T8178] EXT4-fs (loop1): Remounting filesystem read-only [ 188.996124][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.102255][ T5766] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 189.154676][ T5766] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 189.245947][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 189.305775][ T8203] loop3: detected capacity change from 0 to 512 [ 189.328457][ T8203] EXT4-fs: Ignoring removed oldalloc option [ 189.357935][ T8203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.405745][ T8203] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #11: comm syz.3.734: corrupted in-inode xattr: invalid ea_ino [ 189.473030][ T8203] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.734: couldn't read orphan inode 11 (err -117) [ 189.496160][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.584361][ T5766] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 189.602756][ T5766] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 189.614183][ T8203] overlayfs: invalid origin (0000) [ 189.623231][ T5766] usb 3-1: USB disconnect, device number 13 [ 189.715566][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.744491][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.755356][ T5764] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 189.771257][ T8166] bridge_slave_0: entered allmulticast mode [ 189.788731][ T8166] bridge_slave_0: entered promiscuous mode [ 189.813326][ T5764] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 189.858695][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.865949][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.879669][ T8166] bridge_slave_1: entered allmulticast mode [ 189.893001][ T8166] bridge_slave_1: entered promiscuous mode [ 189.988753][ T5771] Bluetooth: hci0: command tx timeout [ 190.088645][ T5764] bond0: (slave syz_tun): Releasing backup interface [ 190.131332][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.151029][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.202204][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.442959][ T8166] team0: Port device team_slave_0 added [ 190.457217][ T5766] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.483061][ T8166] team0: Port device team_slave_1 added [ 190.581290][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.588463][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.615001][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.644983][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.653727][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.689814][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.701919][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.742667][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.755750][ T5766] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.777495][ T8233] loop2: detected capacity change from 0 to 256 [ 190.799024][ T5766] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.839591][ T59] hsr_slave_0: left promiscuous mode [ 190.846524][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.860338][ T59] hsr_slave_1: left promiscuous mode [ 190.871342][ T5766] usb 2-1: config 0 descriptor?? [ 190.889497][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.905671][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.916718][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.926332][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.938438][ T8233] FAT-fs (loop2): Directory bread(block 64) failed [ 190.945302][ T8233] FAT-fs (loop2): Directory bread(block 65) failed [ 190.952261][ T8233] FAT-fs (loop2): Directory bread(block 66) failed [ 190.959885][ T59] bridge_slave_1: left allmulticast mode [ 190.965599][ T59] bridge_slave_1: left promiscuous mode [ 190.971872][ T8233] FAT-fs (loop2): Directory bread(block 67) failed [ 190.978727][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.989831][ T8233] FAT-fs (loop2): Directory bread(block 68) failed [ 190.996398][ T8233] FAT-fs (loop2): Directory bread(block 69) failed [ 191.005364][ T59] bridge_slave_0: left allmulticast mode [ 191.011279][ T59] bridge_slave_0: left promiscuous mode [ 191.017603][ T8233] FAT-fs (loop2): Directory bread(block 70) failed [ 191.024163][ T8233] FAT-fs (loop2): Directory bread(block 71) failed [ 191.031084][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.041889][ T8233] FAT-fs (loop2): Directory bread(block 72) failed [ 191.061813][ T8233] FAT-fs (loop2): Directory bread(block 73) failed [ 191.088000][ T59] veth1_macvtap: left promiscuous mode [ 191.093672][ T59] veth0_macvtap: left promiscuous mode [ 191.106192][ T59] veth1_vlan: left promiscuous mode [ 191.124132][ T59] veth0_vlan: left promiscuous mode [ 191.299418][ T5766] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x1 [ 191.315539][ T5766] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x1 [ 191.344229][ T5766] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 191.352112][ T5766] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 191.353207][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.360810][ T5766] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 191.378984][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.392831][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.396350][ T5766] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 191.426090][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.444025][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 191.451937][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.669505][ T5766] usb 2-1: USB disconnect, device number 15 [ 192.063506][ T5771] Bluetooth: hci0: command tx timeout [ 192.373105][ T59] team0 (unregistering): Port device team_slave_1 removed [ 192.466277][ T59] team0 (unregistering): Port device team_slave_0 removed [ 192.540705][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.815654][ T8252] loop2: detected capacity change from 0 to 512 [ 192.832411][ T8252] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.876022][ T8252] EXT4-fs (loop2): 1 truncate cleaned up [ 192.893329][ T8252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.942976][ T28] audit: type=1800 audit(1770687466.107:97): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.750" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 192.964856][ T28] audit: type=1800 audit(1770687466.107:98): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.750" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.036173][ T28] audit: type=1800 audit(1770687466.187:99): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.750" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.056833][ T5819] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 193.084448][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.261179][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 193.281307][ T5819] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 193.290065][ T5819] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 193.310447][ T5819] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 193.330643][ T5819] usb 2-1: config 250 has no interface number 0 [ 193.349195][ T59] bond0 (unregistering): Released all slaves [ 193.370763][ T5819] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 193.385053][ T5819] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 193.407271][ T5819] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 56 [ 193.433223][ T5819] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 193.458459][ T5819] usb 2-1: config 250 interface 228 has no altsetting 0 [ 193.476629][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 193.485937][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 193.494317][ T5819] usb 2-1: Product: syz [ 193.498987][ T5819] usb 2-1: SerialNumber: syz [ 193.504934][ T5771] Bluetooth: hci3: command tx timeout [ 193.534786][ T5819] hub 2-1:250.228: bad descriptor, ignoring hub [ 193.541903][ T5819] hub: probe of 2-1:250.228 failed with error -5 [ 193.670379][ T8166] hsr_slave_0: entered promiscuous mode [ 193.712961][ T8166] hsr_slave_1: entered promiscuous mode [ 193.797444][ T5819] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 193.954035][ T8257] loop2: detected capacity change from 0 to 32768 [ 194.052520][ T8257] JBD2: Ignoring recovery information on journal [ 194.112218][ T8257] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 194.129729][ T5819] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 194.145915][ T5771] Bluetooth: hci0: command tx timeout [ 194.291810][ T8257] (syz.2.752,8257,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "18446744073709551615@LqE: 艞t}0$" or missing value [ 194.346681][ T8257] (syz.2.752,8257,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "0x000000000000000018446744073709551615@LqE: 艞t}0$" or missing value [ 194.480225][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.486610][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.509993][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.563626][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 194.721146][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.762383][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 194.846867][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.876609][ T8166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.888189][ T8166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.986607][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.010770][ T8166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.030855][ T8166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.053207][ C0] usblp0: nonzero read bulk status received: -71 [ 195.132283][ T9] usb 2-1: USB disconnect, device number 16 [ 195.150672][ T9] usblp0: removed [ 195.188341][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.195700][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.207869][ T8234] bridge_slave_0: entered allmulticast mode [ 195.215069][ T8234] bridge_slave_0: entered promiscuous mode [ 195.224788][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.231989][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.239894][ T8234] bridge_slave_1: entered allmulticast mode [ 195.246710][ T8234] bridge_slave_1: entered promiscuous mode [ 195.278681][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.293992][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.369956][ T8234] team0: Port device team_slave_0 added [ 195.404566][ T8234] team0: Port device team_slave_1 added [ 195.569208][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.576193][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.592635][ T8298] loop2: detected capacity change from 0 to 256 [ 195.613831][ T5771] Bluetooth: hci3: command tx timeout [ 195.621618][ T8234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.730679][ T5771] Bluetooth: Wrong link type (-71) [ 195.913881][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.928775][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.976687][ T8234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.012438][ T8309] netlink: 52 bytes leftover after parsing attributes in process `syz.1.760'. [ 196.049271][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.176209][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.760'. [ 196.194606][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.201845][ T8312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.218500][ T5771] Bluetooth: hci0: command tx timeout [ 196.295621][ T8319] loop2: detected capacity change from 0 to 1024 [ 196.303268][ T8319] EXT4-fs: Ignoring removed bh option [ 196.312320][ T8234] hsr_slave_0: entered promiscuous mode [ 196.327147][ T8319] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 196.371385][ T8234] hsr_slave_1: entered promiscuous mode [ 196.383062][ T8234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.384257][ T8319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.396169][ T8234] Cannot create hsr debugfs directory [ 196.532788][ T8319] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.762: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 196.571474][ T8319] EXT4-fs (loop2): Remounting filesystem read-only [ 196.645408][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.858256][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.054256][ T8324] loop1: detected capacity change from 0 to 32768 [ 197.064660][ T8331] netlink: 9 bytes leftover after parsing attributes in process `syz.2.764'. [ 197.103185][ T8324] JBD2: Ignoring recovery information on journal [ 197.115759][ T8331] gretap0: entered promiscuous mode [ 197.183312][ T8324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.204181][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.224483][ T8335] netlink: 5 bytes leftover after parsing attributes in process `syz.2.764'. [ 197.257376][ T8335] 0{X: renamed from gretap0 [ 197.295046][ T8335] 0{X: left promiscuous mode [ 197.308634][ T8335] 0{X: entered allmulticast mode [ 197.334655][ T8335] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 197.363645][ T8324] (syz.1.761,8324,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "18446744073709551615@LqE: 艞t}0$" or missing value [ 197.400866][ T8324] (syz.1.761,8324,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "0x000000000000000018446744073709551615@LqE: 艞t}0$" or missing value [ 197.473789][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.480969][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.609042][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.616183][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.644491][ T5761] ocfs2: Unmounting device (7,1) on (node local) [ 197.657593][ T5771] Bluetooth: hci3: command tx timeout [ 197.874918][ T8349] loop2: detected capacity change from 0 to 4096 [ 197.901403][ T8349] ntfs3: Bad value for 'uid' [ 197.973975][ T8166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.243809][ T8234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.276636][ T8234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.306809][ T8234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.348625][ T8234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.386172][ T59] hsr_slave_0: left promiscuous mode [ 198.423563][ T59] hsr_slave_1: left promiscuous mode [ 198.451967][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.471641][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.497901][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.505352][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.532799][ T59] bridge_slave_1: left allmulticast mode [ 198.577565][ T59] bridge_slave_1: left promiscuous mode [ 198.583554][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.608949][ T59] bridge_slave_0: left allmulticast mode [ 198.617376][ T59] bridge_slave_0: left promiscuous mode [ 198.623145][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.682400][ T59] veth1_macvtap: left promiscuous mode [ 198.689058][ T59] veth0_macvtap: left promiscuous mode [ 198.694718][ T59] veth1_vlan: left promiscuous mode [ 198.700805][ T59] veth0_vlan: left promiscuous mode [ 199.334213][ T59] team0 (unregistering): Port device team_slave_1 removed [ 199.441138][ T59] team0 (unregistering): Port device team_slave_0 removed [ 199.525810][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.737784][ T5771] Bluetooth: hci3: command tx timeout [ 200.299018][ T59] bond0 (unregistering): Released all slaves [ 200.424311][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 200.523388][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.716597][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.795686][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.832940][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.840154][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.904661][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.911869][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.132996][ T8166] veth0_vlan: entered promiscuous mode [ 201.153359][ T8166] veth1_vlan: entered promiscuous mode [ 201.211664][ T8166] veth0_macvtap: entered promiscuous mode [ 201.225965][ T8166] veth1_macvtap: entered promiscuous mode [ 201.256188][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.273782][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.284584][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.299812][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.313790][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.342850][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.370162][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.381467][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.395533][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.408265][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.433381][ T8166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.444044][ T8166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.454324][ T8166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.463418][ T8166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.485821][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.618910][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.634027][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.683170][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.692931][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.032816][ T8234] veth0_vlan: entered promiscuous mode [ 202.072947][ T8234] veth1_vlan: entered promiscuous mode [ 202.118974][ T7922] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.159925][ T8234] veth0_macvtap: entered promiscuous mode [ 202.174962][ T8234] veth1_macvtap: entered promiscuous mode [ 202.211745][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.224834][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.240062][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.265024][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.287131][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.314085][ T7922] usb 2-1: Using ep0 maxpacket: 16 [ 202.327192][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.348940][ T7922] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 202.361648][ T7922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.371410][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.400580][ T7922] usb 2-1: config 0 descriptor?? [ 202.416669][ T7922] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 202.430055][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.446511][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.465684][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.493356][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.503811][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.521715][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.534721][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.584222][ T8234] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.601011][ T8234] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.623926][ T8234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.638800][ T8234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.814521][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.846006][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.909117][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.926988][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.056528][ T8432] loop5: detected capacity change from 0 to 32768 [ 203.114709][ T8444] loop6: detected capacity change from 0 to 128 [ 203.155723][ T8432] JBD2: Ignoring recovery information on journal [ 203.232474][ T8444] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 203.337163][ T8444] hpfs: filesystem error: improperly stopped [ 203.361325][ T8444] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 203.377056][ T8444] hpfs: You really don't want any checks? You are crazy... [ 203.388544][ T8432] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 203.394074][ T8444] hpfs: hpfs_map_sector(): read error [ 203.430711][ T8444] hpfs: code page support is disabled [ 203.432250][ T7922] gspca_sonixj: reg_w1 err -71 [ 203.457139][ T8444] hpfs: hpfs_map_4sectors(): unaligned read [ 203.475478][ T8444] hpfs: hpfs_map_4sectors(): unaligned read [ 203.485825][ T8444] hpfs: filesystem error: unable to find root dir [ 203.500696][ T7922] sonixj: probe of 2-1:0.0 failed with error -71 [ 203.547312][ T7922] usb 2-1: USB disconnect, device number 17 [ 203.630154][ T8432] (syz.5.776,8432,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "18446744073709551615@LqE: 艞t}0$" or missing value [ 203.693374][ T8432] (syz.5.776,8432,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "0x000000000000000018446744073709551615@LqE: 艞t}0$" or missing value [ 203.846854][ T8166] ocfs2: Unmounting device (7,5) on (node local) [ 204.097628][ T8468] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 204.664050][ T8492] loop1: detected capacity change from 0 to 128 [ 204.696581][ T8492] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 204.743688][ T8492] hpfs: filesystem error: improperly stopped [ 204.770235][ T8492] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 204.808830][ T8492] hpfs: You really don't want any checks? You are crazy... [ 204.843505][ T8492] hpfs: hpfs_map_sector(): read error [ 204.873055][ T8492] hpfs: code page support is disabled [ 204.883109][ T8497] loop5: detected capacity change from 0 to 22 [ 204.896762][ T8492] hpfs: hpfs_map_4sectors(): unaligned read [ 204.916243][ T8497] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 204.922484][ T8492] hpfs: hpfs_map_4sectors(): unaligned read [ 204.940998][ T8492] hpfs: filesystem error: unable to find root dir [ 204.999651][ T8497] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 205.537238][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.648359][ T8511] loop5: detected capacity change from 0 to 512 [ 205.714850][ T8511] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.757034][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 205.774441][ T8511] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4047: comm syz.5.799: Allocating blocks 41-42 which overlap fs metadata [ 205.797146][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 205.816350][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.857198][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.891134][ T8511] Quota error (device loop5): write_blk: dquota write failed [ 205.897039][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.908196][ T8511] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 205.917026][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.943118][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.952813][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.960109][ T8511] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4047: comm syz.5.799: Allocating blocks 41-42 which overlap fs metadata [ 205.997750][ T8511] Quota error (device loop5): write_blk: dquota write failed [ 206.008591][ T8511] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 206.056805][ T8511] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.799: Failed to acquire dquot type 1 [ 206.132476][ T8511] EXT4-fs error (device loop5): mb_free_blocks:1954: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 206.150923][ T8511] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.799: corrupted inode contents [ 206.201527][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 206.209308][ T8511] EXT4-fs error (device loop5): ext4_dirty_inode:6124: inode #12: comm syz.5.799: mark_inode_dirty error [ 206.222417][ T23] usbtmc 2-1:16.0: can't read capabilities [ 206.258227][ T8511] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.799: corrupted inode contents [ 206.301446][ T8511] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.799: mark_inode_dirty error [ 206.313437][ T8511] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.799: corrupted inode contents [ 206.333807][ T8511] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 206.347047][ T8511] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.799: corrupted inode contents [ 206.368652][ T8511] EXT4-fs error (device loop5): ext4_truncate:4294: inode #12: comm syz.5.799: mark_inode_dirty error [ 206.391237][ T8511] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 206.430833][ T8511] EXT4-fs (loop5): 1 truncate cleaned up [ 206.437290][ T23] usb 2-1: USB disconnect, device number 18 [ 206.450311][ T8511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.676324][ T8529] syzkaller1: entered promiscuous mode [ 206.697848][ T8529] syzkaller1: entered allmulticast mode [ 206.735976][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 206.908099][ T8536] Illegal XDP return value 2841733681 on prog (id 51) dev syz_tun, expect packet loss! [ 207.386657][ T8556] loop1: detected capacity change from 0 to 256 [ 207.439785][ T8166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.528496][ T5939] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.672701][ T8571] loop2: detected capacity change from 0 to 512 [ 207.706284][ T8571] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.422751][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 208.666175][ T8600] loop2: detected capacity change from 0 to 22 [ 208.671868][ T8596] batadv0: entered promiscuous mode [ 208.689846][ T8600] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 208.701680][ T8596] macvlan1: entered promiscuous mode [ 208.724794][ T8600] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 208.735880][ T8596] hsr1: entered promiscuous mode [ 208.747098][ T8596] hsr1: entered allmulticast mode [ 208.752189][ T8596] batadv0: entered allmulticast mode [ 208.787736][ T8596] macvlan1: entered allmulticast mode [ 208.807220][ T8596] veth1_vlan: entered allmulticast mode [ 209.155899][ T8616] Bluetooth: MGMT ver 1.22 [ 209.161536][ T8618] netlink: 9 bytes leftover after parsing attributes in process `syz.1.828'. [ 209.184474][ T8618] netlink: 9 bytes leftover after parsing attributes in process `syz.1.828'. [ 209.378056][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'. [ 209.483693][ T8628] loop1: detected capacity change from 0 to 2048 [ 209.545612][ T8628] GPT:first_usable_lbas don't match. [ 209.556336][ T8628] GPT:34 != 290 [ 209.559920][ T8628] GPT: Use GNU Parted to correct GPT errors. [ 209.597130][ T8628] loop1: p1 p2 p3 [ 209.687038][ T7922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.907699][ T7922] usb 7-1: Using ep0 maxpacket: 16 [ 209.916722][ T7922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.947160][ T7922] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 209.956250][ T7922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.977217][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.028094][ T7922] usb 7-1: config 0 descriptor?? [ 210.179216][ T8644] loop2: detected capacity change from 0 to 128 [ 210.203205][ T23] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 210.219586][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.239288][ T8644] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 210.262398][ T23] usb 2-1: Product: syz [ 210.290638][ T23] usb 2-1: Manufacturer: syz [ 210.295363][ T23] usb 2-1: SerialNumber: syz [ 210.319282][ T23] usb 2-1: config 0 descriptor?? [ 210.415482][ T8634] loop5: detected capacity change from 0 to 32768 [ 210.481493][ T8634] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.505031][ T7922] input: HID 041e:3100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.0017/input/input21 [ 210.618588][ T23] usb 2-1: Firmware version (0.0) predates our first public release. [ 210.629404][ T7922] creative-sb0540 0003:041E:3100.0017: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.6-1/input0 [ 210.642771][ T23] usb 2-1: Please update to version 0.2 or newer [ 210.768775][ T5766] usb 7-1: USB disconnect, device number 2 [ 210.829392][ T23] usb 2-1: USB disconnect, device number 19 [ 210.894296][ T8662] fido_id[8662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 210.946389][ T8664] loop2: detected capacity change from 0 to 1024 [ 210.974130][ T8634] XFS (loop5): Ending clean mount [ 210.992245][ T8664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.003106][ T8634] XFS (loop5): Quotacheck needed: Please wait. [ 211.022207][ T8664] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 211.058453][ T8664] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 211.069311][ T8670] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 211.084948][ T8670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.084948][ T8670] [ 211.095099][ T8670] EXT4-fs (loop2): Total free blocks count 0 [ 211.101975][ T8670] EXT4-fs (loop2): Free/Dirty block details [ 211.110905][ T8670] EXT4-fs (loop2): free_blocks=68451041280 [ 211.140836][ T8670] EXT4-fs (loop2): dirty_blocks=32 [ 211.147970][ T8664] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.147970][ T8664] [ 211.158797][ T8670] EXT4-fs (loop2): Block reservation details [ 211.220723][ T8634] XFS (loop5): Quotacheck: Done. [ 211.556053][ T8673] batadv0: entered promiscuous mode [ 211.590692][ T8166] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.613642][ T8673] macvlan1: entered promiscuous mode [ 211.649102][ T8673] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 211.662061][ T8673] Cannot create hsr debugfs directory [ 211.673938][ T8673] hsr1: entered promiscuous mode [ 211.688125][ T8673] hsr1: entered allmulticast mode [ 211.693203][ T8673] batadv0: entered allmulticast mode [ 211.738371][ T8673] macvlan1: entered allmulticast mode [ 211.754172][ T8673] veth1_vlan: entered allmulticast mode [ 212.087304][ T8689] "syz.1.843" (8689) uses obsolete ecb(arc4) skcipher [ 212.124143][ T8692] loop2: detected capacity change from 0 to 2048 [ 212.186430][ T8692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.309999][ T8700] loop6: detected capacity change from 0 to 512 [ 212.421958][ T8700] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.845: couldn't read orphan inode 26 (err -116) [ 212.473373][ T8705] binder: 8704:8705 ioctl c0306201 2000000001c0 returned -14 [ 212.506486][ T8700] EXT4-fs (loop6): Remounting filesystem read-only [ 212.506660][ T8707] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 212.568811][ T8700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.600321][ T8700] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.701179][ T8713] input: syz0 as /devices/virtual/input/input22 [ 212.850903][ T8234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.066665][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 213.102927][ T8727] loop5: detected capacity change from 0 to 512 [ 213.152010][ T8727] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.236004][ T8727] EXT4-fs (loop5): 1 truncate cleaned up [ 213.245143][ T8727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.262758][ T8734] loop6: detected capacity change from 0 to 64 [ 213.280531][ T8727] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.855: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 213.306980][ T8727] EXT4-fs (loop5): Remounting filesystem read-only [ 213.313636][ T8727] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.855: Deleting old file: nlink 4, error=-117 [ 213.384060][ T8166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.464862][ T8734] Trying to free block not in datazone [ 213.562451][ T8737] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 213.938839][ T8756] loop2: detected capacity change from 0 to 1024 [ 213.971666][ T8756] hfsplus: invalid catalog max_key_len 715 [ 214.005699][ T8756] hfsplus: failed to load catalog file [ 214.474482][ T8770] loop6: detected capacity change from 0 to 512 [ 214.509605][ T8770] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 214.577098][ T8770] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 214.686751][ T8770] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 214.873723][ T8779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.975030][ T8779] netlink: 'syz.5.871': attribute type 12 has an invalid length. [ 215.050836][ T8779] netlink: 'syz.5.871': attribute type 29 has an invalid length. [ 215.114390][ T8779] netlink: 148 bytes leftover after parsing attributes in process `syz.5.871'. [ 215.174000][ T8779] netlink: 'syz.5.871': attribute type 2 has an invalid length. [ 215.225129][ T8779] netlink: 43 bytes leftover after parsing attributes in process `syz.5.871'. [ 215.595615][ T8774] loop1: detected capacity change from 0 to 131072 [ 215.609800][ T8774] F2FS-fs (loop1): invalid crc value [ 215.662152][ T8774] F2FS-fs (loop1): Found nat_bits in checkpoint [ 215.740210][ T8774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 215.831738][ T8774] F2FS-fs (loop1): recover xattr in inode (7), error(0) [ 215.839289][ T8774] F2FS-fs (loop1): set inode (7) has corrupted xattr [ 215.872797][ T8774] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 216.615564][ T8814] netlink: 'syz.5.882': attribute type 7 has an invalid length. [ 216.637216][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.5.882'. [ 216.694899][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'. [ 217.185790][ T8836] mmap: syz.2.889 (8836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.305393][ T8838] loop5: detected capacity change from 0 to 128 [ 217.696254][ T28] audit: type=1326 audit(1770687490.857:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.2.893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100599af79 code=0x0 [ 218.377282][ T788] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 218.509636][ T8875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.597173][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 218.609508][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.645290][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.670988][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.686885][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.710635][ T788] usb 2-1: Product: syz [ 218.714854][ T788] usb 2-1: Manufacturer: syz [ 218.729197][ T788] usb 2-1: SerialNumber: syz [ 218.972015][ T788] usb 2-1: 0:2 : does not exist [ 218.996506][ T788] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 219.045730][ T788] usb 2-1: USB disconnect, device number 20 [ 219.144269][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.498786][ T8878] loop2: detected capacity change from 0 to 32768 [ 219.601916][ T8878] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.723489][ T8878] XFS (loop2): Ending clean mount [ 219.729116][ T788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.790465][ T8878] XFS (loop2): Quotacheck needed: Please wait. [ 219.930794][ T8878] XFS (loop2): Quotacheck: Done. [ 219.947321][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 219.958063][ T788] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.977453][ T788] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.991834][ T788] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.002889][ T788] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.017122][ T788] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.048268][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.077979][ T5775] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 220.106247][ T5763] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.299834][ T5775] usb 2-1: Using ep0 maxpacket: 16 [ 220.323799][ T788] usb 6-1: GET_CAPABILITIES returned 0 [ 220.332693][ T5775] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.347098][ T788] usbtmc 6-1:16.0: can't read capabilities [ 220.372667][ T5775] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.403249][ T5775] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.422957][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.565474][ T9] usb 6-1: USB disconnect, device number 2 [ 220.857193][ T788] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 220.880946][ T5775] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 221.047141][ T788] usb 7-1: Using ep0 maxpacket: 32 [ 221.054137][ T788] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.062412][ T788] usb 7-1: config 0 has no interface number 0 [ 221.071354][ T788] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.080868][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.090542][ T788] usb 7-1: Product: syz [ 221.094737][ T788] usb 7-1: Manufacturer: syz [ 221.100924][ T788] usb 7-1: SerialNumber: syz [ 221.118114][ T788] usb 7-1: config 0 descriptor?? [ 221.126696][ T788] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.163035][ T9] usb 2-1: USB disconnect, device number 21 [ 221.293829][ T8947] netlink: 'syz.5.919': attribute type 39 has an invalid length. [ 221.356192][ T788] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.371912][ T788] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.774394][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.782977][ T5775] usb 7-1: USB disconnect, device number 3 [ 221.817657][ T5775] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.849059][ T5775] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.874848][ T5775] quatech2 7-1:0.51: device disconnected [ 222.066105][ T8963] loop1: detected capacity change from 0 to 256 [ 222.101157][ T8963] FAT-fs (loop1): Directory bread(block 64) failed [ 222.129707][ T8963] FAT-fs (loop1): Directory bread(block 65) failed [ 222.147577][ T8963] FAT-fs (loop1): Directory bread(block 66) failed [ 222.164575][ T8963] FAT-fs (loop1): Directory bread(block 67) failed [ 222.179633][ T8963] FAT-fs (loop1): Directory bread(block 68) failed [ 222.200171][ T8963] FAT-fs (loop1): Directory bread(block 69) failed [ 222.214800][ T8963] FAT-fs (loop1): Directory bread(block 70) failed [ 222.235457][ T8963] FAT-fs (loop1): Directory bread(block 71) failed [ 222.248334][ T8963] FAT-fs (loop1): Directory bread(block 72) failed [ 222.263027][ T8963] FAT-fs (loop1): Directory bread(block 73) failed [ 222.820185][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 223.047518][ T5811] kernel write not supported for file bpf-prog (pid: 5811 comm: kworker/0:5) [ 225.223938][ T9088] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 225.231203][ T9] IPVS: starting estimator thread 0... [ 225.337475][ T9089] IPVS: using max 27 ests per chain, 64800 per kthread [ 225.515819][ T9066] loop1: detected capacity change from 0 to 32768 [ 225.615887][ T9066] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.706223][ T9066] XFS (loop1): Ending clean mount [ 225.763120][ T9066] XFS (loop1): Quotacheck needed: Please wait. [ 225.773632][ T9080] loop2: detected capacity change from 0 to 32768 [ 225.844238][ T9066] XFS (loop1): Quotacheck: Done. [ 225.877325][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 225.903106][ T9080] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 225.984562][ T9122] loop6: detected capacity change from 0 to 512 [ 225.999794][ T9080] XFS (loop2): Ending clean mount [ 226.010624][ T9080] XFS (loop2): Quotacheck needed: Please wait. [ 226.073821][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.095633][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 226.100994][ T9080] XFS (loop2): Quotacheck: Done. [ 226.108121][ T9122] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.136878][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.172966][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.229999][ T5761] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.231137][ T5811] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 226.256517][ T8234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.261724][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.323459][ T5811] usb 6-1: config 0 descriptor?? [ 226.378144][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.764415][ T5811] hid-rmi 0003:06CB:81A7.0019: unknown main item tag 0x0 [ 226.788857][ T5811] hid-rmi 0003:06CB:81A7.0019: unknown main item tag 0x0 [ 226.798128][ T5811] hid-rmi 0003:06CB:81A7.0019: unknown main item tag 0x0 [ 226.832549][ T5811] hid-rmi 0003:06CB:81A7.0019: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 226.841104][ T9134] loop2: detected capacity change from 0 to 256 [ 226.997258][ T5766] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 227.104683][ T9] usb 6-1: USB disconnect, device number 3 [ 227.119968][ T9140] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 227.134161][ T9140] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 227.149495][ T9140] overlayfs: failed to get uuid (58/file0, err=-13); falling back to uuid=null. [ 227.207105][ T5766] usb 2-1: Using ep0 maxpacket: 32 [ 227.220262][ T5766] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 227.234109][ T5766] usb 2-1: config 0 has no interface number 0 [ 227.248183][ T5766] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 227.272479][ T5766] usb 2-1: config 0 interface 196 has no altsetting 0 [ 227.286228][ T5766] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 227.299309][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.321794][ T5766] usb 2-1: Product: syz [ 227.328210][ T5766] usb 2-1: Manufacturer: syz [ 227.332902][ T5766] usb 2-1: SerialNumber: syz [ 227.355242][ T5766] usb 2-1: config 0 descriptor?? [ 227.377982][ T9130] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.419194][ T9147] loop6: detected capacity change from 0 to 2048 [ 227.447751][ T9147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.461436][ T9147] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.516872][ T28] audit: type=1804 audit(1770687500.677:101): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.978" name="/newroot/60/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 227.546231][ T8234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.678054][ T5775] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 227.870471][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.888547][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.908875][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.928008][ T5775] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.960927][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.987811][ T5775] usb 3-1: config 0 descriptor?? [ 228.024402][ T5766] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 228.077615][ T5766] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 228.092031][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 228.319380][ T5766] usb 2-1: USB disconnect, device number 22 [ 228.414972][ T5775] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 228.476560][ T5775] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 228.490603][ T5766] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 228.817086][ T5775] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 229.030206][ T5775] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.057312][ T5775] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.066351][ T5775] usb 7-1: config 1 has no interface number 0 [ 229.073203][ T5775] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.095860][ T5775] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.107471][ T5775] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 229.120120][ T5775] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.129475][ T5775] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.137771][ T5775] usb 7-1: Product: syz [ 229.142056][ T5775] usb 7-1: Manufacturer: syz [ 229.146776][ T5775] usb 7-1: SerialNumber: syz [ 229.163678][ T9179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.586798][ T9179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.677276][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.719885][ C1] plantronics 0003:047F:FFFF.001A: usb_submit_urb(ctrl) failed: -1 [ 229.879066][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.895610][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.926384][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.947096][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.976565][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.999742][ T27] usb 2-1: config 0 descriptor?? [ 230.011031][ T5775] cdc_ncm 7-1:1.1: bind() failure [ 230.231720][ T5775] usb 7-1: USB disconnect, device number 4 [ 230.517499][ T27] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 230.553620][ T27] plantronics 0003:047F:FFFF.001B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.581879][ T9] usb 3-1: USB disconnect, device number 14 [ 230.698681][ T9245] loop8: detected capacity change from 0 to 7 [ 230.735784][ T9245] Dev loop8: unable to read RDB block 7 [ 230.743063][ T9245] loop8: unable to read partition table [ 230.757267][ T9245] loop8: partition table beyond EOD, truncated [ 230.784956][ T9245] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 230.819046][ T27] usb 2-1: USB disconnect, device number 23 [ 230.981397][ T9252] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 231.561985][ T9270] loop2: detected capacity change from 0 to 4096 [ 231.616027][ T9270] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 231.735340][ T9270] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 232.067215][ T5811] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 232.183592][ T9295] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 232.309243][ T5811] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 232.331191][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.367040][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.376829][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 232.438088][ T5811] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 232.447357][ T5811] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 232.457527][ T5811] usb 7-1: Manufacturer: syz [ 232.479249][ T5811] usb 7-1: config 0 descriptor?? [ 232.622662][ T9290] loop5: detected capacity change from 0 to 32768 [ 232.648873][ T9290] (syz.5.1012,9290,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.668795][ T9290] (syz.5.1012,9290,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.726305][ T9290] JBD2: Ignoring recovery information on journal [ 232.806477][ T9290] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.910932][ T5811] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 232.937995][ T5811] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 232.960450][ T5811] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 233.207834][ T9290] [ 233.210213][ T9290] ====================================================== [ 233.217238][ T9290] WARNING: possible circular locking dependency detected [ 233.224278][ T9290] syzkaller #0 Not tainted [ 233.228725][ T9290] ------------------------------------------------------ [ 233.235756][ T9290] syz.5.1012/9290 is trying to acquire lock: [ 233.241746][ T9290] ffff88805ce4a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 233.251168][ T9290] [ 233.251168][ T9290] but task is already holding lock: [ 233.258546][ T9290] ffff88807e107ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 233.268840][ T9290] [ 233.268840][ T9290] which lock already depends on the new lock. [ 233.268840][ T9290] [ 233.279235][ T9290] [ 233.279235][ T9290] the existing dependency chain (in reverse order) is: [ 233.288242][ T9290] [ 233.288242][ T9290] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 233.296754][ T9290] down_read+0x46/0x2e0 [ 233.301435][ T9290] ocfs2_start_trans+0x3a8/0x6f0 [ 233.306897][ T9290] ocfs2_mknod+0xf1d/0x2300 [ 233.311929][ T9290] ocfs2_create+0x196/0x430 [ 233.316948][ T9290] path_openat+0x12a0/0x3230 [ 233.322053][ T9290] do_filp_open+0x1f5/0x430 [ 233.327068][ T9290] do_sys_openat2+0x134/0x1d0 [ 233.332257][ T9290] __x64_sys_openat+0x139/0x160 [ 233.337637][ T9290] do_syscall_64+0x55/0xa0 [ 233.342568][ T9290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.348972][ T9290] [ 233.348972][ T9290] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 233.356440][ T9290] lock_release+0x332/0x8c0 [ 233.361482][ T9290] up_write+0x2d/0x410 [ 233.366157][ T9290] ocfs2_free_alloc_context+0x97/0x1a0 [ 233.372147][ T9290] ocfs2_write_begin_nolock+0x4375/0x43f0 [ 233.378387][ T9290] ocfs2_write_begin+0x1c6/0x320 [ 233.383837][ T9290] generic_perform_write+0x2fe/0x5c0 [ 233.389637][ T9290] ocfs2_file_write_iter+0x167a/0x1e80 [ 233.395611][ T9290] vfs_write+0x46c/0x990 [ 233.400373][ T9290] ksys_write+0x150/0x260 [ 233.405214][ T9290] do_syscall_64+0x55/0xa0 [ 233.410144][ T9290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.416545][ T9290] [ 233.416545][ T9290] -> #1 (&oi->ip_alloc_sem){++++}-{3:3}: [ 233.424358][ T9290] down_write+0x97/0x200 [ 233.429124][ T9290] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 233.435619][ T9290] ocfs2_truncate_file+0xde5/0x1440 [ 233.441372][ T9290] ocfs2_setattr+0x158d/0x1bc0 [ 233.446650][ T9290] notify_change+0xb0d/0xe10 [ 233.451752][ T9290] do_truncate+0x1b0/0x240 [ 233.456675][ T9290] path_openat+0x2a32/0x3230 [ 233.461770][ T9290] do_filp_open+0x1f5/0x430 [ 233.466867][ T9290] do_sys_openat2+0x134/0x1d0 [ 233.472056][ T9290] __x64_sys_creat+0x90/0xb0 [ 233.477170][ T9290] do_syscall_64+0x55/0xa0 [ 233.482100][ T9290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.488512][ T9290] [ 233.488512][ T9290] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 233.496318][ T9290] __lock_acquire+0x2df1/0x7d40 [ 233.501681][ T9290] lock_acquire+0x19e/0x420 [ 233.506692][ T9290] down_read+0x46/0x2e0 [ 233.511368][ T9290] ocfs2_init_acl+0x30a/0x770 [ 233.516570][ T9290] ocfs2_mknod+0x140f/0x2300 [ 233.521680][ T9290] ocfs2_mkdir+0x196/0x430 [ 233.526612][ T9290] vfs_mkdir+0x296/0x440 [ 233.531371][ T9290] do_mkdirat+0x1dc/0x450 [ 233.536210][ T9290] __x64_sys_mkdirat+0x89/0xa0 [ 233.541482][ T9290] do_syscall_64+0x55/0xa0 [ 233.546411][ T9290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.552813][ T9290] [ 233.552813][ T9290] other info that might help us debug this: [ 233.552813][ T9290] [ 233.563025][ T9290] Chain exists of: [ 233.563025][ T9290] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 233.563025][ T9290] [ 233.576934][ T9290] Possible unsafe locking scenario: [ 233.576934][ T9290] [ 233.584395][ T9290] CPU0 CPU1 [ 233.589779][ T9290] ---- ---- [ 233.595217][ T9290] rlock(&journal->j_trans_barrier); [ 233.600676][ T9290] lock(sb_internal#2); [ 233.607436][ T9290] lock(&journal->j_trans_barrier); [ 233.615232][ T9290] rlock(&oi->ip_xattr_sem); [ 233.619899][ T9290] [ 233.619899][ T9290] *** DEADLOCK *** [ 233.619899][ T9290] [ 233.628040][ T9290] 8 locks held by syz.5.1012/9290: [ 233.633142][ T9290] #0: ffff88807e57a418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 233.642373][ T9290] #1: ffff88805ce4a658 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 233.652988][ T9290] #2: ffff88805ccc5f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 233.666644][ T9290] #3: ffff88805ccc6d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 233.680478][ T9290] #4: ffff88805ccc5118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 233.694397][ T9290] #5: ffff88807e57a608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 233.703623][ T9290] #6: ffff88807e107ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 233.714315][ T9290] #7: ffff88806a706990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 233.724154][ T9290] [ 233.724154][ T9290] stack backtrace: [ 233.730046][ T9290] CPU: 1 PID: 9290 Comm: syz.5.1012 Not tainted syzkaller #0 [ 233.737423][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.747488][ T9290] Call Trace: [ 233.750772][ T9290] [ 233.753694][ T9290] dump_stack_lvl+0x18c/0x250 [ 233.758374][ T9290] ? load_image+0x400/0x400 [ 233.762872][ T9290] ? show_regs_print_info+0x20/0x20 [ 233.768136][ T9290] ? print_circular_bug+0x12b/0x1a0 [ 233.773333][ T9290] check_noncircular+0x2fc/0x400 [ 233.778276][ T9290] ? print_deadlock_bug+0x5d0/0x5d0 [ 233.783560][ T9290] ? _find_first_zero_bit+0xd3/0x100 [ 233.788840][ T9290] ? add_lock_to_list+0x191/0x280 [ 233.793859][ T9290] __lock_acquire+0x2df1/0x7d40 [ 233.798710][ T9290] ? verify_lock_unused+0x140/0x140 [ 233.803988][ T9290] ? __find_get_block+0xaf0/0xeb0 [ 233.809013][ T9290] ? verify_lock_unused+0x140/0x140 [ 233.814211][ T9290] lock_acquire+0x19e/0x420 [ 233.818883][ T9290] ? ocfs2_init_acl+0x30a/0x770 [ 233.823787][ T9290] ? jbd2_journal_dirty_metadata+0x71e/0xc20 [ 233.829765][ T9290] ? __might_sleep+0xe0/0xe0 [ 233.834355][ T9290] ? read_lock_is_recursive+0x20/0x20 [ 233.839724][ T9290] ? do_raw_spin_unlock+0x121/0x230 [ 233.844921][ T9290] ? _raw_spin_unlock+0x28/0x40 [ 233.849778][ T9290] down_read+0x46/0x2e0 [ 233.853930][ T9290] ? ocfs2_init_acl+0x30a/0x770 [ 233.858790][ T9290] ocfs2_init_acl+0x30a/0x770 [ 233.863467][ T9290] ? ocfs2_acl_chmod+0x330/0x330 [ 233.868401][ T9290] ? dquot_alloc_inode+0x8ac/0xa40 [ 233.873509][ T9290] ? ocfs2_journal_access+0x40/0x40 [ 233.878701][ T9290] ? ocfs2_block_signals+0x9b/0xe0 [ 233.883825][ T9290] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 233.889895][ T9290] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 233.895614][ T9290] ocfs2_mknod+0x140f/0x2300 [ 233.900222][ T9290] ? ocfs2_mkdir+0x430/0x430 [ 233.904809][ T9290] ? verify_lock_unused+0x140/0x140 [ 233.910010][ T9290] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 233.915723][ T9290] ? __lock_acquire+0x7d40/0x7d40 [ 233.920742][ T9290] ? do_raw_spin_lock+0x11f/0x2c0 [ 233.925770][ T9290] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 233.932097][ T9290] ? __lock_acquire+0x7d40/0x7d40 [ 233.937127][ T9290] ? __rwlock_init+0x150/0x150 [ 233.941890][ T9290] ? do_raw_spin_unlock+0x121/0x230 [ 233.947099][ T9290] ? put_pid+0xde/0x120 [ 233.951261][ T9290] ocfs2_mkdir+0x196/0x430 [ 233.955671][ T9290] ? make_kgid+0x660/0x660 [ 233.960125][ T9290] ? apparmor_path_mkdir+0x1b0/0x230 [ 233.965408][ T9290] ? ocfs2_symlink+0x2700/0x2700 [ 233.970344][ T9290] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 233.975278][ T9290] ? inode_permission+0xf3/0x480 [ 233.980222][ T9290] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 233.985249][ T9290] ? security_inode_mkdir+0xb7/0x100 [ 233.990530][ T9290] vfs_mkdir+0x296/0x440 [ 233.994768][ T9290] do_mkdirat+0x1dc/0x450 [ 233.999104][ T9290] ? vfs_mkdir+0x440/0x440 [ 234.003516][ T9290] __x64_sys_mkdirat+0x89/0xa0 [ 234.008281][ T9290] do_syscall_64+0x55/0xa0 [ 234.012784][ T9290] ? clear_bhb_loop+0x40/0x90 [ 234.017541][ T9290] ? clear_bhb_loop+0x40/0x90 [ 234.022213][ T9290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.028153][ T9290] RIP: 0033:0x7f44c6999e57 [ 234.032576][ T9290] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.052178][ T9290] RSP: 002b:00007f44c7857e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 234.060592][ T9290] RAX: ffffffffffffffda RBX: 00007f44c7857ee0 RCX: 00007f44c6999e57 [ 234.068579][ T9290] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 234.076561][ T9290] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000 [ 234.084549][ T9290] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000040 [ 234.092546][ T9290] R13: 00007f44c7857ea0 R14: 0000000000000000 R15: 0000000000000000 [ 234.100599][ T9290] [ 234.181394][ T5856] usb 7-1: USB disconnect, device number 5 [ 234.243275][ T8166] ocfs2: Unmounting device (7,5) on (node local) [ 234.532332][ T9323] loop2: detected capacity change from 0 to 40427 [ 234.542140][ T9323] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 234.571967][ T9323] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.597487][ T9323] F2FS-fs (loop2): invalid crc value [ 234.621930][ T9323] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.680294][ T9323] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.687536][ T9323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 234.797520][ T9335] f2fs_ckpt-7:2: attempt to access beyond end of device [ 234.797520][ T9335] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.813334][ T9335] F2FS-fs (loop2): Stopped filesystem due to reason: 3