last executing test programs: 1m29.226046575s ago: executing program 4 (id=621): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 1m29.080436039s ago: executing program 4 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) 1m28.940976994s ago: executing program 4 (id=625): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f0454b600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 1m26.6978172s ago: executing program 4 (id=654): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3004046, &(0x7f0000000280)={[{@dioread_nolock}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@i_version}, {@data_err_ignore}, {@minixdf}, {@data_err_ignore}, {@auto_da_alloc}, {@init_itable}, {@data_err_ignore}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x555, &(0x7f0000000780)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m26.285549246s ago: executing program 4 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) 1m25.832760034s ago: executing program 4 (id=661): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 1m25.491728483s ago: executing program 32 (id=661): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 1m2.96484943s ago: executing program 5 (id=872): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ppoll(&(0x7f0000001040)=[{r0, 0x462}], 0x1, 0x0, &(0x7f00000010c0)={[0x3]}, 0x8) 1m1.422295912s ago: executing program 5 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000080d0500020007000000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1m1.359138241s ago: executing program 5 (id=884): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1m1.259667533s ago: executing program 5 (id=885): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@gid}, {@force}, {@force}]}, 0xff, 0x6bb, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)='proc\x00', 0x8010, 0x0) 1m0.996841555s ago: executing program 5 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) 1m0.238926019s ago: executing program 5 (id=897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 1m0.062931677s ago: executing program 33 (id=897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 6.242054153s ago: executing program 6 (id=1508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 6.061025451s ago: executing program 6 (id=1510): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2208c04, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x1, 0x5523, &(0x7f0000000740)="$eJzs3EtvG2UXAOBjp+n96xchFuw6UoWUSLVVpxfBrkArLiJVVGDBChzbsdzanih2nJAVC5aIBWv+BAKJFUt+AwvW7BALEDskkGcm0BSQiuILaZ5HGp+Z16/PnHcURTozlgM4sZaSX34qxaU4FxELEXExItsvFVvmdh6ei4jLEVF+ZCsV438MnI6I8xFxaZw8z1kq3vr06ujKzR/f+Pnrb8+cuvD5V9/Nb9XAvD0fEb2tfH+3l8e0nccHxXh91Mli78aoiPkbvYfFcZrH3dZGlmG3fjCvnsXr7Xx+urUzGMfNbr0xju3OZja+1c9POBi1D/JkH3hQ386Om62NLHYGaRbb+3lde/v5/7b9wTDP0yzyfZClj+HwIObjrb1Wvp6th1ls9IfFeJ43bbb2xnFUxOJ00Ui7zayOjaNc6f+2Nzv9nb1k1NoedNJ+crNae6Fau1WpbafN1rB1o1LvNW/dSJbb3fG0yrBV791up2m726o20t5KstxuNCq1WrJ8p7XRqfeTWq16vXqtcnOl2LuavHrvnaTbTJbH8eVOf2fY6Q6SzXQ7yT+xkqxWr7+4klypJW+trSfr9+/eXVt/+7077957ae31V4pJfykrWV69trpaqV2rrNZWTtD6PyqKnuD64UhK/276mWnVAXCM6P+BeZhe/799P2L6/X/o/yfiWPW/U+v/Pzsp6y8f7WrBY56k/z83gzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJi57xe/eC3bWcqPLxTj/yuGnimOSxFRjojf/sZCnD6Uc6HIs/gP8xcfq+GbUmQZxuc4U2znI+J2sf36/2lfBQAAAHh6ffnh5U/ybj1/WZp3QcxSftOmfPH9CeUrRcTi0g8TylYevzw7oWTZ3/ep2JtQtuwG1tkJJctvuZ2aVLYnsnAonH0klPJQnmk5AADATBzuBGbbhQAAADBLH8+7AOajFAePMg+eBWffvP/zgeC5Q0cAAADAMVSadwEAAADA1GX9v9//AwAAgKdb/vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA7O/eTmzYQxQH42eBC/6mo6r49SndwjB6hyy4rDtBLcAR6hVyAM5BdjhBBhMdBIUqiKB7bCvk+yQxjwc/PCC9mRhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEuX1Xrx/+/3f21zdvt2XnjZH23rBgAAgLdgW60X9ZtZ6n9szn9uTn1t+kVElBHx0Nh9FO9OMkdNTvXI56t7NVxE1AmHa0ya40NE/GyO6y9d/woAAABwvjbL1TyN1tPLbOiC6FOatCk//cqUV0RENbvKlFYe8r5lCqv/3+P4kymtnsCaZgpLU27jXGnPUj/ux1m76Z2mSE359Pez3TsAANCj0UnT7ygEAACAPv0eugCGUcTtUuZxKXCSmmZ57/1JDwAAAHiFiqELAAAAADpXj//t/wcAAADnLe3/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3by3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+3KYACAJhGNzKvv6F9z9svKBniGAGhIddFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7knrGMU+uMLfFUVcs0sWfcq+rIKnFmlbhyoY8HW//wRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC87Nw/bxxFFADwt3e3ZyeAOAxyYYSIRAENcS4hIR2iAFkUfASE5VyCyYU/iQsSRUhu6JDrNAhKhJBApst3SJ1IaUKXwkWQqIP2n712XBwI757t30+anber1c6bPcnyuxkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhl6/2duJsdBkXcKa/df3J7Jesf7OkzdzceLmQti5Mmkz4cXqufJPO1k9nmkwEAAOB46Fb1fUQ8SjeXsr4zyOv/tLonq/l/fKGIq3p+b91f9VXtn7U/fn/8yvZAg2Kc7KGXV8ejM8+m0ju4WU6xpy9OcFMvf/P5dy/d/APpfLT+8laav8/k+3v3Pujn4czBpwsA/Denq74Mqt+Hsn7YZmIAHBu9WuFd1f/dQbs5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADRhaz2eq+IkIhZ6O3HmwZPbK/v1dzceLlTtwp07G/VnZo9II+Ly6nh0JmYbnM10u3Hz1tXl8Xh0vfng9Yhoa/T3yulf/WSCmyMOKI1TLb35YxZ0yg97WvI5HEGLP5QAADiS0rJldf2jdHMpu5bMRTz9aXf9/2Ytjgnr/8efXbhfH6te/w8bm+H0W1y79tXijZu33l69tnxldGX0xTtnh+8Oz108f/7iYv5dSXFsO00AAAAOsX7Z6vV/Z+7Z9f+TtTgmrP+//mH4bZQ1f6ar/t/XzqJf25kAAAAcby+d+vuvZJ/rSb8f3yyvrV0fFsft87PFsYVU/7WZstXr/+5c21kBAAAATdhaT3at/1+qxTHh+v/zP7/6a/2Z3Yg4Ua7/n175cnypuelMtf/xb4Y/TSKKKzPlw+0sAAAAoKzHT+xZ/0/z/f+d7S0PnYh4640iLv8N4ET1f/fD736pj1Xf/3+uuSlOpc588T7yfj6iN992RgAAABxls3kb5PX/n+nm0ue/nfy4b/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNP+CQAA//+XGjrm") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.018332933s ago: executing program 6 (id=1525): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.226868881s ago: executing program 6 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}, {@size={'size', 0x3d, [0x65]}}]}) 3.092100837s ago: executing program 6 (id=1533): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r1}}, 0x120) 3.00208103s ago: executing program 6 (id=1534): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 2.38419807s ago: executing program 1 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x1, r0}, 0x38) 2.262688668s ago: executing program 1 (id=1551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, 0x0) 2.167074121s ago: executing program 1 (id=1552): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 1.750239205s ago: executing program 3 (id=1558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x44, r1, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 1.604598019s ago: executing program 3 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x8080) 1.585676346s ago: executing program 1 (id=1564): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) writev(r0, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x801}, {0x0}], 0x2) 1.396427562s ago: executing program 3 (id=1568): r0 = socket$isdn(0x22, 0x2, 0x22) r1 = socket$isdn(0x22, 0x2, 0x2) dup3(r1, r0, 0x0) 1.338005351s ago: executing program 1 (id=1570): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.272521989s ago: executing program 3 (id=1572): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) close(r0) 1.046777609s ago: executing program 3 (id=1577): r0 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) 678.799083ms ago: executing program 0 (id=1581): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 636.418365ms ago: executing program 2 (id=1582): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) writev(r0, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x801}, {0x0}], 0x2) 576.113484ms ago: executing program 3 (id=1583): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/28, 0x1c}], 0x1}, 0x7b}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) 517.073353ms ago: executing program 2 (id=1584): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001d40)="e214", 0x2}, {0x0}], 0x2}, 0x40) close(r0) 497.81576ms ago: executing program 0 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 370.211007ms ago: executing program 2 (id=1586): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081"]) 352.515154ms ago: executing program 0 (id=1587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 282.100121ms ago: executing program 2 (id=1588): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x1, r1, 0x0}]) 249.780985ms ago: executing program 0 (id=1599): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 140.458986ms ago: executing program 0 (id=1589): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000064a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000699000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000734000/0x2000)=nil, &(0x7f0000b27000/0x4000)=nil, 0x0}, 0x68) 134.025355ms ago: executing program 2 (id=1591): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 133.370364ms ago: executing program 0 (id=1602): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000002480)=ANY=[@ANYBLOB='time_offset=0x000000000000007a,namecase=1,dmask=00000000000000000000000,errors=continue,errors=continue,umask=00000000000000000000000,fmask=00000000000000000000006,fmask=00000000000000000000011,fmask=00000000000000000000006,fmask=0000000080003,errors=continue,\x00'], 0xf5, 0x1524, &(0x7f0000006800)="$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") setreuid(0xee01, 0xee00) mount$nfs(&(0x7f0000000040)='\x8b\xb8\x98\x97\xb9\xdc\x80?!\xbc\x9a\xdf\xbc\x01\xec\xd8!Y\xc3?\xa5\x1d\x1d}8\xf0T?dw\xe2i\xe8q: \xed\xd5!\x8d+\xda\x84\xea\x8d\x15\xdd\t\v\x11\x97\xc9\x06\xba\x8f\x91e(\r\x1a\xbfZX\x16', &(0x7f0000000500)='./file0\x00', 0x0, 0xa55000, 0x0) 82.152965ms ago: executing program 1 (id=1592): r0 = socket$netlink(0x10, 0x3, 0x15) setuid(0xee01) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) 0s ago: executing program 2 (id=1593): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dbd3c66f52c6e6c733d6d61637475726b6973682c626172726965722c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x3, 0x6ae, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) kernel console output (not intermixed with test programs): 094][ T4194] [ 114.429822][ T4194] [ 114.429822][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.429822][ T4194] [ 114.620441][ T5372] xt_hashlimit: size too large, truncated to 1048576 [ 114.663605][ T5375] set_capacity_and_notify: 3 callbacks suppressed [ 114.663623][ T5375] loop2: detected capacity change from 0 to 512 [ 114.710567][ T5341] loop4: detected capacity change from 0 to 32768 [ 114.812891][ T5341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.417 (5341) [ 114.877718][ T5375] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.432: bg 0: block 16: invalid block bitmap [ 114.930117][ T5375] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 114.941761][ T5341] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 114.956579][ T5375] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.432: attempt to clear invalid blocks 1669132790 len 1 [ 114.985661][ T5341] BTRFS info (device loop4): allowing degraded mounts [ 114.986644][ T5375] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.432: invalid indirect mapped block 4294967295 (level 1) [ 114.993584][ T5341] BTRFS info (device loop4): enabling auto defrag [ 115.066291][ T5341] BTRFS info (device loop4): using free space tree [ 115.117571][ T5341] BTRFS info (device loop4): has skinny extents [ 115.156890][ T5390] device wlan1 entered promiscuous mode [ 115.188287][ T5375] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.432: invalid indirect mapped block 4294967295 (level 2) [ 115.209862][ T5390] device macsec1 entered promiscuous mode [ 115.257818][ T5375] EXT4-fs (loop2): 1 truncate cleaned up [ 115.295915][ T5375] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noquota,,errors=continue. Quota mode: none. [ 115.445738][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 115.533406][ T5341] BTRFS info (device loop4): enabling ssd optimizations [ 115.728999][ T5423] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 115.895978][ T5429] loop1: detected capacity change from 0 to 128 [ 115.980687][ T5429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.003955][ T5429] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.039075][ T2266] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.413554][ T2266] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 116.441836][ T2266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.492674][ T2266] usb 3-1: config 0 descriptor?? [ 116.579839][ T2266] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 116.648115][ T5427] loop0: detected capacity change from 0 to 32768 [ 116.781413][ T5427] XFS (loop0): Mounting V5 Filesystem [ 116.788935][ T5440] loop4: detected capacity change from 0 to 8192 [ 116.831436][ T5440] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 116.854083][ T5440] REISERFS (device loop4): using ordered data mode [ 116.898908][ T5440] reiserfs: using flush barriers [ 116.928497][ T5427] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 116.963090][ T5440] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.993675][ T2266] gspca_stv06xx: I2C: Read error writing address: -71 [ 117.044754][ T5440] REISERFS (device loop4): checking transaction log (loop4) [ 117.049908][ T5427] XFS (loop0): Ending clean mount [ 117.062010][ T2266] usb 3-1: USB disconnect, device number 6 [ 117.102289][ T5440] REISERFS (device loop4): Using r5 hash to sort names [ 117.141834][ T5440] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.201141][ T5440] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.317104][ T4194] XFS (loop0): Unmounting Filesystem [ 117.326401][ T5440] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.413242][ T5460] loop1: detected capacity change from 0 to 128 [ 117.432198][ T5440] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.454098][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.489747][ T5440] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.583892][ T5460] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.720535][ T5462] loop2: detected capacity change from 0 to 256 [ 117.839120][ T4602] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.900710][ T5462] FAT-fs (loop2): Directory bread(block 64) failed [ 117.956558][ T5462] FAT-fs (loop2): Directory bread(block 65) failed [ 118.000353][ T5462] FAT-fs (loop2): Directory bread(block 66) failed [ 118.051180][ T5462] FAT-fs (loop2): Directory bread(block 67) failed [ 118.074719][ T5462] FAT-fs (loop2): Directory bread(block 68) failed [ 118.140955][ T5462] FAT-fs (loop2): Directory bread(block 69) failed [ 118.181520][ T5462] FAT-fs (loop2): Directory bread(block 70) failed [ 118.228322][ T5462] FAT-fs (loop2): Directory bread(block 71) failed [ 118.288129][ T5470] loop4: detected capacity change from 0 to 1024 [ 118.298229][ T5462] FAT-fs (loop2): Directory bread(block 72) failed [ 118.332274][ T5462] FAT-fs (loop2): Directory bread(block 73) failed [ 118.424070][ T5470] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,,errors=continue. Quota mode: none. [ 119.002396][ T5491] loop2: detected capacity change from 0 to 512 [ 119.109561][ T5491] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 119.154936][ T5491] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.472: invalid indirect mapped block 10 (level 1) [ 119.276155][ T5491] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.472: invalid indirect mapped block 8 (level 1) [ 119.307099][ T5491] EXT4-fs (loop2): 1 truncate cleaned up [ 119.337453][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 119.472485][ T5507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.522971][ T5507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.532485][ T5507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.856182][ T5476] loop1: detected capacity change from 0 to 65536 [ 119.876340][ T5517] loop3: detected capacity change from 0 to 512 [ 119.999672][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 120.043668][ T5517] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.082111][ T5476] XFS (loop1): Mounting V5 Filesystem [ 120.192957][ T5476] XFS (loop1): Ending clean mount [ 120.281576][ T4188] XFS (loop1): Unmounting Filesystem [ 120.480927][ T5543] loop3: detected capacity change from 0 to 8192 [ 120.580321][ T5543] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 120.592904][ T5543] REISERFS (device loop3): using ordered data mode [ 120.604314][ T5543] reiserfs: using flush barriers [ 120.620716][ T5543] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.694458][ T5532] loop4: detected capacity change from 0 to 32768 [ 120.707697][ T5543] REISERFS (device loop3): checking transaction log (loop3) [ 120.727924][ T5543] REISERFS (device loop3): Using r5 hash to sort names [ 120.738666][ T5543] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 120.768296][ T5543] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 120.817690][ T5532] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 120.864745][ T5532] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.881848][ T5543] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 120.902925][ T5543] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 121.112365][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 121.921414][ T5591] loop3: detected capacity change from 0 to 512 [ 121.960787][ T5594] loop4: detected capacity change from 0 to 256 [ 121.996883][ T5591] EXT4-fs (loop3): Ignoring removed nobh option [ 122.006498][ T5591] EXT4-fs (loop3): inline encryption not supported [ 122.016285][ T5591] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.032756][ T5591] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 122.052733][ T5591] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.511: invalid indirect mapped block 2683928664 (level 1) [ 122.080961][ T5591] EXT4-fs (loop3): Remounting filesystem read-only [ 122.104151][ T5591] EXT4-fs (loop3): 1 truncate cleaned up [ 122.111146][ T5591] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,errors=remount-ro,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,. Quota mode: writeback. [ 122.155822][ T5594] FAT-fs (loop4): Directory bread(block 64) failed [ 122.184812][ T5594] FAT-fs (loop4): Directory bread(block 65) failed [ 122.195746][ T5594] FAT-fs (loop4): Directory bread(block 66) failed [ 122.203596][ T5594] FAT-fs (loop4): Directory bread(block 67) failed [ 122.211154][ T5594] FAT-fs (loop4): Directory bread(block 68) failed [ 122.219150][ T5594] FAT-fs (loop4): Directory bread(block 69) failed [ 122.228494][ T5594] FAT-fs (loop4): Directory bread(block 70) failed [ 122.253430][ T5594] FAT-fs (loop4): Directory bread(block 71) failed [ 122.273166][ T5594] FAT-fs (loop4): Directory bread(block 72) failed [ 122.292700][ T5594] FAT-fs (loop4): Directory bread(block 73) failed [ 122.356363][ T5602] loop2: detected capacity change from 0 to 256 [ 122.389595][ T5602] exfat: Deprecated parameter 'utf8' [ 122.417148][ T5602] exfat: Deprecated parameter 'namecase' [ 122.442090][ T5602] exfat: Deprecated parameter 'namecase' [ 122.453023][ T5602] exfat: Deprecated parameter 'utf8' [ 122.503749][ T5591] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.524606][ T5602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 122.526129][ T5591] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.511: Invalid block bitmap block 3 in block_group 0 [ 122.573649][ T5591] EXT4-fs (loop3): Remounting filesystem read-only [ 122.698590][ T5612] loop4: detected capacity change from 0 to 16 [ 122.796749][ T5612] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.872202][ T5612] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 123.573138][ T5648] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.582445][ T5648] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 123.595747][ T5648] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 123.634968][ T5648] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 123.648388][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 123.658152][ T5648] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 123.682634][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 123.695838][ T5648] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 123.712471][ T5648] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 123.719092][ T5651] netlink: 'syz.4.538': attribute type 13 has an invalid length. [ 123.980769][ T5641] loop2: detected capacity change from 0 to 32768 [ 124.088953][ T5641] (syz.2.533,5641,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.147443][ T5641] (syz.2.533,5641,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.214672][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.239096][ T5641] JBD2: Ignoring recovery information on journal [ 124.349946][ T5641] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 124.553626][ T5671] loop0: detected capacity change from 0 to 764 [ 124.585303][ T5641] syz.2.533 (5641) used greatest stack depth: 20720 bytes left [ 124.600388][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 124.725987][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.766425][ T4231] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 124.803080][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 124.818010][ T5671] Symlink component flag not implemented [ 124.844066][ T5671] Symlink component flag not implemented [ 125.053718][ T4231] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 125.084359][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.131016][ T4231] usb 5-1: Product: syz [ 125.142112][ T4231] usb 5-1: Manufacturer: syz [ 125.162368][ T4231] usb 5-1: SerialNumber: syz [ 125.281673][ T5669] loop3: detected capacity change from 0 to 32768 [ 125.478538][ T5669] XFS (loop3): Mounting V5 Filesystem [ 125.490125][ T4231] snd-ua101 5-1:1.1: invalid bNumEndpoints [ 125.544264][ T4231] snd-ua101 5-1:1.0: invalid num_altsetting [ 125.709728][ T4231] usb 5-1: USB disconnect, device number 2 [ 125.825088][ T5669] XFS (loop3): Ending clean mount [ 125.881433][ T4198] XFS (loop3): Unmounting Filesystem [ 125.962751][ T5697] loop2: detected capacity change from 0 to 32768 [ 126.087452][ T5716] loop4: detected capacity change from 0 to 512 [ 126.122108][ T5697] XFS (loop2): Mounting V5 Filesystem [ 126.159175][ T5691] loop1: detected capacity change from 0 to 40427 [ 126.264896][ T5697] XFS (loop2): Ending clean mount [ 126.313824][ T5691] F2FS-fs (loop1): invalid crc value [ 126.331974][ T5724] loop3: detected capacity change from 0 to 64 [ 126.425366][ T5691] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.503820][ T4196] XFS (loop2): Unmounting Filesystem [ 126.637773][ T5728] loop4: detected capacity change from 0 to 4096 [ 126.644863][ T5691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.670009][ T5734] loop3: detected capacity change from 0 to 512 [ 126.741919][ T5728] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 126.921695][ T5728] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 126.970375][ T4188] attempt to access beyond end of device [ 126.970375][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 127.274885][ T5741] loop2: detected capacity change from 0 to 2048 [ 127.356335][ T5741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.483877][ T2266] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 127.712623][ T5749] netlink: 148 bytes leftover after parsing attributes in process `syz.4.576'. [ 127.772963][ T5749] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 127.863696][ T2266] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.885357][ T2266] usb 4-1: config 0 has no interface number 0 [ 127.891943][ T2266] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.953842][ T2266] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.985517][ T2266] usb 4-1: config 0 interface 1 has no altsetting 0 [ 127.998922][ T5765] loop1: detected capacity change from 0 to 256 [ 128.003412][ T2266] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 128.028072][ T5767] loop4: detected capacity change from 0 to 256 [ 128.036841][ T2266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.050053][ T2266] usb 4-1: config 0 descriptor?? [ 128.095282][ T5765] exfat: Deprecated parameter 'utf8' [ 128.130798][ T5765] exfat: Deprecated parameter 'namecase' [ 128.167538][ T5765] exfat: Deprecated parameter 'namecase' [ 128.188971][ T5765] exfat: Deprecated parameter 'utf8' [ 128.253888][ T5765] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 128.561197][ T5775] device wireguard0 entered promiscuous mode [ 128.743627][ T2266] uclogic 0003:2179:0053.0004: failed retrieving string descriptor #100: -71 [ 128.785355][ T2266] uclogic 0003:2179:0053.0004: failed retrieving pen parameters: -71 [ 128.840731][ T2266] uclogic 0003:2179:0053.0004: pen probing failed: -71 [ 128.903408][ T2266] uclogic 0003:2179:0053.0004: failed probing parameters: -71 [ 128.930283][ T2266] uclogic: probe of 0003:2179:0053.0004 failed with error -71 [ 129.012367][ T2266] usb 4-1: USB disconnect, device number 5 [ 129.950926][ T5809] [ 129.950926][ T5809] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.950926][ T5809] [ 130.048208][ T5809] read_mapping_page failed! [ 130.056041][ T5809] ERROR: (device loop1): txCommit: [ 130.056041][ T5809] [ 130.104810][ T5839] jfs_rmdir: dtDelete returned -2 [ 130.180546][ T154] ERROR: (device loop1): diWrite: ixpxd invalid [ 130.180546][ T154] [ 130.213178][ T154] ERROR: (device loop1): txCommit: [ 130.213178][ T154] [ 130.242067][ T154] jfs_write_inode: jfs_commit_inode failed! [ 130.282474][ T4188] [ 130.282474][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.282474][ T4188] [ 130.302375][ T4188] [ 130.302375][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.302375][ T4188] [ 130.473342][ T2266] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.689774][ T5858] set_capacity_and_notify: 3 callbacks suppressed [ 130.689790][ T5858] loop1: detected capacity change from 0 to 2048 [ 130.732981][ T5862] loop2: detected capacity change from 0 to 4096 [ 130.752820][ T2266] usb 4-1: Using ep0 maxpacket: 32 [ 130.801330][ T5862] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 130.828005][ T5867] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.873697][ T2266] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 130.893815][ T2266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.932542][ T2266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.944432][ T2266] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 130.959604][ T2266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.982873][ T2266] usb 4-1: config 0 descriptor?? [ 131.032402][ T5862] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.043531][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.443767][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.468908][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.514338][ T4231] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 131.514440][ T2266] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 131.533430][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.555248][ T5893] syz.2.630 uses obsolete (PF_INET,SOCK_PACKET) [ 131.598632][ T4231] usb 5-1: config 0 descriptor?? [ 131.672434][ T5899] loop1: detected capacity change from 0 to 256 [ 131.688223][ T5897] loop2: detected capacity change from 0 to 2048 [ 131.705207][ T2266] logitech 0003:046D:C29C.0005: no inputs found [ 131.736615][ T2266] usb 4-1: USB disconnect, device number 6 [ 131.759925][ T5899] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 131.808731][ T5897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.942435][ T5902] loop1: detected capacity change from 0 to 1024 [ 132.008669][ T5900] fido_id[5900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 132.086021][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,nodioread_nolock,jqfmt=vfsv0,barrier,auto_da_alloc,inode_readahead_blks=0x0000000000000020,,errors=continue. Quota mode: none. [ 132.095224][ T5909] netlink: 'syz.2.635': attribute type 2 has an invalid length. [ 132.116016][ T5902] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.143620][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.152682][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.163198][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.183410][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.192848][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.209465][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.233389][ T4231] thrustmaster 0003:044F:B654.0006: unknown main item tag 0x0 [ 132.247705][ T4231] thrustmaster 0003:044F:B654.0006: hidraw0: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.4-1/input0 [ 132.264102][ T4231] thrustmaster 0003:044F:B654.0006: no inputs found [ 132.428887][ T4231] usb 5-1: USB disconnect, device number 3 [ 132.492107][ T5915] fido_id[5915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 132.723087][ T5931] loop2: detected capacity change from 0 to 128 [ 133.043453][ T5431] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 133.068518][ T5946] loop4: detected capacity change from 0 to 1024 [ 133.087062][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.095258][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147005][ T5946] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.224450][ T5946] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,auto_da_alloc=0x0000000000000001,i_version,data_err=ignore,minixdf,data_err=ignore,auto_da_alloc,init_itable,data_err=ignore,grpjquota=,dioread_nolock,,errors=continue. Quota mode: none. [ 133.336611][ T4192] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 8(4), depth 0(0) [ 133.374441][ T4192] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 8(4), depth 0(0) [ 133.454896][ T5431] usb 4-1: config 11 has an invalid interface number: 93 but max is 0 [ 133.471989][ T5431] usb 4-1: config 11 has no interface number 0 [ 133.479657][ T5431] usb 4-1: config 11 interface 93 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 133.494742][ T5431] usb 4-1: config 11 interface 93 has no altsetting 0 [ 133.653553][ T5431] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice= 3.e1 [ 133.663985][ T5431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.676973][ T5431] usb 4-1: Product: syz [ 133.682836][ T5431] usb 4-1: Manufacturer: syz [ 133.689235][ T5431] usb 4-1: SerialNumber: syz [ 133.714023][ T5935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.822130][ T4602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.845752][ T4192] syz-executor (4192) used greatest stack depth: 20240 bytes left [ 133.885347][ T5966] loop2: detected capacity change from 0 to 64 [ 134.007749][ T4602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.022377][ T5431] usb 4-1: no audio or video endpoints found [ 134.069499][ T5431] usb 4-1: USB disconnect, device number 7 [ 134.227368][ T4602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.288194][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 134.379679][ T4602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.453568][ T4231] Bluetooth: hci0: command 0x0c20 tx timeout [ 134.664868][ T5968] loop1: detected capacity change from 0 to 32768 [ 134.765215][ T5968] (syz.1.663,5968,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.802040][ T5968] (syz.1.663,5968,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.889644][ T5968] JBD2: Ignoring recovery information on journal [ 135.005160][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 135.017029][ T5968] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.327001][ T4602] tipc: Left network mode [ 135.339378][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 135.419889][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.459257][ T6009] loop3: detected capacity change from 0 to 736 [ 135.473012][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.543920][ T5972] device bridge_slave_0 entered promiscuous mode [ 135.594386][ T6009] rock: directory entry would overflow storage [ 135.603465][ T6009] rock: sig=0x3b10, size=4, remaining=3 [ 135.767133][ T6013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.677'. [ 135.780408][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.798522][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.853523][ T5972] device bridge_slave_1 entered promiscuous mode [ 135.872498][ T6016] loop3: detected capacity change from 0 to 1024 [ 136.048158][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.072675][ T144] hfsplus: b-tree write err: -5, ino 25 [ 136.135453][ T5995] loop2: detected capacity change from 0 to 32768 [ 136.164107][ T144] hfsplus: b-tree write err: -5, ino 4 [ 136.203707][ T144] hfsplus: b-tree write err: -5, ino 2 [ 136.215094][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.296118][ T6004] loop0: detected capacity change from 0 to 32768 [ 136.330063][ T5972] team0: Port device team_slave_0 added [ 136.339878][ T5972] team0: Port device team_slave_1 added [ 136.376310][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.386760][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.420690][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.422355][ T5995] XFS (loop2): Mounting V5 Filesystem [ 136.443475][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 136.515542][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.525458][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.555545][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.680105][ T5995] XFS (loop2): Ending clean mount [ 136.789147][ T5972] device hsr_slave_0 entered promiscuous mode [ 136.833985][ T5972] device hsr_slave_1 entered promiscuous mode [ 136.873415][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.953002][ T5972] Cannot create hsr debugfs directory [ 137.045640][ T4196] XFS (loop2): Unmounting Filesystem [ 137.276473][ T6059] device bridge0 entered promiscuous mode [ 137.316786][ T6059] device macsec2 entered promiscuous mode [ 137.774155][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.004704][ T6082] loop1: detected capacity change from 0 to 4096 [ 138.044703][ T4602] device hsr_slave_0 left promiscuous mode [ 138.064051][ T4602] device hsr_slave_1 left promiscuous mode [ 138.074012][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 138.099899][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.131114][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.167973][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.201325][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.236705][ T6082] ntfs3: Cannot use different iocharset when remounting! [ 138.264386][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.328040][ T4602] device bridge_slave_0 left promiscuous mode [ 138.362476][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.415351][ T4226] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 138.438307][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.457725][ T4602] device veth1_macvtap left promiscuous mode [ 138.465890][ T4226] usb 4-1: Product: syz [ 138.474312][ T4602] device veth0_macvtap left promiscuous mode [ 138.481106][ T4226] usb 4-1: Manufacturer: syz [ 138.490095][ T4602] device veth1_vlan left promiscuous mode [ 138.497697][ T4226] usb 4-1: SerialNumber: syz [ 138.509108][ T4602] device veth0_vlan left promiscuous mode [ 138.524141][ T5431] Bluetooth: hci1: command 0x041b tx timeout [ 138.527422][ T4226] usb 4-1: config 0 descriptor?? [ 138.605488][ T4226] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 138.638928][ T6090] loop0: detected capacity change from 0 to 40427 [ 138.694155][ T6090] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 138.711496][ T6090] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.759043][ T6090] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.804528][ T6096] loop2: detected capacity change from 0 to 32768 [ 138.861396][ T6090] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.869063][ T6090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.887797][ T6096] XFS (loop2): Mounting V5 Filesystem [ 138.979041][ T6096] XFS (loop2): Ending clean mount [ 138.998134][ T6096] XFS (loop2): Quotacheck needed: Please wait. [ 139.035387][ T4602] team0 (unregistering): Port device team_slave_1 removed [ 139.044717][ T4226] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 139.061143][ T4602] team0 (unregistering): Port device team_slave_0 removed [ 139.102156][ T4602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.108166][ T6096] XFS (loop2): Quotacheck: Done. [ 139.171765][ T4602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.189670][ T4196] XFS (loop2): Unmounting Filesystem [ 139.246699][ T1107] usb 4-1: USB disconnect, device number 8 [ 139.335414][ T1107] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 139.370138][ T1107] visor 4-1:0.0: device disconnected [ 139.404794][ T4602] bond0 (unregistering): Released all slaves [ 139.609291][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.655838][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.731547][ T6116] loop1: detected capacity change from 0 to 2048 [ 139.748606][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.786095][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.856499][ T6116] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.021538][ T6130] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.021798][ T6116] attempt to access beyond end of device [ 140.021798][ T6116] loop1: rw=524288, want=33554432, limit=2048 [ 140.114974][ T6136] loop2: detected capacity change from 0 to 128 [ 140.166817][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.245132][ T6136] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 140.253003][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.280479][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.299496][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.321323][ T6136] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.394422][ T6136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.716: Block bitmap for bg 0 marked uninitialized [ 140.412685][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.478245][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.499839][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.531293][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.540956][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.603532][ T4636] Bluetooth: hci1: command 0x040f tx timeout [ 140.622868][ T6150] loop0: detected capacity change from 0 to 256 [ 140.623058][ T26] audit: type=1800 audit(1773196313.442:5): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.710" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 140.649332][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.759284][ T6150] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.867526][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.893689][ T6150] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 140.975913][ T6150] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.977280][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.111546][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.119013][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.241739][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.275337][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.368443][ T6163] loop2: detected capacity change from 0 to 256 [ 141.450136][ T6165] loop3: detected capacity change from 0 to 1024 [ 141.458937][ T6159] loop1: detected capacity change from 0 to 8192 [ 141.481484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.547540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.632485][ T6159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.664880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.694213][ T6163] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 141.773383][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.864156][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.909602][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.960997][ T6173] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 141.976476][ T6175] loop0: detected capacity change from 0 to 1024 [ 142.005848][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.050610][ T5972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.079644][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 142.094519][ T6173] FAT-fs (loop1): Filesystem has been set read-only [ 142.099073][ T6175] EXT4-fs (loop0): Ignoring removed orlov option [ 142.126334][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 142.133045][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 142.154412][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.201396][ T6175] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 142.243222][ T1169] hfsplus: b-tree write err: -5, ino 26 [ 142.253875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.304754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.380131][ T6175] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 142.675192][ T6175] EXT4-fs warning (device loop0): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 142.697782][ T4632] Bluetooth: hci1: command 0x0419 tx timeout [ 143.056170][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.089498][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.189850][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.322656][ T6208] loop3: detected capacity change from 0 to 4096 [ 143.411938][ T6183] syz.2.729 (6183): drop_caches: 2 [ 143.471989][ T6208] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 143.613353][ T6208] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.737205][ T6208] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 143.820162][ T6208] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 143.850042][ T6226] loop1: detected capacity change from 0 to 2048 [ 143.991270][ T6208] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 144.101012][ T6226] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 144.119333][ T6208] ntfs: volume version 3.1. [ 144.185942][ T6208] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 144.208160][ T6226] System zones: 0-7 [ 144.257802][ T6226] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 144.312223][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.354599][ T6208] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 144.412995][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.451616][ T6208] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 144.517830][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.525905][ T6208] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 144.579353][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.697988][ T5972] device veth0_vlan entered promiscuous mode [ 144.784537][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.837105][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.919312][ T5972] device veth1_vlan entered promiscuous mode [ 145.185246][ T5972] device veth0_macvtap entered promiscuous mode [ 145.225855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.280809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.288194][ T6270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.751'. [ 145.329027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.402729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.415389][ T4226] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.464412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.474880][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 145.516737][ T5972] device veth1_macvtap entered promiscuous mode [ 145.609466][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.655095][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.713783][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 145.723681][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.763757][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.823310][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.844468][ T4226] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 145.865481][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.876887][ T4226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.933661][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.980015][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.072329][ T4226] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 146.104943][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.113792][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.179215][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.219570][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.243839][ T4226] usb 4-1: Product: syz [ 146.250019][ T4226] usb 4-1: Manufacturer: syz [ 146.293779][ T4226] usb 4-1: SerialNumber: syz [ 146.319786][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.372615][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.429208][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.466714][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.498896][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.541581][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.562564][ T6307] binder: 6305:6307 ioctl 40046205 0 returned -22 [ 146.586817][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.600293][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.615903][ T6307] binder: 6305:6307 ioctl c0306201 200000002100 returned -11 [ 146.627933][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.672723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.730111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.749047][ T4226] usb 4-1: unit 0 not found! [ 146.768007][ T4226] usb 4-1: unit 2 not found! [ 146.782425][ T5972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.811922][ T5972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.843599][ T5972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.863430][ T5972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.899810][ T4226] usb 4-1: USB disconnect, device number 9 [ 146.902464][ T6314] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 147.043974][ T6314] team0: Port device syz_tun added [ 147.200504][ T6317] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 147.244189][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.293558][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.315206][ T6317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.772'. [ 147.336108][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.381262][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.494297][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.521532][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.560200][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.887008][ T6338] loop1: detected capacity change from 0 to 256 [ 148.211816][ T6349] loop3: detected capacity change from 0 to 1024 [ 148.239160][ T6341] loop5: detected capacity change from 0 to 8192 [ 148.400168][ T6341] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 148.492198][ T6341] REISERFS (device loop5): using ordered data mode [ 148.543886][ T6341] reiserfs: using flush barriers [ 148.643834][ T6341] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.736620][ T6320] loop0: detected capacity change from 0 to 32768 [ 148.806025][ T6341] REISERFS (device loop5): checking transaction log (loop5) [ 148.876806][ T6341] REISERFS (device loop5): Using r5 hash to sort names [ 148.904154][ T6341] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 149.030268][ T6341] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 149.099489][ T6320] XFS (loop0): Mounting V5 Filesystem [ 149.144529][ T6341] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 149.232972][ T6341] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 149.315650][ T6360] loop2: detected capacity change from 0 to 8192 [ 149.335717][ T6341] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 149.382838][ T6320] XFS (loop0): Ending clean mount [ 149.453899][ T6341] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 149.526172][ T6360] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.657258][ T4194] XFS (loop0): Unmounting Filesystem [ 149.699309][ T6397] loop3: detected capacity change from 0 to 256 [ 149.758115][ T6400] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 150.048567][ T6400] FAT-fs (loop2): Filesystem has been set read-only [ 150.623441][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.626943][ T6419] loop5: detected capacity change from 0 to 2048 [ 150.771873][ T6419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.923631][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 151.064915][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.108422][ T6407] loop1: detected capacity change from 0 to 32768 [ 151.133305][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.334626][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 151.362051][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.426941][ T7] usb 4-1: Product: syz [ 151.431658][ T7] usb 4-1: Manufacturer: syz [ 151.469839][ T7] usb 4-1: SerialNumber: syz [ 151.499537][ T7] usb 4-1: config 0 descriptor?? [ 151.640136][ T6454] lo speed is unknown, defaulting to 1000 [ 151.663505][ T6454] lo speed is unknown, defaulting to 1000 [ 151.787109][ T6454] lo speed is unknown, defaulting to 1000 [ 151.833036][ T2266] usb 4-1: USB disconnect, device number 10 [ 151.874876][ T6454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.950170][ T6454] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 152.079975][ T6454] lo speed is unknown, defaulting to 1000 [ 152.126997][ T6454] lo speed is unknown, defaulting to 1000 [ 152.165543][ T6454] lo speed is unknown, defaulting to 1000 [ 152.205899][ T6454] lo speed is unknown, defaulting to 1000 [ 152.235694][ T6454] lo speed is unknown, defaulting to 1000 [ 152.330759][ T6475] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 153.080778][ T6469] loop5: detected capacity change from 0 to 32768 [ 154.049409][ T6457] loop2: detected capacity change from 0 to 40427 [ 154.085781][ T6505] loop0: detected capacity change from 0 to 32768 [ 154.181560][ T6457] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 154.210590][ T6505] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 154.223217][ T6457] F2FS-fs (loop2): invalid crc value [ 154.285241][ T6457] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.316196][ T6505] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.382681][ T6525] loop5: detected capacity change from 0 to 32768 [ 154.532739][ T6505] (syz.0.827,6505,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 154.662863][ T6505] (syz.0.827,6505,0):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 154.839099][ T6566] loop1: detected capacity change from 0 to 256 [ 154.910697][ T6570] loop3: detected capacity change from 0 to 256 [ 155.001492][ T6566] exfat: Deprecated parameter 'utf8' [ 155.081463][ T6566] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 155.114894][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 155.136320][ T6570] FAT-fs (loop3): Directory bread(block 64) failed [ 155.193806][ T6570] FAT-fs (loop3): Directory bread(block 65) failed [ 155.273431][ T6570] FAT-fs (loop3): Directory bread(block 66) failed [ 155.327573][ T6570] FAT-fs (loop3): Directory bread(block 67) failed [ 155.431066][ T6570] FAT-fs (loop3): Directory bread(block 68) failed [ 155.479828][ T6570] FAT-fs (loop3): Directory bread(block 69) failed [ 155.541757][ T6570] FAT-fs (loop3): Directory bread(block 70) failed [ 155.599066][ T6570] FAT-fs (loop3): Directory bread(block 71) failed [ 155.627831][ T6585] loop2: detected capacity change from 0 to 512 [ 155.679612][ T6570] FAT-fs (loop3): Directory bread(block 72) failed [ 155.712730][ T6570] FAT-fs (loop3): Directory bread(block 73) failed [ 155.746112][ T6585] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 155.864127][ T6585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 156.017736][ T6585] System zones: 1-12 [ 156.071321][ T6585] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.849: corrupted in-inode xattr [ 156.178785][ T6585] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.849: couldn't read orphan inode 15 (err -117) [ 156.192608][ T6610] loop1: detected capacity change from 0 to 1024 [ 156.248856][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,min_batch_time=0x000000000000d23b,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 156.326138][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.865'. [ 156.516201][ T6623] loop5: detected capacity change from 0 to 256 [ 157.041729][ T6648] loop3: detected capacity change from 0 to 512 [ 157.050309][ T6649] nbd: must specify at least one socket [ 157.498459][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.610472][ T6648] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.116045][ T6636] ODEBUG: Out of memory. ODEBUG disabled [ 158.190128][ T6636] syz.5.872 (6636): drop_caches: 2 [ 158.198092][ T6638] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 158.198301][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 158.224804][ T6638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.228956][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 158.257992][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 158.294248][ T1169] hfsplus: b-tree write err: -5, ino 26 [ 158.298889][ T6638] F2FS-fs (loop2): invalid crc value [ 158.322839][ T6654] XFS (loop0): Mounting V5 Filesystem [ 158.447476][ T6638] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 158.476297][ T6682] set_capacity_and_notify: 3 callbacks suppressed [ 158.476313][ T6682] loop5: detected capacity change from 0 to 1024 [ 158.529763][ T6654] XFS (loop0): Ending clean mount [ 158.552999][ T6654] XFS (loop0): Quotacheck needed: Please wait. [ 158.571680][ T6684] loop3: detected capacity change from 0 to 1024 [ 158.620318][ T6638] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.654404][ T6638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.666639][ T6654] XFS (loop0): Quotacheck: Done. [ 158.728334][ T5972] hfsplus: bad catalog entry type [ 158.760927][ T4194] XFS (loop0): Unmounting Filesystem [ 158.772794][ T6684] hfsplus: bad catalog entry type [ 158.837070][ T4207] hfsplus: b-tree write err: -5, ino 25 [ 158.875875][ T4207] hfsplus: b-tree write err: -5, ino 4 [ 158.899552][ T6638] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 158.939403][ T4207] hfsplus: b-tree write err: -5, ino 2 [ 159.276536][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 159.310607][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 159.342103][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 159.361245][ T4207] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.480899][ T4207] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.582760][ T4207] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.675604][ T4207] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.108312][ T6708] lo speed is unknown, defaulting to 1000 [ 160.171927][ T6716] loop1: detected capacity change from 0 to 512 [ 160.270571][ T6704] loop0: detected capacity change from 0 to 32768 [ 160.278918][ T6706] loop2: detected capacity change from 0 to 32768 [ 160.315664][ T6716] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.353048][ T6716] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 160.388270][ T6706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.893 (6706) [ 160.417000][ T6704] JBD2: Ignoring recovery information on journal [ 160.430701][ T6716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 160.461134][ T6706] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 160.515620][ T6716] System zones: 0-2, 18-18, 34-35 [ 160.526531][ T6716] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 160.542139][ T6706] BTRFS info (device loop2): allowing degraded mounts [ 160.550080][ T6706] BTRFS info (device loop2): metadata ratio 4 [ 160.558950][ T6706] BTRFS info (device loop2): turning on sync discard [ 160.568169][ T6706] BTRFS info (device loop2): turning off discard [ 160.576596][ T6706] BTRFS info (device loop2): turning on sync discard [ 160.584322][ T6706] BTRFS info (device loop2): disabling tree log [ 160.620695][ T6706] BTRFS info (device loop2): using free space tree [ 160.638047][ T6716] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 160.652573][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 160.669408][ T6706] BTRFS info (device loop2): has skinny extents [ 160.684257][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 160.704134][ T6716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 160.760921][ T6704] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.770628][ T6716] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 160.791877][ T6716] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.901: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 160.860299][ T6716] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 160.874124][ T6708] chnl_net:caif_netlink_parms(): no params data found [ 161.250492][ T6706] BTRFS info (device loop2): enabling ssd optimizations [ 161.314318][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.336314][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.375369][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 161.409592][ T6708] device bridge_slave_0 entered promiscuous mode [ 161.585789][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.596933][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.650346][ T6708] device bridge_slave_1 entered promiscuous mode [ 161.889132][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.957206][ T6778] netlink: 'syz.1.913': attribute type 30 has an invalid length. [ 161.974689][ T6780] loop0: detected capacity change from 0 to 2048 [ 161.980281][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.028752][ T6780] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.075843][ T6780] NILFS (loop0): mounting unchecked fs [ 162.110241][ T4260] udevd[4260]: incorrect nilfs2 checksum on /dev/loop0 [ 162.151629][ T6708] team0: Port device team_slave_0 added [ 162.154335][ T4228] Bluetooth: hci1: command 0x0409 tx timeout [ 162.205758][ T6780] NILFS (loop0): recovery complete [ 162.233686][ T4231] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 162.250036][ T6791] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.274831][ T6708] team0: Port device team_slave_1 added [ 162.521236][ T6796] loop1: detected capacity change from 0 to 1764 [ 162.559870][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.600822][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.650694][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.689635][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.700159][ T6803] loop0: detected capacity change from 0 to 1024 [ 162.704172][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.715294][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.740091][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.758729][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.774811][ T4231] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 162.774842][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.776929][ T4231] usb 4-1: config 0 descriptor?? [ 163.077645][ T6708] device hsr_slave_0 entered promiscuous mode [ 163.082842][ T6803] hfsplus: bad catalog entry type [ 163.169858][ T6708] device hsr_slave_1 entered promiscuous mode [ 163.179041][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 163.193629][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 163.225945][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 163.414306][ T6796] loop1: detected capacity change from 0 to 8192 [ 163.437995][ T4207] device hsr_slave_0 left promiscuous mode [ 163.451214][ T4207] device hsr_slave_1 left promiscuous mode [ 163.502896][ T4231] saitek 0003:06A3:0621.0007: unknown main item tag 0x0 [ 163.515226][ T4231] saitek 0003:06A3:0621.0007: bogus close delimiter [ 163.525289][ T6796] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.539458][ T4231] saitek 0003:06A3:0621.0007: item 0 0 2 10 parsing failed [ 163.548875][ T4231] saitek 0003:06A3:0621.0007: parse failed [ 163.557182][ T4231] saitek: probe of 0003:06A3:0621.0007 failed with error -22 [ 163.591356][ T6796] REISERFS (device loop1): using ordered data mode [ 163.609703][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.633759][ T6796] reiserfs: using flush barriers [ 163.645262][ T4207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.686898][ T6796] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.717308][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.743142][ T4207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.772715][ T4207] device bridge_slave_1 left promiscuous mode [ 163.789360][ T6796] REISERFS (device loop1): checking transaction log (loop1) [ 163.814042][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.849366][ T4207] device bridge_slave_0 left promiscuous mode [ 163.860168][ T6796] REISERFS (device loop1): Using r5 hash to sort names [ 163.868982][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.894229][ T4226] usb 4-1: USB disconnect, device number 11 [ 163.924968][ T6796] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 163.965370][ T4207] device veth1_macvtap left promiscuous mode [ 164.003499][ T4207] device veth0_macvtap left promiscuous mode [ 164.046221][ T4207] device veth1_vlan left promiscuous mode [ 164.063394][ T4207] device veth0_vlan left promiscuous mode [ 164.194149][ T6841] loop2: detected capacity change from 0 to 2048 [ 164.243379][ T6841] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.270965][ T6841] NILFS (loop2): mounting unchecked fs [ 164.278804][ T4260] udevd[4260]: incorrect nilfs2 checksum on /dev/loop2 [ 164.291674][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 164.360927][ T6841] NILFS (loop2): recovery complete [ 164.385673][ T6851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.619867][ T4207] team0 (unregistering): Port device team_slave_1 removed [ 164.669253][ T4207] team0 (unregistering): Port device team_slave_0 removed [ 164.709198][ T4207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.755727][ T4207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.879147][ T6855] loop2: detected capacity change from 0 to 32768 [ 164.906498][ T4207] bond0 (unregistering): Released all slaves [ 164.976922][ T6855] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: fs_generation is 3919078593 [ 165.000767][ T6855] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 165.016294][ T6855] OCFS2: File system is now read-only. [ 165.023922][ T6855] (syz.2.937,6855,1):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 165.037175][ T6855] (syz.2.937,6855,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 165.050131][ T6855] (syz.2.937,6855,1):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 165.066801][ T6855] (syz.2.937,6855,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 165.066836][ T6855] (syz.2.937,6855,1):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 165.094700][ T6855] (syz.2.937,6855,1):ocfs2_initialize_super:2281 ERROR: status = -30 [ 165.104229][ T6855] (syz.2.937,6855,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 165.148777][ T6846] tipc: Enabling of bearer rejected, failed to enable media [ 165.183558][ T6853] bond0: option packets_per_slave: invalid value (18446744073709551608) [ 165.216039][ T6853] bond0: option packets_per_slave: allowed values 0 - 65535 [ 165.560105][ T6874] loop2: detected capacity change from 0 to 256 [ 165.564489][ T6865] loop0: detected capacity change from 0 to 32768 [ 165.645088][ T6865] attempt to access beyond end of device [ 165.645088][ T6865] loop0: rw=0, want=34359738368, limit=32768 [ 165.662520][ T6865] metapage_read_end_io: I/O error [ 165.675171][ T6865] read_mapping_page failed! [ 165.680669][ T6865] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 165.690261][ T6865] Mount JFS Failure: -5 [ 165.698072][ T6865] jfs_mount failed w/return code = -5 [ 165.762545][ T6880] loop1: detected capacity change from 0 to 1024 [ 165.899749][ T6708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.993504][ T6886] loop3: detected capacity change from 0 to 1024 [ 166.003946][ T6708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.039097][ T6708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.105664][ T6708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.404034][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 166.414191][ T6902] loop2: detected capacity change from 0 to 64 [ 166.562989][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.680646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.746171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.820061][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.883972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.902919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.907972][ T6921] loop0: detected capacity change from 0 to 64 [ 166.922075][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.934005][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.954738][ T6923] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.954738][ T6923] The task syz.3.956 (6923) triggered the difference, watch for misbehavior. [ 167.190007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.222885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.248823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.267626][ T6927] loop2: detected capacity change from 0 to 4096 [ 167.274098][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.287600][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.300039][ T6925] loop1: detected capacity change from 0 to 8192 [ 167.350995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.397006][ T6925] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 167.438845][ T6925] REISERFS (device loop1): using ordered data mode [ 167.468163][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 167.468189][ T26] audit: type=1800 audit(1773196340.292:6): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.958" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 167.514616][ T6925] reiserfs: using flush barriers [ 167.524748][ T6925] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.552878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.558793][ T6925] REISERFS (device loop1): checking transaction log (loop1) [ 167.664671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.764616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.844885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.912865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.983436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.023880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.063196][ T6925] REISERFS (device loop1): Using tea hash to sort names [ 168.094303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.105184][ T6925] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 168.151245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.211743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.285889][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.444197][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 168.660053][ T6956] EXT4-fs (loop3): Ignoring removed orlov option [ 168.752685][ T6956] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 168.878825][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.890823][ T6956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 168.920809][ T6956] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.970: corrupted in-inode xattr [ 168.933690][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.960234][ T6929] XFS (loop0): Mounting V5 Filesystem [ 168.967938][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.119470][ T6956] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.970: couldn't read orphan inode 15 (err -117) [ 169.186437][ T6985] FAT-fs (loop2): Directory bread(block 64) failed [ 169.217659][ T6985] FAT-fs (loop2): Directory bread(block 65) failed [ 169.234901][ T6929] XFS (loop0): Ending clean mount [ 169.250563][ T6956] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 169.267970][ T6929] XFS (loop0): Quotacheck needed: Please wait. [ 169.304614][ T6985] FAT-fs (loop2): Directory bread(block 66) failed [ 169.327169][ T6985] FAT-fs (loop2): Directory bread(block 67) failed [ 169.382515][ T6985] FAT-fs (loop2): Directory bread(block 68) failed [ 169.413430][ T6985] FAT-fs (loop2): Directory bread(block 69) failed [ 169.453591][ T6985] FAT-fs (loop2): Directory bread(block 70) failed [ 169.493434][ T6985] FAT-fs (loop2): Directory bread(block 71) failed [ 169.546743][ T6985] FAT-fs (loop2): Directory bread(block 72) failed [ 169.583374][ T6985] FAT-fs (loop2): Directory bread(block 73) failed [ 169.589747][ T6929] XFS (loop0): Quotacheck: Done. [ 169.897388][ T4194] XFS (loop0): Unmounting Filesystem [ 169.977770][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.014246][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.124723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.168783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.255831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.318535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.350146][ T6708] device veth0_vlan entered promiscuous mode [ 170.365578][ T6984] set_capacity_and_notify: 3 callbacks suppressed [ 170.365594][ T6984] loop1: detected capacity change from 0 to 40427 [ 170.409742][ T6708] device veth1_vlan entered promiscuous mode [ 170.457525][ T6984] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 170.533468][ T6984] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1 [ 170.583887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.604512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.625525][ T6984] F2FS-fs (loop1): invalid crc value [ 170.652176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.664341][ T6984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.694670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.725720][ T6708] device veth0_macvtap entered promiscuous mode [ 170.755105][ T6708] device veth1_macvtap entered promiscuous mode [ 170.763392][ T4636] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.829995][ T6984] F2FS-fs (loop1): Start checkpoint disabled! [ 170.847047][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.871379][ T6984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 170.892980][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.943319][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.035793][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.077005][ T6984] attempt to access beyond end of device [ 171.077005][ T6984] loop1: rw=2049, want=45104, limit=40427 [ 171.102967][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.153653][ T4636] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.161285][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.186744][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.197826][ T4636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.201471][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.251890][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.266882][ T4636] usb 3-1: config 0 has no interface number 0 [ 171.328271][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.346851][ T9] attempt to access beyond end of device [ 171.346851][ T9] loop1: rw=2049, want=40976, limit=40427 [ 171.369822][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.372871][ T7002] loop3: detected capacity change from 0 to 40427 [ 171.405958][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.433717][ T4636] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 171.440785][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.478080][ T4636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.496606][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.511391][ T4636] usb 3-1: Product: syz [ 171.523385][ T4636] usb 3-1: Manufacturer: syz [ 171.535682][ T4636] usb 3-1: SerialNumber: syz [ 171.541835][ T7002] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 171.612251][ T4636] usb 3-1: config 0 descriptor?? [ 171.621751][ T7002] F2FS-fs (loop3): invalid crc value [ 171.623350][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.647708][ T7002] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.682561][ T7025] loop0: detected capacity change from 0 to 2048 [ 171.715249][ T4636] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 171.749747][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.776321][ T4636] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 171.792441][ T7002] F2FS-fs (loop3): Start checkpoint disabled! [ 171.829937][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.846954][ T7025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.877302][ T7002] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.908498][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.958839][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.022317][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.091907][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.095339][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.133177][ T6708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.149040][ T6708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.166066][ T6708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.225247][ T6708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.260640][ T4231] usb 3-1: USB disconnect, device number 7 [ 172.271890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.299036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.469434][ T154] attempt to access beyond end of device [ 172.469434][ T154] loop3: rw=2049, want=40976, limit=40427 [ 172.527572][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.528199][ T7041] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.559670][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.594012][ T6168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.614810][ T7041] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 172.656710][ T7041] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.726202][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.773352][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.823792][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.212032][ T7064] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.545996][ T7077] loop6: detected capacity change from 0 to 1024 [ 173.550657][ T7079] loop3: detected capacity change from 0 to 512 [ 173.571924][ T7083] loop2: detected capacity change from 0 to 256 [ 173.652072][ T7087] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 173.694587][ T7079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.704413][ T7087] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 173.765029][ T7077] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.825148][ T7087] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 173.875375][ T7079] fs-verity: sha512 using implementation "sha512-avx2" [ 173.875735][ T7083] FAT-fs (loop2): Directory bread(block 64) failed [ 173.953369][ T7087] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 173.971655][ T7087] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 173.979771][ T7079] EXT4-fs warning (device loop3): ext4_begin_enable_verity:136: inode #15: comm syz.3.996: verity is only allowed on extent-based files [ 173.986648][ T7087] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 174.024520][ T7077] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000003,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 174.027695][ T7087] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 174.143586][ T7083] FAT-fs (loop2): Directory bread(block 65) failed [ 174.169777][ T7083] FAT-fs (loop2): Directory bread(block 66) failed [ 174.233804][ T7083] FAT-fs (loop2): Directory bread(block 67) failed [ 174.265307][ T7083] FAT-fs (loop2): Directory bread(block 68) failed [ 174.286064][ T7083] FAT-fs (loop2): Directory bread(block 69) failed [ 174.340289][ T7083] FAT-fs (loop2): Directory bread(block 70) failed [ 174.369224][ T7083] FAT-fs (loop2): Directory bread(block 71) failed [ 174.382235][ T7077] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 174.415414][ T7102] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1002'. [ 174.430041][ T7083] FAT-fs (loop2): Directory bread(block 72) failed [ 174.441206][ T7083] FAT-fs (loop2): Directory bread(block 73) failed [ 174.459092][ T7105] program syz.1.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.762736][ T7117] loop1: detected capacity change from 0 to 64 [ 174.994055][ T7130] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.091693][ T7136] tipc: Started in network mode [ 175.169207][ T7136] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 175.304347][ T7136] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 175.348096][ T7136] tipc: Enabled bearer , priority 10 [ 175.423915][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 175.881967][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 176.106042][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'. [ 176.341934][ T7129] loop6: detected capacity change from 0 to 32768 [ 176.368492][ T1107] tipc: Node number set to 1 [ 176.469824][ T7129] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 176.469824][ T7129] [ 176.553929][ T7203] loop2: detected capacity change from 0 to 1024 [ 176.676240][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1043'. [ 176.771611][ T154] hfsplus: b-tree write err: -5, ino 25 [ 176.810408][ T154] hfsplus: b-tree write err: -5, ino 4 [ 176.863487][ T154] hfsplus: b-tree write err: -5, ino 2 [ 176.931796][ T154] hfsplus: b-tree write err: -5, ino 26 [ 177.036808][ T7223] loop1: detected capacity change from 0 to 16 [ 177.111416][ T7223] erofs: (device loop1): mounted with root inode @ nid 36. [ 177.435193][ T7233] loop3: detected capacity change from 0 to 128 [ 177.558995][ T7233] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 177.641557][ T7233] hpfs: filesystem error: improperly stopped [ 177.670793][ T7233] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 177.729636][ T7233] hpfs: You really don't want any checks? You are crazy... [ 177.787835][ T7233] hpfs: hpfs_map_sector(): read error [ 177.813340][ T7233] hpfs: code page support is disabled [ 177.844430][ T7233] hpfs: hpfs_map_4sectors(): unaligned read [ 177.854198][ T7206] loop0: detected capacity change from 0 to 32768 [ 177.893348][ T7233] hpfs: hpfs_map_4sectors(): unaligned read [ 177.911130][ T7256] loop2: detected capacity change from 0 to 1024 [ 177.929320][ T7233] hpfs: filesystem error: unable to find root dir [ 177.990611][ T7233] hpfs: hpfs_map_4sectors(): unaligned read [ 178.000013][ T7206] (syz.0.1041,7206,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.000209][ T7206] (syz.0.1041,7206,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.064046][ T7206] JBD2: Ignoring recovery information on journal [ 178.088286][ T7233] hpfs: hpfs_map_sector(): read error [ 178.107963][ T144] hfsplus: bad catalog file entry [ 178.233961][ T7266] loop3: detected capacity change from 0 to 256 [ 178.286921][ T7206] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.301782][ T7266] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 178.591018][ T7280] sg_write: data in/out 262114/14 bytes for SCSI command 0x2-- guessing data in; [ 178.591018][ T7280] program syz.2.1068 not setting count and/or reply_len properly [ 178.856809][ T7244] loop1: detected capacity change from 0 to 32768 [ 178.926431][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 179.149323][ T7244] XFS (loop1): Mounting V5 Filesystem [ 179.314573][ T7244] XFS (loop1): Ending clean mount [ 179.395098][ T7326] tmpfs: Too small a size for current use [ 179.574310][ T4188] XFS (loop1): Unmounting Filesystem [ 180.360404][ T7372] loop3: detected capacity change from 0 to 2048 [ 180.416632][ T7367] loop2: detected capacity change from 0 to 4096 [ 180.475847][ T7367] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 180.527620][ T7372] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 180.579736][ T7372] NILFS (loop3): mounting unchecked fs [ 180.597506][ T4606] udevd[4606]: incorrect nilfs2 checksum on /dev/loop3 [ 180.696440][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1097'. [ 180.748010][ T7372] NILFS (loop3): recovery complete [ 180.790792][ T7384] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.041448][ T7386] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,errors=remount-ro,. Quota mode: writeback. [ 181.063752][ T7386] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.272239][ T7355] XFS (loop0): Mounting V5 Filesystem [ 181.375183][ T7409] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.389236][ T7413] autofs4:pid:7413:autofs_fill_super: called with bogus options [ 181.466372][ T7355] XFS (loop0): Ending clean mount [ 181.565056][ T7419] set_capacity_and_notify: 2 callbacks suppressed [ 181.565071][ T7419] loop1: detected capacity change from 0 to 1024 [ 181.650764][ T4194] XFS (loop0): Unmounting Filesystem [ 181.786126][ T7419] hfsplus: bad catalog entry type [ 182.053040][ T7437] loop1: detected capacity change from 0 to 2048 [ 182.178807][ T7437] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.252989][ T7437] NILFS (loop1): mounting unchecked fs [ 182.264252][ T4305] udevd[4305]: incorrect nilfs2 checksum on /dev/loop1 [ 182.355125][ T7437] NILFS (loop1): recovery complete [ 182.409171][ T7449] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.682883][ T7451] loop6: detected capacity change from 0 to 4096 [ 182.753646][ T7463] comedi: No check for data length of config insn id 1003 is implemented [ 182.767218][ T7463] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 182.797232][ T7463] comedi: Assuming n=15 is correct [ 182.799719][ T7451] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.854997][ T7467] loop3: detected capacity change from 0 to 512 [ 182.890827][ T7467] EXT4-fs (loop3): Ignoring removed nobh option [ 182.917215][ T7456] loop0: detected capacity change from 0 to 4096 [ 183.001483][ T7467] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.135419][ T7467] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1123: iget: bad i_size value: 38620345925642 [ 183.185066][ T7456] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 183.252957][ T7467] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1123: couldn't read orphan inode 15 (err -117) [ 183.315433][ T7467] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 183.710433][ T7489] loop3: detected capacity change from 0 to 64 [ 183.750895][ T7484] loop0: detected capacity change from 0 to 8192 [ 183.870902][ T7484] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 183.907586][ T7473] loop2: detected capacity change from 0 to 32768 [ 184.039020][ T7484] REISERFS (device loop0): using ordered data mode [ 184.053464][ T7484] reiserfs: using flush barriers [ 184.070761][ T7484] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.109256][ T7484] REISERFS (device loop0): checking transaction log (loop0) [ 184.211528][ T7473] XFS (loop2): Mounting V5 Filesystem [ 184.304792][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 184.481881][ T7473] XFS (loop2): Ending clean mount [ 184.519059][ T7478] loop6: detected capacity change from 0 to 32768 [ 184.620150][ T4196] XFS (loop2): Unmounting Filesystem [ 184.631753][ T7484] REISERFS (device loop0): Using tea hash to sort names [ 184.659147][ T7482] loop1: detected capacity change from 0 to 32768 [ 184.668056][ T7484] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 184.767468][ T7482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.785661][ T7525] xt_time: unknown flags 0xc [ 184.811396][ T7478] XFS (loop6): Mounting V5 Filesystem [ 184.820163][ T7482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.966955][ T7478] XFS (loop6): Ending clean mount [ 185.077052][ T7482] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 185.172969][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 185.213541][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 185.422560][ T6708] XFS (loop6): Unmounting Filesystem [ 185.521766][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 308ms [ 185.531829][ T7542] hfsplus: bad catalog entry type [ 185.622311][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 185.633038][ T7482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 185.683849][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 185.693570][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 185.787645][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 186.049840][ T7563] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.171575][ T7571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.192970][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 186.293398][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.490755][ T7583] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1152'. [ 186.502451][ T7582] delete_channel: no stack [ 186.523874][ T7583] tipc: Enabling of bearer rejected, failed to enable media [ 186.710463][ T7595] set_capacity_and_notify: 2 callbacks suppressed [ 186.710479][ T7595] loop2: detected capacity change from 0 to 64 [ 186.757425][ T7591] loop6: detected capacity change from 0 to 256 [ 186.834229][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.845170][ T7591] exfat: Bad value for 'uid' [ 186.859597][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.925778][ T23] usb 4-1: Product: syz [ 186.930882][ T23] usb 4-1: Manufacturer: syz [ 186.968214][ T23] usb 4-1: SerialNumber: syz [ 187.004487][ T7603] loop1: detected capacity change from 0 to 2048 [ 187.056036][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.144555][ T7603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.454952][ T7632] loop2: detected capacity change from 0 to 256 [ 187.560887][ T7632] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 187.627802][ T7642] mmap: syz.0.1173 (7642): VmData 49205248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 187.778599][ T7644] comedi comedi3: rti802: a I/O base address must be specified [ 187.833589][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 188.327666][ T4627] usb 4-1: USB disconnect, device number 12 [ 188.442484][ T7667] loop0: detected capacity change from 0 to 4096 [ 188.491766][ T7667] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 188.616865][ T7667] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 188.645981][ T7667] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 188.707121][ T7667] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 188.752621][ T7667] ntfs: volume version 3.1. [ 188.768480][ T7647] loop2: detected capacity change from 0 to 32768 [ 188.857377][ T7647] [ 188.857377][ T7647] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.857377][ T7647] [ 188.862711][ T7653] loop1: detected capacity change from 0 to 32768 [ 188.923921][ T7647] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 188.923921][ T7647] [ 188.965888][ T7667] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 189.003571][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 189.021612][ T23] ath9k_htc: Failed to initialize the device [ 189.035964][ T7653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1178 (7653) [ 189.048507][ T4627] usb 4-1: ath9k_htc: USB layer deinitialized [ 189.058460][ T7647] ERROR: (device loop2): remounting filesystem as read-only [ 189.113951][ T7647] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 189.167214][ T7653] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 189.182089][ T6168] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 189.211590][ T7653] BTRFS info (device loop1): setting nodatasum [ 189.232055][ T4194] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 189.234756][ T7653] BTRFS info (device loop1): force zlib compression, level 3 [ 189.293770][ T7653] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.326728][ T7653] BTRFS info (device loop1): use lzo compression, level 0 [ 189.392439][ T7653] BTRFS info (device loop1): turning on flush-on-commit [ 189.453223][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1190'. [ 189.484555][ T7653] BTRFS info (device loop1): enabling auto defrag [ 189.507683][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1191'. [ 189.536667][ T7653] BTRFS info (device loop1): max_inline at 4096 [ 189.563358][ T7653] BTRFS info (device loop1): using free space tree [ 189.586765][ T7653] BTRFS info (device loop1): has skinny extents [ 189.705986][ T7705] loop2: detected capacity change from 0 to 1024 [ 189.799225][ T7705] hfsplus: extend alloc file! (8192,512,16777719) [ 189.963756][ T7719] loop2: detected capacity change from 0 to 256 [ 190.094614][ T7719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 190.144281][ T7653] BTRFS info (device loop1): enabling ssd optimizations [ 190.309886][ T7735] loop6: detected capacity change from 0 to 512 [ 190.443664][ T7735] EXT4-fs (loop6): Ignoring removed bh option [ 190.505960][ T7739] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.575328][ T7685] F2FS-fs (loop3): invalid crc value [ 190.611382][ T7739] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.629675][ T7685] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 190.682257][ T7735] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 190.713760][ T7735] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.038163][ T7685] F2FS-fs (loop3): Start checkpoint disabled! [ 191.080904][ T7685] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 191.483414][ T4627] Bluetooth: hci0: command 0x0406 tx timeout [ 191.499637][ T7757] mkiss: ax0: crc mode is auto. [ 191.513535][ T4627] Bluetooth: hci2: command 0x0406 tx timeout [ 191.729914][ T7738] set_capacity_and_notify: 2 callbacks suppressed [ 191.729930][ T7738] loop2: detected capacity change from 0 to 40427 [ 191.788138][ T7738] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 191.912146][ T7738] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 191.928168][ T7769] loop1: detected capacity change from 0 to 2048 [ 191.984528][ T7738] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 192.034724][ T7738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.119554][ T7769] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 192.141459][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.192485][ T7738] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 192.204845][ T7738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.297551][ T7780] loop6: detected capacity change from 0 to 4096 [ 192.320805][ T7769] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.1212: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 192.436260][ T7769] EXT4-fs (loop1): Remounting filesystem read-only [ 192.492177][ T7780] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 192.617939][ T7780] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 192.995795][ T7779] loop3: detected capacity change from 0 to 32768 [ 193.140614][ T7779] XFS (loop3): Mounting V5 Filesystem [ 193.357091][ T7779] XFS (loop3): Ending clean mount [ 193.400627][ T7819] loop2: detected capacity change from 0 to 512 [ 193.437177][ T7818] loop0: detected capacity change from 0 to 512 [ 193.468712][ T4198] XFS (loop3): Unmounting Filesystem [ 193.547035][ T7818] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 193.559175][ T7818] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 193.598872][ T7794] loop6: detected capacity change from 0 to 32768 [ 193.710597][ T7819] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 193.732792][ T7819] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.781113][ T7819] EXT4-fs error (device loop2): ext4_xattr_block_find:1855: inode #15: comm syz.2.1226: corrupted xattr block 33 [ 193.811705][ T7819] EXT4-fs (loop2): Remounting filesystem read-only [ 193.822485][ T7831] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.1226: corrupted xattr block 33 [ 193.942569][ T7831] EXT4-fs (loop2): Remounting filesystem read-only [ 194.028260][ T7823] Invalid ELF header magic: != ELF [ 194.060746][ T7794] XFS (loop6): Mounting V5 Filesystem [ 194.300484][ T7853] loop0: detected capacity change from 0 to 256 [ 194.461406][ T7862] loop2: detected capacity change from 0 to 1024 [ 194.521147][ T7853] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 194.540171][ T7794] XFS (loop6): Ending clean mount [ 194.551176][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.559567][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.636752][ T7862] hfsplus: bad catalog entry type [ 194.664648][ T4602] hfsplus: b-tree write err: -5, ino 25 [ 194.715105][ T4602] hfsplus: b-tree write err: -5, ino 4 [ 194.724028][ T4602] hfsplus: b-tree write err: -5, ino 2 [ 194.760550][ T6708] XFS (loop6): Unmounting Filesystem [ 194.926981][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.490342][ T7899] loop6: detected capacity change from 0 to 512 [ 195.531468][ T7899] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.585650][ T7899] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.605294][ T7899] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1256: bad orphan inode 15 [ 195.627350][ T7899] ext4_test_bit(bit=14, block=18) = 1 [ 195.634187][ T7899] is_bad_inode(inode)=0 [ 195.639472][ T7899] NEXT_ORPHAN(inode)=1023 [ 195.645241][ T7899] max_ino=32 [ 195.649729][ T7899] i_nlink=0 [ 195.668807][ T7899] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1256: bg 0: block 440: padding at end of block bitmap is not set [ 195.709843][ T7899] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 195.734031][ T7899] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.859794][ T1169] hfsplus: b-tree write err: -5, ino 25 [ 195.878235][ T1169] hfsplus: b-tree write err: -5, ino 4 [ 195.914545][ T1169] hfsplus: b-tree write err: -5, ino 2 [ 195.929883][ T7914] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 195.973990][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'. [ 196.109320][ T7926] sp0: Synchronizing with TNC [ 196.356384][ T4196] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 196.371733][ T4196] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 196.443449][ T4196] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 196.603889][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 196.616553][ T7944] mkiss: ax0: crc mode is auto. [ 196.633394][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 196.764233][ T7954] set_capacity_and_notify: 2 callbacks suppressed [ 196.764250][ T7954] loop6: detected capacity change from 0 to 1024 [ 196.897512][ T6168] hfsplus: b-tree write err: -5, ino 25 [ 196.906714][ T4261] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 196.909525][ T6168] hfsplus: b-tree write err: -5, ino 4 [ 196.925870][ T6168] hfsplus: b-tree write err: -5, ino 2 [ 197.191138][ T7974] loop6: detected capacity change from 0 to 256 [ 197.237634][ T7974] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 197.283568][ T4261] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.313617][ T4261] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 197.336283][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.350148][ T4261] usb 3-1: config 0 descriptor?? [ 197.395880][ T4261] pwc: Samsung MPC-C30 USB webcam detected. [ 197.555903][ T7988] loop3: detected capacity change from 0 to 64 [ 197.633452][ T4261] pwc: send_video_command error -71 [ 197.654712][ T4261] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 197.710281][ T4261] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 197.732369][ T7994] loop6: detected capacity change from 0 to 256 [ 197.766612][ T4261] usb 3-1: USB disconnect, device number 8 [ 197.825014][ T7994] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 198.094065][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 198.203857][ T8014] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 198.295681][ T8018] loop0: detected capacity change from 0 to 1024 [ 198.463207][ T8030] loop1: detected capacity change from 0 to 256 [ 198.500683][ T8018] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 198.604422][ T8018] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.605437][ T8037] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1317'. [ 198.628493][ T8030] exfat: Deprecated parameter 'utf8' [ 198.656262][ T8030] exfat: Deprecated parameter 'utf8' [ 198.731497][ T8030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 198.902487][ T8030] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 199.027749][ T8030] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 199.141019][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 199.327943][ T8071] loop3: detected capacity change from 0 to 8 [ 199.349386][ T8069] loop1: detected capacity change from 0 to 2048 [ 199.432044][ T8071] SQUASHFS error: xz decompression failed, data probably corrupt [ 199.469180][ T8069] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 199.492928][ T8071] SQUASHFS error: Failed to read block 0x108: -5 [ 199.513124][ T8071] SQUASHFS error: Unable to read metadata cache entry [106] [ 199.552825][ T8069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.587561][ T8071] SQUASHFS error: Unable to read inode 0x11f [ 199.742538][ T8083] loop6: detected capacity change from 0 to 1024 [ 199.823784][ T8083] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 199.857237][ T8083] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 199.911521][ T8083] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.1334: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 199.984417][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1336'. [ 200.065918][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1338'. [ 200.124030][ T8083] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1334: couldn't read orphan inode 11 (err -117) [ 200.183578][ T8083] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,nombcache,mblk_io_submit,jqfmt=vfsv0,block_validity,usrjquota=,grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 200.380071][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 200.400255][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 200.500399][ T8121] loop3: detected capacity change from 0 to 128 [ 200.783510][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 201.051628][ T8143] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 201.152680][ T26] audit: type=1800 audit(1773196373.972:7): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1355" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 201.199947][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.568342][ T8154] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 201.671356][ T8154] REISERFS (device loop2): using ordered data mode [ 201.687191][ T8154] reiserfs: using flush barriers [ 201.742535][ T8154] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.898190][ T8185] netlink: 30 bytes leftover after parsing attributes in process `syz.3.1368'. [ 201.917962][ T8154] REISERFS (device loop2): checking transaction log (loop2) [ 201.949473][ T8154] REISERFS (device loop2): Using r5 hash to sort names [ 202.029879][ T8154] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 202.384530][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 202.439059][ T8203] netlink: 'syz.2.1374': attribute type 2 has an invalid length. [ 202.479567][ T8199] netlink: 'syz.3.1375': attribute type 2 has an invalid length. [ 202.531521][ T8199] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 202.630331][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 202.893525][ T8215] set_capacity_and_notify: 2 callbacks suppressed [ 202.893541][ T8215] loop3: detected capacity change from 0 to 128 [ 202.960054][ T8216] loop2: detected capacity change from 0 to 2048 [ 203.060553][ T8215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.103195][ T8194] loop0: detected capacity change from 0 to 32768 [ 203.140458][ T8215] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.149372][ T8228] loop6: detected capacity change from 0 to 512 [ 203.183147][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.204767][ T8216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.315561][ T8228] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 203.413866][ T8228] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 203.446194][ T8234] loop2: detected capacity change from 0 to 256 [ 203.484644][ T8228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 203.493140][ T8228] System zones: 1-12 [ 203.591115][ T8234] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 203.613464][ T8228] EXT4-fs error (device loop6): ext4_iget_extra_inode:4566: inode #15: comm syz.6.1381: corrupted in-inode xattr [ 203.614337][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 203.652412][ T8228] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1381: couldn't read orphan inode 15 (err -117) [ 203.765539][ T8228] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 204.614817][ T8261] loop6: detected capacity change from 0 to 8192 [ 204.744280][ T8238] loop1: detected capacity change from 0 to 32768 [ 205.057148][ T8238] XFS (loop1): Mounting V5 Filesystem [ 205.188711][ T8238] XFS (loop1): Ending clean mount [ 205.301044][ T8255] loop0: detected capacity change from 0 to 40427 [ 205.322095][ T8238] XFS (loop1): Quotacheck needed: Please wait. [ 205.557216][ T8238] XFS (loop1): Quotacheck: Done. [ 205.615069][ T8255] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.717126][ T4188] XFS (loop1): Unmounting Filesystem [ 205.727730][ T8314] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 205.772723][ T8317] delete_channel: no stack [ 205.798363][ T8255] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.982105][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1409'. [ 206.053810][ T8325] netlink: 'syz.6.1409': attribute type 2 has an invalid length. [ 206.083768][ T8325] netlink: 'syz.6.1409': attribute type 1 has an invalid length. [ 206.115873][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1409'. [ 206.382337][ T8340] loop3: detected capacity change from 0 to 1024 [ 206.572638][ T8255] syz.0.1389 (8255): drop_caches: 2 [ 206.614162][ T8340] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 206.651424][ T8340] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 206.678692][ T8340] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 206.766316][ T8340] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 206.835690][ T8340] EXT4-fs error (device loop3): ext4_get_journal_inode:5185: inode #5: comm syz.3.1415: unexpected bad inode w/o EXT4_IGET_BAD [ 206.861330][ T8340] EXT4-fs (loop3): no journal found [ 206.870272][ T8340] EXT4-fs (loop3): can't get journal size [ 206.901795][ T8340] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,grpjquota=./file0,norecovery,min_batch_time=0x000000000000071d,abort,jqfmt=vfsold,delalloc,,errors=continue. Quota mode: writeback. [ 207.621303][ T8383] loop1: detected capacity change from 0 to 1024 [ 207.764818][ T8383] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 207.826059][ T8383] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 207.896035][ T8383] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 207.896291][ T8383] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1427: couldn't read orphan inode 11 (err -117) [ 207.896468][ T8383] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,nombcache,mblk_io_submit,jqfmt=vfsv0,block_validity,usrjquota=,grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 207.933862][ T4231] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 208.004743][ T8362] loop2: detected capacity change from 0 to 32768 [ 208.147710][ T8362] XFS (loop2): Mounting V5 Filesystem [ 208.195383][ T8409] loop1: detected capacity change from 0 to 2048 [ 208.231368][ T8362] XFS (loop2): Ending clean mount [ 208.233845][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 208.271465][ T8409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.364100][ T4231] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 208.364141][ T4231] usb 4-1: config 0 has no interface number 0 [ 208.364178][ T4231] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.364203][ T4231] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.364223][ T4231] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.364261][ T4231] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 208.364285][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.366916][ T4231] usb 4-1: config 0 descriptor?? [ 208.458349][ T4196] XFS (loop2): Unmounting Filesystem [ 208.880346][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880386][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880415][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880440][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880463][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880487][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.880511][ T4231] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 208.903962][ T4231] logitech-djreceiver 0003:046D:C537.0008: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input4 [ 209.105127][ T4231] usb 4-1: USB disconnect, device number 13 [ 209.156817][ T8430] fido_id[8430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 209.602925][ T8446] delete_channel: no stack [ 209.867850][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 210.185464][ T8461] loop0: detected capacity change from 0 to 8192 [ 210.542890][ T8478] loop1: detected capacity change from 0 to 512 [ 210.693557][ T8478] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 210.909258][ T8478] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.017903][ T8478] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1456: bad orphan inode 15 [ 211.102390][ T8478] ext4_test_bit(bit=14, block=18) = 1 [ 211.136144][ T8478] is_bad_inode(inode)=0 [ 211.205425][ T8478] NEXT_ORPHAN(inode)=1023 [ 211.250584][ T8478] max_ino=32 [ 211.278027][ T8478] i_nlink=0 [ 211.301316][ T8478] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2923: inode #15: comm syz.1.1456: corrupted xattr block 19 [ 211.342324][ T8478] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 211.354083][ T8478] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.452918][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1468'. [ 211.508138][ T8506] loop0: detected capacity change from 0 to 1024 [ 211.590329][ T8506] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 211.590359][ T8506] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 211.687521][ T8506] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1477: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 211.687780][ T8506] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1477: couldn't read orphan inode 11 (err -117) [ 211.687942][ T8506] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,nombcache,mblk_io_submit,jqfmt=vfsv0,block_validity,usrjquota=,grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 212.065171][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 212.082272][ T8530] loop6: detected capacity change from 0 to 128 [ 212.161879][ T8532] Cannot find add_set index 46338 as target [ 212.250820][ T8530] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 212.260709][ T8534] loop3: detected capacity change from 0 to 1024 [ 212.271895][ T8530] FAT-fs (loop6): Filesystem has been set read-only [ 212.299079][ T8530] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 212.368387][ T8534] hfsplus: Filesystem is marked locked, mounting read-only. [ 212.395641][ T8534] hfsplus: filesystem is marked locked, leaving read-only. [ 212.412238][ T8542] loop1: detected capacity change from 0 to 512 [ 212.478532][ T8545] loop0: detected capacity change from 0 to 128 [ 212.491606][ T8546] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 212.498252][ T8542] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.531265][ T8546] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 212.551483][ T8546] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 212.607845][ T8542] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 212.629308][ T8545] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 212.659533][ T8542] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.715142][ T8545] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.884339][ T8542] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.1.1486: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 212.914813][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.939362][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 212.957949][ T8542] EXT4-fs (loop1): Remounting filesystem read-only [ 213.002188][ T8542] EXT4-fs error (device loop1): ext4_get_first_dir_block:3608: inode #12: comm syz.1.1486: directory missing '.' [ 213.071036][ T8542] EXT4-fs (loop1): Remounting filesystem read-only [ 213.543426][ T8589] comedi: No check for data length of config insn id 1003 is implemented [ 213.629475][ T8589] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 213.690606][ T8589] comedi: Assuming n=15 is correct [ 213.961018][ T8600] loop1: detected capacity change from 0 to 4096 [ 214.022812][ T8602] loop2: detected capacity change from 0 to 4096 [ 214.156777][ T8602] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.253073][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 214.347422][ T8576] loop3: detected capacity change from 0 to 32768 [ 214.590626][ T8576] XFS (loop3): Mounting V5 Filesystem [ 214.817067][ T8594] loop6: detected capacity change from 0 to 40427 [ 214.826786][ T8576] XFS (loop3): Ending clean mount [ 214.957833][ T4198] XFS (loop3): Unmounting Filesystem [ 214.994045][ T8594] F2FS-fs (loop6): Found nat_bits in checkpoint [ 215.214002][ T8594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.308685][ T8620] loop2: detected capacity change from 0 to 32768 [ 215.369523][ T8620] (syz.2.1519,8620,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.439266][ T8620] (syz.2.1519,8620,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.454356][ T8609] loop1: detected capacity change from 0 to 32768 [ 215.627335][ T8594] syz.6.1510 (8594): drop_caches: 2 [ 215.632150][ T8620] JBD2: Ignoring recovery information on journal [ 215.729402][ T8609] XFS (loop1): Mounting V5 Filesystem [ 215.896776][ T8620] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 215.959785][ T8609] XFS (loop1): Ending clean mount [ 216.012585][ T8653] xt_time: unknown flags 0xc [ 216.177530][ T4188] XFS (loop1): Unmounting Filesystem [ 216.278157][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 216.312752][ T8657] loop0: detected capacity change from 0 to 1024 [ 216.409437][ T8657] hfsplus: Filesystem is marked locked, mounting read-only. [ 216.471735][ T8657] hfsplus: filesystem is marked locked, leaving read-only. [ 216.834219][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 216.903851][ T8669] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1536'. [ 216.937803][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 217.209525][ T8690] loop2: detected capacity change from 0 to 1024 [ 217.279468][ T8694] loop3: detected capacity change from 0 to 256 [ 217.330037][ T8690] hfsplus: Filesystem is marked locked, mounting read-only. [ 217.362466][ T8690] hfsplus: filesystem is marked locked, leaving read-only. [ 217.469141][ T8694] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 217.606307][ T8704] loop1: detected capacity change from 0 to 1024 [ 217.786950][ T8704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.837418][ T8714] comedi comedi3: rti802: a I/O base address must be specified [ 217.853113][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 217.892901][ T8704] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 217.976373][ T8704] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 218.349969][ T8738] delete_channel: no stack [ 218.470731][ T8740] MINIX-fs: bad superblock or unable to read bitmaps [ 218.502474][ T8744] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 218.530193][ T8744] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.593743][ T8742] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 218.617578][ T8742] REISERFS (device loop1): using ordered data mode [ 218.635938][ T8742] reiserfs: using flush barriers [ 218.686203][ T8742] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.824111][ T8742] REISERFS (device loop1): checking transaction log (loop1) [ 218.915091][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 218.961662][ T8742] REISERFS (device loop1): Using r5 hash to sort names [ 219.063604][ T8742] reiserfs: enabling write barrier flush mode [ 219.120784][ T8742] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 219.157086][ T8742] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 219.217030][ T8742] REISERFS (device loop1): Remounting filesystem read-only [ 219.238359][ T8742] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 219.260919][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'. [ 219.282992][ T8742] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 219.344890][ T8742] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 219.380826][ T8742] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 219.392526][ T8742] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 219.451975][ T8742] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 219.495526][ T8742] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 219.514089][ T8742] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 219.584689][ T8787] set_capacity_and_notify: 4 callbacks suppressed [ 219.584712][ T8787] loop0: detected capacity change from 0 to 256 [ 219.602733][ T4188] ------------[ cut here ]------------ [ 219.630510][ T8787] exfat: Deprecated parameter 'namecase' [ 219.649860][ T4188] kernel BUG at fs/reiserfs/journal.c:1913! [ 219.668307][ T8787] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 219.688189][ T4188] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 219.696784][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 219.706999][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.719539][ T4188] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 219.726352][ T4188] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c8 83 bd ff e9 f9 fc ff ff e8 6e 78 78 ff <0f> 0b e8 67 78 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 219.749488][ T4188] RSP: 0018:ffffc90002e8fb80 EFLAGS: 00010293 [ 219.756977][ T4188] RAX: ffffffff8200a8a2 RBX: 1ffff920005d1f74 RCX: ffff88807c3b5940 [ 219.767106][ T4188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.776568][ T4188] RBP: ffffc90002e8fc78 R08: ffffc90002e8fbf7 R09: ffffc90002e8fbc0 [ 219.785050][ T4188] R10: dffffc0000000000 R11: fffff520005d1f7f R12: ffffc900046a9000 [ 219.794765][ T4188] R13: dffffc0000000000 R14: ffff888077d70678 R15: 0000000000000000 [ 219.800226][ T8790] loop2: detected capacity change from 0 to 1024 [ 219.804409][ T4188] FS: 000055559009d500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 219.804433][ T4188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.804444][ T4188] CR2: 00007f6c75b7aa08 CR3: 0000000066b53000 CR4: 00000000003506e0 [ 219.804458][ T4188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.804467][ T4188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.804477][ T4188] Call Trace: [ 219.804484][ T4188] [ 219.804492][ T4188] ? journal_release+0x30/0x30 [ 219.868039][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 219.873883][ T4188] journal_release+0x1b/0x30 [ 219.880161][ T4188] reiserfs_put_super+0x267/0x510 [ 219.886304][ T4188] ? hook_inode_free_security+0xa0/0xa0 [ 219.893612][ T4188] ? evict_inodes+0x642/0x6a0 [ 219.899311][ T4188] ? reiserfs_dirty_inode+0x260/0x260 [ 219.906102][ T4188] ? reiserfs_dirty_inode+0x260/0x260 [ 219.911679][ T4188] generic_shutdown_super+0x130/0x300 [ 219.917773][ T4188] kill_block_super+0x7c/0xe0 [ 219.923471][ T4188] deactivate_locked_super+0x93/0xf0 [ 219.929476][ T4188] cleanup_mnt+0x42d/0x4e0 [ 219.934421][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 219.940973][ T4188] task_work_run+0x125/0x1a0 [ 219.946825][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 219.953223][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 219.960217][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 219.965862][ T4188] do_syscall_64+0x58/0xa0 [ 219.970985][ T4188] ? clear_bhb_loop+0x30/0x80 [ 219.976599][ T4188] ? clear_bhb_loop+0x30/0x80 [ 219.983160][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.990166][ T4188] RIP: 0033:0x7f194cd429d7 [ 219.994585][ T4188] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 220.018794][ T4188] RSP: 002b:00007ffe79263cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 220.027862][ T4188] RAX: 0000000000000000 RBX: 00007f194cdd7050 RCX: 00007f194cd429d7 [ 220.036104][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79263d70 [ 220.044970][ T4188] RBP: 00007ffe79263d70 R08: 00007ffe79264d70 R09: 00000000ffffffff [ 220.053487][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe79264e00 [ 220.063850][ T4188] R13: 00007f194cdd7050 R14: 000000000003596b R15: 00007ffe79264e40 [ 220.074775][ T4188] [ 220.080912][ T4188] Modules linked in: [ 220.093889][ T8797] loop3: detected capacity change from 0 to 512 [ 220.119089][ T4188] ---[ end trace f37298deda904a1b ]--- [ 220.129067][ T4188] RIP: 0010:do_journal_release+0x4e2/0x4f0 [ 220.142387][ T26] audit: type=1800 audit(1773196392.962:8): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1593" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 220.178126][ T8797] EXT4-fs (loop3): Ignoring removed bh option [ 220.191426][ T4188] Code: bd ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c8 83 bd ff e9 f9 fc ff ff e8 6e 78 78 ff <0f> 0b e8 67 78 78 ff 0f 0b 0f 1f 44 00 00 41 57 41 56 53 48 89 f3 [ 220.221069][ T9] hfsplus: b-tree write err: -5, ino 25 [ 220.224643][ T4188] RSP: 0018:ffffc90002e8fb80 EFLAGS: 00010293 [ 220.238332][ T9] hfsplus: b-tree write err: -5, ino 4 [ 220.238401][ T9] hfsplus: b-tree write err: -5, ino 2 [ 220.238484][ T9] hfsplus: b-tree write err: -5, ino 20 [ 220.268416][ T4188] RAX: ffffffff8200a8a2 RBX: 1ffff920005d1f74 RCX: ffff88807c3b5940 [ 220.278247][ T4188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.287657][ T4188] RBP: ffffc90002e8fc78 R08: ffffc90002e8fbf7 R09: ffffc90002e8fbc0 [ 220.294792][ T8797] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 220.296926][ T4188] R10: dffffc0000000000 R11: fffff520005d1f7f R12: ffffc900046a9000 [ 220.321248][ T4188] R13: dffffc0000000000 R14: ffff888077d70678 R15: 0000000000000000 [ 220.322558][ T8797] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.336682][ T4188] FS: 000055559009d500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 220.356260][ T4188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.379799][ T4188] CR2: 00007f454ce052f8 CR3: 0000000066b53000 CR4: 00000000003506e0 [ 220.398307][ T4188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.410267][ T4188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.422158][ T4188] Kernel panic - not syncing: Fatal exception [ 220.430762][ T4188] Kernel Offset: disabled [ 220.436024][ T4188] Rebooting in 86400 seconds..