last executing test programs: 5.449350427s ago: executing program 1 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.272124362s ago: executing program 1 (id=468): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) 4.248552656s ago: executing program 1 (id=472): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'maccyrillic'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 3.387253647s ago: executing program 1 (id=477): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x5, 0x5519, &(0x7f000000adc0)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM/PmzTPPO5TCMxMSwIU1n/z6cyluxJWImI6I6xHZfqnYMut5eCEibkbE1GNbqRj/c+BSRFyNiBuj5HnOUvHW57eHt9Z+euuXb767PHPti6+/n9yqgUl7MSK6O/n+fjePaSuPD4vx2rCdxe7qsIj5G91HxXGax/3mVpZhv3Y0r5bFlVY+P93Z64/idqdWH8VWezsb3+nlJ+wPW0d5sg88rO1mx43mVhbb/TSLrcO8roPD/H/bYX+Q52kU+T7K0sdgcBTz8eZBM1/PzqMs1nuDYjzPmzaaB6M4LGJxuqinnUZWx9ZJrvST7e12b+8gGTZ3++20l6xVqi9VqnfK1d200Rw0V8u1buPOarLQ6oymlQfNWne9laatTrNST7uLyUKrXi9Xq8nC3eZWu9ZLqtXKSmWpvLZY7N1OXr//XtJpJAuj+Gq7tzdod/rJdrqb5J9YTJYrKy8vJreqyTsbm8nmg3v3Njbf/eDu+/df2XjztWLSP8pKFpaXlpfL1aXycnXxAq3/k6LoMa4fTqQ06QIAzh/9PzAJp9f/7z6IOP3+P/T/Y3Gu+t+L3v+PYf1zJ7tccJz+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwvph9ss3sp35/PhaMf5MMfRccVyKiKmI+P1fTMelYzmnizyz/zF/9m81fFuKLMPoHJeL7WpErBfbb8+e9lUAAACAp9dXH9/8LO/W85f5SRfEWcpv2kxd/3BM+UoRMTv/45iyTY1enh9TsuzveyYOxpQtu4E1N6Zk+S23mXFl+1+mj4W5x0IpD1NnWg4AAHAmjncCZ9uFAAAAcJY+nXQBTEYpjh5lHj0Lzr55/9cDwSvHjgAAAIBzqDTpAgAAAIBTl/X/fv8PAAAAnm757/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc7d3KYRhGEA/nZhA/lTUJR7WskNykgJOeYYUUCaoIAcSAtugBrwzSVYYLEzxmAhGWn/ZOt5pPV6VsPLNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqt1ov/f77/bZqz2zfTzmgAAACAS7bVelH/M0vtj/n55/zoa24XEVFGxKW5+yjenWWOck711P/faf/qWQ03EXXC4T0m+foQET/ydf+l608BAAAA3q7NcjVPs/X0ZzZ0QfQpLdqUn35e1XvyYo8iIqrZXeO6kvKQ962lsPr7PY7fLaXVC1jTlsLSktu4rbSr1D/346rd9ORWpFt58WXHIlsbOwAA0KPR2a3fWQgAAAB9+jV0AQyjiMetzONWYN7kzdt7789aAAAAwCtUDF0AAAAA0Ll6/t/T+X975/8BAADAMNL5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jRnt2+mndEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAD+/OOAiEQBmGwd31nMvc/rDRoampSBcLH3xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs3L9vG1UcAPB3dz6HFhAmIA9BCCQGWKjrlpZuiAEUMfAnIEWpU0xdfrQZaFUhsrChzF0QjAghgcLW/6FzK3UpWwcPRWIG3fkuviZBmB++c5LPR3p+X59O733fWYnyvXcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXx29M4yV46kzgujt19dHM96+/t6TO3t++vZC2LozqTPhxerL6Jus0lAgAAwPGRlPV9COFBurOa9XEnr//T8pys5v/26Ulc1vN76/6yL2v/rP3y88PndyfqTObJBt0Yjgan96fSmt8qF9szf3tGK7/y+b2XJP9A4ve2nhun+fWMvr5z5512Hi7VkS0A8G+cKvsiKP8eyvp+k4kBcGy0KoV3Wf8nnWZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjDeCs8WcZRCGGlNY0z9x7dXD+ov719f6Vs52/d2g5fTsfMhkhDCBvD0eB0ratZbNeu37i8NhoNrtYfvBRCaGr2t4rlX/5ghpNDaOT6CP6nIC4+7LlM0Wr2h2h+QYO/lAAAOEpOlEFatKyuf5DurGbHouUQ/vju8fr/1UocZqz/H354/m510mr9369jlYdEb/PKp71r12+8PryydmlwafDxG2f6b/bPXjh37kIvv1fSc8cEAACA/6ZdtGr9Hy/v3/8/WYnDjPX/Z9/0v6jOlaj/DzTd9Gs6EwAAgOPt2Zd//y064HjUbofP1zY3r/Ynr7vvz0xe/2K4pTmn+48sFa1a/yfLTWcFAAAA1GG8FT22/3+xEocZ9/+f+v6FH6tjJsUXDzaGo8Gp9U9GF+tbzkKr4+vETa8RAACAZp0oWnX/P82f/493H3mIQwivvTKJi38DOFP9n7z71Q/VuarP/5+tb4kLKe5Orkfed0NodZvOCAAAgKPsiaJlxf6v6c7qRz+dfL/t+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAuv0ZAAD//2QrPQY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r0, 0xe, 0xffffffffffffffff) 2.291439044s ago: executing program 0 (id=487): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.090986819s ago: executing program 3 (id=490): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000014c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x2, 0x1bb, 0x4}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 2.008659641s ago: executing program 1 (id=492): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@grpquota}, {@inlinecrypt}, {@delalloc}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") open(&(0x7f0000000580)='./file1\x00', 0x6a40, 0x1c8) 1.757828697s ago: executing program 3 (id=494): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}, @RTA_OIF={0x8, 0x4, r1}]}, 0x38}, 0x1, 0x11}, 0x0) 1.729618498s ago: executing program 2 (id=495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) fsetxattr$security_capability(r0, 0x0, 0x0, 0xfffffe04, 0x1) 1.703857709s ago: executing program 0 (id=496): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.553069992s ago: executing program 3 (id=497): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x247, &(0x7f0000001300)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.520987953s ago: executing program 2 (id=498): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xa10844, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x84042, 0x9e) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.361355427s ago: executing program 3 (id=499): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x8, 0xfd, 0x5ae9}, {0x6, 0x8, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.333875838s ago: executing program 0 (id=500): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), 0x0}, 0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c1", 0x1}], 0x37) 1.027585645s ago: executing program 0 (id=501): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000400)=0x8000006) 895.601818ms ago: executing program 2 (id=502): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x0, 0x0, 0x56}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x2e, 0x228400, 0x23456}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 838.70091ms ago: executing program 0 (id=503): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 704.439653ms ago: executing program 2 (id=504): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@bridge_dellink={0x38, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10400, 0x48972}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0xfffff9ad}]}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 585.023026ms ago: executing program 2 (id=505): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 584.815306ms ago: executing program 3 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) 13.30081ms ago: executing program 1 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 13.10206ms ago: executing program 2 (id=508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) 640.22µs ago: executing program 0 (id=515): mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x27, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 0s ago: executing program 3 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 84.779891][ T5765] cgroup: Unknown subsys name 'net' [ 84.919573][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.612429][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.661789][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.670447][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.678755][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.687221][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.701300][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.704068][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.716001][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.725005][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.734577][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.751020][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.759206][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.767078][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.791172][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.801169][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.810178][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.817867][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.825612][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.834469][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.842629][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.851985][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.859433][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.867900][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.878768][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.890427][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.318520][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.416825][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 89.456099][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 89.545382][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.605726][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.613846][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.621354][ T5777] bridge_slave_0: entered allmulticast mode [ 89.628834][ T5777] bridge_slave_0: entered promiscuous mode [ 89.682585][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.689812][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.697255][ T5777] bridge_slave_1: entered allmulticast mode [ 89.705003][ T5777] bridge_slave_1: entered promiscuous mode [ 89.749160][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.756461][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.763970][ T5785] bridge_slave_0: entered allmulticast mode [ 89.771862][ T5785] bridge_slave_0: entered promiscuous mode [ 89.789962][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.797208][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.804893][ T5785] bridge_slave_1: entered allmulticast mode [ 89.812250][ T5785] bridge_slave_1: entered promiscuous mode [ 89.824711][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.832022][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.839241][ T5784] bridge_slave_0: entered allmulticast mode [ 89.846898][ T5784] bridge_slave_0: entered promiscuous mode [ 89.885550][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.893607][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.901092][ T5784] bridge_slave_1: entered allmulticast mode [ 89.908677][ T5784] bridge_slave_1: entered promiscuous mode [ 89.918459][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.977264][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.989729][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.999928][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.011650][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.018867][ T5776] bridge_slave_0: entered allmulticast mode [ 90.026755][ T5776] bridge_slave_0: entered promiscuous mode [ 90.057670][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.068181][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.075867][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.083286][ T5776] bridge_slave_1: entered allmulticast mode [ 90.090349][ T5776] bridge_slave_1: entered promiscuous mode [ 90.099679][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.144730][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.168343][ T5777] team0: Port device team_slave_0 added [ 90.187737][ T5777] team0: Port device team_slave_1 added [ 90.221183][ T5785] team0: Port device team_slave_0 added [ 90.241567][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.255546][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.267570][ T5784] team0: Port device team_slave_0 added [ 90.277990][ T5784] team0: Port device team_slave_1 added [ 90.285557][ T5785] team0: Port device team_slave_1 added [ 90.367812][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.377883][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.404680][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.417640][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.424693][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.450841][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.466189][ T5776] team0: Port device team_slave_0 added [ 90.475161][ T5776] team0: Port device team_slave_1 added [ 90.493630][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.504925][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.534027][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.566729][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.573956][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.603544][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.615722][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.623241][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.649580][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.700443][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.709854][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.736503][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.770469][ T5785] hsr_slave_0: entered promiscuous mode [ 90.777680][ T5785] hsr_slave_1: entered promiscuous mode [ 90.788964][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.796426][ T5781] Bluetooth: hci1: command tx timeout [ 90.802497][ T51] Bluetooth: hci0: command tx timeout [ 90.808817][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.835669][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.848609][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.855999][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.882659][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.941841][ T5777] hsr_slave_0: entered promiscuous mode [ 90.948226][ T5777] hsr_slave_1: entered promiscuous mode [ 90.953946][ T5781] Bluetooth: hci2: command tx timeout [ 90.961147][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.961923][ T5781] Bluetooth: hci3: command tx timeout [ 90.969060][ T5777] Cannot create hsr debugfs directory [ 91.043569][ T5776] hsr_slave_0: entered promiscuous mode [ 91.051698][ T5776] hsr_slave_1: entered promiscuous mode [ 91.058173][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.065942][ T5776] Cannot create hsr debugfs directory [ 91.152039][ T5784] hsr_slave_0: entered promiscuous mode [ 91.158882][ T5784] hsr_slave_1: entered promiscuous mode [ 91.165730][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.174324][ T5784] Cannot create hsr debugfs directory [ 91.582317][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.599837][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.610507][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.631762][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.692325][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.714103][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.725027][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.736674][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.828946][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.857714][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.872101][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.888641][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.966033][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.985074][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.996885][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.009436][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.069154][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.161379][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.190112][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.197559][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.214911][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.238347][ T176] cfg80211: failed to load regulatory.db [ 92.263494][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.270837][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.320224][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.348276][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.355505][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.377508][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.415885][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.447305][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.454584][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.471992][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.497012][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.504211][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.537724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.544940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.604999][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.634757][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.642014][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.677618][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684872][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.727509][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.889427][ T5781] Bluetooth: hci1: command tx timeout [ 92.894294][ T51] Bluetooth: hci0: command tx timeout [ 93.030760][ T51] Bluetooth: hci3: command tx timeout [ 93.030874][ T5781] Bluetooth: hci2: command tx timeout [ 93.147887][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.293987][ T5785] veth0_vlan: entered promiscuous mode [ 93.325903][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.346807][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.375481][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.388201][ T5785] veth1_vlan: entered promiscuous mode [ 93.447485][ T5785] veth0_macvtap: entered promiscuous mode [ 93.473277][ T5785] veth1_macvtap: entered promiscuous mode [ 93.524117][ T5777] veth0_vlan: entered promiscuous mode [ 93.546562][ T5776] veth0_vlan: entered promiscuous mode [ 93.568910][ T5777] veth1_vlan: entered promiscuous mode [ 93.588243][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.623233][ T5776] veth1_vlan: entered promiscuous mode [ 93.635889][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.652593][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.662199][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673291][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682562][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.703758][ T5784] veth0_vlan: entered promiscuous mode [ 93.764764][ T5784] veth1_vlan: entered promiscuous mode [ 93.782274][ T5776] veth0_macvtap: entered promiscuous mode [ 93.799768][ T5777] veth0_macvtap: entered promiscuous mode [ 93.814806][ T5777] veth1_macvtap: entered promiscuous mode [ 93.850474][ T5776] veth1_macvtap: entered promiscuous mode [ 93.927950][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.941106][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.949185][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.957825][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.975652][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.008589][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.020122][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.035150][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.046418][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.057288][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.067645][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.078689][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.090428][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.112271][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.122924][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.133277][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.144034][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.156245][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.177671][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189761][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.200270][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209871][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233890][ T5784] veth0_macvtap: entered promiscuous mode [ 94.245052][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.254376][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264321][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273210][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291243][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.305345][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.315781][ T5784] veth1_macvtap: entered promiscuous mode [ 94.386855][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.407929][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.418383][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.429223][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.443141][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.453968][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.466514][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.527424][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.547852][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.554766][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577668][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.588318][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.599032][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.608948][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.619652][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.638957][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.651023][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659798][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669540][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.678647][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839076][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.855525][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.925763][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.935605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.951141][ T5781] Bluetooth: hci1: command tx timeout [ 94.956406][ T51] Bluetooth: hci0: command tx timeout [ 95.042386][ T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.050292][ T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.131014][ T51] Bluetooth: hci3: command tx timeout [ 95.131445][ T5781] Bluetooth: hci2: command tx timeout [ 95.159226][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.216958][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.334525][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.366685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.681009][ T5861] syz.2.10[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.742048][ T5861] process 'syz.2.10' launched '/dev/fd/3' with NULL argv: empty string added [ 96.027470][ T28] audit: type=1326 audit(1787499665.596:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.1.15" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e059e0d9 code=0x7ffc0000 [ 96.090542][ T5875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.119849][ T28] audit: type=1326 audit(1787499665.636:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.1.15" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f91e059e0d9 code=0x7ffc0000 [ 96.210864][ T28] audit: type=1326 audit(1787499665.636:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.1.15" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e059e0d9 code=0x7ffc0000 [ 96.321310][ T28] audit: type=1326 audit(1787499665.656:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.1.15" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e059e0d9 code=0x7ffc0000 [ 96.631900][ T5822] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.855719][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.869113][ T5822] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 96.898494][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.913766][ T5822] usb 4-1: config 0 descriptor?? [ 97.030897][ T5781] Bluetooth: hci1: command tx timeout [ 97.033010][ T51] Bluetooth: hci0: command tx timeout [ 97.111524][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.191088][ T51] Bluetooth: hci2: command tx timeout [ 97.192280][ T5781] Bluetooth: hci3: command tx timeout [ 97.302290][ T5904] loop0: detected capacity change from 0 to 64 [ 97.323764][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.364155][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.384922][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.394773][ T5821] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.410850][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.428041][ T5821] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.441347][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.448287][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.466018][ T5821] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 97.480704][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.497901][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.504968][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.529822][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.550788][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.571272][ T5822] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 97.628253][ T5822] wacom 0003:056A:00E6.0001: hidraw0: USB HID v0.81 Device [HID 056a:00e6] on usb-dummy_hcd.3-1/input0 [ 97.702315][ T5822] usb 4-1: USB disconnect, device number 2 [ 97.898949][ T5907] fido_id[5907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.916818][ T5913] loop0: detected capacity change from 0 to 64 [ 98.069086][ T5915] loop2: detected capacity change from 0 to 256 [ 98.132086][ T5915] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.181313][ T5821] gud 2-1:1.0: Failed to get properties (error=-71) [ 98.198445][ T5821] gud: probe of 2-1:1.0 failed with error -71 [ 98.291713][ T5821] usb 2-1: USB disconnect, device number 2 [ 98.910482][ T5935] netlink: 112 bytes leftover after parsing attributes in process `syz.0.44'. [ 98.982307][ T5939] No buffer was provided with the request [ 99.260967][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.461178][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 99.491967][ T5821] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.523764][ T5821] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.565095][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.575841][ T5821] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 99.586519][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.606818][ T5821] usb 2-1: config 0 descriptor?? [ 99.701613][ T5961] loop0: detected capacity change from 0 to 256 [ 100.049121][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.068762][ T5970] loop0: detected capacity change from 0 to 512 [ 100.092393][ T5821] input: HID 05ac:0269 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0269.0002/input/input8 [ 100.129936][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.235652][ T5821] magicmouse 0003:05AC:0269.0002: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 100.263907][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.281842][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.300624][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.325548][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.336499][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.371052][ T5821] usb 2-1: USB disconnect, device number 3 [ 100.394660][ T5819] usb 3-1: Product: syz [ 100.413137][ T5819] usb 3-1: Manufacturer: syz [ 100.433299][ T5819] usb 3-1: SerialNumber: syz [ 100.483066][ T5819] hub 3-1:1.0: bad descriptor, ignoring hub [ 100.521500][ T5819] hub: probe of 3-1:1.0 failed with error -5 [ 100.552738][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.565251][ T5976] fido_id[5976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 100.724124][ T5819] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.746110][ T5981] loop3: detected capacity change from 0 to 512 [ 100.761645][ T5983] netlink: 'syz.0.64': attribute type 9 has an invalid length. [ 100.770878][ T5981] ======================================================= [ 100.770878][ T5981] WARNING: The mand mount option has been deprecated and [ 100.770878][ T5981] and is ignored by this kernel. Remove the mand [ 100.770878][ T5981] option from the mount to silence this warning. [ 100.770878][ T5981] ======================================================= [ 100.905483][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.973923][ T5981] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.122129][ T28] audit: type=1800 audit(1787499670.696:6): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 101.152341][ T23] usb 3-1: USB disconnect, device number 2 [ 101.194660][ T23] usblp0: removed [ 101.339579][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.554781][ T6001] loop1: detected capacity change from 0 to 128 [ 101.569468][ T6002] loop0: detected capacity change from 0 to 1024 [ 101.587834][ T6001] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.667253][ T6001] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.780333][ T6004] Bluetooth: MGMT ver 1.22 [ 102.068688][ T6014] capability: warning: `syz.2.80' uses 32-bit capabilities (legacy support in use) [ 102.250209][ T6019] loop3: detected capacity change from 0 to 2048 [ 102.834557][ T6035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.89'. [ 102.895065][ T6012] loop1: detected capacity change from 0 to 32768 [ 103.004437][ T6012] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.163738][ T6012] XFS (loop1): Ending clean mount [ 103.400100][ T5784] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.590324][ T6057] loop3: detected capacity change from 0 to 2048 [ 103.626195][ T6057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.732320][ T6057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.830717][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 103.833806][ T5781] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 103.951637][ T6034] loop0: detected capacity change from 0 to 32768 [ 103.962454][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.978240][ T6055] loop2: detected capacity change from 0 to 32768 [ 104.034943][ T6062] loop1: detected capacity change from 0 to 512 [ 104.105342][ T6062] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.97: Unrecognised inode hash code 255 [ 104.136815][ T6062] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.97: Corrupt directory, running e2fsck is recommended [ 104.239098][ T6062] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 104.281010][ T6062] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.97: corrupted in-inode xattr: invalid ea_ino [ 104.333720][ T6062] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.97: couldn't read orphan inode 15 (err -117) [ 104.350139][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.532221][ T6062] EXT4-fs error (device loop1): __ext4_remount:6756: comm syz.1.97: Abort forced by user [ 104.552659][ T6062] EXT4-fs (loop1): Remounting filesystem read-only [ 104.559250][ T6062] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 104.672153][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.886534][ T6075] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 105.143178][ T6084] loop3: detected capacity change from 0 to 64 [ 105.154912][ T28] audit: type=1326 audit(1787499674.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91e059e0d9 code=0x0 [ 105.365548][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 105.488440][ T6095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.060815][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.262874][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.302921][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.335977][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.377259][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 106.390272][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.426835][ T8] usb 4-1: config 0 descriptor?? [ 106.596989][ T6124] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.892744][ T8] wacom 0003:056A:002A.0003: ignoring exceeding usage max [ 106.925071][ T8] wacom 0003:056A:002A.0003: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 106.961820][ T8] wacom 0003:056A:002A.0003: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 106.996237][ T8] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.0003/input/input9 [ 107.148383][ T8] usb 4-1: USB disconnect, device number 3 [ 107.258641][ T6138] fido_id[6138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 107.469679][ T6147] tipc: Can't bind to reserved service type 1 [ 107.610337][ T6152] loop0: detected capacity change from 0 to 64 [ 107.670943][ T6152] hfs: bad catalog entry type 6 [ 107.752994][ T6155] loop2: detected capacity change from 0 to 1024 [ 107.774294][ T6155] EXT4-fs: Ignoring removed orlov option [ 107.816941][ T6155] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 107.895241][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.173616][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.522838][ T6181] loop1: detected capacity change from 0 to 16 [ 108.537563][ T6181] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 108.603345][ T6177] loop3: detected capacity change from 0 to 4096 [ 108.655962][ T6177] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 108.773969][ T6177] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 108.795254][ T6185] loop0: detected capacity change from 0 to 256 [ 108.881635][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.906379][ T6187] loop1: detected capacity change from 0 to 512 [ 108.995708][ T6187] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.156: bg 0: block 5: invalid block bitmap [ 109.092442][ T6187] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 109.121144][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 109.136287][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.163519][ T6187] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.156: invalid indirect mapped block 3 (level 2) [ 109.178304][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 109.190311][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.203881][ T6187] EXT4-fs (loop1): 1 orphan inode deleted [ 109.209665][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 109.215860][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 109.237974][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.262798][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.302900][ T8] usb 3-1: config 0 descriptor?? [ 109.389170][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.665552][ T6199] loop3: detected capacity change from 0 to 256 [ 109.700340][ T6197] loop1: detected capacity change from 0 to 4096 [ 109.740719][ T6197] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 109.753391][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.787256][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.805689][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.818805][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.829342][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.854777][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.901823][ T8] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 109.930129][ T8] magicmouse 0003:05AC:0324.0004: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 109.994579][ T6197] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 110.001097][ T8] usb 3-1: USB disconnect, device number 3 [ 110.098510][ T6204] loop3: detected capacity change from 0 to 512 [ 110.149087][ T6204] FAT-fs (loop3): Unrecognized mount option "tots" or missing value [ 110.206820][ T6201] loop0: detected capacity change from 0 to 4096 [ 110.240448][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.453532][ T6201] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 110.608331][ T6212] loop1: detected capacity change from 0 to 128 [ 110.672332][ T6212] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.751345][ T6212] hpfs: filesystem error: improperly stopped [ 110.757605][ T6212] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.783684][ T6212] hpfs: You really don't want any checks? You are crazy... [ 110.814992][ T6212] hpfs: Code page index out of array [ 110.820373][ T6212] hpfs: code page support is disabled [ 110.861746][ T6212] hpfs: hpfs_map_4sectors(): unaligned read [ 110.868315][ T6212] hpfs: hpfs_map_4sectors(): unaligned read [ 110.897051][ T6212] hpfs: filesystem error: unable to find root dir [ 110.985656][ T6212] hpfs: hpfs_map_4sectors(): unaligned read [ 111.100866][ T5843] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.169259][ T6220] loop2: detected capacity change from 0 to 2048 [ 111.236639][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.278955][ T6220] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.300906][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 111.358933][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.380285][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.412715][ T5843] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 111.427090][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.446328][ T5843] usb 4-1: Product: syz [ 111.451167][ T5843] usb 4-1: Manufacturer: syz [ 111.455816][ T5843] usb 4-1: SerialNumber: syz [ 111.571509][ T6222] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.932379][ T5843] usb 4-1: unit 0 not found! [ 112.154386][ T5843] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 112.177244][ T5843] usb 4-1: unit 0 not found! [ 112.206350][ T5843] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 112.240302][ T5843] usb 4-1: unit 0 not found! [ 112.357667][ T6242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.390759][ T6242] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 112.442268][ T6242] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 112.476779][ T5843] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 112.490720][ T6242] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 112.530955][ T5843] usb 4-1: USB disconnect, device number 4 [ 112.547096][ T6242] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 112.600758][ T6242] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 112.608730][ T6242] EXT4-fs (loop0): failed to initialize system zone (-117) [ 112.676183][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.697428][ T6242] EXT4-fs (loop0): mount failed [ 112.948205][ T6239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.179 (6239) [ 113.061232][ T6239] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.087151][ T6239] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 113.110827][ T6239] BTRFS info (device loop1): setting nodatasum [ 113.139482][ T6239] BTRFS info (device loop1): force zlib compression, level 3 [ 113.155235][ T6251] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.169467][ T6239] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.193909][ T6239] BTRFS info (device loop1): use lzo compression, level 0 [ 113.201883][ T6239] BTRFS info (device loop1): turning on flush-on-commit [ 113.217358][ T6239] BTRFS info (device loop1): enabling auto defrag [ 113.226013][ T6239] BTRFS info (device loop1): max_inline at 4096 [ 113.233512][ T6239] BTRFS info (device loop1): using free space tree [ 113.266807][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.437540][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.591189][ T6239] BTRFS info (device loop1): enabling ssd optimizations [ 113.621756][ T6281] capability: warning: `syz.3.189' uses deprecated v2 capabilities in a way that may be insecure [ 113.766568][ T6285] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 114.044359][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.060127][ T6289] set_capacity_and_notify: 6 callbacks suppressed [ 114.060143][ T6289] loop2: detected capacity change from 0 to 512 [ 114.103430][ T6289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.113205][ T6291] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 114.122365][ T6291] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 114.128977][ T6291] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 114.234997][ T6289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.293230][ T6289] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.372420][ T6296] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 114.557212][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.790040][ T28] audit: type=1326 audit(1787499684.366:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.826507][ T28] audit: type=1326 audit(1787499684.366:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.852782][ T28] audit: type=1326 audit(1787499684.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.878926][ T28] audit: type=1326 audit(1787499684.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.910084][ T28] audit: type=1326 audit(1787499684.406:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.938797][ T28] audit: type=1326 audit(1787499684.406:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.969700][ T28] audit: type=1326 audit(1787499684.406:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 114.994681][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.007528][ T6283] loop0: detected capacity change from 0 to 32768 [ 115.030850][ T28] audit: type=1326 audit(1787499684.406:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df19e0d9 code=0x7ffc0000 [ 115.102934][ T6283] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 115.169841][ T6283] JBD2: Ignoring recovery information on journal [ 115.202948][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 115.212929][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 115.222829][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 115.232134][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.269549][ T8] usb 4-1: probing VID:PID(0424:012C) [ 115.294285][ T6283] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.306520][ T8] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 115.319025][ T8] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 115.332445][ T8] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 115.344521][ T8] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 115.356852][ T8] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 115.516428][ T6283] syz.0.191 (6283) used greatest stack depth: 18456 bytes left [ 115.683129][ T8] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 115.692917][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 115.894082][ T8] vub300: probe of 4-1:1.0 failed with error -71 [ 115.930734][ T8] usb 4-1: USB disconnect, device number 5 [ 116.446510][ T6327] loop1: detected capacity change from 0 to 512 [ 116.474674][ T6327] EXT4-fs: inline encryption not supported [ 116.514969][ T6327] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.537527][ T6327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.592598][ T6331] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 116.630219][ T6327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.664979][ T6327] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.210: bad orphan inode 131083 [ 116.706680][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.994490][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.189198][ T6327] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 117.210040][ T6351] Illegal XDP return value 1185383208 on prog (id 14) dev N/A, expect packet loss! [ 117.336856][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.080428][ T6384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.235'. [ 118.131117][ T6384] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 118.164277][ T6386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.236'. [ 118.191882][ T6386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.385605][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 118.742257][ T6408] PKCS8: Unsupported PKCS#8 version [ 118.751109][ T6410] Bluetooth: MGMT ver 1.22 [ 118.756699][ T6410] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 118.921123][ T6414] loop2: detected capacity change from 0 to 1024 [ 118.931837][ T6416] loop1: detected capacity change from 0 to 64 [ 119.050959][ T6412] loop0: detected capacity change from 0 to 4096 [ 119.061142][ T6414] netlink: 100 bytes leftover after parsing attributes in process `syz.2.250'. [ 119.081177][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.250'. [ 119.216592][ T28] audit: type=1800 audit(1787499688.786:16): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.249" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 119.740064][ T6436] loop0: detected capacity change from 0 to 512 [ 119.782044][ T6436] EXT4-fs: Ignoring removed bh option [ 119.832963][ T6436] EXT4-fs (loop0): 1 truncate cleaned up [ 119.840091][ T6436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.078088][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.022569][ T6457] loop0: detected capacity change from 0 to 32768 [ 121.054508][ T6457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.270 (6457) [ 121.087045][ T6457] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.097592][ T6457] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.106421][ T6457] BTRFS info (device loop0): setting nodatasum [ 121.122631][ T6457] BTRFS info (device loop0): force zlib compression, level 3 [ 121.130108][ T6457] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 121.146061][ T6457] BTRFS info (device loop0): use lzo compression, level 0 [ 121.153808][ T6457] BTRFS info (device loop0): turning on flush-on-commit [ 121.165638][ T6457] BTRFS info (device loop0): enabling auto defrag [ 121.172403][ T6457] BTRFS info (device loop0): max_inline at 4096 [ 121.178720][ T6457] BTRFS info (device loop0): using free space tree [ 121.200794][ T5822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.308202][ T6457] BTRFS info (device loop0): enabling ssd optimizations [ 121.428629][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.450724][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.460498][ T5822] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.490497][ T5822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.531789][ T5822] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 121.568726][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.572343][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.696059][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 122.211457][ T28] audit: type=1326 audit(1787499691.796:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91e059e0d9 code=0x0 [ 122.249851][ T5822] gud 3-1:1.0: Failed to get properties (error=-71) [ 122.258514][ T6476] loop3: detected capacity change from 0 to 40427 [ 122.268148][ T5822] gud: probe of 3-1:1.0 failed with error -71 [ 122.320043][ T6476] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 122.335985][ T5822] usb 3-1: USB disconnect, device number 4 [ 122.373207][ T6476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.415903][ T6476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.529845][ T6476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.549355][ T6476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.670452][ T5785] syz-executor: attempt to access beyond end of device [ 122.670452][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.689731][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.898220][ T6517] loop0: detected capacity change from 0 to 4096 [ 122.930700][ T6517] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 123.076387][ T6517] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 123.577824][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 123.604281][ T6529] loop1: detected capacity change from 0 to 64 [ 123.716583][ T6531] loop3: detected capacity change from 0 to 256 [ 124.150105][ T6520] loop2: detected capacity change from 0 to 32768 [ 124.181349][ T6546] loop3: detected capacity change from 0 to 64 [ 124.208188][ T6520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.291 (6520) [ 124.289674][ T6520] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.330719][ T6520] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.359701][ T6520] BTRFS info (device loop2): setting nodatasum [ 124.378947][ T6520] BTRFS info (device loop2): force zlib compression, level 3 [ 124.388860][ T6520] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.400529][ T6520] BTRFS info (device loop2): use lzo compression, level 0 [ 124.407784][ T6520] BTRFS info (device loop2): turning on flush-on-commit [ 124.417403][ T6520] BTRFS info (device loop2): enabling auto defrag [ 124.439906][ T6550] loop1: detected capacity change from 0 to 64 [ 124.456954][ T6520] BTRFS info (device loop2): max_inline at 4096 [ 124.481399][ T6520] BTRFS info (device loop2): using free space tree [ 124.705170][ T6520] BTRFS info (device loop2): enabling ssd optimizations [ 125.100426][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.298796][ T5883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5883) [ 125.361980][ T5822] IPVS: starting estimator thread 0... [ 125.390269][ T6588] IPVS: ip_vs_edit_dest(): server weight less than zero [ 125.490798][ T6590] IPVS: using max 17 ests per chain, 40800 per kthread [ 125.663335][ T6600] loop3: detected capacity change from 0 to 64 [ 125.957959][ T6607] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 126.113268][ T6612] loop2: detected capacity change from 0 to 64 [ 126.441250][ T6620] loop0: detected capacity change from 0 to 1024 [ 126.475684][ T6622] loop1: detected capacity change from 0 to 1024 [ 126.492878][ T6620] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 126.495498][ T6622] EXT4-fs: Ignoring removed bh option [ 126.544406][ T6622] EXT4-fs: Ignoring removed bh option [ 126.575033][ T6622] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 126.665726][ T6620] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.326: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.742559][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.810610][ T6620] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 126.818912][ T6620] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.326: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.934207][ T6620] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 126.959763][ T6620] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.326: Failed to acquire dquot type 0 [ 127.006235][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.011882][ T6620] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 127.082464][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.097883][ T6620] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.326: mark_inode_dirty error [ 127.146044][ T6620] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.176781][ T6620] EXT4-fs (loop0): 1 orphan inode deleted [ 127.191373][ T2952] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.212076][ T6620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.260649][ T2952] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 127.269361][ T2952] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 0 [ 127.406290][ T6648] syz.3.338 uses obsolete (PF_INET,SOCK_PACKET) [ 127.419141][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.456739][ T5776] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.529915][ T5776] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 127.563363][ T5776] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 127.751757][ T6655] loop2: detected capacity change from 0 to 512 [ 127.809984][ T6655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.827722][ T6659] loop1: detected capacity change from 0 to 128 [ 127.856943][ T6655] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.918220][ T6659] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.013726][ T6659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.143708][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.362217][ T6653] loop3: detected capacity change from 0 to 32768 [ 128.431464][ T6653] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 128.547307][ T6653] XFS (loop3): Ending clean mount [ 128.832368][ T5785] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 128.919206][ T6686] loop1: detected capacity change from 0 to 2048 [ 129.156253][ T6690] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.246594][ T6665] loop0: detected capacity change from 0 to 32768 [ 129.308140][ T6665] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 129.428179][ T6665] XFS (loop0): Ending clean mount [ 129.569800][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 129.661015][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.860617][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 129.868070][ T23] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 129.877927][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.921697][ T23] usb 3-1: config 0 descriptor?? [ 130.080755][ T6713] netlink: 436 bytes leftover after parsing attributes in process `syz.0.357'. [ 130.089931][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 130.141694][ T23] usb 3-1: string descriptor 0 read error: -71 [ 130.147989][ T23] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 130.184299][ T23] usb 3-1: Found UVC 0.00 device (2833:0201) [ 130.210760][ T23] usb 3-1: No valid video chain found. [ 130.261673][ T23] usb 3-1: USB disconnect, device number 5 [ 130.374396][ T6717] loop1: detected capacity change from 0 to 8192 [ 130.434369][ T6717] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.720728][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.771295][ T6727] loop3: detected capacity change from 0 to 4096 [ 130.815138][ T6727] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.826084][ T6727] NILFS (loop3): mounting unchecked fs [ 130.836941][ T6727] NILFS (loop3): recovery required for readonly filesystem [ 130.847629][ T6727] NILFS (loop3): write access will be enabled during recovery [ 130.896586][ T6727] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 130.909491][ T5778] udevd[5778]: incorrect nilfs2 checksum on /dev/loop3 [ 130.968817][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.990754][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 131.045857][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 131.070663][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 131.096968][ T27] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 131.123573][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.140906][ T5883] udevd[5883]: incorrect nilfs2 checksum on /dev/loop3 [ 131.162228][ T27] usb 1-1: config 0 descriptor?? [ 131.407129][ T27] hdpvr 1-1:0.0: firmware version 0x6e dated ^)r~,4"I͊Lf~D!Dq.di&7 [ 131.418892][ T27] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 131.492486][ T6746] mmap: syz.1.376 (6746): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 131.793900][ T6739] loop3: detected capacity change from 0 to 32768 [ 131.918361][ T27] hdpvr 1-1:0.0: Could not setup controls [ 131.925619][ T27] hdpvr 1-1:0.0: registering videodev failed [ 131.992744][ T27] hdpvr: probe of 1-1:0.0 failed with error -71 [ 132.019969][ T27] usb 1-1: USB disconnect, device number 2 [ 132.640724][ T5822] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.852799][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.863688][ T6757] loop2: detected capacity change from 0 to 32768 [ 132.876987][ T5822] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 132.887386][ T6759] loop1: detected capacity change from 0 to 32768 [ 132.901074][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.933143][ T5822] usb 4-1: config 0 descriptor?? [ 133.061220][ T6757] jfs_lookup: iget failed on inum 4 [ 133.106333][ T6757] jfs_lookup: iget failed on inum 4 [ 133.195819][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.203402][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.377319][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.410643][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.438482][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.464386][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.484719][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.510873][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.530947][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.537995][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.575770][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.625351][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.643313][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.650350][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.705112][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.730078][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.758129][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.776045][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.790809][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.808528][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.828696][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.848933][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.867588][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.887944][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.905556][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.920643][ T5822] elecom 0003:056E:010C.0005: unknown main item tag 0x0 [ 133.947698][ T5822] elecom 0003:056E:010C.0005: hidraw0: USB HID v20.00 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 133.988158][ T5822] usb 4-1: USB disconnect, device number 6 [ 134.024744][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 134.134558][ T6767] loop0: detected capacity change from 0 to 32768 [ 134.163538][ T6767] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 134.196815][ T6778] fido_id[6778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 134.244124][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.251143][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 134.276029][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.309069][ T8] usb 2-1: config 0 descriptor?? [ 134.353868][ T6780] loop3: detected capacity change from 0 to 1024 [ 134.444751][ T6780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.500264][ T6780] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.557352][ T5883] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 134.753223][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.786936][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x1 [ 134.814610][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.834532][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.844785][ T6776] loop2: detected capacity change from 0 to 32768 [ 134.851438][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.860158][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.868246][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.911473][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.918446][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.970700][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.981179][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.990730][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 134.997765][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.041804][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.048953][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.101903][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.108885][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.162967][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.190211][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.212045][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.219018][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.260663][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.267674][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.310652][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.320869][ T8] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 135.391149][ T8] wacom 0003:056A:032A.0006: hidraw0: USB HID v0.c1 Device [HID 056a:032a] on usb-dummy_hcd.1-1/input0 [ 135.459825][ T8] usb 2-1: USB disconnect, device number 4 [ 135.712884][ T6800] fido_id[6800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.011998][ T6809] usb usb2: usbfs: process 6809 (syz.0.404) did not claim interface 1 before use [ 136.100100][ T6791] loop3: detected capacity change from 0 to 32768 [ 136.158043][ T6791] [ 136.158043][ T6791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.158043][ T6791] [ 136.329072][ T6791] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 136.329072][ T6791] [ 136.331369][ T28] audit: type=1800 audit(1787499705.906:18): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.395" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 136.507365][ T2952] [ 136.507365][ T2952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.507365][ T2952] [ 136.571896][ T6822] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 136.581914][ T2952] [ 136.581914][ T2952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.581914][ T2952] [ 136.631586][ T5785] [ 136.631586][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.631586][ T5785] [ 136.654587][ T112] [ 136.654587][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.654587][ T112] [ 136.691566][ T5785] [ 136.691566][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.691566][ T5785] [ 136.909409][ T6826] loop2: detected capacity change from 0 to 4096 [ 136.921724][ T6826] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.958229][ T6826] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.982433][ T6826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.131957][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.361763][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 137.372568][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.401238][ T6843] netlink: 'syz.1.419': attribute type 11 has an invalid length. [ 137.420963][ T27] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.436452][ T6826] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 137.455724][ T6846] loop3: detected capacity change from 0 to 164 [ 137.462071][ T27] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.462148][ T27] usb 1-1: Product: syz [ 137.462164][ T27] usb 1-1: Manufacturer: syz [ 137.462180][ T27] usb 1-1: SerialNumber: syz [ 137.468403][ T27] usb 1-1: config 0 descriptor?? [ 137.541971][ T6829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.552390][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 137.558402][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 137.602157][ T6826] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.661826][ T6846] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.729333][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.981037][ T23] usb 1-1: USB disconnect, device number 3 [ 138.053264][ T6855] loop3: detected capacity change from 0 to 512 [ 138.106514][ T6855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.200175][ T6855] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.376721][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.507712][ T6870] loop0: detected capacity change from 0 to 1024 [ 138.616421][ T6873] loop3: detected capacity change from 0 to 512 [ 138.661161][ T6873] EXT4-fs: Ignoring removed orlov option [ 138.666907][ T6873] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.765786][ T6873] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.429: corrupted in-inode xattr: e_value size too large [ 138.785040][ T6873] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.429: couldn't read orphan inode 15 (err -117) [ 138.803006][ T6879] loop2: detected capacity change from 0 to 1024 [ 138.823957][ T6873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.074558][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.094333][ T2916] hfsplus: b-tree write err: -5, ino 25 [ 139.104895][ T2916] hfsplus: b-tree write err: -5, ino 4 [ 139.131469][ T2916] hfsplus: b-tree write err: -5, ino 2 [ 139.161151][ T2916] hfsplus: b-tree write err: -5, ino 17 [ 139.461906][ T6896] loop3: detected capacity change from 0 to 16 [ 139.527524][ T6896] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.610645][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.704860][ T6936] loop3: detected capacity change from 0 to 1764 [ 140.842616][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.875165][ T23] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 140.920719][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.954562][ T6942] loop1: detected capacity change from 0 to 64 [ 140.964315][ T23] usb 1-1: config 0 descriptor?? [ 141.278451][ T6946] loop3: detected capacity change from 0 to 1024 [ 141.425153][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.461449][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.468499][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.486294][ T6950] loop1: detected capacity change from 0 to 1024 [ 141.493385][ T744] hfsplus: b-tree write err: -5, ino 25 [ 141.499323][ T744] hfsplus: b-tree write err: -5, ino 4 [ 141.504900][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.504962][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.504991][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505019][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505047][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505075][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505103][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505131][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505159][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505186][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.505223][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.582847][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.589867][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.606222][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.612112][ T6950] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 141.615305][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.630280][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.638206][ T744] hfsplus: b-tree write err: -5, ino 2 [ 141.639921][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.651387][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.658399][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.665461][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.673299][ T23] elecom 0003:056E:010C.0007: unknown main item tag 0x0 [ 141.682044][ T744] hfsplus: b-tree write err: -5, ino 17 [ 141.698525][ T23] elecom 0003:056E:010C.0007: hidraw0: USB HID v20.00 Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0 [ 141.724798][ T23] usb 1-1: USB disconnect, device number 4 [ 141.781554][ T6950] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.468: lblock 2 mapped to illegal pblock 2 (length 1) [ 141.882255][ T6950] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 141.890870][ T6950] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.468: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.932178][ T6950] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 141.952999][ T6950] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.468: Failed to acquire dquot type 0 [ 141.978381][ T6950] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 142.015673][ T6953] fido_id[6953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.045867][ T6950] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.468: mark_inode_dirty error [ 142.077577][ T6950] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 142.102984][ T6950] EXT4-fs (loop1): 1 orphan inode deleted [ 142.122749][ T2942] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.147817][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.160779][ T6940] loop2: detected capacity change from 0 to 40427 [ 142.173119][ T2942] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 142.182069][ T6940] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 142.192371][ T2942] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 0 [ 142.206949][ T6940] F2FS-fs (loop2): invalid crc value [ 142.228462][ T6940] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.346822][ T6958] loop3: detected capacity change from 0 to 4096 [ 142.372118][ T6958] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.398116][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.418849][ T2952] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.452952][ T6958] EXT4-fs (loop3): Test dummy encryption mode enabled [ 142.483989][ T6940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.491531][ T2952] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 142.491626][ T2952] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 0 [ 142.511531][ T5784] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 142.551577][ T6958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.598213][ T5784] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 142.663904][ T5784] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 142.851226][ T6958] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 142.947640][ T6964] loop1: detected capacity change from 0 to 1024 [ 143.001373][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.253455][ T28] audit: type=1326 audit(1787499712.826:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6969 comm="syz.0.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa8219e0d9 code=0x0 [ 143.276898][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.699710][ T6983] loop2: detected capacity change from 0 to 16 [ 143.737879][ T6983] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.005067][ T6988] loop2: detected capacity change from 0 to 1764 [ 144.111146][ T6973] loop1: detected capacity change from 0 to 40427 [ 144.189086][ T6973] F2FS-fs (loop1): invalid crc value [ 144.237116][ T6973] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.425153][ T6973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.456242][ T7002] loop0: detected capacity change from 0 to 512 [ 144.577334][ T7002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.606338][ T5784] syz-executor: attempt to access beyond end of device [ 144.606338][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.674502][ T7002] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.704574][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 144.938049][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.104014][ T7020] loop3: detected capacity change from 0 to 64 [ 145.256229][ T7023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.412449][ T7023] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.523580][ T28] audit: type=1800 audit(1787499715.106:20): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 145.757549][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.203768][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.226996][ T7044] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.361363][ T7031] set_capacity_and_notify: 2 callbacks suppressed [ 146.361379][ T7031] loop1: detected capacity change from 0 to 32768 [ 146.375678][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.414603][ T7031] [ 146.414603][ T7031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.414603][ T7031] [ 146.518080][ T28] audit: type=1800 audit(1787499716.096:21): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.492" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 146.523735][ T7031] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 146.523735][ T7031] [ 146.600211][ T2916] [ 146.600211][ T2916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.600211][ T2916] [ 146.624978][ T2916] [ 146.624978][ T2916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.624978][ T2916] [ 146.670153][ T5784] [ 146.670153][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.670153][ T5784] [ 146.700667][ T5784] [ 146.700667][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.700667][ T5784] [ 146.718110][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.508'. [ 146.735051][ T113] [ 146.735051][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.735051][ T113] [ 146.771389][ T113] ================================================================== [ 146.779615][ T113] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 146.786523][ T113] Write of size 8 at addr ffff888060159040 by task jfsCommit/113 [ 146.794283][ T113] [ 146.796676][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 146.804186][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.814298][ T113] Call Trace: [ 146.817615][ T113] [ 146.820584][ T113] dump_stack_lvl+0x18c/0x250 [ 146.825314][ T113] ? __lock_acquire+0x7d80/0x7d80 [ 146.830380][ T113] ? show_regs_print_info+0x20/0x20 [ 146.835626][ T113] ? load_image+0x420/0x420 [ 146.840174][ T113] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 146.845675][ T113] ? __virt_addr_valid+0x10c/0x380 [ 146.850849][ T113] ? __virt_addr_valid+0x10c/0x380 [ 146.855996][ T113] ? __virt_addr_valid+0x10c/0x380 [ 146.861146][ T113] ? __virt_addr_valid+0x10c/0x380 [ 146.866308][ T113] print_report+0xa8/0x210 [ 146.870748][ T113] ? txEnd+0x32d/0x520 [ 146.874849][ T113] kasan_report+0x117/0x150 [ 146.879379][ T113] ? txEnd+0x32d/0x520 [ 146.883493][ T113] kasan_check_range+0x241/0x290 [ 146.888546][ T113] txEnd+0x32d/0x520 [ 146.892479][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 146.897187][ T113] ? txFreelock+0x5a0/0x5a0 [ 146.901726][ T113] ? do_task_dead+0xd0/0xd0 [ 146.906249][ T113] ? _raw_spin_unlock+0x40/0x40 [ 146.911117][ T113] ? __kthread_parkme+0x71/0x1c0 [ 146.916077][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 146.921128][ T113] kthread+0x2fa/0x390 [ 146.925218][ T113] ? txFreelock+0x5a0/0x5a0 [ 146.929773][ T113] ? kthread_blkcg+0xd0/0xd0 [ 146.934385][ T113] ret_from_fork+0x48/0x80 [ 146.938837][ T113] ? kthread_blkcg+0xd0/0xd0 [ 146.943448][ T113] ret_from_fork_asm+0x11/0x20 [ 146.948251][ T113] [ 146.951294][ T113] [ 146.953636][ T113] Allocated by task 7031: [ 146.957975][ T113] kasan_set_track+0x4e/0x70 [ 146.962594][ T113] __kasan_kmalloc+0x8f/0xa0 [ 146.967210][ T113] lmLogOpen+0x2df/0xfa0 [ 146.971483][ T113] jfs_mount_rw+0xf4/0x670 [ 146.975915][ T113] jfs_fill_super+0x581/0xab0 [ 146.980620][ T113] mount_bdev+0x21c/0x2c0 [ 146.984973][ T113] legacy_get_tree+0xea/0x180 [ 146.989683][ T113] vfs_get_tree+0x8c/0x280 [ 146.994123][ T113] do_new_mount+0x24a/0xa40 [ 146.998649][ T113] __se_sys_mount+0x2e7/0x3d0 [ 147.003371][ T113] do_syscall_64+0x55/0xb0 [ 147.007808][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.013725][ T113] [ 147.016067][ T113] Freed by task 5784: [ 147.020078][ T113] kasan_set_track+0x4e/0x70 [ 147.024706][ T113] kasan_save_free_info+0x28/0x40 [ 147.029764][ T113] ____kasan_slab_free+0x126/0x1f0 [ 147.034902][ T113] slab_free_freelist_hook+0x130/0x1a0 [ 147.040394][ T113] __kmem_cache_free+0xba/0x1f0 [ 147.045277][ T113] lmLogClose+0x296/0x530 [ 147.049635][ T113] jfs_umount+0x2ca/0x3a0 [ 147.053990][ T113] jfs_put_super+0x8c/0x190 [ 147.058525][ T113] generic_shutdown_super+0x134/0x2b0 [ 147.063921][ T113] kill_block_super+0x44/0x90 [ 147.068623][ T113] deactivate_locked_super+0x97/0x100 [ 147.074021][ T113] cleanup_mnt+0x3d7/0x460 [ 147.078464][ T113] task_work_run+0x1d4/0x260 [ 147.083081][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 147.088398][ T113] exit_to_user_mode_prepare+0xee/0x180 [ 147.093968][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 147.099459][ T113] do_syscall_64+0x61/0xb0 [ 147.103899][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.109818][ T113] [ 147.112162][ T113] The buggy address belongs to the object at ffff888060159000 [ 147.112162][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 147.126238][ T113] The buggy address is located 64 bytes inside of [ 147.126238][ T113] freed 1024-byte region [ffff888060159000, ffff888060159400) [ 147.140061][ T113] [ 147.142408][ T113] The buggy address belongs to the physical page: [ 147.148934][ T113] page:ffffea0001805600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60158 [ 147.159105][ T113] head:ffffea0001805600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 147.168054][ T113] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 147.176481][ T113] page_type: 0xffffffff() [ 147.180843][ T113] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 dead000000000001 [ 147.189449][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 147.198044][ T113] page dumped because: kasan: bad access detected [ 147.204476][ T113] page_owner tracks the page as allocated [ 147.210205][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 744, tgid 744 (kworker/u4:5), ts 99815938624, free_ts 99793708588 [ 147.230721][ T113] post_alloc_hook+0x1c1/0x200 [ 147.235551][ T113] get_page_from_freelist+0x2181/0x22a0 [ 147.241119][ T113] __alloc_pages+0x1f0/0x460 [ 147.245757][ T113] alloc_slab_page+0x5d/0x180 [ 147.250451][ T113] new_slab+0x87/0x2d0 [ 147.254537][ T113] ___slab_alloc+0xc5c/0x12f0 [ 147.259233][ T113] __kmem_cache_alloc_node+0x11f/0x250 [ 147.264724][ T113] __kmalloc+0xa7/0x240 [ 147.268913][ T113] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 147.274742][ T113] ieee80211_inform_bss+0x12a/0xfd0 [ 147.279975][ T113] rdev_inform_bss+0x106/0x410 [ 147.284764][ T113] cfg80211_inform_bss_frame_data+0xb22/0x1330 [ 147.290943][ T113] ieee80211_bss_info_update+0x789/0x9f0 [ 147.296609][ T113] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 147.302796][ T113] ieee80211_iface_work+0x730/0xc90 [ 147.308023][ T113] cfg80211_wiphy_work+0x228/0x260 [ 147.313162][ T113] page last free stack trace: [ 147.317854][ T113] free_unref_page_prepare+0x7d7/0x8f0 [ 147.323339][ T113] free_unref_page+0x32/0x2e0 [ 147.328037][ T113] __unfreeze_partials+0x1cf/0x210 [ 147.333180][ T113] put_cpu_partial+0x17c/0x250 [ 147.337968][ T113] __slab_free+0x319/0x400 [ 147.342409][ T113] qlist_free_all+0x75/0xd0 [ 147.346940][ T113] kasan_quarantine_reduce+0x143/0x160 [ 147.352435][ T113] __kasan_slab_alloc+0x22/0x80 [ 147.357309][ T113] slab_post_alloc_hook+0x6a/0x4d0 [ 147.362450][ T113] __kmem_cache_alloc_node+0x194/0x250 [ 147.367948][ T113] kmalloc_trace+0x2a/0xe0 [ 147.372394][ T113] kernfs_fop_open+0x3d2/0xc60 [ 147.377181][ T113] do_dentry_open+0x880/0x14b0 [ 147.381973][ T113] path_openat+0x284f/0x3270 [ 147.386587][ T113] do_filp_open+0x1f2/0x430 [ 147.391109][ T113] do_sys_openat2+0x134/0x1d0 [ 147.395833][ T113] [ 147.398180][ T113] Memory state around the buggy address: [ 147.403823][ T113] ffff888060158f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.411904][ T113] ffff888060158f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.419982][ T113] >ffff888060159000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.428055][ T113] ^ [ 147.434254][ T113] ffff888060159080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.442333][ T113] ffff888060159100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.450411][ T113] ================================================================== [ 147.503260][ T7055] loop0: detected capacity change from 0 to 64 [ 147.630246][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.637523][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 147.644807][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.654919][ T113] Call Trace: [ 147.658240][ T113] [ 147.661218][ T113] dump_stack_lvl+0x18c/0x250 [ 147.665946][ T113] ? show_regs_print_info+0x20/0x20 [ 147.671185][ T113] ? load_image+0x420/0x420 [ 147.675740][ T113] panic+0x2ca/0x720 [ 147.679687][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 147.684262][ T113] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 147.690285][ T113] ? _raw_spin_unlock+0x40/0x40 [ 147.695202][ T113] ? print_memory_metadata+0x314/0x400 [ 147.700703][ T113] ? txEnd+0x32d/0x520 [ 147.704824][ T113] check_panic_on_warn+0x84/0xa0 [ 147.709808][ T113] ? txEnd+0x32d/0x520 [ 147.713924][ T113] end_report+0x6f/0x130 [ 147.718212][ T113] kasan_report+0x128/0x150 [ 147.722762][ T113] ? txEnd+0x32d/0x520 [ 147.726883][ T113] kasan_check_range+0x241/0x290 [ 147.731868][ T113] txEnd+0x32d/0x520 [ 147.735813][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 147.740544][ T113] ? txFreelock+0x5a0/0x5a0 [ 147.745102][ T113] ? do_task_dead+0xd0/0xd0 [ 147.749654][ T113] ? _raw_spin_unlock+0x40/0x40 [ 147.754558][ T113] ? __kthread_parkme+0x71/0x1c0 [ 147.759542][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 147.764616][ T113] kthread+0x2fa/0x390 [ 147.768730][ T113] ? txFreelock+0x5a0/0x5a0 [ 147.773288][ T113] ? kthread_blkcg+0xd0/0xd0 [ 147.777922][ T113] ret_from_fork+0x48/0x80 [ 147.782383][ T113] ? kthread_blkcg+0xd0/0xd0 [ 147.787018][ T113] ret_from_fork_asm+0x11/0x20 [ 147.791843][ T113] [ 147.795036][ T113] Kernel Offset: disabled [ 147.799371][ T113] Rebooting in 86400 seconds..