last executing test programs: 1m26.084136982s ago: executing program 1 (id=552): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) 1m25.407187766s ago: executing program 1 (id=555): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x7ffd, 0xc95a, 0xf, 0x0, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0xc9, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xfffffffd, 0x3, 0x0, 0x9, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x43e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x3, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x80000001], [0x10000007, 0x9, 0x80000133, 0x8004, 0xffffffff, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x6, 0xe, 0x40000310, 0x78, 0xea4, 0x0, 0xd3ba, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x9, 0x1000005, 0x5f31, 0x10, 0x7, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0x4, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1001, 0x3, 0x3, 0xbc46, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x4ae, 0x0, 0x6, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x10000002, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x203, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xad, 0x5, 0x6, 0xac8, 0xc3, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0xcbe], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x1, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m24.889113759s ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f0000000440)="f65c", 0x0}, 0x20) 1m24.492468141s ago: executing program 1 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2509000000280003801400020062726964676530000000000000000208"], 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 1m23.981799694s ago: executing program 1 (id=563): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 1m23.434332177s ago: executing program 1 (id=566): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1m8.262816009s ago: executing program 32 (id=566): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 6.382376155s ago: executing program 3 (id=806): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000002300)=""/251, 0x1d) getdents(r0, 0x0, 0x58) 5.979856977s ago: executing program 3 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) 5.780750498s ago: executing program 0 (id=809): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 5.41230616s ago: executing program 3 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, r1, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000880}, 0x44000) 5.292013061s ago: executing program 0 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 5.074921172s ago: executing program 3 (id=812): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000280)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@acl}, {@noacl}, {@heap}, {@noinline_data}, {@norecovery}, {@adaptive_mode}, {@grpjquota}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPA37Xa/XYt48LYDi9DCJnT6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3ols/QGna2O3vB5Nn3rdvnnneUArPTEkAzq355OcfK+FGuBJCmA0hXA+hOK+UR2E9hufKuZnHjko5//vExRDC1RDCjVHymHP8nk9vD2+t/fDGT199c+nCtc++/HZ6uwam7fkQQncnnu93Y8xbMT4s5+vDdhG7q8Myxh90H5XjPMb9bKvIsF8fr6sXcaUV1+c7e/1R3O7UG6PYam8X8zu9eMH+sDXOU7zhYX23GDezrSK2+3kRW4exroPD+LftsD+IeZplvg+K9GEwGMc4nx1kcT87j4rY6A3K+Zg3b2YHozgsY3m50Mg7zaKOreN80v9vb7Z7ewfJMNvtt/NeslZLX6ild6rpbt7MBtlqtd5t3llNFlqd0bLqIKt311t53upktUbeXUwWWo1GNU2ThbvZVrveS9K0tlJbqq4tlme3k1fvv5N0msnCKL7c7u0N2p1+sp3vJvEdi8lybeXFxeRWmry1sZlsPrh3b2Pz7ffuvnv/pY3XXykX/aWsZGF5aXm5mi5Vl9PFc7T/j8qiJ7h/OJbKtAsAOHv+a/9/U/8PTMDJ9f+7D0I4+f4/6P8n4kz1v+e9/z+B/cOx6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6t7+Y+f604mY/ja+X8U+XUM+W4EkKYCSH8+jdmw8UjOWfLPHP/sH7uTzV8XQlFhtE1LpXH1RDCenn88vRJfwoAAADw5Priw5ufxG49vsxPuyBOU7xpM3P9/Qnlq4QQ5ua/n1C2mdHLsxNKVvx+XwgHE8pW3MC6PKFk8ZbbhUll+1dmj4TLj4VKDDOnWg4AAHAqjnYCp9uFAAAAcJo+nnYBTEcljB9ljp8FF/95/8cDwStHRgAAAMAZVJl2AQAAAMCJK/p/3/8HAAAAT7b4/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwG/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BL2uMeIAtIEBeRAWkgD1EBuKSGCCI9DIOIQyWNbib5PciZjmR9vEBxmRhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJ9tV7cXv2+bpuz27eTZzQAAADAJdtqvaj/maX+1+b+9+bWz6ZfREQZEZfm7qP4dJY5anKql+dvTp+vXtVwF1EnHN5j0lxfIuJPcz3+6PpTAAAAgI9rs1zN02w9/ZkNXRB9Sos25be/mfKKiKhmD5nSykPer0xh9fd7HP8zpdULWNNMYWnJbZwr7U3qn/tx1W560hSpKS++7FhktrEDAAA9Gp01/c5CAAAA6NO/oQtgGEU8b2UetwInqWm29z6f9QAAAIB3qBi6AAAAAKBz9fy/p/P/9s7/AwAAgGGk8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0rZaLzbL1bxtzm7fTp7RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz+vcVRxAMDfzOxsbVVco+whIgoe9GK329ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0POCeQSbznsIYJnZWZnspMf4PprZpN8PvDmfXcY5n3fLIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0ensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QHau6//9KfVOcSXF3/DzyvhtCq9t0RgAAAJxmTxQtK/Z/TdcXPvrpwvtt+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZnAAAA//9/Kz50") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 4.818614283s ago: executing program 0 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048044) 4.594916945s ago: executing program 4 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 4.182647657s ago: executing program 4 (id=815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf25030000000800010000000000080001001f"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 4.181850227s ago: executing program 0 (id=823): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="4014cb000000c36d44151c09e9c2243bb3a8ebaa"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0xc, 0x2, 'Kt'}, 0x0, 0x0, 0x0, 0x0}) 4.114607847s ago: executing program 2 (id=816): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x20) 3.695272599s ago: executing program 2 (id=817): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 3.55678028s ago: executing program 4 (id=818): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 2.911550674s ago: executing program 2 (id=819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e00)='./mnt\x00', 0xec) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 2.263155317s ago: executing program 4 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}}], {0x14}}, 0xac}}, 0x0) 1.63307575s ago: executing program 4 (id=821): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) truncate(&(0x7f0000000040)='./file1\x00', 0x6) 1.629682221s ago: executing program 0 (id=830): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1.580449631s ago: executing program 2 (id=822): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file7\x00', 0x3620a0, 0x0, 0x1, 0x0, 0x0) 663.967316ms ago: executing program 3 (id=824): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000eff70ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 661.578066ms ago: executing program 2 (id=825): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 632.524376ms ago: executing program 4 (id=826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) 457.699627ms ago: executing program 0 (id=827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 6.43279ms ago: executing program 3 (id=828): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x9, 0x1, 0x0, 0x2, 0x5, 0xc, 0x3, 0xa, 0xfd, 0xfffffffa, 0x2, 0x1, 0x1, 0x80, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8000008c, 0xca9f, 0xfffffffe, 0x20001e58, 0xb, 0xe62, 0x3, 0x8, 0x4085, 0xfffff801, 0xfbfffff9]}) 0s ago: executing program 2 (id=829): setresuid(0xee00, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x20000050}}], 0x2, 0x4840) kernel console output (not intermixed with test programs): ort conflict (0x6,4) [ 85.551513][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.563872][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.564757][ T5882] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 85.574560][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.587744][ T5882] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 85.598220][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.609633][ T5882] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 85.616273][ T5882] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 85.620834][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.624443][ T5882] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 85.644447][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.685801][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.715607][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.749281][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.765342][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.793999][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.806875][ T5885] syz.1.6[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.812201][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.836358][ T5885] loop1: detected capacity change from 0 to 512 [ 85.841539][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.850900][ T5886] loop3: detected capacity change from 0 to 1024 [ 85.867360][ T5885] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.905001][ T5885] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 85.910607][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.921826][ T5789] Bluetooth: hci0: command tx timeout [ 85.940006][ T5885] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.950233][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.959232][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.968003][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.994040][ T5885] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 86.029744][ T5885] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.059837][ T5885] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 86.060203][ T2929] hfsplus: b-tree write err: -5, ino 4 [ 86.072966][ T5789] Bluetooth: hci2: command tx timeout [ 86.079586][ T5792] Bluetooth: hci3: command tx timeout [ 86.079600][ T5795] Bluetooth: hci1: command tx timeout [ 86.091118][ T5885] EXT4-fs (loop1): 1 truncate cleaned up [ 86.103176][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.262408][ T2885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.289579][ T2885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.313646][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.319433][ T5890] loop3: detected capacity change from 0 to 512 [ 86.342293][ T5890] ======================================================= [ 86.342293][ T5890] WARNING: The mand mount option has been deprecated and [ 86.342293][ T5890] and is ignored by this kernel. Remove the mand [ 86.342293][ T5890] option from the mount to silence this warning. [ 86.342293][ T5890] ======================================================= [ 86.420902][ T5890] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.510302][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.521467][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.535885][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.546387][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.556616][ T5890] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 86.568587][ T5892] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8'. [ 86.580141][ T5890] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 86.619123][ T5890] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start f8000002) [ 86.623977][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.653688][ T5890] syz.3.7 (5890) used greatest stack depth: 20456 bytes left [ 86.661438][ T28] audit: type=1800 audit(1762098134.036:2): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7" name="/" dev="loop3" ino=1048586 res=0 errno=0 [ 86.670159][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.224021][ T5907] loop0: detected capacity change from 0 to 2048 [ 87.268422][ T5907] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 87.345267][ T5907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.972789][ T5929] loop1: detected capacity change from 0 to 64 [ 87.990414][ T5795] Bluetooth: hci0: command tx timeout [ 88.098331][ T8] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 88.115454][ T5934] loop2: detected capacity change from 0 to 256 [ 88.149231][ T5795] Bluetooth: hci2: command tx timeout [ 88.149251][ T5789] Bluetooth: hci3: command tx timeout [ 88.155898][ T5795] Bluetooth: hci1: command tx timeout [ 88.326300][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.355034][ T8] usb 4-1: config 0 has no interface number 0 [ 88.373929][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.415816][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 88.439295][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.459147][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 88.472326][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.497716][ T8] usb 4-1: config 0 descriptor?? [ 88.515316][ T5927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.551063][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 88.588264][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.672212][ T5946] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.30'. [ 88.683529][ T5946] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 88.693689][ T5946] openvswitch: netlink: Message has 1 unknown bytes. [ 88.808815][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 88.818705][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.838924][ T5893] usb 1-1: config 4 interface 0 has no altsetting 0 [ 88.851278][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 88.863714][ T5893] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 88.888700][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.898368][ T9] usb 4-1: USB disconnect, device number 2 [ 88.942918][ T5893] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 89.005821][ T5893] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.049233][ T5893] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 89.056692][ T5893] usb 1-1: media controller created [ 89.140322][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.212356][ T5957] loop1: detected capacity change from 0 to 4096 [ 89.238336][ T5957] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 89.418923][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.618269][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 89.620585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.644397][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.644446][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 89.644470][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.716315][ T9] usb 3-1: config 0 descriptor?? [ 90.098582][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.160309][ T9] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2 [ 90.174616][ T9] ft260 0003:0403:6030.0001: failed to parse HID [ 90.174843][ T9] ft260: probe of 0003:0403:6030.0001 failed with error -22 [ 90.240772][ T5893] zl10353_read_register: readreg error (reg=127, ret==0) [ 90.288303][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 90.290503][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.290559][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.290586][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.290608][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 90.290630][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.291714][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.291742][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.291763][ T8] usb 4-1: Manufacturer: syz [ 90.294359][ T8] usb 4-1: config 0 descriptor?? [ 90.324156][ T5893] usb 1-1: USB disconnect, device number 2 [ 90.503067][ T5854] usb 3-1: USB disconnect, device number 2 [ 90.638293][ T8] rc_core: IR keymap rc-hauppauge not found [ 90.644527][ T8] Registered IR keymap rc-empty [ 90.650400][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.678248][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.720474][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 90.749572][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 90.797888][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.841094][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.888230][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.928187][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.978186][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.018122][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.058190][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.097335][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.139183][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.172743][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 91.220091][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 91.226890][ T5984] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 91.236720][ T5986] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 91.252664][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.322072][ T8] usb 4-1: USB disconnect, device number 3 [ 91.997269][ T967] cfg80211: failed to load regulatory.db [ 92.088545][ T5893] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 92.174010][ T6017] loop0: detected capacity change from 0 to 1024 [ 92.246414][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.303315][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.367553][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 92.429977][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.449271][ T28] audit: type=1800 audit(1762098139.846:3): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.60" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 92.458694][ T5893] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 92.516649][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.540721][ T5893] usb 3-1: config 0 descriptor?? [ 92.546082][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.547160][ T6003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.645227][ T6016] loop1: detected capacity change from 0 to 32768 [ 92.693658][ T6016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.59 (6016) [ 92.743520][ T6024] loop3: detected capacity change from 0 to 8192 [ 92.832007][ T6024] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.849684][ T6016] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.890203][ T6029] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 92.899994][ T6024] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 92.909649][ T6024] REISERFS (device loop3): using ordered data mode [ 92.916403][ T6024] reiserfs: using flush barriers [ 92.925787][ T6016] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 92.935111][ T6016] BTRFS info (device loop1): setting nodatasum [ 92.941495][ T6016] BTRFS info (device loop1): force zlib compression, level 3 [ 92.949872][ T6016] BTRFS info (device loop1): enabling ssd optimizations [ 92.956940][ T6016] BTRFS info (device loop1): allowing degraded mounts [ 92.964330][ T6016] BTRFS info (device loop1): using free space tree [ 92.971612][ T6024] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.972569][ T6024] REISERFS (device loop3): checking transaction log (loop3) [ 93.071562][ T5893] uclogic 0003:5543:0004.0002: No inputs registered, leaving [ 93.091318][ T6024] REISERFS (device loop3): Using r5 hash to sort names [ 93.127349][ T6024] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 93.186012][ T5893] uclogic 0003:5543:0004.0002: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 93.295543][ T5893] usb 3-1: USB disconnect, device number 3 [ 93.550984][ T6046] fido_id[6046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.689171][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.878924][ T6055] loop0: detected capacity change from 0 to 8192 [ 93.928230][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.929020][ T6055] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.014613][ T6055] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 94.026156][ T6055] REISERFS (device loop0): using ordered data mode [ 94.032819][ T6055] reiserfs: using flush barriers [ 94.041627][ T6055] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.063038][ T6055] REISERFS (device loop0): checking transaction log (loop0) [ 94.108093][ T5854] usb 4-1: Using ep0 maxpacket: 8 [ 94.140661][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.174095][ T5854] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 94.208180][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.242197][ T5854] usb 4-1: config 0 descriptor?? [ 94.329188][ T6055] REISERFS (device loop0): Using tea hash to sort names [ 94.336912][ T6055] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.713817][ T5854] kye 0003:0458:4018.0003: unbalanced collection at end of report description [ 94.759019][ T5854] kye 0003:0458:4018.0003: parse failed [ 94.764711][ T5854] kye: probe of 0003:0458:4018.0003 failed with error -22 [ 94.957295][ T967] usb 4-1: USB disconnect, device number 4 [ 95.077869][ T6072] loop0: detected capacity change from 0 to 512 [ 95.139121][ T6064] loop1: detected capacity change from 0 to 32768 [ 95.165683][ T6072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.179739][ T6072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.213279][ T6072] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.76: inode has both inline data and extents flags [ 95.233030][ T6064] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.235942][ T6072] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.76: couldn't read orphan inode 15 (err -117) [ 95.262610][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.337348][ T6064] XFS (loop1): Ending clean mount [ 95.375379][ T6064] XFS (loop1): Quotacheck needed: Please wait. [ 95.398770][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.529285][ T6064] XFS (loop1): Quotacheck: Done. [ 95.769850][ T6093] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.889343][ T5786] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.280217][ T6102] pim6reg: entered allmulticast mode [ 96.332251][ T6102] pim6reg: left allmulticast mode [ 96.494222][ T6106] loop1: detected capacity change from 0 to 512 [ 96.531602][ T6106] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.556651][ T6091] loop0: detected capacity change from 0 to 32768 [ 96.643330][ T6091] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.965033][ T6091] XFS (loop0): Ending clean mount [ 96.997795][ T6091] XFS (loop0): Quotacheck needed: Please wait. [ 97.175871][ T6130] loop3: detected capacity change from 0 to 256 [ 97.199565][ T6091] XFS (loop0): Quotacheck: Done. [ 97.269093][ T6130] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 97.413845][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.625637][ T6139] loop1: detected capacity change from 0 to 2048 [ 97.703212][ T6139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.871605][ T6139] overlayfs: upper fs needs to support d_type. [ 97.919759][ T6139] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.954043][ T6139] overlayfs: failed to set xattr on upper [ 97.966563][ T6139] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.989442][ T6139] overlayfs: ...falling back to index=off. [ 98.007583][ T6139] overlayfs: ...falling back to uuid=null. [ 98.023175][ T6139] overlayfs: ...falling back to xino=off. [ 98.037013][ T6139] overlayfs: conflicting lowerdir path [ 98.527513][ T28] audit: type=1326 audit(1762098145.916:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 98.592050][ T28] audit: type=1326 audit(1762098145.916:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 98.668043][ T28] audit: type=1326 audit(1762098145.916:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305a38d810 code=0x7ffc0000 [ 98.725914][ T28] audit: type=1326 audit(1762098145.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305a38d810 code=0x7ffc0000 [ 98.799387][ T28] audit: type=1326 audit(1762098145.916:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 98.871386][ T28] audit: type=1326 audit(1762098145.916:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 98.931112][ T28] audit: type=1326 audit(1762098145.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 98.956574][ T28] audit: type=1326 audit(1762098145.916:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305a38efc9 code=0x7ffc0000 [ 99.258253][ T6173] loop2: detected capacity change from 0 to 512 [ 99.278317][ T6173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.355407][ T6173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 99.362355][ T6173] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.363319][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 99.364727][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.382987][ T6157] loop3: detected capacity change from 0 to 32768 [ 99.555364][ T6157] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.573197][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.776720][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 99.899030][ T5793] ocfs2: Unmounting device (7,3) on (node local) [ 100.065393][ T6190] loop0: detected capacity change from 0 to 1024 [ 100.077911][ T6190] EXT4-fs: inline encryption not supported [ 100.131788][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.332846][ T6190] EXT4-fs (loop0): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 100.378219][ T6190] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 100.430892][ T6190] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.123: Abort forced by user [ 100.469833][ T6190] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.567686][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.957697][ T6194] loop2: detected capacity change from 0 to 32768 [ 101.025598][ T6194] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.046846][ T6200] loop3: detected capacity change from 0 to 32768 [ 101.083747][ T6200] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.131572][ T6194] XFS (loop2): Ending clean mount [ 101.156511][ T6194] XFS (loop2): Quotacheck needed: Please wait. [ 101.251468][ T6194] XFS (loop2): Quotacheck: Done. [ 101.304180][ T6200] XFS (loop3): Ending clean mount [ 101.327776][ T6200] XFS (loop3): Quotacheck needed: Please wait. [ 101.449815][ T6200] XFS (loop3): Quotacheck: Done. [ 101.485380][ T6202] loop0: detected capacity change from 0 to 32768 [ 101.541565][ T5794] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.581673][ T6202] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.603953][ T5793] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.703784][ T6202] XFS (loop0): Ending clean mount [ 101.766881][ T6202] XFS (loop0): Quotacheck needed: Please wait. [ 101.898787][ T6202] XFS (loop0): Quotacheck: Done. [ 102.093402][ T5790] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.273996][ T6234] warning: `syz.1.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.531928][ T6240] capability: warning: `syz.1.135' uses 32-bit capabilities (legacy support in use) [ 102.596649][ T6242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.740547][ T6248] loop1: detected capacity change from 0 to 256 [ 102.763509][ T6248] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.848005][ T6248] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 102.934255][ T6248] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 103.658170][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.880343][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 103.930881][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 103.958089][ T9] usb 3-1: config 0 has no interface number 0 [ 103.990234][ T9] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 104.047173][ T9] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 104.090894][ T9] usb 3-1: config 0 interface 255 has no altsetting 0 [ 104.131666][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 104.187020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.210372][ T9] usb 3-1: Product: syz [ 104.214601][ T9] usb 3-1: Manufacturer: syz [ 104.235397][ T9] usb 3-1: SerialNumber: syz [ 104.248642][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 104.260568][ T9] usb 3-1: config 0 descriptor?? [ 104.729363][ T6276] mmap: syz.1.150 (6276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.972829][ T6259] loop3: detected capacity change from 0 to 32768 [ 105.003895][ T6259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.142 (6259) [ 105.183538][ T6259] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.231477][ T6259] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 105.287837][ T6259] BTRFS info (device loop3): turning on sync discard [ 105.304774][ T6259] BTRFS info (device loop3): setting nodatasum [ 105.321363][ T6259] BTRFS info (device loop3): enabling auto defrag [ 105.327907][ T6259] BTRFS info (device loop3): max_inline at 0 [ 105.345361][ T6259] BTRFS info (device loop3): using free space tree [ 105.673572][ T6259] BTRFS info (device loop3): enabling ssd optimizations [ 106.195614][ T5793] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.216332][ T6272] loop0: detected capacity change from 0 to 32768 [ 106.279873][ T6272] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.148 (6272) [ 106.418854][ T6272] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.475032][ T6272] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 106.534248][ T6272] BTRFS info (device loop0): max_inline at 7 [ 106.653040][ T6272] BTRFS info (device loop0): using free space tree [ 107.037239][ T5953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5953) [ 107.418898][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 107.480619][ T5855] usb 3-1: USB disconnect, device number 4 [ 107.488346][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.666001][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.693784][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.708105][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 107.743385][ T8] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 107.779166][ T9] usb 4-1: config 0 descriptor?? [ 107.794915][ T8] usb 2-1: config 0 has no interface number 0 [ 107.830689][ T9] cp210x 4-1:0.0: cp210x converter detected [ 107.853493][ T8] usb 2-1: config 0 interface 12 has no altsetting 0 [ 107.928588][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 107.968058][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.042428][ T8] usb 2-1: Product: syz [ 108.046692][ T8] usb 2-1: Manufacturer: syz [ 108.102463][ T8] usb 2-1: SerialNumber: syz [ 108.159358][ T8] usb 2-1: config 0 descriptor?? [ 108.327134][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 108.495700][ T6272] BTRFS error (device loop0): open_ctree failed: -4 [ 108.509190][ T5955] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (5955) [ 108.726688][ T9] usb 4-1: USB disconnect, device number 5 [ 108.825880][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.861987][ T9] cp210x 4-1:0.0: device disconnected [ 108.906892][ T8] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 108.963642][ T8] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 109.015796][ T8] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 109.055414][ T8] f81534: probe of 2-1:0.12 failed with error -71 [ 109.122989][ T8] usb 2-1: USB disconnect, device number 2 [ 109.226034][ T6328] loop2: detected capacity change from 0 to 1024 [ 109.958772][ T34] hfsplus: b-tree write err: -5, ino 4 [ 111.928439][ T6352] loop0: detected capacity change from 0 to 32768 [ 112.038590][ T6352] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.456063][ T6352] XFS (loop0): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 112.475513][ T6352] XFS (loop0): log mount/recovery failed: error -22 [ 112.493982][ T6352] XFS (loop0): log mount failed [ 112.603893][ T6336] loop1: detected capacity change from 0 to 32768 [ 112.784689][ T6336] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.993287][ T6336] XFS (loop1): Ending clean mount [ 113.022870][ T6336] XFS (loop1): Quotacheck needed: Please wait. [ 113.230584][ T6336] XFS (loop1): Quotacheck: Done. [ 113.390618][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.441497][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.555992][ T6372] loop0: detected capacity change from 0 to 1024 [ 113.620590][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 113.642020][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 113.668610][ T9] usb 3-1: config 0 has no interface number 0 [ 113.674823][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 113.714962][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.758408][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.766463][ T9] usb 3-1: Product: syz [ 113.829419][ T9] usb 3-1: Manufacturer: syz [ 113.842798][ T6346] loop3: detected capacity change from 0 to 40427 [ 113.859142][ T9] usb 3-1: SerialNumber: syz [ 113.889594][ T9] usb 3-1: config 0 descriptor?? [ 113.904655][ T2929] hfsplus: b-tree write err: -5, ino 4 [ 114.556915][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 114.600570][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.638027][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.666120][ T9] f81534: probe of 3-1:0.12 failed with error -71 [ 114.708603][ T9] usb 3-1: USB disconnect, device number 5 [ 116.216254][ T6374] loop0: detected capacity change from 0 to 32768 [ 116.386824][ T6374] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.617966][ C0] sched: RT throttling activated [ 117.880589][ T6406] loop1: detected capacity change from 0 to 131072 [ 117.987686][ T6406] F2FS-fs (loop1): invalid crc value [ 117.998559][ T6374] XFS (loop0): Ending clean mount [ 118.038734][ T6406] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 4 [ 118.064951][ T6406] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 118.098852][ T6374] XFS (loop0): Quotacheck needed: Please wait. [ 118.384197][ T6374] XFS (loop0): Quotacheck: Done. [ 118.389483][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.678316][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 118.695586][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.839661][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 119.006280][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 119.059864][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.121129][ T9] usb 3-1: Product: syz [ 119.163974][ T9] usb 3-1: Manufacturer: syz [ 119.200438][ T9] usb 3-1: SerialNumber: syz [ 119.279556][ T9] usb 3-1: config 0 descriptor?? [ 119.373260][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 119.536313][ T9] usb 3-1: setting power ON [ 119.567462][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 119.659685][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.714909][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 119.767784][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 119.858961][ T9] usb 3-1: media controller created [ 120.084048][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.219121][ T6422] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.307261][ T9] usb 3-1: selecting invalid altsetting 6 [ 120.355073][ T9] usb 3-1: digital interface selection failed (-22) [ 120.424382][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 120.502563][ T9] usb 3-1: setting power OFF [ 120.507632][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 120.574547][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 120.682310][ T9] (NULL device *): no alternate interface [ 120.943697][ T6430] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 120.979237][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.068250][ T6430] netlink: 244 bytes leftover after parsing attributes in process `syz.1.190'. [ 121.136546][ T9] usb 3-1: USB disconnect, device number 6 [ 121.183974][ T6432] loop0: detected capacity change from 0 to 128 [ 122.123056][ T6440] loop3: detected capacity change from 0 to 1024 [ 122.221910][ T6440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.350173][ T6440] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 122.499450][ T6440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.761228][ T6440] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.196: missing EA_INODE flag [ 122.888881][ T6440] EXT4-fs (loop3): Remounting filesystem read-only [ 123.270157][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.098456][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.319671][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.353249][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.416665][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.468305][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.476371][ T9] usb 2-1: SerialNumber: syz [ 125.814288][ T9] usb 2-1: 0:2 : does not exist [ 126.062967][ T9] usb 2-1: USB disconnect, device number 3 [ 126.230390][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.321978][ T6491] loop2: detected capacity change from 0 to 164 [ 126.438196][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.687664][ T8] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.746760][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.791284][ T8] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 126.868399][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.931678][ T8] usb 1-1: config 0 descriptor?? [ 127.393318][ T8] smartjoyplus 0003:6666:8801.0004: invalid report_size 7791 [ 127.452615][ T8] smartjoyplus 0003:6666:8801.0004: item 0 4 1 7 parsing failed [ 127.494382][ T8] smartjoyplus 0003:6666:8801.0004: parse failed [ 127.532046][ T8] smartjoyplus: probe of 0003:6666:8801.0004 failed with error -22 [ 127.567887][ T6481] loop3: detected capacity change from 0 to 40427 [ 127.638206][ T8] usb 1-1: USB disconnect, device number 3 [ 127.648009][ T6481] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.704267][ T6481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.754942][ T6497] netlink: 'syz.2.220': attribute type 2 has an invalid length. [ 127.812498][ T6481] F2FS-fs (loop3): invalid crc value [ 127.870527][ T6481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.099143][ T967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.362421][ T967] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 129.408639][ T967] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 129.457598][ T967] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 129.510439][ T967] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 129.598224][ T967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.657882][ T967] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 129.718165][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.779115][ T967] usb 1-1: Product: syz [ 129.783343][ T967] usb 1-1: Manufacturer: syz [ 129.835430][ T967] usb 1-1: SerialNumber: syz [ 129.871618][ T967] usb 1-1: config 0 descriptor?? [ 129.898799][ T6509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.026153][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 130.160276][ T967] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 130.215350][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 130.272657][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 130.309504][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 130.378680][ T967] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 130.441207][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 130.480565][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 130.531440][ T967] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 130.593213][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 130.647758][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 130.740449][ T967] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 130.806811][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 130.877497][ T967] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 130.937400][ T967] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 131.020602][ T967] usb 1-1: USB disconnect, device number 4 [ 131.083536][ T967] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 131.189006][ T967] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 131.258630][ T967] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 131.329677][ T967] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 131.372190][ T967] keyspan 1-1:0.0: device disconnected [ 131.536679][ T6515] loop3: detected capacity change from 0 to 32768 [ 131.746856][ T6515] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.841802][ T6539] loop1: detected capacity change from 0 to 512 [ 132.082639][ T6539] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.237: invalid indirect mapped block 10 (level 1) [ 132.148272][ T6539] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.237: invalid indirect mapped block 8 (level 1) [ 132.225553][ T6515] XFS (loop3): Ending clean mount [ 132.243311][ T6539] EXT4-fs (loop1): 1 truncate cleaned up [ 132.284137][ T6539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.354014][ T6515] XFS (loop3): Quotacheck needed: Please wait. [ 132.563460][ T6515] XFS (loop3): Quotacheck: Done. [ 132.659793][ T5793] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.733746][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.954746][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966855][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.336425][ T6553] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 133.427796][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.506370][ T6553] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.660809][ T6553] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 133.694358][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.242'. [ 133.735938][ T6553] batadv0: entered promiscuous mode [ 133.755252][ T6553] batadv0: entered allmulticast mode [ 133.813006][ T6553] bond0: (slave batadv0): Releasing backup interface [ 133.881330][ T6553] bridge0: port 3(batadv0) entered blocking state [ 133.926328][ T6553] bridge0: port 3(batadv0) entered disabled state [ 134.002162][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 134.011979][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 134.604363][ T6551] loop1: detected capacity change from 0 to 32768 [ 134.668492][ T6551] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 134.778681][ T6559] loop0: detected capacity change from 0 to 4096 [ 134.848325][ T6559] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 135.004295][ T5953] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 135.165842][ T6559] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 135.296076][ T6565] loop1: detected capacity change from 0 to 2048 [ 135.983880][ T5790] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 136.786219][ T6574] loop3: detected capacity change from 0 to 8192 [ 136.850216][ T6574] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.905958][ T6574] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.957454][ T6574] REISERFS (device loop3): using ordered data mode [ 136.974296][ T6574] reiserfs: using flush barriers [ 137.015712][ T6574] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.053982][ T6582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.255'. [ 137.087431][ T6574] REISERFS (device loop3): checking transaction log (loop3) [ 137.096822][ T6582] Zero length message leads to an empty skb [ 137.599943][ T6574] REISERFS (device loop3): Using tea hash to sort names [ 137.678237][ T6574] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.825197][ T6588] loop1: detected capacity change from 0 to 128 [ 138.574152][ T6592] loop1: detected capacity change from 0 to 2048 [ 138.626008][ T6579] loop0: detected capacity change from 0 to 32768 [ 138.653165][ T6592] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.785343][ T6579] (syz.0.254,6579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.825529][ T5953] udevd[5953]: incorrect nilfs2 checksum on /dev/loop1 [ 138.846563][ T6594] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.901123][ T6579] (syz.0.254,6579,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.038521][ T6579] JBD2: Ignoring recovery information on journal [ 139.306332][ T6579] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 139.344204][ T6592] NILFS (loop1): error -2 truncating bmap (ino=16) [ 139.423084][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 139.518671][ T6601] syz_tun: entered promiscuous mode [ 139.568300][ T6601] macsec1: entered allmulticast mode [ 139.599549][ T6601] syz_tun: entered allmulticast mode [ 139.608833][ T6594] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 139.666464][ T6579] syz.0.254: attempt to access beyond end of device [ 139.666464][ T6579] loop0: rw=2051, sector=28680, nr_sectors = 28664 limit=32768 [ 139.682753][ T6594] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 139.740576][ T6579] (syz.0.254,6579,0):ocfs2_trim_group:7511 ERROR: status = -5 [ 139.748606][ T6594] Remounting filesystem read-only [ 139.764181][ T11] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 139.775436][ T6601] syz_tun: left allmulticast mode [ 139.785611][ T6601] syz_tun: left promiscuous mode [ 139.799349][ T6579] (syz.0.254,6579,0):ocfs2_trim_mainbm:7622 ERROR: status = -5 [ 139.807000][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.850056][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.898142][ T11] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 139.941165][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 139.967907][ T11] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 140.001512][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.043822][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 140.050420][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.094946][ T11] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 140.131505][ T11] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 140.200134][ T11] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 140.268102][ T11] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 140.297684][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.360747][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.418121][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.441279][ T5786] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 140.472131][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 140.503055][ T5786] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 140.522909][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.562529][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.583960][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.621879][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 140.664760][ T5786] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 140.711062][ T5786] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 140.748085][ T5786] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 140.755440][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 140.878530][ T6606] loop2: detected capacity change from 0 to 512 [ 141.105345][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.148438][ T6606] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.053995][ T6623] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.271'. [ 142.064180][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.719641][ T6609] loop3: detected capacity change from 0 to 32768 [ 142.764497][ T6609] XFS: ikeep mount option is deprecated. [ 143.051866][ T6609] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.101459][ T6637] loop2: detected capacity change from 0 to 16 [ 143.222245][ T6637] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.346310][ T6609] XFS (loop3): Ending clean mount [ 143.444244][ T6609] XFS (loop3): Quotacheck needed: Please wait. [ 143.818408][ T6609] XFS (loop3): Quotacheck: Done. [ 144.239579][ T5793] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.276885][ T6649] loop2: detected capacity change from 0 to 4096 [ 144.399478][ T6649] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 145.151111][ T6658] loop0: detected capacity change from 0 to 256 [ 145.200847][ T6658] exfat: Deprecated parameter 'namecase' [ 145.267375][ T6658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 145.936456][ T6654] loop1: detected capacity change from 0 to 32768 [ 146.007380][ T6654] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.260615][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 148.314347][ T6690] loop0: detected capacity change from 0 to 256 [ 148.461978][ T6690] FAT-fs (loop0): Directory bread(block 64) failed [ 148.515927][ T6690] FAT-fs (loop0): Directory bread(block 65) failed [ 148.594116][ T6690] FAT-fs (loop0): Directory bread(block 66) failed [ 148.657024][ T6690] FAT-fs (loop0): Directory bread(block 67) failed [ 148.685752][ T6690] FAT-fs (loop0): Directory bread(block 68) failed [ 148.758473][ T6690] FAT-fs (loop0): Directory bread(block 69) failed [ 148.829886][ T6690] FAT-fs (loop0): Directory bread(block 70) failed [ 148.899423][ T6690] FAT-fs (loop0): Directory bread(block 71) failed [ 148.906135][ T6690] FAT-fs (loop0): Directory bread(block 72) failed [ 148.990447][ T6690] FAT-fs (loop0): Directory bread(block 73) failed [ 149.442410][ T6702] loop1: detected capacity change from 0 to 256 [ 149.598616][ T6702] FAT-fs (loop1): Directory bread(block 64) failed [ 149.605261][ T6702] FAT-fs (loop1): Directory bread(block 65) failed [ 149.682254][ T6702] FAT-fs (loop1): Directory bread(block 66) failed [ 149.745684][ T6702] FAT-fs (loop1): Directory bread(block 67) failed [ 149.778887][ T6702] FAT-fs (loop1): Directory bread(block 68) failed [ 149.838409][ T6702] FAT-fs (loop1): Directory bread(block 69) failed [ 149.909433][ T6702] FAT-fs (loop1): Directory bread(block 70) failed [ 149.944107][ T6702] FAT-fs (loop1): Directory bread(block 71) failed [ 149.991410][ T6702] FAT-fs (loop1): Directory bread(block 72) failed [ 150.042442][ T6702] FAT-fs (loop1): Directory bread(block 73) failed [ 150.924292][ T28] audit: type=1326 audit(1762098198.296:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 151.110202][ T28] audit: type=1326 audit(1762098198.296:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 151.139417][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 151.292100][ T28] audit: type=1326 audit(1762098198.396:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aee98d810 code=0x7ffc0000 [ 151.488897][ T28] audit: type=1326 audit(1762098198.406:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 151.621168][ T6722] loop2: detected capacity change from 0 to 16 [ 151.689436][ T28] audit: type=1326 audit(1762098198.406:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 151.726989][ T6722] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.870796][ T28] audit: type=1326 audit(1762098198.446:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 151.892819][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.906013][ T6722] Invalid ELF header len 10 [ 152.118082][ T28] audit: type=1326 audit(1762098198.446:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 152.140188][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.320752][ T28] audit: type=1326 audit(1762098198.466:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 152.342944][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.596400][ T6732] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.316'. [ 153.045022][ T6734] loop0: detected capacity change from 0 to 8192 [ 153.144939][ T6734] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.241416][ T6734] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 153.316605][ T6734] REISERFS (device loop0): using ordered data mode [ 153.358155][ T6734] reiserfs: using flush barriers [ 153.401180][ T6734] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.528728][ T6734] REISERFS (device loop0): checking transaction log (loop0) [ 153.585589][ T6734] REISERFS (device loop0): Using rupasov hash to sort names [ 153.632679][ T6734] REISERFS (device loop0): using 3.5.x disk format [ 153.668916][ T6734] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.759455][ T6734] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.805118][ T6734] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 153.866770][ T6734] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 154.120806][ T6727] loop1: detected capacity change from 0 to 32768 [ 154.207495][ T6727] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.474266][ T6727] XFS (loop1): Ending clean mount [ 154.575230][ T6727] XFS (loop1): Quotacheck needed: Please wait. [ 154.768156][ T6727] XFS (loop1): Quotacheck: Done. [ 154.866000][ T6735] loop3: detected capacity change from 0 to 32768 [ 155.052803][ T5786] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.096114][ T6735] [ 155.096114][ T6735] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.096114][ T6735] [ 155.381351][ T6735] [ 155.381351][ T6735] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.381351][ T6735] [ 155.538601][ T6735] [ 155.538601][ T6735] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.538601][ T6735] [ 155.611369][ T6735] [ 155.611369][ T6735] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.611369][ T6735] [ 155.678415][ T6735] [ 155.678415][ T6735] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.678415][ T6735] [ 155.832094][ T112] [ 155.832094][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.832094][ T112] [ 156.183027][ T2929] [ 156.183027][ T2929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.183027][ T2929] [ 156.218601][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 156.288354][ T2929] [ 156.288354][ T2929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.288354][ T2929] [ 156.402630][ T112] [ 156.402630][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.402630][ T112] [ 156.461918][ T5793] [ 156.461918][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.461918][ T5793] [ 156.552127][ T5793] [ 156.552127][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.552127][ T5793] [ 156.925628][ T6766] loop1: detected capacity change from 0 to 4096 [ 157.059059][ T6766] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 157.128215][ T6766] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 157.196924][ T6766] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 157.308271][ T6766] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 157.516296][ T6766] ntfs: volume version 3.1. [ 157.593899][ T6766] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 157.668378][ T6766] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 158.036402][ T6782] netlink: 'syz.2.335': attribute type 8 has an invalid length. [ 159.613747][ T6799] loop3: detected capacity change from 0 to 8192 [ 159.678819][ T6799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.793587][ T6799] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 159.848780][ T6799] REISERFS (device loop3): using ordered data mode [ 159.894591][ T6799] reiserfs: using flush barriers [ 160.016146][ T6799] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.149595][ T6799] REISERFS (device loop3): checking transaction log (loop3) [ 160.230582][ T6799] REISERFS (device loop3): Using r5 hash to sort names [ 161.045934][ T6820] loop1: detected capacity change from 0 to 2048 [ 161.187446][ T6825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.684461][ T6829] program syz.0.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.097401][ T8] hid-generic 0000:0006:8000.0005: item fetching failed at offset 0/1 [ 163.179976][ T8] hid-generic: probe of 0000:0006:8000.0005 failed with error -22 [ 163.524662][ T6849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.365'. [ 164.414193][ T6835] loop1: detected capacity change from 0 to 40427 [ 164.486789][ T6835] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 164.537399][ T6835] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.738215][ T6835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.096800][ T6835] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.125259][ T6835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.245526][ T6866] loop0: detected capacity change from 0 to 1024 [ 165.585109][ T6866] hfsplus: bad catalog entry type [ 165.892499][ T2929] hfsplus: b-tree write err: -5, ino 4 [ 166.471288][ T28] audit: type=1326 audit(1762098213.866:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 166.591176][ T28] audit: type=1326 audit(1762098213.886:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 166.732448][ T28] audit: type=1326 audit(1762098213.916:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aee98d810 code=0x7ffc0000 [ 166.754556][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.977548][ T28] audit: type=1326 audit(1762098213.916:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aee98d810 code=0x7ffc0000 [ 167.148637][ T28] audit: type=1326 audit(1762098213.916:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 167.212748][ T6879] loop0: detected capacity change from 0 to 2048 [ 167.251801][ T28] audit: type=1326 audit(1762098213.926:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 167.256253][ T6879] EXT4-fs: Ignoring removed bh option [ 167.325176][ T28] audit: type=1326 audit(1762098213.926:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 167.484764][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.510975][ T28] audit: type=1326 audit(1762098213.926:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7ffc0000 [ 167.791633][ T28] audit: type=1800 audit(1762098215.166:28): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.378" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 167.999435][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.349781][ T6901] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.737440][ T6908] loop3: detected capacity change from 0 to 16 [ 168.792734][ T6908] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 168.912850][ T5953] udevd[5953]: incorrect cramfs checksum on /dev/loop3 [ 169.357688][ T6910] netlink: 204 bytes leftover after parsing attributes in process `syz.3.391'. [ 169.408769][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 169.677786][ T6891] loop1: detected capacity change from 0 to 32768 [ 169.724683][ T6912] loop3: detected capacity change from 0 to 512 [ 169.809806][ T6912] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 170.285711][ T6914] loop2: detected capacity change from 0 to 4096 [ 170.387100][ T6914] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 170.775927][ T6906] loop0: detected capacity change from 0 to 32768 [ 170.889311][ T6906] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 171.282514][ T6327] udevd[6327]: incorrect xfs checksum on /dev/loop0 [ 171.734440][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 171.835078][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 171.897060][ T6935] netlink: 'syz.1.401': attribute type 12 has an invalid length. [ 172.873561][ T6948] loop2: detected capacity change from 0 to 256 [ 172.909414][ T6948] exfat: Deprecated parameter 'namecase' [ 172.946201][ T6948] exfat: Deprecated parameter 'namecase' [ 172.977199][ T6948] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 173.051737][ T6948] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 173.263549][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.452567][ T6962] syz.1.413[6962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.452720][ T6962] syz.1.413[6962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.552340][ T6963] loop1: detected capacity change from 0 to 512 [ 173.744742][ T6963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.835285][ T6963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.413: bg 0: block 5: invalid block bitmap [ 173.935068][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 173.962355][ T6963] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 173.996113][ T6963] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.413: invalid indirect mapped block 3 (level 2) [ 174.053413][ T6963] EXT4-fs (loop1): 2 truncates cleaned up [ 174.073071][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.109062][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.146162][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.273420][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.309735][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.317348][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.680793][ T6959] loop0: detected capacity change from 0 to 32768 [ 174.749624][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.755063][ T6959] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.412 (6959) [ 174.858419][ T6959] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 174.927431][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.945996][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.972884][ T6959] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 174.978140][ T27] usb 4-1: Manufacturer: syz [ 175.058523][ T6959] BTRFS info (device loop0): using free space tree [ 175.243868][ T27] usb 4-1: config 0 descriptor?? [ 175.364102][ T6959] BTRFS info (device loop0): enabling ssd optimizations [ 175.395556][ T6959] BTRFS info (device loop0): auto enabling async discard [ 175.488090][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.718347][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 175.764502][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.826635][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.890873][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.918964][ T8] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 175.937990][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.957010][ T27] rc_core: IR keymap rc-hauppauge not found [ 175.974822][ T27] Registered IR keymap rc-empty [ 175.992287][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.995517][ T8] usb 3-1: config 0 descriptor?? [ 176.055443][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.312208][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 176.316992][ T5790] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 176.418544][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 176.558942][ T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 176.621065][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.693265][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 176.942935][ T8] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 177.000593][ T8] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 177.014708][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.139236][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.216954][ T967] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 177.244182][ T8] usb 3-1: USB disconnect, device number 7 [ 177.252312][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.323229][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.343044][ T967] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 177.415077][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.429230][ T967] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 177.429336][ T967] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 177.692997][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 177.866777][ T7018] loop3: detected capacity change from 0 to 64 [ 178.050483][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 178.085738][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 178.183186][ T27] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.211685][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.332644][ T27] usb 4-1: USB disconnect, device number 6 [ 178.473294][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 179.001029][ T7031] loop2: detected capacity change from 0 to 64 [ 179.540563][ T7034] loop1: detected capacity change from 0 to 4096 [ 179.633064][ T7037] loop0: detected capacity change from 0 to 512 [ 179.859296][ T7037] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 179.914027][ T7037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 179.970575][ T7037] System zones: 0-1, 15-15, 18-18, 34-34 [ 179.977545][ T7037] EXT4-fs (loop0): orphan cleanup on readonly fs [ 180.013808][ T7043] loop2: detected capacity change from 0 to 64 [ 180.067303][ T7037] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 180.173068][ T7037] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.309830][ T7037] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 180.395391][ T7037] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.439: bg 0: block 40: padding at end of block bitmap is not set [ 180.518388][ T7037] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 180.616518][ T7037] EXT4-fs (loop0): 1 truncate cleaned up [ 180.655328][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.960876][ T7037] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.439: bad symlink. [ 181.052421][ T7037] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.439: bad symlink. [ 181.076055][ T7057] loop2: detected capacity change from 0 to 512 [ 181.130576][ T7057] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.221330][ T7057] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.446: invalid block [ 181.277047][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.320953][ T7057] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.446: invalid indirect mapped block 10 (level 1) [ 181.406745][ T7057] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.446: invalid indirect mapped block 8 (level 1) [ 181.546383][ T7057] EXT4-fs (loop2): 1 truncate cleaned up [ 181.604137][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.065313][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.116207][ T7067] loop0: detected capacity change from 0 to 4096 [ 182.176999][ T7067] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 182.388826][ T7067] ntfs3: loop0: Failed to load $Extend (-22). [ 182.394980][ T7067] ntfs3: loop0: Failed to initialize $Extend. [ 183.154483][ T7075] tipc: Enabling of bearer rejected, failed to enable media [ 183.581077][ T7064] loop3: detected capacity change from 0 to 40427 [ 183.643078][ T7064] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 183.702840][ T7064] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.727753][ T7083] loop0: detected capacity change from 0 to 256 [ 183.782476][ T7064] F2FS-fs (loop3): invalid crc value [ 183.839748][ T7064] F2FS-fs (loop3): Found nat_bits in checkpoint [ 183.890268][ T7083] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 183.943550][ T7083] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 184.210146][ T7064] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 184.278714][ T7064] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.458705][ T7109] loop1: detected capacity change from 0 to 1024 [ 185.508601][ T7109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.587457][ T7109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.964738][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.569825][ T7141] loop3: detected capacity change from 0 to 32768 [ 187.584119][ T7141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.482 (7141) [ 188.277187][ T7155] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 188.326638][ T7152] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 188.392024][ T7141] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.445839][ T7152] team0: Port device netdevsim0 added [ 188.498221][ T7141] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 188.561762][ T7141] BTRFS info (device loop3): using free space tree [ 188.626011][ T7152] syz.0.487 (7152) used greatest stack depth: 20200 bytes left [ 188.845783][ T7141] BTRFS info (device loop3): enabling ssd optimizations [ 188.898383][ T7141] BTRFS info (device loop3): auto enabling async discard [ 189.358338][ T5793] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.186639][ T7187] loop1: detected capacity change from 0 to 256 [ 190.280114][ T7187] exfat: Deprecated parameter 'namecase' [ 190.334300][ T7187] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 191.169213][ T7177] loop2: detected capacity change from 0 to 40427 [ 191.238309][ T7177] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 191.246210][ T7177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 191.263371][ T7195] netlink: 128 bytes leftover after parsing attributes in process `syz.3.499'. [ 191.315011][ T7181] loop0: detected capacity change from 0 to 40427 [ 191.334766][ T7177] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 191.395011][ T7181] F2FS-fs (loop0): invalid crc value [ 191.420196][ T7177] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.480019][ T7181] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.798889][ T7177] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 191.843638][ T7177] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.871719][ T7181] F2FS-fs (loop0): Start checkpoint disabled! [ 191.948360][ T7181] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 192.312681][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 192.791821][ T7215] loop3: detected capacity change from 0 to 512 [ 193.031627][ T7215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.085228][ T7215] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.687631][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.964751][ T7229] loop0: detected capacity change from 0 to 512 [ 194.066699][ T7229] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.147388][ T7229] EXT4-fs (loop0): 1 truncate cleaned up [ 194.167572][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.386003][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.418586][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.437745][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.630556][ T8] kernel write not supported for file /video36 (pid: 8 comm: kworker/0:0) [ 194.947772][ T7246] loop3: detected capacity change from 0 to 512 [ 194.998540][ T7246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.072823][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 195.119556][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.384992][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.703645][ T7255] loop1: detected capacity change from 0 to 256 [ 195.742985][ T7255] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 195.771828][ T7257] loop2: detected capacity change from 0 to 64 [ 196.508740][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 197.124407][ T7277] loop1: detected capacity change from 0 to 2048 [ 197.250013][ T7279] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.362577][ T28] audit: type=1800 audit(1762098244.756:29): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.531" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 197.464127][ T7277] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 197.501496][ T7277] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 197.576476][ T7277] Remounting filesystem read-only [ 197.829975][ T5786] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 197.871677][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 197.908330][ T5786] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 197.915690][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.986898][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.032805][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.090901][ T5786] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 198.109099][ T5786] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 198.126672][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.152474][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.188349][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.234327][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 198.248370][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.276305][ T5786] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 198.303910][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.373397][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.415235][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 198.478744][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 198.490508][ T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 198.508118][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.544215][ T9] usb 1-1: Product: syz [ 198.569464][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 198.581337][ T9] usb 1-1: Manufacturer: syz [ 198.586008][ T9] usb 1-1: SerialNumber: syz [ 198.622902][ T9] usb 1-1: config 0 descriptor?? [ 198.663863][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 198.725562][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 198.786678][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.837528][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 198.860407][ T9] usb 1-1: media controller created [ 199.042254][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.150952][ T9] cxusb: set interface failed [ 199.177693][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 199.421618][ T9] DVB: Unable to find symbol mt352_attach() [ 199.427591][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 199.783826][ T9] rc_core: IR keymap rc-dvico-portable not found [ 199.820853][ T9] Registered IR keymap rc-empty [ 199.861244][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 199.950130][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 200.056038][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 200.094032][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 200.156703][ T7314] loop0: detected capacity change from 0 to 128 [ 200.172433][ T9] usb 1-1: USB disconnect, device number 5 [ 200.340778][ T7314] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.489197][ T7314] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.521624][ T7295] loop3: detected capacity change from 0 to 32768 [ 200.537829][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 200.652333][ T7295] [ 200.652333][ T7295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.652333][ T7295] [ 200.694268][ T7295] [ 200.694268][ T7295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.694268][ T7295] [ 200.705215][ T7295] [ 200.705215][ T7295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.705215][ T7295] [ 200.906014][ T5793] [ 200.906014][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.906014][ T5793] [ 200.956257][ T5793] [ 200.956257][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.956257][ T5793] [ 201.427636][ T7314] fscrypt: Error allocating hmac(sha512): -2 [ 201.846887][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.934211][ T7326] loop3: detected capacity change from 0 to 256 [ 202.178419][ T7305] loop1: detected capacity change from 0 to 40427 [ 202.199472][ T7326] FAT-fs (loop3): Directory bread(block 64) failed [ 202.206107][ T7326] FAT-fs (loop3): Directory bread(block 65) failed [ 202.238394][ T7305] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 202.288468][ T7305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 202.296958][ T7326] FAT-fs (loop3): Directory bread(block 66) failed [ 202.348717][ T7326] FAT-fs (loop3): Directory bread(block 67) failed [ 202.376872][ T7305] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 202.385650][ T7326] FAT-fs (loop3): Directory bread(block 68) failed [ 202.482307][ T7326] FAT-fs (loop3): Directory bread(block 69) failed [ 202.498901][ T7326] FAT-fs (loop3): Directory bread(block 70) failed [ 202.505488][ T7326] FAT-fs (loop3): Directory bread(block 71) failed [ 202.598442][ T7326] FAT-fs (loop3): Directory bread(block 72) failed [ 202.605059][ T7326] FAT-fs (loop3): Directory bread(block 73) failed [ 202.640189][ T7328] loop0: detected capacity change from 0 to 4096 [ 202.869542][ T7330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.883578][ T7328] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 202.971853][ T7328] NILFS (loop0): mounting fs with errors [ 203.854857][ T7336] loop3: detected capacity change from 0 to 4096 [ 204.154131][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.763706][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.223350][ T7353] loop2: detected capacity change from 0 to 1024 [ 205.316154][ T7353] hfsplus: gid requires an argument [ 205.368111][ T7353] hfsplus: unable to parse mount options [ 205.458031][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.708277][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 205.737385][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 205.767106][ T9] usb 4-1: config 0 has no interface number 0 [ 205.810650][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 205.868244][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.937594][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 205.980563][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.018269][ T9] usb 4-1: Product: syz [ 206.041580][ T9] usb 4-1: Manufacturer: syz [ 206.078619][ T9] usb 4-1: SerialNumber: syz [ 206.110561][ T9] usb 4-1: config 0 descriptor?? [ 206.116352][ T7357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.156050][ T7357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.248162][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.476165][ T5888] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.498938][ T7357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.506275][ T7357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.527073][ T5888] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.575397][ T5888] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.616258][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.688709][ T7362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.713791][ T5104] Bluetooth: hci0: command 0x0406 tx timeout [ 206.720532][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.720555][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 206.720627][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.764138][ T5888] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 207.083628][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 207.176623][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 207.298989][ T9] asix: probe of 4-1:0.251 failed with error -71 [ 207.429931][ T9] usb 4-1: USB disconnect, device number 7 [ 208.059076][ T9] usb 1-1: USB disconnect, device number 6 [ 208.283271][ T7368] loop3: detected capacity change from 0 to 128 [ 208.336978][ T7368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.405925][ T7368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.448328][ T7368] EXT4-fs (loop3): Test dummy encryption mode enabled [ 208.588990][ T7368] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.692991][ T7368] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.059906][ T5793] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.925776][ T7378] loop3: detected capacity change from 0 to 2048 [ 210.041178][ T7378] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.148676][ T7381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.725616][ T7385] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 211.440759][ T7390] loop0: detected capacity change from 0 to 4096 [ 211.535177][ T7390] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 211.890519][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 212.106839][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.163702][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.213107][ T7396] loop3: detected capacity change from 0 to 4096 [ 212.250552][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 212.328656][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.417244][ T9] usb 3-1: config 0 descriptor?? [ 212.481826][ T7394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.000502][ T9] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 213.083091][ T9] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 213.156375][ T9] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 213.238471][ T9] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 213.262106][ T9] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 213.329017][ T9] hid-retrode 0003:0403:97C1.0007: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 213.483225][ T9] usb 3-1: USB disconnect, device number 8 [ 213.763117][ T7406] sp0: Synchronizing with TNC [ 213.856778][ T967] IPVS: starting estimator thread 0... [ 213.864358][ T7409] IPVS: ip_vs_edit_dest(): server weight less than zero [ 213.875830][ T7405] [U] è` [ 213.894006][ T7404] fido_id[7404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 214.028602][ T7410] IPVS: using max 16 ests per chain, 38400 per kthread [ 214.723505][ T7415] [U] ¦ [ 216.088294][ T967] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.189145][ T7413] loop3: detected capacity change from 0 to 32768 [ 216.288441][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 216.316149][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.376042][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.430230][ T967] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 216.491371][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.563727][ T967] usb 3-1: config 0 descriptor?? [ 217.087247][ T967] holtek_mouse 0003:04D9:A081.0008: item fetching failed at offset 5/8 [ 217.169113][ T967] holtek_mouse 0003:04D9:A081.0008: hid parse failed: -22 [ 217.243409][ T967] holtek_mouse: probe of 0003:04D9:A081.0008 failed with error -22 [ 217.355133][ T967] usb 3-1: USB disconnect, device number 9 [ 218.070465][ T7441] netlink: 312 bytes leftover after parsing attributes in process `syz.3.598'. [ 218.879006][ T967] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.921303][ T7453] loop3: detected capacity change from 0 to 256 [ 218.961839][ T7453] exfat: Deprecated parameter 'namecase' [ 219.051591][ T7453] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 219.119982][ T967] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 219.141963][ T967] usb 1-1: config 0 has no interface number 0 [ 219.192840][ T967] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 219.278025][ T967] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 219.398514][ T967] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 219.407625][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.495181][ T967] usb 1-1: Product: syz [ 219.519516][ T967] usb 1-1: Manufacturer: syz [ 219.576115][ T967] usb 1-1: SerialNumber: syz [ 219.618874][ T967] usb 1-1: config 0 descriptor?? [ 219.625189][ T7449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.669165][ T7449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.759519][ T967] ums-usbat 1-1:0.23: USB Mass Storage device detected [ 219.807193][ T7459] loop3: detected capacity change from 0 to 512 [ 219.944766][ T7459] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 220.011486][ T7459] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 220.102296][ T7459] EXT4-fs (loop3): 1 truncate cleaned up [ 220.139970][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.316003][ T967] ums-usbat: probe of 1-1:0.23 failed with error -5 [ 220.393022][ T967] usb 1-1: USB disconnect, device number 7 [ 220.439985][ T7459] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 220.630268][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.825264][ T7488] loop2: detected capacity change from 0 to 4096 [ 222.977258][ T7488] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.529231][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.540612][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.551213][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.560919][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.573722][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.582139][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.603861][ T7486] loop0: detected capacity change from 0 to 32768 [ 224.644140][ T2951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.836289][ T7486] find_entry called with index = 0 [ 225.184609][ T2951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.324394][ T7510] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.628'. [ 225.683716][ T5789] Bluetooth: hci0: command tx timeout [ 225.955470][ T2951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.466098][ T2951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.801063][ T7494] chnl_net:caif_netlink_parms(): no params data found [ 227.748705][ T5789] Bluetooth: hci0: command tx timeout [ 227.846972][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.886738][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.904855][ T7494] bridge_slave_0: entered allmulticast mode [ 227.949622][ T7494] bridge_slave_0: entered promiscuous mode [ 228.003890][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.034292][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.061231][ T7494] bridge_slave_1: entered allmulticast mode [ 228.093694][ T7494] bridge_slave_1: entered promiscuous mode [ 228.693220][ T7535] loop2: detected capacity change from 0 to 32768 [ 228.771771][ T7535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.638 (7535) [ 228.887388][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.984150][ T7535] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.007571][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.074051][ T7535] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 229.180114][ T7535] BTRFS info (device loop2): using free space tree [ 229.282139][ T7540] loop0: detected capacity change from 0 to 32768 [ 229.356404][ T7540] JBD2: Ignoring recovery information on journal [ 229.517059][ T7535] BTRFS info (device loop2): enabling ssd optimizations [ 229.571646][ T7535] BTRFS info (device loop2): auto enabling async discard [ 229.580338][ T7540] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.603983][ T7542] loop3: detected capacity change from 0 to 32768 [ 229.828195][ T5789] Bluetooth: hci0: command tx timeout [ 229.897457][ T7567] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 229.897457][ T7567] [ 230.038051][ T7567] xtLookup: xtSearch returned -5 [ 230.043064][ T7567] free_index: error reading directory table [ 230.159505][ T7567] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 230.159505][ T7567] [ 230.248413][ T5794] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.258884][ T7567] xtLookup: xtSearch returned -5 [ 230.323195][ T7567] free_index: error reading directory table [ 230.362461][ T7567] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 230.362461][ T7567] [ 230.444820][ T7494] team0: Port device team_slave_0 added [ 230.448940][ T7567] xtLookup: xtSearch returned -5 [ 230.455845][ T7567] free_index: error reading directory table [ 230.595434][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 230.819232][ T7494] team0: Port device team_slave_1 added [ 231.908303][ T5789] Bluetooth: hci0: command tx timeout [ 231.918112][ T7581] kernel profiling enabled (shift: 9) [ 232.310750][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.343384][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.548021][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.681365][ T7588] loop2: detected capacity change from 0 to 128 [ 232.768560][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 232.834946][ T7588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.425895][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.650'. [ 233.630933][ T7599] loop2: detected capacity change from 0 to 64 [ 233.975962][ T7586] loop0: detected capacity change from 0 to 32768 [ 234.027490][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.265596][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.368159][ T7586] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 234.440348][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.455611][ T7586] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 234.770461][ T28] audit: type=1800 audit(1762098282.156:30): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.642" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 235.107291][ T7586] syz.0.642 (7586) used greatest stack depth: 18352 bytes left [ 235.148072][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.188869][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 235.368099][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 235.375777][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.448188][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.490567][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.543246][ T5888] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 235.577992][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.614803][ T5888] usb 3-1: config 0 descriptor?? [ 235.900928][ T7494] hsr_slave_0: entered promiscuous mode [ 235.917413][ T7619] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 235.925624][ T7619] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 235.941648][ T7494] hsr_slave_1: entered promiscuous mode [ 235.950497][ T7619] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 235.976475][ T7494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.984596][ T7619] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 236.005704][ T7494] Cannot create hsr debugfs directory [ 236.011434][ T7619] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 236.037240][ T7619] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 236.067761][ T7619] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 236.109591][ T7619] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 236.133938][ T5888] nzxt-kraken2 0003:1E71:170E.0009: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 236.161774][ T7619] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 236.184149][ T7619] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 236.218630][ T7619] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 236.258249][ T7619] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 236.306282][ T7619] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 236.346409][ T7619] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 236.365491][ T7619] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 236.404942][ T7619] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 236.422576][ T5888] usb 3-1: USB disconnect, device number 10 [ 236.460326][ T5854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 236.460601][ T7619] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 236.527230][ T7619] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 236.597731][ T7620] fido_id[7620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 237.090286][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 237.379697][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.401963][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.518034][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.558431][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.717681][ T5854] usb 4-1: config 0 descriptor?? [ 237.869735][ T5854] hub 4-1:0.0: USB hub found [ 238.128641][ T5854] hub 4-1:0.0: 2 ports detected [ 238.426708][ T5854] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 238.457672][ T5854] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 238.487135][ T2951] hsr_slave_0: left promiscuous mode [ 238.551756][ T2951] hsr_slave_1: left promiscuous mode [ 238.640836][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.699079][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.775904][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.801950][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.868316][ T2951] bridge_slave_1: left allmulticast mode [ 238.869990][ T5854] usbhid 4-1:0.0: can't add hid device: -71 [ 238.874023][ T2951] bridge_slave_1: left promiscuous mode [ 238.902883][ T5854] usbhid: probe of 4-1:0.0 failed with error -71 [ 239.006881][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.061437][ T5854] usb 4-1: USB disconnect, device number 8 [ 239.330561][ T2951] bridge_slave_0: left allmulticast mode [ 239.352284][ T2951] bridge_slave_0: left promiscuous mode [ 239.436385][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.712841][ T7661] loop0: detected capacity change from 0 to 512 [ 239.757160][ T7661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.816157][ T2951] veth1_macvtap: left promiscuous mode [ 239.828964][ T2951] veth0_macvtap: left promiscuous mode [ 239.834857][ T2951] veth1_vlan: left promiscuous mode [ 239.969009][ T2951] veth0_vlan: left promiscuous mode [ 240.017467][ T7661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.085251][ T7661] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.248373][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.825474][ T7656] loop3: detected capacity change from 0 to 32768 [ 241.044744][ T7656] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.167578][ T7656] XFS (loop3): Ending clean mount [ 241.189152][ T7656] XFS (loop3): Quotacheck needed: Please wait. [ 241.303183][ T7656] XFS (loop3): Quotacheck: Done. [ 241.523948][ T5793] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.409083][ T7678] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 242.417122][ T7678] netlink: 244 bytes leftover after parsing attributes in process `syz.3.676'. [ 242.627164][ T7680] loop3: detected capacity change from 0 to 128 [ 243.225223][ T7684] loop3: detected capacity change from 0 to 512 [ 243.275342][ T7684] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.335903][ T7684] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 243.362618][ T7684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 243.383439][ T7684] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 243.422794][ T7684] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.450958][ T7684] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 243.465348][ T7684] EXT4-fs (loop3): 1 truncate cleaned up [ 243.473186][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.657247][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 243.732301][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.004768][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 244.144811][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.282156][ T2951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.657855][ T2951] bond0 (unregistering): Released all slaves [ 246.798824][ T7494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.908494][ T7494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.985385][ T7494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.082274][ T7494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.718797][ T7712] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 247.726520][ T7712] netlink: 244 bytes leftover after parsing attributes in process `syz.2.685'. [ 248.017191][ T2951] IPVS: stop unused estimator thread 0... [ 248.056397][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.388536][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.409351][ T7722] loop0: detected capacity change from 0 to 256 [ 248.487863][ T7722] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 248.560280][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.568818][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.598399][ T7722] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 248.649024][ T7722] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 248.693123][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.700608][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.728613][ T7722] UDF-fs: Scanning with blocksize 512 failed [ 248.762582][ T7722] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 248.815462][ T7723] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 248.918060][ T7722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.999320][ T7723] team0: Port device netdevsim0 added [ 249.106337][ T7730] loop3: detected capacity change from 0 to 512 [ 249.150380][ T7724] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 249.241536][ T7730] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 249.300982][ T7730] EXT4-fs (loop3): invalid journal inode [ 249.306918][ T7730] EXT4-fs (loop3): can't get journal size [ 249.431700][ T7724] team0: Port device netdevsim0 removed [ 249.462891][ T7730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 249.474933][ T7724] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 249.523661][ T7730] System zones: 1-12, 13-13 [ 249.593826][ T7730] EXT4-fs (loop3): 1 truncate cleaned up [ 249.682332][ T7730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.901146][ T7494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.195735][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 250.432216][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.418695][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.450217][ T7746] loop2: detected capacity change from 0 to 32768 [ 252.523402][ T7746] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.694 (7746) [ 252.655572][ T7746] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 252.720160][ T7746] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 252.748960][ T7749] loop3: detected capacity change from 0 to 32768 [ 252.788738][ T7746] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 252.874653][ T7746] BTRFS info (device loop2): use zstd compression, level 3 [ 252.927201][ T7746] BTRFS info (device loop2): using free space tree [ 252.940385][ T7749] JBD2: Ignoring recovery information on journal [ 253.196163][ T7749] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.390842][ T7494] veth0_vlan: entered promiscuous mode [ 253.422445][ T7746] BTRFS info (device loop2): enabling ssd optimizations [ 253.462724][ T7746] BTRFS info (device loop2): auto enabling async discard [ 253.525772][ T7494] veth1_vlan: entered promiscuous mode [ 253.767222][ T5794] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.846262][ T7494] veth0_macvtap: entered promiscuous mode [ 253.918379][ T5793] ocfs2: Unmounting device (7,3) on (node local) [ 253.956532][ T7494] veth1_macvtap: entered promiscuous mode [ 254.131349][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.252649][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.348084][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.428606][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.483535][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.547092][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.621084][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.763720][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.850984][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.905634][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.992669][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.032056][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.069342][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.126406][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.309874][ T7494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.348505][ T7494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.357274][ T7494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.418016][ T7494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.649234][ T28] audit: type=1326 audit(1762098303.046:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 255.838057][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844455][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.879426][ T28] audit: type=1326 audit(1762098303.066:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.097077][ T28] audit: type=1326 audit(1762098303.066:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.158438][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.166329][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.333528][ T28] audit: type=1326 audit(1762098303.066:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.430766][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.457347][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.465334][ T28] audit: type=1326 audit(1762098303.066:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.526802][ T28] audit: type=1326 audit(1762098303.066:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.623036][ T28] audit: type=1326 audit(1762098303.066:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.799616][ T28] audit: type=1326 audit(1762098303.066:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 256.962076][ T28] audit: type=1326 audit(1762098303.066:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 257.154910][ T28] audit: type=1326 audit(1762098303.066:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aee98efc9 code=0x7fc00000 [ 257.305172][ T5789] Bluetooth: hci3: unexpected event for opcode 0x200c [ 257.428201][ T7825] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 257.478140][ T7825] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 257.545987][ T7825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 257.691119][ T7825] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 257.775680][ T7825] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 257.858186][ T7825] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 257.895476][ T7825] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 257.938631][ T7832] overlayfs: maximum fs stacking depth exceeded [ 257.954295][ T7825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 257.988328][ T7825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 258.032878][ T7825] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 259.194116][ T7850] ptrace attach of "./syz-executor exec"[7494] was attempted by " [ 259.771469][ T7859] loop3: detected capacity change from 0 to 128 [ 259.913648][ T7859] EXT4-fs: Ignoring removed nobh option [ 260.120435][ T7859] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.346602][ T7859] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.940511][ T5793] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.514244][ T7854] loop2: detected capacity change from 0 to 32768 [ 261.603833][ T7874] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 261.679366][ T7874] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 261.738178][ T7874] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 261.766480][ T7854] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 261.794524][ T7874] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 261.858199][ T7874] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 261.908406][ T7874] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 261.962747][ T7874] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 262.035743][ T7874] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 262.059399][ T7854] XFS (loop2): Ending clean mount [ 262.088471][ T7874] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 262.139938][ T7874] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 262.491479][ T5794] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 262.814138][ T7897] [U] ¦ [ 263.574578][ T967] kernel write not supported for file /video36 (pid: 967 comm: kworker/0:2) [ 273.345805][ T7972] netlink: 128 bytes leftover after parsing attributes in process `syz.2.752'. [ 273.510328][ T7973] loop3: detected capacity change from 0 to 2048 [ 273.769472][ T7973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 273.978758][ T7973] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #12: comm syz.3.753: corrupted in-inode xattr: invalid size in ea xattr [ 274.225377][ T7979] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 274.502610][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 275.198258][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 275.531768][ T7961] loop0: detected capacity change from 0 to 32768 [ 275.690068][ T7961] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop0": -EINTR [ 276.844976][ T8022] loop0: detected capacity change from 0 to 16 [ 277.030686][ T8022] erofs: (device loop0): mounted with root inode @ nid 36. [ 277.810352][ T8035] loop0: detected capacity change from 0 to 128 [ 278.899295][ T8055] netlink: 116 bytes leftover after parsing attributes in process `syz.0.780'. [ 278.990489][ T8055] nbd: couldn't find a device at index 31 [ 280.090704][ T8072] loop0: detected capacity change from 0 to 128 [ 280.588658][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 282.311463][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 282.404640][ T8105] vlan2: entered promiscuous mode [ 282.448191][ T8105] gretap0: entered promiscuous mode [ 283.101167][ T8117] loop0: detected capacity change from 0 to 164 [ 283.635815][ T8124] netlink: 'syz.3.808': attribute type 3 has an invalid length. [ 283.858129][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 284.109438][ T9] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 284.145500][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.225261][ T9] usb 3-1: config 0 descriptor?? [ 284.264453][ T9] go7007: probe of 3-1:0.0 failed with error -12 [ 284.471950][ T5888] usb 3-1: USB disconnect, device number 11 [ 285.449200][ T8148] netlink: 116 bytes leftover after parsing attributes in process `syz.4.815'. [ 285.496108][ T8148] nbd: couldn't find a device at index 31 [ 285.618031][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 285.848107][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 285.886165][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 285.933694][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.009532][ T9] usb 1-1: config 0 descriptor?? [ 286.055852][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 286.278246][ T9] usb 1-1: Detected FT232B [ 286.692377][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 286.811369][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 286.867685][ T8164] loop2: detected capacity change from 0 to 128 [ 286.914061][ T9] usb 1-1: USB disconnect, device number 8 [ 286.925146][ T8164] EXT4-fs: Ignoring removed nobh option [ 286.984005][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 287.070073][ T8164] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.084834][ T9] ftdi_sio 1-1:0.0: device disconnected [ 287.196880][ T8164] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.421828][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 287.772425][ T5794] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.910770][ T8174] loop4: detected capacity change from 0 to 256 [ 288.074136][ T8174] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 288.176436][ T8174] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 288.224262][ T8178] loop2: detected capacity change from 0 to 128 [ 289.484070][ T8193] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 289.495857][ T8193] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 289.504320][ T8193] CPU: 0 PID: 8193 Comm: syz.3.828 Not tainted syzkaller #0 [ 289.511643][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.521739][ T8193] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 289.527348][ T8193] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 289.547026][ T8193] RSP: 0018:ffffc900123e7a80 EFLAGS: 00010206 [ 289.553134][ T8193] RAX: 0000000000000005 RBX: ffff888076f83b80 RCX: 0000000000080000 [ 289.561144][ T8193] RDX: ffffc9000d29c000 RSI: 00000000000007cb RDI: 00000000000007cc [ 289.569151][ T8193] RBP: 0000000000000001 R08: ffff88814c59892f R09: 1ffff110298b3125 [ 289.577160][ T8193] R10: dffffc0000000000 R11: ffffed10298b3126 R12: 0000000000000028 [ 289.585169][ T8193] R13: dffffc0000000000 R14: ffff88814c598800 R15: dffffc0000000000 [ 289.593176][ T8193] FS: 00007f408a26d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 289.602153][ T8193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.608787][ T8193] CR2: 00007f727d05f470 CR3: 0000000077ef4000 CR4: 00000000003506f0 [ 289.616802][ T8193] Call Trace: [ 289.620127][ T8193] [ 289.623103][ T8193] pcl818_detach+0x66/0xd0 [ 289.627582][ T8193] comedi_device_detach_locked+0x172/0x710 [ 289.633441][ T8193] comedi_unlocked_ioctl+0xccc/0xfe0 [ 289.638775][ T8193] ? comedi_poll+0x8c0/0x8c0 [ 289.643434][ T8193] ? __fget_files+0x28/0x4d0 [ 289.648070][ T8193] ? bpf_lsm_file_ioctl+0x9/0x10 [ 289.653046][ T8193] ? security_file_ioctl+0x80/0xa0 [ 289.658206][ T8193] ? comedi_poll+0x8c0/0x8c0 [ 289.662841][ T8193] __se_sys_ioctl+0xfd/0x170 [ 289.667470][ T8193] do_syscall_64+0x55/0xb0 [ 289.671924][ T8193] ? clear_bhb_loop+0x40/0x90 [ 289.676633][ T8193] ? clear_bhb_loop+0x40/0x90 [ 289.681347][ T8193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.687279][ T8193] RIP: 0033:0x7f408938efc9 [ 289.691739][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.711406][ T8193] RSP: 002b:00007f408a26d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.719872][ T8193] RAX: ffffffffffffffda RBX: 00007f40895e5fa0 RCX: 00007f408938efc9 [ 289.727876][ T8193] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 289.735871][ T8193] RBP: 00007f4089411f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.743870][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.751878][ T8193] R13: 00007f40895e6038 R14: 00007f40895e5fa0 R15: 00007ffd14d94518 [ 289.759896][ T8193] [ 289.762947][ T8193] Modules linked in: SYZFAIL: failed to send rpc fd=3 want=11328 sent=0 n=-1 (errno 32: Broken pipe) [ 289.902913][ T8193] ---[ end trace 0000000000000000 ]--- [ 290.318526][ T8193] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 290.324158][ T8193] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 290.494896][ T8193] RSP: 0018:ffffc900123e7a80 EFLAGS: 00010206 [ 290.532784][ T8193] RAX: 0000000000000005 RBX: ffff888076f83b80 RCX: 0000000000080000 [ 290.577443][ T8193] RDX: ffffc9000d29c000 RSI: 00000000000007cb RDI: 00000000000007cc [ 290.621653][ T8193] RBP: 0000000000000001 R08: ffff88814c59892f R09: 1ffff110298b3125 [ 290.657908][ T8193] R10: dffffc0000000000 R11: ffffed10298b3126 R12: 0000000000000028 [ 290.666084][ T8193] R13: dffffc0000000000 R14: ffff88814c598800 R15: dffffc0000000000 [ 290.779358][ T8193] FS: 00007f408a26d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 290.807908][ T8193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.814567][ T8193] CR2: 00007fbdd0197440 CR3: 0000000077ef4000 CR4: 00000000003506f0 [ 290.878234][ T8193] Kernel panic - not syncing: Fatal exception [ 290.884733][ T8193] Kernel Offset: disabled [ 290.889069][ T8193] Rebooting in 86400 seconds..